last executing test programs:

45.708959712s ago: executing program 4 (id=190):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x1}, 0xffffffff})
write$sndseq(r1, &(0x7f00000000c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x80, {0x0, 0xfb}, {}, @result={0x0, 0x2}}], 0x1c)

45.341508282s ago: executing program 4 (id=194):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0x7fffffff}], 0x1, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

45.053093277s ago: executing program 4 (id=197):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x10200000, 0x2, 0x2, 0x8, 0x1ff}, 0x20)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd05, &(0x7f0000000000)="040000")

44.787986073s ago: executing program 4 (id=199):
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x274)

44.61451646s ago: executing program 4 (id=201):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000190c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfd}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
close(r0)

43.932885546s ago: executing program 4 (id=206):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20)

43.502379068s ago: executing program 32 (id=206):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20)

16.616733683s ago: executing program 3 (id=425):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)=""/18, 0x12}], 0x1}, 0x2002)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x27, 0x0, 0x1)

16.173325222s ago: executing program 3 (id=427):
syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
truncate(&(0x7f00000000c0)='./file1\x00', 0x7)

15.487861058s ago: executing program 3 (id=430):
socket$inet(0x2, 0x3, 0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x10, 0x1}, {0x8f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x47, 0x6, 0xfd}]})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

15.105246592s ago: executing program 3 (id=431):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4af, &(0x7f0000000ec0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x5c)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)

14.887537923s ago: executing program 3 (id=432):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

13.95548231s ago: executing program 3 (id=441):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81)

13.531204917s ago: executing program 33 (id=441):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81)

5.210964458s ago: executing program 1 (id=509):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000700)=0xe0000003, 0x4)
ppoll(&(0x7f0000000040)=[{r0, 0x2848}], 0x1, 0x0, 0x0, 0x0)

4.464031777s ago: executing program 1 (id=512):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000)
recvmsg(r1, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102)

4.149532272s ago: executing program 1 (id=513):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000c40)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x20, 0xc, 0xb, "51d0e72cd70a856427ac54"}, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x81, 0x1, "a1"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x85, 0x3, "d5a6e3"}})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000740)={0x0, 0x8, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0, 0x0})

3.759311537s ago: executing program 0 (id=516):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e8}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, <r6=>r4, 0x2})
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=<r7=>0x0)
syz_ublk_setup_queues(r6, r7, &(0x7f0000000780)={0x0, 0x280f, 0x1000, 0x2, 0x102, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe30b, 0x10000, 0x0, 0x10002de, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f57, 0x1000, 0x2, 0x3c5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x15432, 0x4, 0x4, 0x174}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1be3, 0x4, 0x2, 0x6f, 0x0, r6}}], 0x4, 0x0, 0x0)

3.385479148s ago: executing program 0 (id=520):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4044802)
shutdown(r0, 0x1)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000080)={r2, @in6={{0x2, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x8, 0x806}, &(0x7f0000000140)=0x90)

3.332436841s ago: executing program 5 (id=521):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12"], 0x48)

2.603894468s ago: executing program 6 (id=444):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
brk(0x2000000db002)
brk(0x200000ffc000)

2.602855046s ago: executing program 0 (id=531):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12"], 0x48)

2.600560374s ago: executing program 2 (id=532):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0xc000000, 0x2, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x0, 0x6, 0x5, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x7, 0xe, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x80000001, 0x400, 0x2, 0x201, 0x1, 0x297, 0x5, 0x0, 0x6, 0x204, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0xe6, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x9, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x17, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8a, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x2, 0x11, 0x7, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x7, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0xe7c, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xfffffffe, 0x3ff, 0x3, 0x4, 0x100fffd, 0x2005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0xa, 0x88, 0x0, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x7, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

2.59986747s ago: executing program 5 (id=533):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})
madvise(&(0x7f0000019000/0xc00000)=nil, 0xc00000, 0x18)

2.465332564s ago: executing program 6 (id=522):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
recvmmsg(r0, &(0x7f000000bd00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000bb40)=""/19, 0x13}, 0x6}], 0x1, 0x45833af92e4b39ff, 0x0)

2.099434147s ago: executing program 6 (id=523):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x12}, 0xd4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x6, 0xffff, 0x8251d, 0x1, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x17b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x2, 0x2, 0x1, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x9e6b, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x22, 0xfffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

2.098605294s ago: executing program 2 (id=524):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.956397106s ago: executing program 0 (id=525):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

1.906463215s ago: executing program 2 (id=526):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002000000"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x880)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

1.739428241s ago: executing program 1 (id=527):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)

1.537523097s ago: executing program 1 (id=528):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000001640)='SF', 0x2}], 0x1}, 0x800)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x1db)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1)

1.498040802s ago: executing program 6 (id=529):
syz_mount_image$ext4(&(0x7f00000010c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000180)={[{@dax}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@noload}, {@data_err_ignore}, {@grpid}, {@journal_ioprio}, {@resuid}]}, 0x0, 0xbc1, &(0x7f00000043c0)="$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")
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a5ee0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b417354335f8cf20d0d96ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000004480)=ANY=[@ANYBLOB="c92752ede134aaaaaaaaaaaa88a8290081003700080045a7001400680000402f"], 0x0)

1.435042881s ago: executing program 5 (id=530):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0)

1.335744959s ago: executing program 2 (id=534):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))

1.06918325s ago: executing program 5 (id=535):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"])

862.538301ms ago: executing program 5 (id=536):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0xc000000, 0x2, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x0, 0x6, 0x5, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x7, 0xe, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x80000001, 0x400, 0x2, 0x201, 0x1, 0x297, 0x5, 0x0, 0x6, 0x204, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0xe6, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x9, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x17, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8a, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x2, 0x11, 0x7, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x7, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0xe7c, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xfffffffe, 0x3ff, 0x3, 0x4, 0x100fffd, 0x2005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0xa, 0x88, 0x0, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x7, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

824.405546ms ago: executing program 2 (id=537):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c)
recvmmsg(r0, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/42, 0x2d}, 0x8000}], 0x400000000000305, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

780.365771ms ago: executing program 6 (id=538):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
recvmmsg(r0, &(0x7f000000bd00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000bb40)=""/19, 0x13}, 0x6}], 0x1, 0x45833af92e4b39ff, 0x0)

484.848954ms ago: executing program 1 (id=539):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4040)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x13, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010)

483.13894ms ago: executing program 0 (id=540):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={0x0})

455.472831ms ago: executing program 5 (id=541):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000a010101000000000000000000000000ac1414aa00000000000000000000000000000080000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008000100000000000e0000000000000000000000000000000000000000000000ffffffffffffffff040000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x5, @mcast2, 0x9}, 0x80, 0x0}, 0x20000000)

277.556556ms ago: executing program 2 (id=542):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x12}, 0xd4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x6, 0xffff, 0x8251d, 0x1, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x17b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x2, 0x2, 0x1, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x9e6b, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x22, 0xfffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

41.942563ms ago: executing program 6 (id=543):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0)
write(r0, &(0x7f0000000500)='tcpci 0x50\n', 0xb)

0s ago: executing program 0 (id=544):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})
madvise(&(0x7f0000019000/0xc00000)=nil, 0xc00000, 0x18)

kernel console output (not intermixed with test programs):

