last executing test programs:

2m48.201089004s ago: executing program 32 (id=149):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
syz_open_procfs(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x2200060, 0x0, 0x11, 0x0, &(0x7f0000000200))
truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc)
ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0xffffffff, 0xfff, &(0x7f0000000080)=0xffffffff})

2m33.130717808s ago: executing program 33 (id=213):
r0 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000340)="f5", 0x1}, {&(0x7f0000001680)="2251a9c6ca470000000008809ad3506332bbff1002955925a4115b6899fd49e8191f800d2afaeb4e2c46abe1ff77f7ab51d2a645fe46f99fa87a69f4912afdc495e78b54", 0x59}], 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendfile(r2, r0, &(0x7f0000000280)=0x49, 0x7fff)

2m26.474864538s ago: executing program 34 (id=252):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000002c0)={@id={0x2, 0x0, @c}, 0x21, 0x0, '\x00', @c})

2m8.735980029s ago: executing program 35 (id=332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x2c}}, 0x24008844)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r2, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844)

2m7.89529493s ago: executing program 6 (id=341):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0xffec, 0x2, 0x9, 0x1d0, r2}, &(0x7f0000000040)=0x10)

2m6.891425056s ago: executing program 6 (id=347):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2500}], 0x0, 0xa}, 0x20)

2m6.651076012s ago: executing program 6 (id=349):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f007491bb90946b5a154f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f0355808c6bd48d5590647a63a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f04000000000000007ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x28}}, 0x802)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0xfe7c, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20)

2m6.442957777s ago: executing program 6 (id=351):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000002544,errors=remount-ro,iocharset=macturkish,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000000,namecase=1,umask=00000000000000000000165,fmask=00000000000000000166141,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c7a65726f5f73697a655f6469722c74696d655f6f66667365743d3078303030303030303030303030303030352c6572726f72733d636f6e74696e75030000213258e0b74d31428201eec914b0a1309eef6fa67f9c9acd3d0f7faecfc7606d1780acf362e8c2eb308f9f6bf0dbc2a6f3bbfd298af0966c8df51bff17a1d884d217f3d05e3184594b42b733f1401e6a7a99717441f7f836034df7231df364ad31334b3e1b0fd15371b2e2ee9dc35f553c93625b158095a0ab77f5b32eab3e4252e792f82e28c94d176244e9c652c8aa0a5b60222a3643598acaee5d91428250f1a54198f0b60a932f"], 0x1, 0x1535, &(0x7f0000001380)="$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")
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

2m5.732990735s ago: executing program 6 (id=355):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180500006300000000000000feffffffb7080000000000007b8af8ff00000000a7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)

2m3.1794323s ago: executing program 6 (id=365):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

2m2.617881334s ago: executing program 36 (id=365):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

2m2.604438285s ago: executing program 0 (id=367):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000007000046009d168d6e03248e5b0a51267c78f9"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

2m2.275247153s ago: executing program 0 (id=369):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x401, 0xfffffffd, 0xffff4f11, 0x6, 0xffffdfffffffffff, 0x400, 0x3, 0x200, 0x4a, 0x2a, 0x7, 0x2})

2m1.570547071s ago: executing program 0 (id=371):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1}, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000440)=0x1e)

2m1.127459732s ago: executing program 0 (id=373):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000000280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
rmdir(&(0x7f00000001c0)='./file0\x00')

2m0.473227069s ago: executing program 0 (id=375):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000001, 0x1, r0, 0xffffffff}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc)

1m59.743392948s ago: executing program 0 (id=376):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = epoll_create(0x10001001)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x20000000})
sendmmsg(r1, &(0x7f000000dec0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="bb", 0x1}], 0x1}}], 0x1, 0x1)

1m59.302042079s ago: executing program 37 (id=376):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = epoll_create(0x10001001)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x20000000})
sendmmsg(r1, &(0x7f000000dec0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="bb", 0x1}], 0x1}}], 0x1, 0x1)

1m29.346430722s ago: executing program 8 (id=529):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m29.06516098s ago: executing program 8 (id=531):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'tunl0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e)

1m28.842914005s ago: executing program 8 (id=533):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4)
sendto$inet(r0, &(0x7f0000000180)='v', 0x1, 0x40c0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/185, 0xb9}, 0x8000}], 0x1, 0x2141, 0x0)

1m28.63983872s ago: executing program 8 (id=535):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x9b9c})