   79.331705][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.332200][ T5623] bridge_slave_0: entered allmulticast mode
[   79.334028][ T5623] bridge_slave_0: entered promiscuous mode
[   79.341201][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.356020][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.360985][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.364798][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.364963][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.365123][ T5633] bridge_slave_0: entered allmulticast mode
[   79.367540][ T5633] bridge_slave_0: entered promiscuous mode
[   79.370398][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.370497][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.371461][ T5623] bridge_slave_1: entered allmulticast mode
[   79.374379][ T5623] bridge_slave_1: entered promiscuous mode
[   79.385095][ T5632] Bluetooth: hci3: command tx timeout
[   79.385271][ T5632] Bluetooth: hci2: command tx timeout
[   79.385353][ T5632] Bluetooth: hci0: command tx timeout
[   79.385418][ T5632] Bluetooth: hci4: command tx timeout
[   79.392728][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.420635][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.420800][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.421202][ T5633] bridge_slave_1: entered allmulticast mode
[   79.423556][ T5633] bridge_slave_1: entered promiscuous mode
[   79.496567][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.534510][ T5621] team0: Port device team_slave_0 added
[   79.537861][ T5621] team0: Port device team_slave_1 added
[   79.565296][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.569760][ T5620] team0: Port device team_slave_0 added
[   79.598889][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.613663][ T5620] team0: Port device team_slave_1 added
[   79.625992][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.626166][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.626298][ T5622] bridge_slave_0: entered allmulticast mode
[   79.628799][ T5622] bridge_slave_0: entered promiscuous mode
[   79.633254][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.633352][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.633762][ T5622] bridge_slave_1: entered allmulticast mode
[   79.635458][ T5622] bridge_slave_1: entered promiscuous mode
[   79.641085][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.641101][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.641138][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.646873][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.665644][ T5623] team0: Port device team_slave_0 added
[   79.670468][ T5623] team0: Port device team_slave_1 added
[   79.773181][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.773238][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.773277][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.833457][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.833498][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.834895][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.863101][ T5633] team0: Port device team_slave_0 added
[   79.864679][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.864694][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.864718][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.890925][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.903995][ T5633] team0: Port device team_slave_1 added
[   79.904902][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.904915][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.904938][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.943882][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.014874][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.014917][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.015269][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.034453][ T5621] hsr_slave_0: entered promiscuous mode
[   80.035697][ T5621] hsr_slave_1: entered promiscuous mode
[   80.070237][ T5622] team0: Port device team_slave_0 added
[   80.094282][ T5620] hsr_slave_0: entered promiscuous mode
[   80.095195][ T5620] hsr_slave_1: entered promiscuous mode
[   80.096183][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   80.096282][ T5620] Cannot create hsr debugfs directory
[   80.099547][ T5622] team0: Port device team_slave_1 added
[   80.128212][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.128243][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.128267][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.183750][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.183796][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.184224][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.224364][ T5623] hsr_slave_0: entered promiscuous mode
[   80.226117][ T5623] hsr_slave_1: entered promiscuous mode
[   80.226872][ T5623] debugfs: 'hsr0' already exists in 'hsr'
[   80.226891][ T5623] Cannot create hsr debugfs directory
[   80.260258][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.260299][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.260778][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.275426][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.275444][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.275468][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.384289][ T5633] hsr_slave_0: entered promiscuous mode
[   80.385255][ T5633] hsr_slave_1: entered promiscuous mode
[   80.385879][ T5633] debugfs: 'hsr0' already exists in 'hsr'
[   80.385896][ T5633] Cannot create hsr debugfs directory
[   80.471192][ T5622] hsr_slave_0: entered promiscuous mode
[   80.472152][ T5622] hsr_slave_1: entered promiscuous mode
[   80.472842][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[   80.472860][ T5622] Cannot create hsr debugfs directory
[   80.855564][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.869091][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   80.870823][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.884048][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   80.887097][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.898699][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   80.925286][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.934616][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.009191][ T5623] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.020130][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.029461][ T5623] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.039325][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.050066][ T5623] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.060937][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.072230][ T5623] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.082197][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.179317][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.189898][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.200221][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.212769][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.234964][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.244830][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.262851][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.272157][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.360372][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.367561][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.379008][ T4939] Bluetooth: hci1: command tx timeout
[   81.386016][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.410481][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.421872][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.430695][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.442116][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.453220][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.463279][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.470462][ T4939] Bluetooth: hci4: command tx timeout
[   81.470494][ T4939] Bluetooth: hci0: command tx timeout
[   81.470516][ T4939] Bluetooth: hci2: command tx timeout
[   81.470537][ T4939] Bluetooth: hci3: command tx timeout
[   81.503086][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   81.562559][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.562727][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.594568][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.594840][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.620234][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.633210][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.644581][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.654546][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.655416][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.665852][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.682446][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.692164][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.713864][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.793132][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.814433][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[   81.851705][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.851836][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.891905][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.891998][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.924914][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   81.951726][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.951870][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.984964][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.985712][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.133596][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.231148][ T5633] 8021q: adding VLAN 0 to HW filter on device team0
[   82.277226][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.302670][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.302812][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.343937][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.344072][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.414779][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   82.501182][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.501304][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.615267][ T1508] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.615418][ T1508] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.928701][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.212595][ T5621] veth0_vlan: entered promiscuous mode
[   83.305666][ T5621] veth1_vlan: entered promiscuous mode
[   83.458851][ T4939] Bluetooth: hci1: command tx timeout
[   83.485085][ T5621] veth0_macvtap: entered promiscuous mode
[   83.505343][ T5621] veth1_macvtap: entered promiscuous mode
[   83.539775][ T5624] Bluetooth: hci2: command tx timeout
[   83.539875][   T53] Bluetooth: hci3: command tx timeout
[   83.539936][ T5632] Bluetooth: hci0: command tx timeout
[   83.540006][ T4939] Bluetooth: hci4: command tx timeout
[   83.570971][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.603462][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.639578][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.681087][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.800951][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.870216][ T5620] veth0_vlan: entered promiscuous mode
[   83.882888][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.882993][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.952285][ T5620] veth1_vlan: entered promiscuous mode
[   83.970453][ T4174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.035366][ T5620] veth0_macvtap: entered promiscuous mode
[   84.051826][ T5620] veth1_macvtap: entered promiscuous mode
[   84.052233][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.052251][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.160350][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.181711][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.190885][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.191284][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.195930][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.286141][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.312363][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   84.449580][ T1025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.449675][ T1025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.449717][ T1025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.449750][ T1025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.566586][ T4174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.566705][ T4174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.609814][ T5633] veth0_vlan: entered promiscuous mode
[   84.665865][ T5622] veth0_vlan: entered promiscuous mode
[   84.675617][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.684224][ T5633] veth1_vlan: entered promiscuous mode
[   84.692486][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.726454][ T5622] veth1_vlan: entered promiscuous mode
[   84.745888][ T5623] veth0_vlan: entered promiscuous mode
[   84.785800][ T5623] veth1_vlan: entered promiscuous mode
[   84.805280][ T5633] veth0_macvtap: entered promiscuous mode
[   84.845982][ T5633] veth1_macvtap: entered promiscuous mode
[   84.870862][ T5622] veth0_macvtap: entered promiscuous mode
[   84.892133][ T5622] veth1_macvtap: entered promiscuous mode
[   84.900596][ T5802] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   84.920975][ T5821] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   84.966141][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.992250][ T5623] veth0_macvtap: entered promiscuous mode
[   85.006252][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.022325][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.026783][ T5821] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[   85.026948][ T5821] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[   85.073486][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.074754][ T5623] veth1_macvtap: entered promiscuous mode
[   85.081011][ T5802] usb 2-1: Using ep0 maxpacket: 8
[   85.094327][ T5802] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.40
[   85.110307][ T5802] usb 2-1: too many endpoints for config 1 interface 0 altsetting 57: 65, using maximum allowed: 30
[   85.125768][ T5802] usb 2-1: config 1 interface 0 altsetting 57 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[   85.139507][ T5802] usb 2-1: config 1 interface 0 has no altsetting 0
[   85.152086][ T5802] usb 2-1: string descriptor 0 read error: -22
[   85.158873][   T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.169981][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.251728][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.270881][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.378675][ T4174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.379341][ T4174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.379660][ T4174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.451473][ T4174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.451531][ T4174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.541430][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.541468][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.549349][ T4939] Bluetooth: hci1: command tx timeout
[   85.620355][   T53] Bluetooth: hci3: command tx timeout
[   85.620401][   T53] Bluetooth: hci2: command tx timeout
[   85.620486][ T5632] Bluetooth: hci0: command tx timeout
[   85.620592][ T4939] Bluetooth: hci4: command tx timeout
[   85.635906][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.635927][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.670584][   T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.672926][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.673328][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.710886][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.723863][ T5802] cypress 0003:04B4:BCA1.0001: unknown main item tag 0x0
[   85.738300][ T5802] cypress 0003:04B4:BCA1.0001: unknown main item tag 0x0
[   85.738362][ T5802] cypress 0003:04B4:BCA1.0001: unknown main item tag 0x0
[   85.738391][ T5802] cypress 0003:04B4:BCA1.0001: unknown main item tag 0x0
[   85.738417][ T5802] cypress 0003:04B4:BCA1.0001: unknown main item tag 0x0
[   85.738444][ T5802] cypress 0003:04B4:BCA1.0001: unknown main item tag 0x0
[   85.738471][ T5802] cypress 0003:04B4:BCA1.0001: unknown main item tag 0x0
[   85.738500][ T5802] cypress 0003:04B4:BCA1.0001: unknown main item tag 0x0
[   85.738528][ T5802] cypress 0003:04B4:BCA1.0001: unknown main item tag 0x0
[   85.738555][ T5802] cypress 0003:04B4:BCA1.0001: unknown main item tag 0x0
[   85.824553][ T4174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.828277][   T83] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.829283][   T83] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.829600][   T83] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.856414][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.856435][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.931205][ T5802] cypress 0003:04B4:BCA1.0001: hidraw0: USB HID v0.08 Device [HID 04b4:bca1] on usb-dummy_hcd.1-1/input0
[   85.953483][ T5802] usb 2-1: USB disconnect, device number 2
[   86.024007][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.024046][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.107395][ T5829] fido_id[5829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   86.157179][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.157216][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.890095][ T5842] loop1: detected capacity change from 0 to 32768
[   86.933424][ T5842] (syz.1.11,5842,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   86.947547][ T5842] (syz.1.11,5842,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   87.007487][ T5842] JBD2: Ignoring recovery information on journal
[   87.073173][ T5842] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   87.176398][   T31] audit: type=1800 audit(1786545644.059:2): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11" name="file1" dev="loop1" ino=16978 res=0 errno=0
[   87.414883][   T46] cfg80211: failed to load regulatory.db
[   87.817394][ T5842] syz.1.11 (5842) used greatest stack depth: 19232 bytes left
[   87.963118][ T5866] netlink: 'syz.3.19': attribute type 39 has an invalid length.
[   88.091031][ T5621] ocfs2: Unmounting device (7,1) on (node local)
[   88.846822][ T5890] loop1: detected capacity change from 0 to 512
[   88.882447][ T5890] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   88.901392][ T5890] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   88.960343][ T5894] loop2: detected capacity change from 0 to 16
[   88.963346][ T5892] loop4: detected capacity change from 0 to 128
[   88.964597][ T5894] =======================================================
[   88.964597][ T5894] WARNING: The mand mount option has been deprecated and
[   88.964597][ T5894]          and is ignored by this kernel. Remove the mand
[   88.964597][ T5894]          option from the mount to silence this warning.
[   88.964597][ T5894] =======================================================
[   88.968412][ T5892] EXT4-fs: Ignoring removed i_version option
[   89.040973][ T5890] EXT4-fs (loop1): 1 truncate cleaned up
[   89.052627][ T5894] erofs (device loop2): mounted with root inode @ nid 36.
[   89.072987][ T5892] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   89.089077][ T5890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.106923][ T5892] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   89.112540][ T5880] loop3: detected capacity change from 0 to 32768
[   89.185593][ T5880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.25 (5880)
[   89.278493][ T5880] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   89.300881][ T5880] BTRFS info (device loop3): using crc32c checksum algorithm
[   89.370622][ T5890] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6537: inode #15: comm syz.1.29: bad extra_isize 62 (inode size 256)
[   89.462704][ T5890] EXT4-fs (loop1): Remounting filesystem read-only
[   89.509556][ T5889] EXT4-fs (loop1): pa ffff888029fcb828: logic 0, phys. 193, len 32
[   89.596637][ T5880] BTRFS info (device loop3): setting nodatasum
[   89.605470][ T5880] BTRFS info (device loop3): setting nodatacow
[   89.605517][ T5880] BTRFS info (device loop3): disabling tree log
[   89.605550][ T5880] BTRFS info (device loop3): turning on async discard
[   89.605568][ T5880] BTRFS info (device loop3): enabling free space tree
[   89.605594][ T5880] BTRFS info (device loop3): max_inline set to 0
[   89.684389][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.706736][ T5623] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   89.870613][ T5723] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   90.030098][ T5723] usb 3-1: Using ep0 maxpacket: 8
[   90.031312][ T5723] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   90.033322][ T5723] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   90.033371][ T5723] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   90.033392][ T5723] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   90.033414][ T5723] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16
[   90.033435][ T5723] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   90.033474][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.252046][ T5622] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.306068][ T5723] usb 3-1: usb_control_msg returned -32
[   90.306139][ T5723] usbtmc 3-1:16.0: can't read capabilities
[   90.494418][ T5935] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   90.630548][ T5942] syz.3.43 uses obsolete (PF_INET,SOCK_PACKET)
[   90.685780][ T5940] input: syz0 as /devices/virtual/input/input5
[   90.753872][ T5945] usbtmc 3-1:16.0: usb_control_msg returned -32
[   90.788501][ T5723] usb 3-1: USB disconnect, device number 2
[   91.180165][   T31] audit: type=1326 audit(1786545648.069:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.45" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93a4d9e0d9 code=0x0
[   91.459950][ T5958] loop4: detected capacity change from 0 to 4096
[   91.477358][ T5958] EXT4-fs: Ignoring removed orlov option
[   91.497636][ T5958] EXT4-fs (loop4): Test dummy encryption mode enabled
[   91.521817][ T5958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.589855][ T5958] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[   91.680298][ T5958] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   91.817110][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.880337][ T5965] loop2: detected capacity change from 0 to 256
[   91.883694][ T5965] exfat: Deprecated parameter 'namecase'
[   91.956995][ T5965] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d)
[   92.129048][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   92.289081][    T9] usb 1-1: Using ep0 maxpacket: 32
[   92.289818][    T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[   92.290988][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.291015][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.291051][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.327816][    T9] usb 1-1: config 0 descriptor??
[   92.482519][ T5986] netlink: NAT attribute has 4 unknown bytes
[   92.489676][ T5986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.731612][ T5997] loop4: detected capacity change from 0 to 256
[   92.817480][    T9] hid_parser_main: 4004 callbacks suppressed
[   92.817543][    T9] ft260 0003:0403:6030.0002: unknown main item tag 0x0
[   92.817573][    T9] ft260 0003:0403:6030.0002: unknown main item tag 0x0
[   92.901720][   T31] audit: type=1800 audit(1786545649.789:4): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.61" name="file2" dev="loop4" ino=1048608 res=0 errno=0
[   92.922969][ T5997] syz.4.61: attempt to access beyond end of device
[   92.922969][ T5997] loop4: rw=0, sector=1800, nr_sectors = 20 limit=256
[   92.926903][ T6000] loop1: detected capacity change from 0 to 1024
[   92.966012][ T6000] EXT4-fs: Ignoring removed bh option
[   92.973243][ T6000] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   92.977765][    T9] ft260 0003:0403:6030.0002: chip code: 0000 0000
[   93.030347][ T6000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.085685][ T6000] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   93.177469][    T9] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[   93.269358][   T13] IPVS: starting estimator thread 0...
[   93.368965][ T6011] IPVS: using max 38 ests per chain, 91200 per kthread
[   93.473607][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.593797][    T9] ft260 0003:0403:6030.0002: failed to retrieve status: -71
[   93.594283][    T9] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71
[   93.819895][    T9] usb 1-1: USB disconnect, device number 2
[   93.858311][ T5802] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   94.037296][ T5802] usb 3-1: Using ep0 maxpacket: 32
[   94.043622][ T5802] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   94.056218][ T5802] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   94.070204][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   94.070245][ T5802] usb 3-1: Product: syz
[   94.070273][ T5802] usb 3-1: Manufacturer: syz
[   94.070290][ T5802] usb 3-1: SerialNumber: syz
[   94.092246][ T5802] usb 3-1: config 0 descriptor??
[   94.103774][ T6023] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   94.248533][   T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.408850][   T46] usb 4-1: Using ep0 maxpacket: 32
[   94.417690][   T46] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice=21.00
[   94.442852][   T46] usb 4-1: config 0 has no interfaces?
[   94.449067][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.478388][   T46] usb 4-1: config 0 descriptor??
[   94.552245][ T6044] loop4: detected capacity change from 0 to 512
[   94.664618][ T6044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.670733][ T6028] loop1: detected capacity change from 0 to 32768
[   94.685146][ T6044] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.171475][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.559038][ T6054] loop4: detected capacity change from 0 to 32768
[   95.564860][ T6054] (syz.4.79,6054,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   95.565824][ T6054] (syz.4.79,6054,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   95.615180][ T6054] JBD2: Ignoring recovery information on journal
[   95.650574][ T6054] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   95.707619][   T31] audit: type=1800 audit(1786545652.589:5): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.79" name="file1" dev="loop4" ino=16978 res=0 errno=0
[   95.995119][ T6065] netlink: 204 bytes leftover after parsing attributes in process `syz.0.81'.
[   96.007664][ T6065] netlink: 84 bytes leftover after parsing attributes in process `syz.0.81'.
[   96.302730][ T6067] loop1: detected capacity change from 0 to 512
[   96.375208][ T6067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.375326][ T6067] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.484572][ T6054] syz.4.79 (6054) used greatest stack depth: 18728 bytes left
[   96.688401][    T9] usb 3-1: USB disconnect, device number 3
[   96.714802][ T5623] ocfs2: Unmounting device (7,4) on (node local)
[   96.717941][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.161736][   T83] IPVS: starting estimator thread 0...
[   97.272223][ T6069] loop0: detected capacity change from 0 to 40427
[   97.278378][ T6102] IPVS: using max 37 ests per chain, 88800 per kthread
[   97.304998][    T9] usb 4-1: USB disconnect, device number 2
[   97.409077][ T6069] F2FS-fs (loop0): invalid crc value
[   98.110668][ T6069] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   98.160999][ T6069] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[   98.176184][ T6069] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[   98.190842][ T6069] F2FS-fs (loop0): Start checkpoint disabled!
[   98.265590][ T6069] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[   98.281689][ T6069] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   98.448598][ T6117] loop1: detected capacity change from 0 to 131072
[   98.461428][ T6117] F2FS-fs (loop1): invalid crc value
[   98.540810][ T6117] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   98.552703][ T6117] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   98.662633][   T12] kworker/u8:0: attempt to access beyond end of device
[   98.662633][   T12] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   98.705124][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[   98.705157][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   98.705170][   T12] Workqueue: writeback wb_workfn (flush-7:0)
[   98.705227][   T12] Call Trace:
[   98.705240][   T12]  <TASK>
[   98.705250][   T12]  dump_stack_lvl+0xe8/0x150
[   98.705289][   T12]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   98.705322][   T12]  f2fs_write_end_bio+0x1211/0x16e0
[   98.705344][   T12]  ? blkg_put+0x22/0x240
[   98.705386][   T12]  __submit_merged_bio+0x258/0x6a0
[   98.705411][   T12]  ? rcu_is_watching+0x16/0xb0
[   98.705439][   T12]  __submit_merged_write_cond+0x3c9/0x4e0
[   98.705473][   T12]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   98.705522][   T12]  f2fs_write_data_pages+0x2a27/0x36f0
[   98.705585][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.705628][   T12]  ? cfg80211_inform_single_bss_data+0x1499/0x1be0
[   98.705681][   T12]  ? __lock_acquire+0x6df/0x2e50
[   98.705704][   T12]  ? __lock_acquire+0x6df/0x2e50
[   98.705723][   T12]  ? __asan_memset+0x22/0x50
[   98.705760][   T12]  ? lock_acquire+0x115/0x350
[   98.705796][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.705825][   T12]  do_writepages+0x338/0x560
[   98.705858][   T12]  ? reacquire_held_locks+0x117/0x1a0
[   98.705878][   T12]  ? writeback_sb_inodes+0x450/0x1b00
[   98.705909][   T12]  __writeback_single_inode+0x136/0x1220
[   98.705940][   T12]  ? do_raw_spin_unlock+0xf5/0x200
[   98.705970][   T12]  writeback_sb_inodes+0x9de/0x1b00
[   98.705997][   T12]  ? __lock_acquire+0x6df/0x2e50
[   98.706040][   T12]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   98.706111][   T12]  ? rcu_is_watching+0x16/0xb0
[   98.706133][   T12]  ? queue_io+0x2d3/0x470
[   98.706165][   T12]  wb_writeback+0x41c/0xad0
[   98.706195][   T12]  ? queue_io+0x251/0x470
[   98.706229][   T12]  ? __pfx_wb_writeback+0x10/0x10
[   98.706262][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[   98.706304][   T12]  wb_workfn+0x431/0x10f0
[   98.706347][   T12]  ? __pfx_wb_workfn+0x10/0x10
[   98.706380][   T12]  ? update_protect_slice+0x128/0x210
[   98.706423][   T12]  ? lock_acquire+0x115/0x350
[   98.706450][   T12]  ? rcu_is_watching+0x16/0xb0
[   98.706473][   T12]  ? process_scheduled_works+0x97a/0x1630
[   98.706500][   T12]  process_scheduled_works+0xc3d/0x1630
[   98.706556][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[   98.706588][   T12]  ? assign_work+0x3cf/0x5d0
[   98.706617][   T12]  worker_thread+0xa47/0xfb0
[   98.706669][   T12]  kthread+0x38b/0x480
[   98.706689][   T12]  ? __pfx_worker_thread+0x10/0x10
[   98.706712][   T12]  ? __pfx_kthread+0x10/0x10
[   98.706731][   T12]  ret_from_fork+0x514/0xb70
[   98.706764][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[   98.706793][   T12]  ? __switch_to+0xc89/0x1420
[   98.706822][   T12]  ? __pfx_kthread+0x10/0x10
[   98.706841][   T12]  ret_from_fork_asm+0x1a/0x30
[   98.706886][   T12]  </TASK>
[   98.727348][   T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   98.727497][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[   98.727532][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   98.727544][   T12] Workqueue: writeback wb_workfn (flush-7:0)
[   98.727680][   T12] Call Trace:
[   98.727692][   T12]  <TASK>
[   98.727702][   T12]  dump_stack_lvl+0xe8/0x150
[   98.727733][   T12]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   98.727760][   T12]  f2fs_write_end_bio+0x1211/0x16e0
[   98.727795][   T12]  __submit_merged_bio+0x258/0x6a0
[   98.727816][   T12]  ? rcu_is_watching+0x16/0xb0
[   98.727840][   T12]  __submit_merged_write_cond+0x3c9/0x4e0
[   98.728050][   T12]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   98.728130][   T12]  f2fs_write_data_pages+0x2a27/0x36f0
[   98.728186][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.728223][   T12]  ? cfg80211_inform_single_bss_data+0x1499/0x1be0
[   98.728313][   T12]  ? __lock_acquire+0x6df/0x2e50
[   98.728333][   T12]  ? __lock_acquire+0x6df/0x2e50
[   98.728350][   T12]  ? __asan_memset+0x22/0x50
[   98.728383][   T12]  ? lock_acquire+0x115/0x350
[   98.728412][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.728483][   T12]  do_writepages+0x338/0x560
[   98.728516][   T12]  ? reacquire_held_locks+0x117/0x1a0
[   98.728537][   T12]  ? writeback_sb_inodes+0x450/0x1b00