1m28.065595975s ago: executing program 8 (id=537):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)

1m26.941336223s ago: executing program 8 (id=546):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x80000000, 0x410400, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))

1m26.181577652s ago: executing program 38 (id=546):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x80000000, 0x410400, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))

1m12.385157662s ago: executing program 7 (id=601):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)

1m11.494133776s ago: executing program 7 (id=605):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000004180)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYRESOCT, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000))

1m10.258822307s ago: executing program 7 (id=617):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r4, 0x3, 0x300, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})

1m9.837921807s ago: executing program 7 (id=618):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

1m9.348367389s ago: executing program 9 (id=621):
r0 = socket(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000040))

1m9.105882505s ago: executing program 7 (id=624):
sched_setscheduler(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000480)={&(0x7f00000008c0)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@policy={0x0, 0x7, {{@in6=@private2, @in6=@remote, 0x4e24, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x20, 0x67}, {0x3, 0x4a, 0x7191, 0xc61f, 0x3, 0x975, 0x8, 0x82df}, {0x7fffffff, 0xfffffffffffffffb, 0x5, 0x9}, 0x101, 0x6e6bb5, 0x1, 0x0, 0x2, 0x2}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1m9.023828697s ago: executing program 9 (id=625):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r1, &(0x7f0000000480)='task\x00')
wait4(r1, 0x0, 0x2, 0x0)

1m8.591409178s ago: executing program 7 (id=629):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x40, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x51, 0x0, 0x0}, &(0x7f0000000100)=0x3e)

1m8.515982989s ago: executing program 9 (id=631):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
pread64(r1, &(0x7f0000001280)=""/200, 0xc8, 0x17a7)
read$FUSE(r1, &(0x7f0000001380)={0x2020}, 0x2020)

1m8.06910156s ago: executing program 39 (id=629):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x40, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x51, 0x0, 0x0}, &(0x7f0000000100)=0x3e)

1m8.05972731s ago: executing program 9 (id=633):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

1m7.498702382s ago: executing program 9 (id=636):
r0 = socket$inet(0x2, 0x2, 0x1)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)

1m6.919093837s ago: executing program 9 (id=637):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r2=>0x0)
r3 = eventfd2(0x7, 0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r1, &(0x7f0000000080)="d1", 0x1, 0x7, 0x0, 0x5, r3}])
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

1m6.100073997s ago: executing program 40 (id=637):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r2=>0x0)
r3 = eventfd2(0x7, 0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r1, &(0x7f0000000080)="d1", 0x1, 0x7, 0x0, 0x5, r3}])
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

29.43659001s ago: executing program 2 (id=803):
close(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

29.176041497s ago: executing program 2 (id=806):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})

28.948997132s ago: executing program 2 (id=808):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

28.699409629s ago: executing program 2 (id=810):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x102)

27.807349712s ago: executing program 2 (id=815):
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x5002, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000800)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0x0)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00')

27.328278684s ago: executing program 2 (id=818):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0xc)
r2 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0xfff)

26.641150731s ago: executing program 41 (id=818):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0xc)
r2 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0xfff)

4.477980495s ago: executing program 4 (id=930):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd09, &(0x7f0000000100)="040000000000000004000000000072000000000000f20ae1bbac6ac0b9a1")

4.111311695s ago: executing program 4 (id=931):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}, 0x2, 0x0, 0x0, 0x8084}, 0x4004)

3.863235131s ago: executing program 4 (id=933):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\x00\x00!\x00'}, @local=@item_4={0x3, 0x2, 0x0, "034d2500"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0)

3.255905557s ago: executing program 5 (id=939):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x68ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f00000080c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10)

2.521048575s ago: executing program 3 (id=943):
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

2.296355671s ago: executing program 3 (id=944):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x91cc, 0x2000000, 0x10000, 0x0, 0x0, 0x5c33f5c7, 0x3, 0xffffffffffeffffe, 0x8, 0x1c, 0x3})

2.158491505s ago: executing program 5 (id=946):
syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x29, 0x0}, {0x2, &(0x7f0000000440)=ANY=[]}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000e86000/0x2000)=nil, &(0x7f000098b000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.650077357s ago: executing program 1 (id=948):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0xfffffffb)
syz_emit_ethernet(0x8e, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa120}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}, @mptcp=@capable={0x1e, 0x14, 0x9, 0x8, 0x1, 0x3, [0xe]}, @mptcp=@capable={0x1e, 0x14, 0x5, 0x8, 0x7, 0x10003, [0xfff]}]}}}}}}}}, 0x0)