[   98.728567][   T12]  __writeback_single_inode+0x136/0x1220
[   98.728597][   T12]  ? do_raw_spin_unlock+0xf5/0x200
[   98.728626][   T12]  writeback_sb_inodes+0x9de/0x1b00
[   98.728652][   T12]  ? __lock_acquire+0x6df/0x2e50
[   98.728691][   T12]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   98.728750][   T12]  ? rcu_is_watching+0x16/0xb0
[   98.728770][   T12]  ? queue_io+0x2d3/0x470
[   98.728797][   T12]  wb_writeback+0x41c/0xad0
[   98.728827][   T12]  ? queue_io+0x251/0x470
[   98.728860][   T12]  ? __pfx_wb_writeback+0x10/0x10
[   98.728884][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[   98.728921][   T12]  wb_workfn+0x431/0x10f0
[   98.728957][   T12]  ? __pfx_wb_workfn+0x10/0x10
[   98.728990][   T12]  ? update_protect_slice+0x128/0x210
[   98.729032][   T12]  ? lock_acquire+0x115/0x350
[   98.729059][   T12]  ? rcu_is_watching+0x16/0xb0
[   98.729082][   T12]  ? process_scheduled_works+0x97a/0x1630
[   98.729107][   T12]  process_scheduled_works+0xc3d/0x1630
[   98.729161][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[   98.729193][   T12]  ? assign_work+0x3cf/0x5d0
[   98.729220][   T12]  worker_thread+0xa47/0xfb0
[   98.729272][   T12]  kthread+0x38b/0x480
[   98.729291][   T12]  ? __pfx_worker_thread+0x10/0x10
[   98.729313][   T12]  ? __pfx_kthread+0x10/0x10
[   98.729333][   T12]  ret_from_fork+0x514/0xb70
[   98.729443][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[   98.729471][   T12]  ? __switch_to+0xc89/0x1420
[   98.729500][   T12]  ? __pfx_kthread+0x10/0x10
[   98.729519][   T12]  ret_from_fork_asm+0x1a/0x30
[   98.729562][   T12]  </TASK>
[   98.747779][   T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   99.200561][   T30] loop0: lost filesystem error report for type 5 error -108
[   99.361021][   T30] loop0: lost filesystem error report for type 5 error -108
[   99.653574][ T6136] loop3: detected capacity change from 0 to 32768
[   99.664383][ T6136] (syz.3.95,6136,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.664641][ T6136] (syz.3.95,6136,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.688710][ T6136] JBD2: Ignoring recovery information on journal
[   99.745969][ T6136] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   99.860165][   T31] audit: type=1800 audit(1786545656.749:6): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.95" name="file1" dev="loop3" ino=16978 res=0 errno=0
[  100.168209][   T30] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  100.319814][   T30] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  100.348306][   T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.348350][   T30] usb 3-1: Product: syz
[  100.348378][   T30] usb 3-1: Manufacturer: syz
[  100.348395][   T30] usb 3-1: SerialNumber: syz
[  100.423480][   T30] usb 3-1: config 0 descriptor??
[  100.612241][ T6146] loop0: detected capacity change from 0 to 16
[  100.630255][ T5622] ocfs2: Unmounting device (7,3) on (node local)
[  100.666208][ T6146] erofs (device loop0): mounted with root inode @ nid 36.
[  100.704747][ T6146] erofs (device loop0): invalid h_shared_count 83 @ nid 46
[  100.713796][ T6146] erofs (device loop0): invalid h_shared_count 83 @ nid 46
[  101.298489][ T5636] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  101.406689][ T6163] loop4: detected capacity change from 0 to 4096
[  101.425793][ T6163] EXT4-fs (loop4): Test dummy encryption mode enabled
[  101.425832][ T6163] EXT4-fs (loop4): DAX unsupported by block device.
[  101.451301][ T5636] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  101.463999][   T30] usb 3-1: non-Atmel transceiver xxxx511f
[  101.471650][ T5636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.471710][ T5636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.495853][ T5636] usb 4-1: config 0 descriptor??
[  101.498161][  T190] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  101.648614][  T190] usb 1-1: Using ep0 maxpacket: 8
[  101.651428][  T190] usb 1-1: unable to get BOS descriptor or descriptor too short
[  101.651477][  T190] usb 1-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2
[  101.653461][  T190] usb 1-1: config 1 has an invalid interface number: 211 but max is 0
[  101.653485][  T190] usb 1-1: config 1 has no interface number 0
[  101.653512][  T190] usb 1-1: config 1 interface 211 has no altsetting 0
[  101.659306][  T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.659331][  T190] usb 1-1: Product: syz
[  101.659345][  T190] usb 1-1: Manufacturer: syz
[  101.659359][  T190] usb 1-1: SerialNumber: syz
[  101.682690][   T30] usb 3-1: Firmware version (0.0) predates our first public release.
[  101.682716][   T30] usb 3-1: Please update to version 0.2 or newer
[  101.689659][   T30] usb 3-1: atusb_probe: initialization failed, error = -19
[  101.748795][   T30] usb 3-1: USB disconnect, device number 4
[  101.771825][ T5636] usbhid 4-1:0.0: can't add hid device: -71
[  101.783511][ T5636] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  101.801558][ T5636] usb 4-1: USB disconnect, device number 3
[  102.239965][ T5723] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  102.328686][  T190] dvb-usb: found a 'Yuan EC372S' in warm state.
[  102.365637][  T190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  102.378780][  T190] dvbdev: DVB: registering new adapter (Yuan EC372S)
[  102.378857][  T190] usb 1-1: media controller created
[  102.394091][ T5723] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  102.405133][ T5723] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  102.405196][ T5723] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256
[  102.405234][ T5723] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  102.471500][  T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  102.510596][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.510641][ T5723] usb 4-1: Product: syz
[  102.510672][ T5723] usb 4-1: Manufacturer: syz
[  102.510690][ T5723] usb 4-1: SerialNumber: syz
[  102.532967][ T6179] loop2: detected capacity change from 0 to 32768
[  102.556260][ T6179] (syz.2.110,6179,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  102.556604][ T6179] (syz.2.110,6179,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  102.589845][ T6179] JBD2: Ignoring recovery information on journal
[  102.616366][ T6179] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  102.739256][  T190] DVB: Unable to find symbol dib7000p_attach()
[  102.739295][  T190] dvb-usb: no frontend was attached by 'Yuan EC372S'
[  102.757881][   T31] audit: type=1800 audit(1786545659.639:7): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.110" name="file1" dev="loop2" ino=16978 res=0 errno=0
[  102.990025][  T190] rc_core: IR keymap rc-dib0700-rc5 not found
[  102.990062][  T190] Registered IR keymap rc-empty
[  103.010521][  T190] dvb-usb: could not initialize remote control.
[  103.019719][  T190] dvb-usb: Yuan EC372S successfully initialized and connected.
[  103.039766][  T190] usb 1-1: USB disconnect, device number 3
[  103.104610][  T190] dvb-usb: Yuan EC372S successfully deinitialized and disconnected.
[  103.266182][ T6191] loop1: detected capacity change from 0 to 128
[  103.426363][ T6191] syz.1.113: attempt to access beyond end of device
[  103.426363][ T6191] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128
[  103.435888][ T6192] syz.1.113: attempt to access beyond end of device
[  103.435888][ T6192] loop1: rw=8390657, sector=142, nr_sectors = 2 limit=128
[  103.436101][ T6192] Buffer I/O error on dev loop1, logical block 71, lost async page write
[  103.436145][ T6192] syz.1.113: attempt to access beyond end of device
[  103.436145][ T6192] loop1: rw=8390657, sector=144, nr_sectors = 2 limit=128
[  103.436167][ T6192] Buffer I/O error on dev loop1, logical block 72, lost async page write
[  103.436274][ T6192] syz.1.113: attempt to access beyond end of device
[  103.436274][ T6192] loop1: rw=8390657, sector=146, nr_sectors = 2 limit=128
[  103.436295][ T6192] Buffer I/O error on dev loop1, logical block 73, lost async page write
[  103.438815][ T6192] syz.1.113: attempt to access beyond end of device
[  103.438815][ T6192] loop1: rw=8390657, sector=138, nr_sectors = 2 limit=128
[  103.438848][ T6192] Buffer I/O error on dev loop1, logical block 69, lost async page write
[  103.454880][ T5633] ocfs2: Unmounting device (7,2) on (node local)
[  103.783111][ T6196] overlayfs: refusing to follow metacopy origin for (/file1)
[  103.972256][ T6206] capability: warning: `syz.4.117' uses 32-bit capabilities (legacy support in use)
[  103.988275][ T6206] overlayfs: upper fs does not support file handles, falling back to index=off.
[  103.988483][ T6206] overlayfs: failed to set uuid (36/file2, err=-1); falling back to uuid=null.
[  104.278059][  T190] usb 4-1: USB disconnect, device number 4
[  104.428400][ T5723] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  104.580043][ T5723] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  104.590894][ T5723] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.590933][ T5723] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.614662][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  104.614703][ T5723] usb 3-1: SerialNumber: syz
[  104.651092][ T6215] loop4: detected capacity change from 0 to 32768
[  104.695358][ T6215] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.796799][ T6215] XFS (loop4): Ending clean mount
[  104.853860][ T6234] loop1: detected capacity change from 0 to 64
[  104.877649][ T5723] usb 3-1: 0:2 : does not exist
[  105.064974][ T6215] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  105.079914][ T6215] XFS (loop4): Unmount and run xfs_repair
[  105.086673][ T6215] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  105.096400][ T6215] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  105.107401][ T6215] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  105.111001][ T6234] syz.1.129: attempt to access beyond end of device
[  105.111001][ T6234] loop1: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  105.111037][ T6234] Buffer I/O error on dev loop1, logical block 512, async page read
[  105.111325][ T6234] syz.1.129: attempt to access beyond end of device
[  105.111325][ T6234] loop1: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  105.111347][ T6234] Buffer I/O error on dev loop1, logical block 56576, async page read
[  105.139747][ T6215] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  105.139775][ T6215] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  105.139790][ T6215] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  105.139804][ T6215] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  105.139818][ T6215] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  105.139832][ T6215] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  105.140071][ T6215] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x14 len 4 error 74
[  105.150474][ T6215] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  105.150532][ T6215] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  105.327110][ T5623] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  105.331802][ T5723] usb 3-1: USB disconnect, device number 5
[  105.654426][ T6248] netlink: 7 bytes leftover after parsing attributes in process `syz.1.136'.
[  105.681678][ T6245] loop5: detected capacity change from 0 to 7
[  105.801276][ T6245] Dev loop5: unable to read RDB block 7
[  105.801336][ T6245]  loop5: AHDI p1 p2
[  105.801369][ T6245] loop5: partition table partially beyond EOD, truncated
[  105.801615][ T6245] loop5: p1 size 150995456 extends beyond EOD, truncated
[  106.030099][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.148942][ T6257] netlink: 'syz.4.132': attribute type 1 has an invalid length.
[  106.230514][ T6255] udevd[6255]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  106.263314][ T6250] loop1: detected capacity change from 0 to 32768
[  106.283341][ T6257] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.285936][ T6250] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.344971][ T6262] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  106.461948][ T6250] XFS (loop1): Ending clean mount
[  106.536888][ T6250] XFS (loop1): Quotacheck needed: Please wait.
[  106.764657][ T6250] XFS (loop1): Quotacheck: Done.
[  106.781328][ T6286] netlink: 43 bytes leftover after parsing attributes in process `syz.3.145'.
[  106.827247][   T31] audit: type=1804 audit(1786545663.719:8): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.137" name="/newroot/27/file0/bus" dev="loop1" ino=9290 res=1 errno=0
[  106.943415][ T5621] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  107.408224][ T5730] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  107.714077][ T6302] loop0: detected capacity change from 0 to 32768
[  107.724730][ T6302] (syz.0.151,6302,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  107.748644][ T6302] (syz.0.151,6302,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  107.758934][ T5730] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  107.760428][ T5730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.760451][ T5730] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.761610][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  107.761632][ T5730] usb 3-1: SerialNumber: syz
[  107.856279][ T6302] JBD2: Ignoring recovery information on journal
[  107.920485][ T6302] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  107.948841][ T5636] libceph: connect (1)[c::]:6789 error -101
[  107.959259][ T5636] libceph: mon0 (1)[c::]:6789 connect error
[  108.003843][ T5730] usb 3-1: 0:2 : does not exist
[  108.011709][ T5636] libceph: connect (1)[c::]:6789 error -101
[  108.011878][ T5636] libceph: mon0 (1)[c::]:6789 connect error
[  108.038934][   T31] audit: type=1800 audit(1786545664.929:9): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.151" name="file1" dev="loop0" ino=16978 res=0 errno=0
[  108.055991][ T6294] syz.3.147 (6294): drop_caches: 2
[  108.279441][ T6300] ceph: No mds server is up or the cluster is laggy
[  108.291131][ T5802] libceph: connect (1)[c::]:6789 error -101
[  108.291312][ T5802] libceph: mon0 (1)[c::]:6789 connect error
[  108.321574][ T5730] usb 3-1: USB disconnect, device number 6
[  108.567471][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.610065][ T5620] ocfs2: Unmounting device (7,0) on (node local)
[  108.614612][ T6313] loop9: detected capacity change from 0 to 8
[  108.623924][ T6313] Dev loop9: unable to read RDB block 8
[  108.623979][ T6313]  loop9: unable to read partition table
[  108.624176][ T6313] loop9: partition table beyond EOD, truncated
[  108.624211][ T6313] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  108.667604][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[  108.764008][ T6315] netlink: 'syz.1.155': attribute type 2 has an invalid length.
[  108.998172][ T6321] capability: warning: `syz.3.159' uses deprecated v2 capabilities in a way that may be insecure
[  109.134909][ T6327] Driver unsupported XDP return value 0 on prog  (id 14) dev N/A, expect packet loss!
[  109.587101][ T6348] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  109.730046][ T6343] loop5: detected capacity change from 0 to 7
[  109.749420][ T6343] Dev loop5: unable to read RDB block 7
[  109.749473][ T6343]  loop5: AHDI p1 p2 p3
[  109.749496][ T6343] loop5: partition table partially beyond EOD, truncated
[  109.749679][ T6343] loop5: p1 start 5472580 is beyond EOD, truncated
[  109.749704][ T6343] loop5: p2 start 167772160 is beyond EOD, truncated
[  109.848203][ T5802] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  109.998163][ T5802] usb 3-1: Using ep0 maxpacket: 16
[  110.004310][ T5802] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  110.016786][ T5802] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.016828][ T5802] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  110.042721][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.042763][ T5802] usb 3-1: Product: syz
[  110.042799][ T5802] usb 3-1: Manufacturer: syz
[  110.042828][ T5802] usb 3-1: SerialNumber: syz
[  110.092427][ T5802] usb 3-1: 0:2 : does not exist
[  110.109812][ T6354] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  110.285872][ T5802] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  110.354940][ T5802] usb 3-1: USB disconnect, device number 7
[  110.441444][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.517171][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'.
[  110.678312][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.179'.
[  111.249186][ T6381] loop2: detected capacity change from 0 to 32768
[  111.257610][ T6381] (syz.2.184,6381,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  111.272590][ T6381] (syz.2.184,6381,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  111.316848][ T6381] JBD2: Ignoring recovery information on journal
[  111.331703][ T6379] loop1: detected capacity change from 0 to 4096
[  111.352493][ T6381] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  111.465296][   T31] audit: type=1800 audit(1786545668.349:10): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.184" name="file1" dev="loop2" ino=16978 res=0 errno=0
[  111.649918][ T6395] fuse: Bad value for 'fd'
[  112.176741][ T5633] ocfs2: Unmounting device (7,2) on (node local)
[  112.889761][  T190] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  113.038901][  T190] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  113.039527][  T190] usb 3-1: config 0 has no interfaces?
[  113.039577][  T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.043058][  T190] usb 3-1: config 0 descriptor??
[  113.288685][  T190] usb 3-1: USB disconnect, device number 8
[  113.830798][ T6080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.863706][ T6429] loop3: detected capacity change from 0 to 32768
[  113.872371][ T6429] (syz.3.204,6429,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  113.887368][ T6429] (syz.3.204,6429,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  113.929306][ T6429] JBD2: Ignoring recovery information on journal
[  114.004201][ T6429] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  114.100011][   T31] audit: type=1800 audit(1786545670.979:11): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.204" name="file1" dev="loop3" ino=16978 res=0 errno=0
[  114.493877][ T6440] loop2: detected capacity change from 0 to 4096
[  114.530832][ T6440] EXT4-fs (loop2): Test dummy encryption mode enabled
[  114.573659][ T6440] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  114.573827][ T6440] System zones: 0-5
[  114.706675][ T6440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.723487][ T6080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.801233][ T5622] ocfs2: Unmounting device (7,3) on (node local)
[  114.860752][ T6440] EXT4-fs error (device loop2): __ext4_remount:6872: comm syz.2.209: Abort forced by user
[  114.861879][ T6440] EXT4-fs (loop2): Remounting filesystem read-only
[  114.861898][ T6440] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  115.043230][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  115.060584][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  115.069189][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.087176][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.102643][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.160759][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.197737][ T6080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.245028][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'.
[  115.467675][ T6080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.816858][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'.
[  115.816918][ T6483] netlink: 'syz.3.220': attribute type 8 has an invalid length.
[  115.816932][ T6483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.220'.
[  115.882074][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'.
[  115.882137][ T6483] netlink: 'syz.3.220': attribute type 8 has an invalid length.
[  115.882150][ T6483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.220'.
[  115.961417][ T6483] Zero length message leads to an empty skb
[  116.064368][ T6491] fuse: fd is not a fuse device
[  116.159449][ T6080] bridge_slave_1: left allmulticast mode
[  116.159665][  T190] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  116.183029][ T6080] bridge_slave_1: left promiscuous mode
[  116.186454][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.192306][ T6495] loop3: detected capacity change from 0 to 1024
[  116.197986][ T6495] EXT4-fs: Ignoring removed mblk_io_submit option
[  116.208578][ T6495] EXT4-fs: Ignoring removed bh option
[  116.257027][ T6495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.310333][  T190] usb 3-1: Using ep0 maxpacket: 8
[  116.312414][  T190] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  116.315250][  T190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  116.315310][  T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.388736][ T6080] bridge_slave_0: left allmulticast mode
[  116.388780][ T6080] bridge_slave_0: left promiscuous mode
[  116.389098][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.401191][  T190] usb 3-1: config 0 descriptor??
[  116.483347][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.688516][  T190] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  116.932275][ T5723] usb 3-1: USB disconnect, device number 9
[  117.056042][ T6501] loop1: detected capacity change from 0 to 40427
[  117.066699][ T6501] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[  117.078588][ T6501] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  117.111224][ T6501] F2FS-fs (loop1): invalid crc value
[  117.138515][ T4939] Bluetooth: hci3: command tx timeout
[  117.360845][ T6501] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  117.393731][ T6501] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  117.402694][ T6501] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  117.438827][ T6501] syz.1.226: attempt to access beyond end of device
[  117.438827][ T6501] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  117.455972][ T6501] CPU: 1 UID: 0 PID: 6501 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(full) 
[  117.456004][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  117.456015][ T6501] Call Trace:
[  117.456022][ T6501]  <TASK>
[  117.456030][ T6501]  dump_stack_lvl+0xe8/0x150
[  117.456075][ T6501]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  117.456108][ T6501]  f2fs_write_end_bio+0x1211/0x16e0
[  117.456128][ T6501]  ? blkg_put+0x22/0x240
[  117.456172][ T6501]  __submit_merged_bio+0x258/0x6a0
[  117.456197][ T6501]  ? rcu_is_watching+0x16/0xb0
[  117.456225][ T6501]  __submit_merged_write_cond+0x3c9/0x4e0
[  117.456258][ T6501]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  117.456306][ T6501]  f2fs_write_data_pages+0x2a27/0x36f0
[  117.456346][ T6501]  ? __lock_acquire+0x6df/0x2e50
[  117.456394][ T6501]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.456422][ T6501]  ? is_bpf_text_address+0x26/0x2b0
[  117.456454][ T6501]  ? arch_stack_walk+0xfb/0x150
[  117.456505][ T6501]  ? add_lock_to_list+0xc7/0x100
[  117.456530][ T6501]  ? lockdep_unlock+0x5c/0xd0
[  117.456557][ T6501]  ? __lock_acquire+0x14b9/0x2e50
[  117.456603][ T6501]  ? do_raw_spin_lock+0x12b/0x2f0
[  117.456641][ T6501]  ? do_raw_spin_unlock+0xf5/0x200
[  117.456669][ T6501]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.456698][ T6501]  do_writepages+0x338/0x560
[  117.456733][ T6501]  ? do_raw_spin_unlock+0xf5/0x200
[  117.456765][ T6501]  filemap_fdatawrite+0x1e9/0x2f0
[  117.456795][ T6501]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  117.456864][ T6501]  ? do_raw_spin_unlock+0xf5/0x200
[  117.456895][ T6501]  f2fs_sync_dirty_inodes+0x30e/0x830
[  117.456929][ T6501]  f2fs_write_checkpoint+0xa3d/0x2710
[  117.456979][ T6501]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  117.457037][ T6501]  ? __pfx_down_write+0x10/0x10
[  117.457066][ T6501]  ? rcu_is_watching+0x16/0xb0
[  117.457095][ T6501]  f2fs_issue_checkpoint+0x424/0x6f0
[  117.457119][ T6501]  ? __lock_acquire+0x6df/0x2e50
[  117.457145][ T6501]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  117.457180][ T6501]  ? __lock_acquire+0x6df/0x2e50
[  117.457208][ T6501]  ? lock_acquire+0x115/0x350
[  117.457240][ T6501]  ? lock_acquire+0x115/0x350
[  117.457276][ T6501]  ? f2fs_sync_fs+0x1f2/0x3c0
[  117.457301][ T6501]  __f2fs_ioctl+0x3efd/0xbcf0
[  117.457336][ T6501]  ? __pfx_stack_trace_save+0x10/0x10
[  117.457363][ T6501]  ? kasan_save_track+0x4f/0x80
[  117.457389][ T6501]  ? stack_depot_save_flags+0x33/0x7f0
[  117.457412][ T6501]  ? __lock_acquire+0x6df/0x2e50
[  117.457434][ T6501]  ? kasan_save_track+0x4f/0x80
[  117.457454][ T6501]  ? kasan_save_track+0x3e/0x80
[  117.457475][ T6501]  ? kasan_save_free_info+0x40/0x50
[  117.457493][ T6501]  ? __kasan_slab_free+0x5c/0x80
[  117.457518][ T6501]  ? kfree+0x1c5/0x650
[  117.457537][ T6501]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  117.457557][ T6501]  ? security_file_ioctl+0xc3/0x2a0
[  117.457585][ T6501]  ? __se_sys_ioctl+0x47/0x170
[  117.457607][ T6501]  ? do_syscall_64+0x166/0x520
[  117.457625][ T6501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.457664][ T6501]  ? __pfx___f2fs_ioctl+0x10/0x10
[  117.457712][ T6501]  ? kasan_quarantine_put+0xbb/0x1f0
[  117.457747][ T6501]  ? tomoyo_path_number_perm+0x219/0x5f0
[  117.457769][ T6501]  ? tomoyo_path_number_perm+0x219/0x5f0
[  117.457793][ T6501]  ? do_vfs_ioctl+0x116f/0x1530
[  117.457821][ T6501]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  117.457860][ T6501]  ? hook_file_ioctl+0x1f0/0x5f0
[  117.457902][ T6501]  ? __fget_files+0x2a/0x420
[  117.457925][ T6501]  ? __fget_files+0x2a/0x420
[  117.457962][ T6501]  ? __fget_files+0x3a2/0x420
[  117.457982][ T6501]  ? __fget_files+0x2a/0x420
[  117.458004][ T6501]  ? f2fs_ioctl+0x135/0x250
[  117.458035][ T6501]  ? __pfx_f2fs_ioctl+0x10/0x10
[  117.458064][ T6501]  __se_sys_ioctl+0xfc/0x170
[  117.458088][ T6501]  do_syscall_64+0x166/0x520
[  117.458106][ T6501]  ? trace_irq_disable+0x3b/0x140
[  117.458124][ T6501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.458143][ T6501]  ? clear_bhb_loop+0x70/0xc0
[  117.458168][ T6501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.458189][ T6501] RIP: 0033:0x7f211cf9e0d9
[  117.458221][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.458236][ T6501] RSP: 002b:00007f211df3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  117.458257][ T6501] RAX: ffffffffffffffda RBX: 00007f211d225fa0 RCX: 00007f211cf9e0d9
[  117.458272][ T6501] RDX: 0000000000000000 RSI: 000000000000f507 RDI: 0000000000000005
[  117.458285][ T6501] RBP: 00007f211d035024 R08: 0000000000000000 R09: 0000000000000000
[  117.458298][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.458310][ T6501] R13: 00007f211d226038 R14: 00007f211d225fa0 R15: 00007ffd9a75c8f8
[  117.458351][ T6501]  </TASK>
[  117.647493][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.703764][ T6501] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  117.703889][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(full) 
[  117.703913][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  117.703925][ T6501] Call Trace:
[  117.703933][ T6501]  <TASK>
[  117.703941][ T6501]  dump_stack_lvl+0xe8/0x150
[  117.703976][ T6501]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  117.704009][ T6501]  f2fs_write_end_bio+0x1211/0x16e0
[  117.704050][ T6501]  __submit_merged_bio+0x258/0x6a0
[  117.704076][ T6501]  ? rcu_is_watching+0x16/0xb0
[  117.704105][ T6501]  __submit_merged_write_cond+0x3c9/0x4e0
[  117.704141][ T6501]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  117.704190][ T6501]  f2fs_write_data_pages+0x2a27/0x36f0
[  117.704219][ T6501]  ? __lock_acquire+0x6df/0x2e50
[  117.704280][ T6501]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.704308][ T6501]  ? is_bpf_text_address+0x26/0x2b0
[  117.704344][ T6501]  ? arch_stack_walk+0xfb/0x150
[  117.704397][ T6501]  ? add_lock_to_list+0xc7/0x100
[  117.704423][ T6501]  ? lockdep_unlock+0x5c/0xd0
[  117.704450][ T6501]  ? __lock_acquire+0x14b9/0x2e50
[  117.704495][ T6501]  ? do_raw_spin_lock+0x12b/0x2f0
[  117.704532][ T6501]  ? do_raw_spin_unlock+0xf5/0x200
[  117.704558][ T6501]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.704588][ T6501]  do_writepages+0x338/0x560
[  117.704624][ T6501]  ? do_raw_spin_unlock+0xf5/0x200
[  117.704654][ T6501]  filemap_fdatawrite+0x1e9/0x2f0
[  117.704682][ T6501]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  117.704751][ T6501]  ? do_raw_spin_unlock+0xf5/0x200
[  117.704781][ T6501]  f2fs_sync_dirty_inodes+0x30e/0x830
[  117.704815][ T6501]  f2fs_write_checkpoint+0xa3d/0x2710
[  117.704867][ T6501]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  117.704922][ T6501]  ? __pfx_down_write+0x10/0x10
[  117.704951][ T6501]  ? rcu_is_watching+0x16/0xb0
[  117.704978][ T6501]  f2fs_issue_checkpoint+0x424/0x6f0
[  117.705000][ T6501]  ? __lock_acquire+0x6df/0x2e50
[  117.705025][ T6501]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  117.705053][ T6501]  ? __lock_acquire+0x6df/0x2e50
[  117.705080][ T6501]  ? lock_acquire+0x115/0x350
[  117.705113][ T6501]  ? lock_acquire+0x115/0x350
[  117.705155][ T6501]  ? f2fs_sync_fs+0x1f2/0x3c0
[  117.705181][ T6501]  __f2fs_ioctl+0x3efd/0xbcf0
[  117.705210][ T6501]  ? __pfx_stack_trace_save+0x10/0x10
[  117.705301][ T6501]  ? kasan_save_track+0x4f/0x80
[  117.705327][ T6501]  ? stack_depot_save_flags+0x33/0x7f0
[  117.705350][ T6501]  ? __lock_acquire+0x6df/0x2e50
[  117.705373][ T6501]  ? kasan_save_track+0x4f/0x80
[  117.705497][ T6501]  ? kasan_save_track+0x3e/0x80
[  117.705529][ T6501]  ? kasan_save_free_info+0x40/0x50
[  117.705552][ T6501]  ? __kasan_slab_free+0x5c/0x80
[  117.705578][ T6501]  ? kfree+0x1c5/0x650
[  117.705596][ T6501]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  117.705616][ T6501]  ? security_file_ioctl+0xc3/0x2a0
[  117.705645][ T6501]  ? __se_sys_ioctl+0x47/0x170
[  117.705668][ T6501]  ? do_syscall_64+0x166/0x520
[  117.705687][ T6501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.705728][ T6501]  ? __pfx___f2fs_ioctl+0x10/0x10
[  117.705779][ T6501]  ? kasan_quarantine_put+0xbb/0x1f0
[  117.705825][ T6501]  ? tomoyo_path_number_perm+0x219/0x5f0
[  117.705847][ T6501]  ? tomoyo_path_number_perm+0x219/0x5f0
[  117.705873][ T6501]  ? do_vfs_ioctl+0x116f/0x1530
[  117.705900][ T6501]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  117.705936][ T6501]  ? hook_file_ioctl+0x1f0/0x5f0
[  117.705980][ T6501]  ? __fget_files+0x2a/0x420
[  117.706004][ T6501]  ? __fget_files+0x2a/0x420
[  117.706023][ T6501]  ? __fget_files+0x3a2/0x420
[  117.706042][ T6501]  ? __fget_files+0x2a/0x420
[  117.706065][ T6501]  ? f2fs_ioctl+0x135/0x250
[  117.706096][ T6501]  ? __pfx_f2fs_ioctl+0x10/0x10
[  117.706126][ T6501]  __se_sys_ioctl+0xfc/0x170
[  117.706156][ T6501]  do_syscall_64+0x166/0x520
[  117.706176][ T6501]  ? trace_irq_disable+0x3b/0x140
[  117.706196][ T6501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.706217][ T6501]  ? clear_bhb_loop+0x70/0xc0
[  117.706242][ T6501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.706264][ T6501] RIP: 0033:0x7f211cf9e0d9
[  117.706286][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.706304][ T6501] RSP: 002b:00007f211df3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  117.706327][ T6501] RAX: ffffffffffffffda RBX: 00007f211d225fa0 RCX: 00007f211cf9e0d9
[  117.706343][ T6501] RDX: 0000000000000000 RSI: 000000000000f507 RDI: 0000000000000005
[  117.706355][ T6501] RBP: 00007f211d035024 R08: 0000000000000000 R09: 0000000000000000
[  117.706368][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.706380][ T6501] R13: 00007f211d226038 R14: 00007f211d225fa0 R15: 00007ffd9a75c8f8
[  117.706422][ T6501]  </TASK>
[  117.723260][ T6501] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  117.760500][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.792328][ T6080] bond0 (unregistering): Released all slaves
[  117.842626][ T6080] bond1 (unregistering): Released all slaves
[  118.087166][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1
[  118.578370][ T6533] MTD: Couldn't look up './dev/mtdblock0': -2
[  118.949487][   T30] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  119.111646][   T30] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  119.111718][   T30] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  119.135132][   T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.135194][   T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.135229][   T30] usb 2-1: config 0 interface 0 has no altsetting 0
[  119.143236][ T6554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.187045][   T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.187110][   T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.187161][   T30] usb 2-1: config 0 interface 0 has no altsetting 0
[  119.218349][ T4939] Bluetooth: hci3: command tx timeout
[  119.226432][   T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.236314][   T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.247776][   T30] usb 2-1: config 0 interface 0 has no altsetting 0