1.513845261s ago: executing program 3 (id=949):
pipe2(&(0x7f0000001040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
tee(r0, r2, 0xfffffffffffffc01, 0x0)
tee(r0, r2, 0x60000000000, 0x0)
close_range(r0, r2, 0x0)

1.423684303s ago: executing program 5 (id=950):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000000c0)="0200", 0x2, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f0000000140)="00000080", 0x4, 0x0)

1.351303655s ago: executing program 1 (id=951):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x0, 0x1ec, &(0x7f0000000380)="$eJzsmD9v00AYxp+zXTepEBILAwwgUYkitY7tAGJhKJ8AqeXf1oiaquA2yPGQRAIRsbDwMRhZGTIxsLGxwgBISCweEQPDobPP9sXJWUQQlrw/Kefn/r/35vRYMgiCWFq+fvnx+eWNa7ubAE5gHauy/btZjjGU8Z8aUnx89e745JNxdT2m2cfUtFsA3m6biGWdc87V/nX53IVR6FswcEnqO2BwpN6DgdtSB2C4l8mzD0uNblOKMHDud8P9B4dh4IrCE4UvinY1vmTEsG/L+CoH6Q2GjzphGERS5PkLV3i+T1QdM6/QpC6Pz0q2DVxX8if+r7svno9EPc+Nq+TPa5bz22DYKeqrcBynTIly/jNWub6pOz/+4pCLEKe26sZs1k//9Z9CBZtokfcMi9jrtRRPw+mLu0RCTXhTCGFaRcvpZPx+eta3RQZ2/h+sw6XzzuhCQ9P1Ye2PtmDPNF21d7X0T2EvFxV/smAV/tGKjx63eoPh1uFR5yA4CI59v33Vvey6V/xWakRZWeN/jdSf1pT1V8qtJ7CZjX4njiOvD8SRZ9vI6n5WKo6782bvZzEvGRnYuJBpkWU7s8qZMPkz0qdQG7pXH0EQBEEQBEEQBEEQBEEQxJycA0u/gnKefhLmGvyb6ejfAQAA///EelSm")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x48200, 0x40)

1.138692211s ago: executing program 5 (id=952):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x400)
write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfc, 0x0, 0x40, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0x1dd, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x3, 0x4, 0xd, 0x1c8, 0xe6, 0x1004, 0x3}], "8896f90580418954b50ef0f8011177f10291cbe4d3216fbc64f1ba622fdc49f66389be39365bb59d9c290d8b0ee2fea7687f7d9bbf575a4ce10ff0a5ef4278f6591b0531b2a7c2b99998f516147a99cc57365ed46bccfb71c0d5d504e1d023a3f2158e1a94f98388c50814f0832afb8b9ae3"}, 0xea)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

1.069823302s ago: executing program 3 (id=953):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a009cdc58"], 0xdd12}], 0x1, 0x0, 0x0, 0x200488c7}, 0x4048820)

953.571935ms ago: executing program 1 (id=954):
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0xffff45fc}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

803.330399ms ago: executing program 3 (id=955):
pipe2(&(0x7f0000000340)={0x0, <r0=>0x0}, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0x0, <r2=>0x0}, 0x0)
tee(r1, r0, 0xff, 0x8)
r3 = fanotify_init(0x2, 0x0)
fanotify_mark(r3, 0x1, 0x2, r0, 0x0)
vmsplice(r2, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0)

744.331161ms ago: executing program 5 (id=956):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xe6, 0x80000001, 0x0, 0x32, 0x81}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f0000005880)={0xa, 0x4e23, 0x2, @loopback, 0x8}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x2)

675.511462ms ago: executing program 4 (id=957):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x30, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

543.426496ms ago: executing program 1 (id=958):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f00000000c0), 0x8)
listen(r1, 0x5)
listen(r0, 0x5)

536.549996ms ago: executing program 3 (id=959):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x34, 0x57, 0x0, 0x20, 0x458, 0x7003, 0xfc62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x98, 0xa0, 0x8, "", [{{0x9, 0x4, 0x5e, 0x3, 0x0, 0x31, 0xb1, 0x96, 0x7}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000c00)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x20, 0x12, 0x1, '^'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

402.208079ms ago: executing program 4 (id=960):
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0)
sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0)

387.782139ms ago: executing program 5 (id=961):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14)