[  119.257309][   T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.268051][   T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.280818][   T30] usb 2-1: config 0 interface 0 has no altsetting 0
[  119.291460][   T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.300935][   T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.313125][   T30] usb 2-1: config 0 interface 0 has no altsetting 0
[  119.325206][   T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.334898][   T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.334932][   T30] usb 2-1: config 0 interface 0 has no altsetting 0
[  119.360421][   T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.370272][   T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.370306][   T30] usb 2-1: config 0 interface 0 has no altsetting 0
[  119.392077][   T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.402195][   T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.402228][   T30] usb 2-1: config 0 interface 0 has no altsetting 0
[  119.428834][   T30] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  119.437648][   T30] usb 2-1: Product: syz
[  119.442573][   T30] usb 2-1: Manufacturer: syz
[  119.450113][   T30] usb 2-1: SerialNumber: syz
[  119.468043][   T30] usb 2-1: config 0 descriptor??
[  119.506127][   T30] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  119.748019][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2
[  119.757386][ T6569] MTD: Couldn't look up './dev/mtdblock0': -2
[  119.800889][  T190] usb 2-1: USB disconnect, device number 3
[  119.822302][  T190] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  119.943676][ T6080] hsr_slave_0: left promiscuous mode
[  119.954273][ T6080] hsr_slave_1: left promiscuous mode
[  119.961640][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.970225][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.979952][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.987686][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.022624][ T6080] veth1_macvtap: left promiscuous mode
[  120.031440][ T6080] veth0_macvtap: left promiscuous mode
[  120.037468][ T6080] veth1_vlan: left promiscuous mode
[  120.043497][ T6080] veth0_vlan: left promiscuous mode
[  120.474018][ T6080] team0 (unregistering): Port device team_slave_1 removed
[  120.501852][ T6080] team0 (unregistering): Port device team_slave_0 removed
[  121.298288][ T4939] Bluetooth: hci3: command tx timeout
[  121.571372][ T6601] loop1: detected capacity change from 0 to 40427
[  121.581724][ T6601] F2FS-fs (loop1): build fault injection rate: 174
[  121.581744][ T6601] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  121.598496][ T6601] F2FS-fs (loop1): invalid crc value
[  121.676749][ T6601] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  121.689784][ T6601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  121.731974][ T6601] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  121.737409][ T6601] F2FS-fs (loop1): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90
[  121.737460][ T6601] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  121.747191][ T6601] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  121.757300][ T6601] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  121.764916][ T6601] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  121.773542][ T6601] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  121.781621][ T6601] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  121.790147][ T6601] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  121.798530][ T6601] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  121.806242][ T6601] CPU: 0 UID: 0 PID: 6601 Comm: syz.1.253 Not tainted syzkaller #0 PREEMPT(full) 
[  121.806269][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  121.806280][ T6601] Call Trace:
[  121.806288][ T6601]  <TASK>
[  121.806296][ T6601]  dump_stack_lvl+0xe8/0x150
[  121.806328][ T6601]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  121.806356][ T6601]  ? f2fs_map_blocks+0x3d81/0x4c20
[  121.806384][ T6601]  f2fs_balance_fs+0x349/0x810
[  121.806411][ T6601]  ? f2fs_map_blocks+0x3d81/0x4c20
[  121.806432][ T6601]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  121.806455][ T6601]  ? rcu_is_watching+0x16/0xb0
[  121.806478][ T6601]  ? __up_read+0x29c/0x930
[  121.806508][ T6601]  ? __pfx___up_read+0x10/0x10
[  121.806534][ T6601]  ? trace_lock_elapsed_time_end+0xf1/0xbc0
[  121.806560][ T6601]  ? restore_priority+0x1af/0x450
[  121.806592][ T6601]  f2fs_map_blocks+0x3d81/0x4c20
[  121.806630][ T6601]  ? is_bpf_text_address+0x292/0x2b0
[  121.806678][ T6601]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  121.806706][ T6601]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  121.806737][ T6601]  ? lockdep_hardirqs_on+0x7b/0x110
[  121.806756][ T6601]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[  121.806777][ T6601]  ? seqcount_lockdep_reader_access+0xea/0x100
[  121.806807][ T6601]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  121.806834][ T6601]  ? current_time+0x22f/0x380
[  121.806864][ T6601]  ? down_write+0x16b/0x200
[  121.806892][ T6601]  ? fault_in_iov_iter_readable+0x1d5/0x310
[  121.806918][ T6601]  f2fs_file_write_iter+0x17a8/0x28e0
[  121.806969][ T6601]  ? rcu_is_watching+0x16/0xb0
[  121.806991][ T6601]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  121.807027][ T6601]  ? __asan_memset+0x22/0x50
[  121.807063][ T6601]  iter_file_splice_write+0xa31/0x1240
[  121.807109][ T6601]  ? __pfx_iter_file_splice_write+0x10/0x10
[  121.807148][ T6601]  ? __pfx_iter_file_splice_write+0x10/0x10
[  121.807171][ T6601]  direct_splice_actor+0x101/0x160
[  121.807196][ T6601]  splice_direct_to_actor+0x57b/0xcb0
[  121.807235][ T6601]  ? __pfx_direct_splice_actor+0x10/0x10
[  121.807256][ T6601]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  121.807288][ T6601]  do_splice_direct+0x195/0x290
[  121.807311][ T6601]  ? __pfx_do_splice_direct+0x10/0x10
[  121.807332][ T6601]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  121.807362][ T6601]  ? rw_verify_area+0x203/0x4c0
[  121.807387][ T6601]  do_sendfile+0x52e/0x7c0
[  121.807421][ T6601]  ? __pfx_do_sendfile+0x10/0x10
[  121.807454][ T6601]  ? __se_sys_futex+0x3a8/0x450
[  121.807482][ T6601]  __se_sys_sendfile64+0x144/0x1a0
[  121.807510][ T6601]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  121.807545][ T6601]  do_syscall_64+0x166/0x520
[  121.807564][ T6601]  ? trace_irq_disable+0x3b/0x140
[  121.807582][ T6601]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.807601][ T6601]  ? clear_bhb_loop+0x70/0xc0
[  121.807625][ T6601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.807644][ T6601] RIP: 0033:0x7f211cf9e0d9
[  121.807663][ T6601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.807679][ T6601] RSP: 002b:00007f211df3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  121.807700][ T6601] RAX: ffffffffffffffda RBX: 00007f211d225fa0 RCX: 00007f211cf9e0d9
[  121.807715][ T6601] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  121.807726][ T6601] RBP: 00007f211d035024 R08: 0000000000000000 R09: 0000000000000000
[  121.807738][ T6601] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
[  121.807750][ T6601] R13: 00007f211d226038 R14: 00007f211d225fa0 R15: 00007ffd9a75c8f8
[  121.807781][ T6601]  </TASK>
[  121.807789][ T6601] F2FS-fs (loop1): Stopped filesystem due to reason: 1
[  122.782503][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3
[  122.822093][ T6632] overlayfs: failed to clone upperpath
[  122.840598][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.848586][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.856295][ T6451] bridge_slave_0: entered allmulticast mode
[  122.866265][ T6451] bridge_slave_0: entered promiscuous mode
[  122.883989][ T6630] veth1_to_bond: entered allmulticast mode
[  122.897206][ T6633] veth1_to_bond: entered promiscuous mode
[  122.907140][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.915449][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.915618][ T6451] bridge_slave_1: entered allmulticast mode
[  122.935164][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'.
[  122.943150][ T6451] bridge_slave_1: entered promiscuous mode
[  122.976266][ T6630] veth1_to_bond (unregistering): left allmulticast mode
[  122.976330][ T6630] veth1_to_bond (unregistering): left promiscuous mode
[  123.004796][ T6630] bond0: (slave bond_slave_1): Releasing backup interface
[  123.113872][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.141324][ T6080] IPVS: stop unused estimator thread 0...
[  123.156151][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.236695][ T6451] team0: Port device team_slave_0 added
[  123.259869][ T6451] team0: Port device team_slave_1 added
[  123.378605][ T5632] Bluetooth: hci3: command tx timeout
[  123.454353][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.454394][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.454417][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.457535][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.457552][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.457577][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.597347][ T6451] hsr_slave_0: entered promiscuous mode
[  123.604241][ T6451] hsr_slave_1: entered promiscuous mode
[  123.613400][ T6451] debugfs: 'hsr0' already exists in 'hsr'
[  123.620887][ T6451] Cannot create hsr debugfs directory
[  123.863943][ T6647] gadgetfs: bound to dummy_udc driver
[  124.098537][ T5723] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  124.098804][    C0] gadgetfs: connected
[  124.100111][ T5723] gadgetfs: disconnected
[  124.100426][  T190] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  124.272108][  T190] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  124.278293][  T190] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  124.278347][  T190] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  124.286456][  T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.286483][  T190] usb 3-1: Product: syz
[  124.286497][  T190] usb 3-1: Manufacturer: syz
[  124.286536][  T190] usb 3-1: SerialNumber: syz
[  124.670575][ T6680] warning: `syz.1.272' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  124.690067][   T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  124.736586][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4
[  124.751596][ T6451] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  124.788696][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  124.789844][ T6451] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  124.831848][ T6684] netlink: 'syz.3.275': attribute type 4 has an invalid length.
[  124.839870][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  124.962123][ T5636] usb 3-1: USB disconnect, device number 10
[  124.973730][ T6451] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  124.976599][ T6688] Bluetooth: MGMT ver 1.23
[  125.035612][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  125.036453][ T6451] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  125.084067][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  125.352948][ T6703] jffs2: notice: (6703) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  125.371672][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.416700][ T6451] 8021q: adding VLAN 0 to HW filter on device team0
[  125.429375][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.432573][ T6088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.451124][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.451250][ T6088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.780614][   T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  125.780856][   T10] ath9k_htc: Failed to initialize the device
[  125.795798][ T5636] usb 3-1: ath9k_htc: USB layer deinitialized
[  125.943945][ T6716] input: syz1 as /devices/virtual/input/input7
[  126.138201][ T5636] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  126.241150][ T6727] fuse: fd is not a fuse device
[  126.298507][ T5636] usb 3-1: Using ep0 maxpacket: 32
[  126.306228][ T5636] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08
[  126.322115][ T5636] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  126.333851][ T5636] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  126.350731][   T31] audit: type=1326 audit(1786545683.239:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.287" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a4d9e0d9 code=0x7ffc0000
[  126.350806][   T31] audit: type=1326 audit(1786545683.239:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.287" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a4d9e0d9 code=0x7ffc0000
[  126.355201][   T31] audit: type=1326 audit(1786545683.239:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.287" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a4d9e0d9 code=0x7ffc0000
[  126.366259][   T31] audit: type=1326 audit(1786545683.239:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.287" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a4d9e0d9 code=0x7ffc0000
[  126.370632][   T31] audit: type=1326 audit(1786545683.239:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.287" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f93a4d9e0d9 code=0x7ffc0000
[  126.370678][   T31] audit: type=1326 audit(1786545683.239:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.287" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a4d9e0d9 code=0x7ffc0000
[  126.370713][   T31] audit: type=1326 audit(1786545683.239:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.287" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a4d9e0d9 code=0x7ffc0000
[  126.371307][   T31] audit: type=1326 audit(1786545683.239:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.287" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a4d9e0d9 code=0x7ffc0000
[  126.371346][   T31] audit: type=1326 audit(1786545683.239:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.287" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a4d9e0d9 code=0x7ffc0000
[  126.371519][   T31] audit: type=1326 audit(1786545683.239:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.287" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a4d9e0d9 code=0x7ffc0000
[  126.599670][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.599695][ T5636] usb 3-1: Product: syz
[  126.599707][ T5636] usb 3-1: Manufacturer: syz
[  126.599719][ T5636] usb 3-1: SerialNumber: syz
[  126.695290][ T5636] ldusb 3-1:1.0: LD USB Device #0 now attached to major 180 minor 0
[  126.975539][   T10] usb 3-1: USB disconnect, device number 11
[  127.144557][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[  127.144613][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'.
[  127.144670][ T6749] netlink: 'syz.2.294': attribute type 15 has an invalid length.
[  127.151271][   T10] ldusb 3-1:1.0: LD USB Device #0 now disconnected
[  127.192006][ T6751] bridge_slave_0: left allmulticast mode
[  127.192063][ T6751] bridge_slave_0: left promiscuous mode
[  127.194357][ T6751] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.297683][ T6751] bridge_slave_1: left allmulticast mode
[  127.306036][ T6751] bridge_slave_1: left promiscuous mode
[  127.316258][ T6751] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.345011][ T6751] bond0: (slave bond_slave_0): Releasing backup interface
[  127.375480][ T6751] bond0: (slave bond_slave_1): Releasing backup interface
[  127.399944][ T6751] team0: Port device team_slave_0 removed
[  127.415687][ T6751] team0: Port device team_slave_1 removed
[  127.423692][ T6751] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.431987][ T6751] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.445781][ T6751] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.445848][ T6751] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.465943][ T6751] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  127.499139][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[  127.499173][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'.
[  127.499212][ T6749] netlink: 'syz.2.294': attribute type 15 has an invalid length.
[  127.524628][ T6754] team0: Port device xfrm0 added
[  127.547654][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.556732][ T6080] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  127.601163][ T6080] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  127.606662][ T6088] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  127.606706][ T6088] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  128.038005][ T6778] loop3: detected capacity change from 0 to 2048
[  128.049311][ T6451] veth0_vlan: entered promiscuous mode