290.470882ms ago: executing program 1 (id=962):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24", 0xf0}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="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", 0x1bb}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12", 0xd4}], 0x2}}], 0x2, 0x14042082)

58.977828ms ago: executing program 4 (id=963):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x0, 0x1ec, &(0x7f0000000380)="$eJzsmD9v00AYxp+zXTepEBILAwwgUYkitY7tAGJhKJ8AqeXf1oiaquA2yPGQRAIRsbDwMRhZGTIxsLGxwgBISCweEQPDobPP9sXJWUQQlrw/Kefn/r/35vRYMgiCWFq+fvnx+eWNa7ubAE5gHauy/btZjjGU8Z8aUnx89e745JNxdT2m2cfUtFsA3m6biGWdc87V/nX53IVR6FswcEnqO2BwpN6DgdtSB2C4l8mzD0uNblOKMHDud8P9B4dh4IrCE4UvinY1vmTEsG/L+CoH6Q2GjzphGERS5PkLV3i+T1QdM6/QpC6Pz0q2DVxX8if+r7svno9EPc+Nq+TPa5bz22DYKeqrcBynTIly/jNWub6pOz/+4pCLEKe26sZs1k//9Z9CBZtokfcMi9jrtRRPw+mLu0RCTXhTCGFaRcvpZPx+eta3RQZ2/h+sw6XzzuhCQ9P1Ye2PtmDPNF21d7X0T2EvFxV/smAV/tGKjx63eoPh1uFR5yA4CI59v33Vvey6V/xWakRZWeN/jdSf1pT1V8qtJ7CZjX4njiOvD8SRZ9vI6n5WKo6782bvZzEvGRnYuJBpkWU7s8qZMPkz0qdQG7pXH0EQBEEQBEEQBEEQBEEQxJycA0u/gnKefhLmGvyb6ejfAQAA///EelSm")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x48200, 0x40)

0s ago: executing program 1 (id=964):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b810c70b0001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="01b3")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="3001")
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

kernel console output (not intermixed with test programs):

already present!
[  159.222463][ T7084] Cannot create hsr debugfs directory
[  159.426401][   T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.520578][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  159.541347][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  159.553194][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  159.564265][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  159.571930][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  159.579598][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  159.632600][ T5787] Bluetooth: hci3: command tx timeout
[  159.726919][ T7188] IPVS: persistence engine module ip_vs_pe_ not found
[  159.820391][   T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.965130][   T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.036413][ T7197] loop0: detected capacity change from 0 to 2048
[  160.091479][ T7197] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.310177][   T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.623851][ T5774] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  160.660273][ T5774] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  161.339745][ T7084] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  161.391242][ T7084] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  161.635059][ T5787] Bluetooth: hci0: command tx timeout
[  161.659002][ T7084] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  161.691340][ T7084] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  161.702511][ T5787] Bluetooth: hci3: command tx timeout
[  161.939646][ T7185] chnl_net:caif_netlink_parms(): no params data found
[  162.303321][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  162.314242][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  162.323499][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  162.331534][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  162.370660][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  162.385491][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  162.526966][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.540439][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.562664][ T7185] bridge_slave_0: entered allmulticast mode
[  162.591951][ T7185] bridge_slave_0: entered promiscuous mode
[  162.603803][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.610986][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.618702][ T7185] bridge_slave_1: entered allmulticast mode
[  162.626362][ T7185] bridge_slave_1: entered promiscuous mode
[  162.740585][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.827534][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.036762][ T7084] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.075121][ T7255] gadgetfs: bound to dummy_udc driver
[  163.108678][ T7185] team0: Port device team_slave_0 added
[  163.129233][ T7185] team0: Port device team_slave_1 added
[  163.341069][   T34] hsr_slave_0: left promiscuous mode
[  163.349288][   T34] hsr_slave_1: left promiscuous mode
[  163.354841][ T5817] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  163.369439][    C0] gadgetfs: connected
[  163.376940][ T5817] gadgetfs: disconnected
[  163.382333][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.391167][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.403614][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.411073][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.434723][   T34] bridge_slave_1: left allmulticast mode
[  163.440532][   T34] bridge_slave_1: left promiscuous mode
[  163.448475][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.460727][   T34] bridge_slave_0: left allmulticast mode
[  163.466647][   T34] bridge_slave_0: left promiscuous mode
[  163.475780][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.513701][   T34] veth1_macvtap: left promiscuous mode
[  163.519392][   T34] veth0_macvtap: left promiscuous mode
[  163.527121][   T34] veth1_vlan: left promiscuous mode
[  163.532755][   T34] veth0_vlan: left promiscuous mode
[  163.552852][    C0] gadgetfs: connected
[  163.558620][ T5817] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  163.572676][ T5817] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  163.581798][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.616190][    C0] gadgetfs: configuration #1
[  163.704732][ T5085] Bluetooth: hci0: command tx timeout
[  163.871467][ T7255] gadgetfs: suspended from state 3
[  163.888007][ T7255] gadgetfs: disconnected
[  163.895199][ T5817] usb 1-1: USB disconnect, device number 10
[  164.422303][   T34] team0 (unregistering): Port device team_slave_1 removed
[  164.423325][ T5085] Bluetooth: hci1: command tx timeout
[  164.484720][   T34] team0 (unregistering): Port device team_slave_0 removed
[  164.537071][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.586938][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.960741][   T34] bond0 (unregistering): Released all slaves
[  165.054682][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.061699][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.093373][ T7185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.179925][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.187258][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.218102][ T7185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.286534][ T7084] 8021q: adding VLAN 0 to HW filter on device team0
[  165.416085][ T7185] hsr_slave_0: entered promiscuous mode
[  165.431939][ T7185] hsr_slave_1: entered promiscuous mode
[  165.440375][ T7185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.472493][ T7185] Cannot create hsr debugfs directory
[  165.484496][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.491692][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.573495][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.580705][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.748251][ T7235] chnl_net:caif_netlink_parms(): no params data found
[  165.784118][ T5085] Bluetooth: hci0: command tx timeout
[  165.801464][ T7084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  166.231739][   T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  166.243648][   T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.416333][   T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  166.439677][   T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.462776][ T6303] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  166.479713][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.497123][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.504817][ T5085] Bluetooth: hci1: command tx timeout
[  166.516927][ T7235] bridge_slave_0: entered allmulticast mode
[  166.524674][ T7235] bridge_slave_0: entered promiscuous mode
[  166.533342][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.540508][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.547866][ T7235] bridge_slave_1: entered allmulticast mode
[  166.555727][ T7235] bridge_slave_1: entered promiscuous mode
[  166.594763][   T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  166.606743][   T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.639926][ T7235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.652463][ T6303] usb 6-1: Using ep0 maxpacket: 16