[  128.061601][ T6451] veth1_vlan: entered promiscuous mode
[  128.171599][ T6451] veth0_macvtap: entered promiscuous mode
[  128.185317][ T6778] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  128.189256][ T6451] veth1_macvtap: entered promiscuous mode
[  128.219838][ T6778] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.224867][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'.
[  128.295425][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.347144][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.462277][ T6077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.528673][ T6077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.528766][ T6077] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.528820][ T6077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.912024][ T6077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.912062][ T6077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.991377][ T6077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.991428][ T6077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.016056][ T6800] Line length is too long: Should be less than 4094
[  129.346983][ T6808] xt_hashlimit: size too large, truncated to 1048576
[  130.299818][ T5783] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  130.450962][ T5783] usb 6-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  130.452140][ T5783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.497016][ T5783] pwc: Logitech/Cisco VT Camera webcam detected.
[  130.798844][ T5783] pwc: Failed to set LED on/off time (-71)
[  130.800269][ T5783] pwc: send_video_command error -71
[  130.800287][ T5783] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  130.800378][ T5783] Philips webcam 6-1:127.0: probe with driver Philips webcam failed with error -71
[  130.809243][ T5783] usb 6-1: USB disconnect, device number 2
[  132.019082][ T6870] loop3: detected capacity change from 0 to 131072
[  132.022736][ T6870] F2FS-fs (loop3): invalid crc value
[  132.112476][ T6870] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  132.180139][ T6870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  132.777492][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.344'.
[  133.043957][ T6906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.347'.
[  133.253710][ T6915] loop1: detected capacity change from 0 to 512
[  133.280050][ T6915] EXT4-fs (loop1): orphan cleanup on readonly fs
[  133.341854][ T6915] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.349: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[  133.376304][ T6915] loop1: lost filesystem error report for type 5 error -117
[  133.379545][    C0] EXT4-fs (loop1): initial error at time 1786545946: ext4_xattr_inode_iget:473
[  133.379624][    C0] EXT4-fs (loop1): last error at time 1786545946: ext4_xattr_inode_iget:473
[  133.467946][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  133.470197][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  133.497174][ T6915] EXT4-fs (loop1): Remounting filesystem read-only
[  133.497350][ T6915] EXT4-fs (loop1): 1 orphan inode deleted
[  133.505169][ T6915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  133.730706][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.614390][ T6946] netlink: 'syz.3.340': attribute type 1 has an invalid length.
[  134.648244][ T6946] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.713182][ T6946] bond1: (slave ip6gretap1): making interface the new active one
[  134.723618][ T6946] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  134.838712][ T6951] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  135.225715][ T6943] Set syz1 is full, maxelem 6117 reached
[  135.472038][ T6963] fuse: fd is not a fuse device
[  135.657210][ T6972] process 'syz.0.374' launched '/dev/fd/4' with NULL argv: empty string added
[  135.963979][ T6977] loop2: detected capacity change from 0 to 2048
[  136.025789][ T6979] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  136.076585][ T6977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.100355][ T6982] netlink: Unknown NAT attribute (type=16383, max=9)
[  136.100433][ T6982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.684296][ T7002] overlayfs: failed to clone upperpath
[  136.740439][ T7010] loop2: detected capacity change from 0 to 512
[  136.858737][ T7010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.880122][ T7010] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.756212][ T7032] EXT4-fs error (device loop2): ext4_get_first_dir_block:3539: inode #12: comm syz.2.389: Directory hole found for htree leaf block 0
[  137.781433][ T7032] EXT4-fs (loop2): Remounting filesystem read-only
[  138.276563][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.965255][   T65] IPVS: starting estimator thread 0...
[  139.033785][ T7082] batadv_slave_1: entered promiscuous mode
[  139.059783][ T7098] IPVS: using max 29 ests per chain, 69600 per kthread
[  139.111479][ T7079] batadv_slave_1: left promiscuous mode
[  139.951175][ T7121] loop1: detected capacity change from 0 to 40427
[  139.962352][ T7121] F2FS-fs (loop1): build fault injection rate: 19
[  139.962401][ T7121] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  139.963897][ T7121] F2FS-fs (loop1): invalid crc value
[  140.015192][ T7123] loop2: detected capacity change from 0 to 32768
[  140.033223][ T7121] f2fs_printk: 1 callbacks suppressed
[  140.041496][ T7121] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9a1/0x1820
[  140.092721][ T7123]  loop2: p1 p3 < >
[  140.164051][ T7121] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  140.216132][ T7121] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  140.289179][ T7121] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  140.322433][    C1] F2FS-fs (loop1): inject write IO error in f2fs_write_end_bio of blk_update_request+0x57b/0xe50
[  140.322552][    C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  140.322574][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  140.322585][    C1] Call Trace:
[  140.322592][    C1]  <TASK>
[  140.322601][    C1]  dump_stack_lvl+0xe8/0x150
[  140.322630][    C1]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  140.322661][    C1]  f2fs_write_end_bio+0x1211/0x16e0
[  140.322678][    C1]  ? blkg_put+0x22/0x240
[  140.322718][    C1]  blk_update_request+0x57b/0xe50
[  140.322747][    C1]  blk_mq_end_request+0x3e/0x70
[  140.322767][    C1]  blk_done_softirq+0x10a/0x160
[  140.322798][    C1]  handle_softirqs+0x226/0x860
[  140.322825][    C1]  ? schedule+0x90/0x2b0
[  140.322852][    C1]  ? run_ksoftirqd+0x36/0x60
[  140.322885][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  140.322911][    C1]  run_ksoftirqd+0x36/0x60
[  140.322935][    C1]  smpboot_thread_fn+0x565/0xa70
[  140.322963][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  140.323005][    C1]  kthread+0x38b/0x480
[  140.323025][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  140.323050][    C1]  ? __pfx_kthread+0x10/0x10
[  140.323070][    C1]  ret_from_fork+0x514/0xb70
[  140.323101][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  140.323130][    C1]  ? __switch_to+0xc89/0x1420
[  140.323158][    C1]  ? __pfx_kthread+0x10/0x10
[  140.323177][    C1]  ret_from_fork_asm+0x1a/0x30
[  140.323219][    C1]  </TASK>
[  140.323227][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  140.323254][    C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  140.323275][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  140.323285][    C1] Call Trace:
[  140.323291][    C1]  <TASK>
[  140.323299][    C1]  dump_stack_lvl+0xe8/0x150
[  140.323325][    C1]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  140.323355][    C1]  f2fs_write_end_bio+0x1211/0x16e0
[  140.323394][    C1]  blk_update_request+0x57b/0xe50
[  140.323424][    C1]  blk_mq_end_request+0x3e/0x70
[  140.323444][    C1]  blk_done_softirq+0x10a/0x160
[  140.323473][    C1]  handle_softirqs+0x226/0x860
[  140.323498][    C1]  ? schedule+0x90/0x2b0
[  140.323524][    C1]  ? run_ksoftirqd+0x36/0x60
[  140.323555][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  140.323579][    C1]  run_ksoftirqd+0x36/0x60
[  140.323604][    C1]  smpboot_thread_fn+0x565/0xa70
[  140.323633][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  140.323666][    C1]  kthread+0x38b/0x480
[  140.323684][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  140.323710][    C1]  ? __pfx_kthread+0x10/0x10
[  140.323729][    C1]  ret_from_fork+0x514/0xb70
[  140.323760][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  140.323787][    C1]  ? __switch_to+0xc89/0x1420
[  140.323819][    C1]  ? __pfx_kthread+0x10/0x10
[  140.323839][    C1]  ret_from_fork_asm+0x1a/0x30
[  140.323881][    C1]  </TASK>
[  140.323904][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  140.323927][    C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  140.323948][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  140.323958][    C1] Call Trace:
[  140.323964][    C1]  <TASK>
[  140.323978][    C1]  dump_stack_lvl+0xe8/0x150
[  140.324004][    C1]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  140.324033][    C1]  f2fs_write_end_bio+0x1211/0x16e0
[  140.324070][    C1]  blk_update_request+0x57b/0xe50
[  140.324100][    C1]  blk_mq_end_request+0x3e/0x70
[  140.324120][    C1]  blk_done_softirq+0x10a/0x160
[  140.324150][    C1]  handle_softirqs+0x226/0x860
[  140.324175][    C1]  ? schedule+0x90/0x2b0
[  140.324199][    C1]  ? run_ksoftirqd+0x36/0x60
[  140.324232][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  140.324256][    C1]  run_ksoftirqd+0x36/0x60
[  140.324281][    C1]  smpboot_thread_fn+0x565/0xa70
[  140.324309][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  140.324342][    C1]  kthread+0x38b/0x480
[  140.324361][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  140.324386][    C1]  ? __pfx_kthread+0x10/0x10
[  140.324405][    C1]  ret_from_fork+0x514/0xb70
[  140.324435][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  140.324464][    C1]  ? __switch_to+0xc89/0x1420
[  140.324491][    C1]  ? __pfx_kthread+0x10/0x10
[  140.324510][    C1]  ret_from_fork_asm+0x1a/0x30
[  140.324552][    C1]  </TASK>
[  140.324559][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  140.376393][ T7121] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint
[  140.903181][ T7151] loop2: detected capacity change from 0 to 2048
[  141.015870][ T7151] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[  141.141331][ T6255] udevd[6255]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  141.207876][ T5640] udevd[5640]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  141.219947][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout
[  141.236445][ T7075] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  141.243104][ T7075] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  141.263137][ T7158] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  141.272805][ T7158] overlayfs: failed to set xattr on upper
[  141.279331][ T7158] overlayfs: ...falling back to redirect_dir=nofollow.
[  141.286534][ T7158] overlayfs: ...falling back to index=off.
[  141.521307][ T7168] loop3: detected capacity change from 0 to 256
[  141.522296][ T7168] exfat: Deprecated parameter 'utf8'
[  141.524423][ T7168] exfat: Deprecated parameter 'utf8'
[  141.535524][ T7075] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  141.535549][ T7075] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  141.538346][ T5636] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  141.569370][ T7168] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  141.690558][ T5636] usb 3-1: Using ep0 maxpacket: 32
[  141.692118][ T5636] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  141.695687][ T5636] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.695717][ T5636] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.697414][ T5636] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  141.697461][ T5636] usb 3-1: Product: syz
[  141.697475][ T5636] usb 3-1: Manufacturer: syz
[  141.821477][ T5636] hub 3-1:4.0: USB hub found
[  141.915466][ T7075] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  141.915525][ T7075] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  141.964780][ T7075] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  141.964818][ T7075] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  142.038135][ T5636] hub 3-1:4.0: 2 ports detected
[  142.038956][ T5636] hub 3-1:4.0: insufficient power available to use all downstream ports
[  142.241624][ T5636] hub 3-1:4.0: config failed, can't get hub status (err -71)
[  142.249323][  T190] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  142.303551][ T5636] usb 3-1: USB disconnect, device number 12
[  142.435352][  T190] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  142.454401][  T190] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  142.454450][  T190] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.454502][  T190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.489815][  T190] hub 2-1:4.0: USB hub found
[  142.523637][ T7190] loop3: detected capacity change from 0 to 512
[  142.554660][ T7190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.554783][ T7190] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.619501][ T7190] EXT4-fs (loop3): shut down requested (1)
[  142.636736][ T7190] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only
[  142.637025][ T7190] overlayfs: failed to get uuid (/file0, err=-5); falling back to uuid=null.
[  142.644393][ T7190] overlayfs: failed to get origin (-5)
[  142.703353][  T190] hub 2-1:4.0: 2 ports detected
[  142.703423][  T190] usb 2-1: selecting invalid altsetting 1
[  142.703454][  T190] hub 2-1:4.0: Using single TT (err -22)
[  142.919565][ T7075] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  142.919602][ T7075] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  143.050033][ T7177] tcpci 0-0050: probe with driver tcpci failed with error -5
[  143.139007][ T7177] i2c i2c-0: new_device: Instantiated device tcpci at 0x50
[  143.201952][  T190] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  143.246340][  T190] usb 2-1: USB disconnect, device number 4
[  143.524013][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.560935][ T7218] tipc: Started in network mode
[  143.583738][ T7218] tipc: Node identity ac14140f, cluster identity 4711
[  143.619978][ T7218] tipc: Enabled bearer <udp:syz2>, priority 10
[  144.130575][   T83] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.528917][ T7251] netlink: 'syz.5.450': attribute type 2 has an invalid length.
[  144.552245][ T7251] netlink: 'syz.5.450': attribute type 2 has an invalid length.
[  144.561267][ T7251] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.450'.
[  144.585201][ T4939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  144.592482][ T4939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  144.593410][ T4939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  144.601226][ T4939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.601967][ T4939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  144.692755][   T83] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.699716][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  144.721733][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  144.722098][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  144.724658][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.725631][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  144.908277][  T190] tipc: Node number set to 2886997007
[  145.034703][ T7263] loop2: detected capacity change from 0 to 1024
[  145.044021][ T7263] EXT4-fs: Ignoring removed bh option
[  145.055470][ T7263] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  145.099125][   T83] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.122017][ T7263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.180721][ T7269] loop1: detected capacity change from 0 to 1024
[  145.205484][ T7269] EXT4-fs: Ignoring removed bh option
[  145.294393][ T7269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.344441][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.351462][   T83] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.606365][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.793489][ T7292] loop1: detected capacity change from 0 to 1024
[  146.215462][   T83] bridge_slave_1: left allmulticast mode
[  146.224544][   T83] bridge_slave_1: left promiscuous mode
[  146.224802][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.275902][   T83] bridge_slave_0: left allmulticast mode