[  166.664676][ T6303] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  166.688468][ T7235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.699346][ T6303] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  166.725998][ T6303] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  166.744871][ T6303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.767894][ T6303] usb 6-1: Product: syz
[  166.772128][ T6303] usb 6-1: Manufacturer: syz
[  166.785174][ T6303] usb 6-1: SerialNumber: syz
[  166.794361][ T7235] team0: Port device team_slave_0 added
[  166.845676][   T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  166.856436][   T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.900187][ T7235] team0: Port device team_slave_1 added
[  166.999764][ T7084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.028961][ T6303] usb 6-1: 0:2 : does not exist
[  167.048215][ T6303] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  167.102585][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.109605][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.158102][ T6303] usb 6-1: USB disconnect, device number 3
[  167.191722][ T7235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.238676][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  167.252784][ T7185] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  167.290726][ T7185] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  167.323032][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.330069][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.364641][ T7235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.391459][ T7185] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  167.448807][ T7185] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  167.638606][ T7235] hsr_slave_0: entered promiscuous mode
[  167.653806][ T7235] hsr_slave_1: entered promiscuous mode
[  167.666341][ T7235] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  167.717396][ T7235] Cannot create hsr debugfs directory
[  167.863605][ T5085] Bluetooth: hci0: command tx timeout
[  168.308857][ T7084] veth0_vlan: entered promiscuous mode
[  168.391594][ T7235] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  168.408801][ T7084] veth1_vlan: entered promiscuous mode
[  168.435327][ T7235] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  168.451660][ T7235] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  168.495350][   T34] gretap1 (unregistering): left promiscuous mode
[  168.518709][   T34] team0: Port device gretap1 removed
[  168.536772][ T7235] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  168.554992][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.582604][ T5085] Bluetooth: hci1: command tx timeout
[  168.606144][ T7185] 8021q: adding VLAN 0 to HW filter on device team0
[  168.639720][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.647039][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.697255][ T7084] veth0_macvtap: entered promiscuous mode
[  168.709782][ T7084] veth1_macvtap: entered promiscuous mode
[  168.745257][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.752490][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.862260][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.874566][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.887351][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.899870][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.913787][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.971152][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.997400][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.007725][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.018665][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.031063][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.070926][ T7084] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.082264][ T7084] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.092060][ T7084] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.100921][ T7084] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.120121][ T7335] loop5: detected capacity change from 0 to 128
[  169.238885][ T7335] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  169.257279][ T7335] hpfs: filesystem error: improperly stopped
[  169.265210][ T7335] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  169.285254][ T7335] hpfs: You really don't want any checks? You are crazy...
[  169.323351][ T7335] hpfs: Code page index out of array
[  169.328716][ T7335] hpfs: code page support is disabled
[  169.351889][ T3428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.371742][ T7335] hpfs: hpfs_map_4sectors(): unaligned read
[  169.378866][ T3428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.391785][ T7335] hpfs: hpfs_map_4sectors(): unaligned read
[  169.410901][ T7335] hpfs: filesystem error: unable to find root dir
[  169.498156][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.556719][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.583208][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.611946][ T7235] 8021q: adding VLAN 0 to HW filter on device team0
[  169.668772][ T7185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.715704][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.722920][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.733434][ T7341] loop5: detected capacity change from 0 to 128
[  169.764343][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.771574][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.814159][ T7341] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  169.842028][ T7341] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  169.947825][ T6567] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  170.260728][ T5085] block nbd7: Receive control failed (result -32)
[  170.278078][ T7351] block nbd7: shutting down sockets
[  170.662845][ T5085] Bluetooth: hci1: command tx timeout
[  170.772264][ T7235] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.002618][   T34] hsr_slave_0: left promiscuous mode
[  171.073916][   T34] hsr_slave_1: left promiscuous mode
[  171.081826][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.098847][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.107528][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.120776][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.130365][ T7373] loop5: detected capacity change from 0 to 7
[  171.131324][   T34] team0: left allmulticast mode
[  171.142213][   T34] team_slave_1: left allmulticast mode
[  171.151588][   T34] team0: left promiscuous mode
[  171.158259][ T7373]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[  171.164169][ T7373] loop5: partition table partially beyond EOD, truncated
[  171.171425][   T34] team_slave_1: left promiscuous mode
[  171.172158][ T7373] loop5: p1 size 1042712361 extends beyond EOD, truncated
[  171.189985][   T34] bridge0: port 3(team0) entered disabled state
[  171.211399][   T34] bridge_slave_1: left allmulticast mode
[  171.222097][   T34] bridge_slave_1: left promiscuous mode
[  171.232154][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.258179][   T34] bridge_slave_0: left allmulticast mode
[  171.276885][   T34] bridge_slave_0: left promiscuous mode
[  171.288096][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.356721][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  171.436553][   T34] veth1_macvtap: left promiscuous mode
[  171.442256][   T34] veth0_macvtap: left promiscuous mode
[  171.449351][   T34] veth1_vlan: left promiscuous mode
[  171.455084][   T34] veth0_vlan: left promiscuous mode
[  172.955323][ T7404] loop5: detected capacity change from 0 to 1024
[  172.997803][   T34] team0 (unregistering): Port device team_slave_1 removed
[  173.046979][ T7404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  173.091267][ T7404] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.137869][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.213630][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.330793][ T3428] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm kworker/u4:8: lblock 0 mapped to illegal pblock 0 (length 6)
[  173.365793][ T3428] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  173.391641][ T3428] EXT4-fs (loop5): This should not happen!! Data will be lost
[  173.391641][ T3428] 
[  173.413108][ T3428] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 8)
[  173.435023][ T3428] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  173.451931][ T3428] EXT4-fs (loop5): This should not happen!! Data will be lost
[  173.451931][ T3428] 
[  173.490510][ T6567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  173.590523][ T7414] loop7: detected capacity change from 0 to 2048
[  173.613663][ T7414] EXT4-fs: Ignoring removed nomblk_io_submit option
[  173.721474][ T7414] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.836579][ T7414] EXT4-fs error (device loop7): ext4_validate_block_bitmap:430: comm syz.7.419: bg 0: block 2: invalid block bitmap
[  173.861436][ T7414] EXT4-fs (loop7): Remounting filesystem read-only
[  173.874390][ T7414] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 18, error -5)
[  174.007221][ T7084] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.189686][ T7424] loop7: detected capacity change from 0 to 1024
[  174.313500][   T34] bond0 (unregistering): Released all slaves
[  174.447199][ T7424] hfsplus: b-tree write err: -5, ino 8
[  174.538455][ T7185] veth0_vlan: entered promiscuous mode
[  174.594399][ T7185] veth1_vlan: entered promiscuous mode
[  174.684245][ T7422] loop5: detected capacity change from 0 to 32768
[  174.801530][ T7422] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  174.819205][ T7185] veth0_macvtap: entered promiscuous mode
[  174.873945][ T7185] veth1_macvtap: entered promiscuous mode
[  174.898181][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.909796][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.921330][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.949791][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.973547][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.990683][ T7422] XFS (loop5): Ending clean mount
[  175.064895][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.102407][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.147744][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.172732][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.194267][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.261138][ T7185] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.272026][ T7185] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.308403][ T7185] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.322190][ T7185] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.568197][ T6567] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  175.629981][ T7235] veth0_vlan: entered promiscuous mode
[  175.679870][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.708773][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.790822][ T7235] veth1_vlan: entered promiscuous mode
[  175.807994][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.840394][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.999759][ T7235] veth0_macvtap: entered promiscuous mode
[  176.031189][ T7235] veth1_macvtap: entered promiscuous mode
[  176.084247][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.122553][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.147751][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.179221][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.205599][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.230040][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.260397][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.278791][ T7448] input: syz0 as /devices/virtual/input/input11
[  176.309920][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.353706][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.375923][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.402467][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.412679][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.423270][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.435709][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.459289][ T7449] loop8: detected capacity change from 0 to 8192
[  176.489402][ T7235] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.514970][ T7235] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.529907][ T7235] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.534004][   T27] audit: type=1800 audit(1786053311.656:8): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.366" name="bus" dev="loop8" ino=1048623 res=0 errno=0
[  176.545466][ T7235] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.587447][ T7453] bio_check_eod: 4 callbacks suppressed
[  176.587463][ T7453] syz.8.366: attempt to access beyond end of device
[  176.587463][ T7453] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  176.607050][ T5815] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  176.699164][ T7453] Buffer I/O error on dev loop8, logical block 57847, async page read
[  176.720702][ T7453] syz.8.366: attempt to access beyond end of device
[  176.720702][ T7453] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  176.739729][ T7453] Buffer I/O error on dev loop8, logical block 57847, async page read
[  176.805338][   T27] audit: type=1800 audit(1786053311.936:9): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.366" name="file2" dev="loop8" ino=1048624 res=0 errno=0
[  176.837760][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.852296][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.924904][ T5815] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  176.938582][ T3428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.965452][ T3428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.981706][ T5815] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.018723][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.087985][ T5815] usb 8-1: config 0 descriptor??
[  177.130711][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.151791][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.536017][ T5815] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  177.584611][ T5815] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  177.630346][ T7468] 9p: Unknown Cache mode or invalid value 7777777777777777777
[  178.078824][ T7479] xt_hashlimit: size too large, truncated to 1048576