[  146.282227][   T83] bridge_slave_0: left promiscuous mode
[  146.293220][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.463027][   T83] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  146.570977][ T7310] fuse: Bad value for 'fd'
[  146.660943][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.681738][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.697158][   T83] bond0 (unregistering): Released all slaves
[  146.731128][   T83] bond1 (unregistering): Released all slaves
[  146.818366][ T4939] Bluetooth: hci0: command tx timeout
[  147.597506][ T7339] loop1: detected capacity change from 0 to 256
[  147.646660][   T31] kauditd_printk_skb: 14 callbacks suppressed
[  147.646716][   T31] audit: type=1800 audit(1786545960.530:36): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.472" name="file2" dev="loop1" ino=1048631 res=0 errno=0
[  147.688353][ T7339] syz.1.472: attempt to access beyond end of device
[  147.688353][ T7339] loop1: rw=0, sector=1800, nr_sectors = 20 limit=256
[  148.067867][   T83] hsr_slave_0: left promiscuous mode
[  148.077297][   T83] hsr_slave_1: left promiscuous mode
[  148.079832][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.079854][   T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.102143][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.102187][   T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.148572][   T83] veth1_macvtap: left promiscuous mode
[  148.148626][   T83] veth0_macvtap: left promiscuous mode
[  148.148851][   T83] veth1_vlan: left promiscuous mode
[  148.148922][   T83] veth0_vlan: left promiscuous mode
[  148.192445][ T7332] loop2: detected capacity change from 0 to 32768
[  148.273738][ T7332] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  148.433942][ T7332] XFS (loop2): Ending clean mount
[  148.837337][ T5633] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  148.891495][   T83] team0 (unregistering): Port device team_slave_1 removed
[  148.907578][ T4939] Bluetooth: hci0: command tx timeout
[  148.930660][   T83] team0 (unregistering): Port device team_slave_0 removed
[  149.296155][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5
[  149.303555][ T7380] netlink: 204 bytes leftover after parsing attributes in process `syz.2.480'.
[  149.304410][ T7380] netlink: 84 bytes leftover after parsing attributes in process `syz.2.480'.
[  149.470711][ T6080] IPVS: starting estimator thread 0...
[  149.561850][ T7386] IPVS: using max 31 ests per chain, 74400 per kthread
[  150.048245][ T7407] netlink: 'syz.1.490': attribute type 1 has an invalid length.
[  150.048294][ T7407] netlink: 224 bytes leftover after parsing attributes in process `syz.1.490'.
[  150.242792][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.242892][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.243046][ T7249] bridge_slave_0: entered allmulticast mode
[  150.251690][ T7249] bridge_slave_0: entered promiscuous mode
[  150.265598][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.265970][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.266120][ T7249] bridge_slave_1: entered allmulticast mode
[  150.274344][ T7249] bridge_slave_1: entered promiscuous mode
[  150.352334][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.378640][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.424950][ T7249] team0: Port device team_slave_0 added
[  150.433844][ T7249] team0: Port device team_slave_1 added
[  150.475185][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.482803][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.510398][ T7249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.523889][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.531513][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.560410][ T7249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.599441][ T7430] netlink: 52 bytes leftover after parsing attributes in process `syz.1.498'.
[  150.659326][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'.
[  150.944272][ T7440] tmpfs: Bad value for 'nr_inodes'
[  150.978276][ T4939] Bluetooth: hci0: command tx timeout
[  151.101329][ T7249] hsr_slave_0: entered promiscuous mode
[  151.109453][ T7249] hsr_slave_1: entered promiscuous mode
[  151.116485][ T7249] debugfs: 'hsr0' already exists in 'hsr'
[  151.123081][ T7249] Cannot create hsr debugfs directory
[  151.136401][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6
[  151.929022][ T7249] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  151.941884][ T7249] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  151.942929][ T7249] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  151.969927][ T7249] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  151.970838][ T7249] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  151.987597][ T7249] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  151.996297][ T7249] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  152.007810][ T7249] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  152.126435][ T7249] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.142863][ T7249] 8021q: adding VLAN 0 to HW filter on device team0
[  152.150476][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.150637][ T6091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.160476][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.160579][ T6091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.209860][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7
[  153.058331][ T4939] Bluetooth: hci0: command tx timeout
[  153.341325][ T7249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.598021][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8
[  153.789232][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  153.957219][    T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  153.973022][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.973073][    T9] usb 2-1: Product: syz
[  153.973086][    T9] usb 2-1: Manufacturer: syz
[  153.973099][    T9] usb 2-1: SerialNumber: syz
[  153.984753][    T9] usb 2-1: config 0 descriptor??
[  154.187507][ T7249] veth0_vlan: entered promiscuous mode
[  154.229672][ T7249] veth1_vlan: entered promiscuous mode
[  154.282852][ T7546] xt_hashlimit: size too large, truncated to 1048576
[  154.422531][ T7249] veth0_macvtap: entered promiscuous mode
[  154.447487][ T7249] veth1_macvtap: entered promiscuous mode
[  154.475571][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.527337][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.623161][ T6080] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.623236][ T6080] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.623288][ T6080] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.623318][ T6080] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.794569][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.794637][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.863740][ T6080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.863787][ T6080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.027785][    T9] usb 2-1: non-Atmel transceiver xxxx511f
[  155.137208][ T7569] input: syz0 as /devices/virtual/input/input8
[  155.229120][    T9] usb 2-1: Firmware version (0.0) predates our first public release.
[  155.229167][    T9] usb 2-1: Please update to version 0.2 or newer
[  155.231194][    T9] usb 2-1: atusb_probe: initialization failed, error = -19
[  155.264039][    T9] usb 2-1: USB disconnect, device number 5
[  155.734069][ T7590] netlink: 'syz.2.526': attribute type 39 has an invalid length.
[  155.840925][ T7593] netlink: 52 bytes leftover after parsing attributes in process `syz.0.525'.
[  155.894876][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'.
[  156.284970][ T7602] loop6: detected capacity change from 0 to 4096
[  156.447959][ T7602] EXT4-fs (loop6): Test dummy encryption mode enabled
[  156.448008][ T7602] EXT4-fs (loop6): DAX unsupported by block device.
[  156.543521][ T7599] loop1: detected capacity change from 0 to 32768
[  156.561275][ T7599] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.528 (7599)
[  156.646305][ T7599] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  156.657164][ T7599] BTRFS info (device loop1): using blake2b checksum algorithm
[  156.852737][ T7599] BTRFS info (device loop1): enabling ssd optimizations
[  156.861014][ T7599] BTRFS info (device loop1): turning on async discard
[  156.868012][ T7599] BTRFS info (device loop1): enabling free space tree
[  156.875943][ T7599] BTRFS info (device loop1): use zstd compression, level 3
[  156.913712][   T31] audit: type=1800 audit(1786545969.800:37): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.528" name="file1" dev="loop1" ino=260 res=0 errno=0
[  157.540304][    C0] 
[  157.542698][    C0] ================================
[  157.547823][    C0] WARNING: inconsistent lock state
[  157.553226][    C0] syzkaller #0 Not tainted
[  157.558699][    C0] --------------------------------
[  157.565472][    C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  157.572416][    C0] ksoftirqd/0/15 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  157.579227][    C0] ffff888054520260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250
[  157.589276][    C0] {SOFTIRQ-ON-W} state was registered at:
[  157.595222][    C0]   lock_acquire+0x115/0x350
[  157.600113][    C0]   lock_sock_nested+0x41/0x100
[  157.605191][    C0]   x25_bind+0x209/0x450
[  157.609557][    C0]   __sys_bind+0x2e3/0x410
[  157.614522][    C0]   __x64_sys_bind+0x7a/0x90
[  157.619503][    C0]   do_syscall_64+0x166/0x520
[  157.625259][    C0]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.632483][    C0] irq event stamp: 1740428
[  157.637092][    C0] hardirqs last  enabled at (1740428): [<ffffffff8188e0f6>] __local_bh_enable_ip+0xd6/0x140
[  157.649324][    C0] hardirqs last disabled at (1740427): [<ffffffff8188e092>] __local_bh_enable_ip+0x72/0x140
[  157.661771][    C0] softirqs last  enabled at (1740354): [<ffffffff81890dd6>] run_ksoftirqd+0x36/0x60
[  157.672770][    C0] softirqs last disabled at (1740359): [<ffffffff81890dd6>] run_ksoftirqd+0x36/0x60
[  157.685011][    C0] 
[  157.685011][    C0] other info that might help us debug this:
[  157.693616][    C0]  Possible unsafe locking scenario:
[  157.693616][    C0] 
[  157.703919][    C0]        CPU0
[  157.707433][    C0]        ----
[  157.710903][    C0]   lock(sk_lock-AF_X25);
[  157.715256][    C0]   <Interrupt>
[  157.718834][    C0]     lock(sk_lock-AF_X25);
[  157.723613][    C0] 
[  157.723613][    C0]  *** DEADLOCK ***
[  157.723613][    C0] 
[  157.732115][    C0] locks held by ksoftirqd/0/15: 1, last CPU#0:
[  157.738640][    C0]  #0: ffffffff8eb5c8a0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0
[  157.748850][    C0] 
[  157.748850][    C0] stack backtrace:
[  157.754973][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  157.764407][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  157.775516][    C0] Call Trace:
[  157.780036][    C0]  <TASK>
[  157.783385][    C0]  dump_stack_lvl+0xe8/0x150
[  157.788794][    C0]  print_usage_bug+0x28c/0x2e0
[  157.793864][    C0]  valid_state+0xbe/0xf0
[  157.798852][    C0]  mark_lock_irq+0x36/0x380
[  157.804358][    C0]  mark_lock+0x117/0x190
[  157.808832][    C0]  __lock_acquire+0x6b7/0x2e50
[  157.813805][    C0]  ? kasan_quarantine_put+0xbb/0x1f0
[  157.819387][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  157.824621][    C0]  ? lock_acquire+0x115/0x350
[  157.830199][    C0]  lock_acquire+0x115/0x350
[  157.835077][    C0]  ? x25_kill_by_neigh+0x10d/0x250
[  157.840241][    C0]  ? x25_kill_by_neigh+0x103/0x250
[  157.845825][    C0]  lock_sock_nested+0x41/0x100
[  157.850636][    C0]  ? x25_kill_by_neigh+0x10d/0x250
[  157.856430][    C0]  x25_kill_by_neigh+0x10d/0x250
[  157.861493][    C0]  x25_lapb_receive_frame+0x1b0/0xfb0
[  157.867327][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[  157.873648][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[  157.878169][ T5783] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  157.888980][    C0]  ? __pfx_x25_lapb_receive_frame+0x10/0x10
[  157.896013][    C0]  netif_receive_skb_core+0x2a6/0x2b0
[  157.901787][    C0]  lapbeth_napi_poll+0x42/0x90
[  157.907493][    C0]  __napi_poll+0xaa/0x330
[  157.912129][    C0]  net_rx_action+0x61d/0xf50
[  157.916843][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  157.922306][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  157.927913][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  157.934139][    C0]  handle_softirqs+0x226/0x860
[  157.940281][    C0]  ? schedule+0x90/0x2b0
[  157.945346][    C0]  ? run_ksoftirqd+0x36/0x60
[  157.950321][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  157.956110][    C0]  run_ksoftirqd+0x36/0x60
[  157.962383][    C0]  smpboot_thread_fn+0x565/0xa70
[  157.968087][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  157.974093][    C0]  kthread+0x38b/0x480
[  157.979710][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  157.986847][    C0]  ? __pfx_kthread+0x10/0x10
[  157.992144][    C0]  ret_from_fork+0x514/0xb70
[  157.996983][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  158.002401][    C0]  ? __switch_to+0xc89/0x1420
[  158.007302][    C0]  ? __pfx_kthread+0x10/0x10
[  158.012065][    C0]  ret_from_fork_asm+0x1a/0x30
[  158.017014][    C0]  </TASK>
[  158.020170][    C0] BUG: sleeping function called from invalid context at net/core/sock.c:3829
[  158.020189][    C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15, name: ksoftirqd/0
[  158.020207][    C0] preempt_count: 100, expected: 0
[  158.020217][    C0] RCU nest depth: 1, expected: 0
[  158.020228][    C0] INFO: lockdep is turned off.
[  158.020234][    C0] Preemption disabled at:
[  158.020241][    C0] [<ffffffff8188e2fb>] handle_softirqs+0xab/0x860
[  158.020280][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  158.020304][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  158.020313][    C0] Call Trace:
[  158.020319][    C0]  <TASK>
[  158.020326][    C0]  dump_stack_lvl+0xe8/0x150
[  158.020349][    C0]  __might_resched+0x36a/0x4c0
[  158.020371][    C0]  ? handle_softirqs+0xab/0x860
[  158.020394][    C0]  lock_sock_nested+0x56/0x100
[  158.020422][    C0]  x25_kill_by_neigh+0x10d/0x250
[  158.020445][    C0]  x25_lapb_receive_frame+0x1b0/0xfb0
[  158.020471][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[  158.020495][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[  158.020518][    C0]  ? __pfx_x25_lapb_receive_frame+0x10/0x10
[  158.020539][    C0]  netif_receive_skb_core+0x2a6/0x2b0
[  158.020565][    C0]  lapbeth_napi_poll+0x42/0x90
[  158.020588][    C0]  __napi_poll+0xaa/0x330
[  158.020615][    C0]  net_rx_action+0x61d/0xf50
[  158.020638][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  158.020654][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  158.020687][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  158.020712][    C0]  handle_softirqs+0x226/0x860
[  158.020738][    C0]  ? schedule+0x90/0x2b0
[  158.020764][    C0]  ? run_ksoftirqd+0x36/0x60
[  158.020794][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  158.020818][    C0]  run_ksoftirqd+0x36/0x60
[  158.020841][    C0]  smpboot_thread_fn+0x565/0xa70
[  158.020867][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  158.020892][    C0]  kthread+0x38b/0x480
[  158.020907][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  158.020929][    C0]  ? __pfx_kthread+0x10/0x10
[  158.020945][    C0]  ret_from_fork+0x514/0xb70
[  158.020971][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  158.020996][    C0]  ? __switch_to+0xc89/0x1420
[  158.021021][    C0]  ? __pfx_kthread+0x10/0x10
[  158.021036][    C0]  ret_from_fork_asm+0x1a/0x30
[  158.021064][    C0]  </TASK>
[  158.026937][ T5621] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  158.131582][ T5783] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  158.146647][ T5783] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  158.146690][ T5783] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.146721][ T5783] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.152959][ T5783] hub 7-1:4.0: USB hub found
[  158.386875][ T5783] hub 7-1:4.0: 2 ports detected
[  158.386927][ T5783] usb 7-1: selecting invalid altsetting 1
[  158.386946][ T5783] hub 7-1:4.0: Using single TT (err -22)
[  158.587436][ T7653] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16)
[  158.596322][ T5783] hub 7-1:4.0: config failed, can't get hub status (err -71)
[  158.618745][ T5783] usb 7-1: USB disconnect, device number 2