[  180.094249][ T6303] usb 8-1: USB disconnect, device number 2
[  180.378745][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.449'.
[  180.421810][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.7.449'.
[  180.460089][ T7527] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.469415][ T7527] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.478214][ T7527] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.487114][ T7527] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.571772][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.449'.
[  180.603631][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.7.449'.
[  181.089381][ T7544] loop5: detected capacity change from 0 to 512
[  181.385988][ T7554] loop9: detected capacity change from 0 to 128
[  181.452978][ T7554] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.489777][ T7554] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  181.501230][ T7544] EXT4-fs (loop5): Test dummy encryption mode enabled
[  181.567632][ T7544] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.456: inode has both inline data and extents flags
[  181.604381][ T7544] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.456: couldn't read orphan inode 15 (err -117)
[  181.672318][ T7544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.724182][ T7235] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  182.014775][ T7544] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  182.069820][ T7575] netlink: 432 bytes leftover after parsing attributes in process `syz.9.461'.
[  182.197909][ T6567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.641595][ T7589] loop7: detected capacity change from 0 to 2048
[  182.752606][ T7589] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.859389][ T7601] capability: warning: `syz.8.470' uses 32-bit capabilities (legacy support in use)
[  183.570619][ T7621] loop8: detected capacity change from 0 to 512
[  183.582506][ T7620] serial 00:03: in use; can't configure
[  183.605351][ T7621] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  183.623936][ T7620] serial 00:03: in use; can't configure
[  183.660421][ T7620] serial 00:03: in use; can't configure
[  183.677525][ T7621] EXT4-fs error (device loop8): ext4_validate_block_bitmap:430: comm syz.8.478: bg 0: block 104: invalid block bitmap
[  183.774742][ T7621] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  183.836611][ T7621] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.478: invalid indirect mapped block 1 (level 1)
[  183.962895][ T7621] EXT4-fs (loop8): 1 truncate cleaned up
[  183.981205][ T7621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.054611][ T7621] EXT4-fs (loop8): shut down requested (2)
[  184.078542][ T7621] overlayfs: failed to get redirect (-5)
[  184.108244][ T7632] loop5: detected capacity change from 0 to 1024
[  184.247297][ T7185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.752556][ T5814] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  184.823177][  T973] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  184.942484][ T5814] usb 9-1: Using ep0 maxpacket: 8
[  184.953138][ T5814] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  184.981815][ T5814] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  184.997178][ T5814] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  185.042735][ T5814] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  185.053105][  T973] usb 8-1: Using ep0 maxpacket: 8
[  185.074658][  T973] usb 8-1: config index 0 descriptor too short (expected 5924, got 36)
[  185.091335][ T5814] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  185.105053][  T973] usb 8-1: config 250 has an invalid interface number: 228 but max is -1
[  185.121302][  T973] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0
[  185.136117][ T7660] loop5: detected capacity change from 0 to 512
[  185.142641][ T5814] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  185.151719][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.172439][  T973] usb 8-1: config 250 has no interface number 0
[  185.178799][  T973] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  185.209791][  T973] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  185.273401][  T973] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  185.294907][ T7660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.348165][  T973] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  185.421793][  T973] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  185.442896][ T5814] usb 9-1: usb_control_msg returned -32
[  185.448526][ T5814] usbtmc 9-1:16.0: can't read capabilities
[  185.482458][  T973] usb 8-1: config 250 interface 228 has no altsetting 0
[  185.510653][ T7660] EXT4-fs (loop5): shut down requested (1)
[  185.519269][  T973] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  185.538741][  T973] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  185.550403][  T973] usb 8-1: Product: syz
[  185.557831][  T973] usb 8-1: SerialNumber: syz
[  185.582227][  T973] hub 8-1:250.228: bad descriptor, ignoring hub
[  185.602418][  T973] hub: probe of 8-1:250.228 failed with error -5
[  185.660220][ T6567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.731601][ T7672] netlink: 'syz.9.491': attribute type 1 has an invalid length.
[  185.811884][ T7673] usbtmc 9-1:16.0: stb usb_control_msg returned -32
[  185.833421][  T973] usblp 8-1:250.228: usblp1: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  185.849796][ T5814] usb 9-1: USB disconnect, device number 2
[  186.012788][ T7680] loop9: detected capacity change from 0 to 512
[  186.061604][ T7680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.162738][ T5815] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  186.172044][ T7235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.176340][  T973] usb 8-1: USB disconnect, device number 3
[  186.226267][  T973] usblp1: removed
[  186.402702][ T5815] usb 6-1: Using ep0 maxpacket: 8
[  186.414439][ T5815] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  186.433651][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.462100][ T5815] usb 6-1: Product: syz
[  186.472225][ T5815] usb 6-1: Manufacturer: syz
[  186.482669][ T5815] usb 6-1: SerialNumber: syz
[  186.499213][ T7691] loop9: detected capacity change from 0 to 2048
[  186.513959][ T5815] usb 6-1: config 0 descriptor??
[  186.549149][ T7693] veth1_to_bond: entered promiscuous mode
[  186.563422][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.8.496'.
[  186.588482][ T7691] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[  186.628455][ T7691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  186.632945][  T973] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  186.747716][ T5815] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  186.775912][ T7693] veth1_to_bond (unregistering): left promiscuous mode
[  186.854292][  T973] usb 8-1: Using ep0 maxpacket: 8
[  186.875233][  T973] usb 8-1: config index 0 descriptor too short (expected 5924, got 36)
[  186.892933][ T7693] bond0: (slave bond_slave_1): Releasing backup interface
[  186.901671][  T973] usb 8-1: config 250 has an invalid interface number: 228 but max is -1
[  186.923050][  T973] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0
[  186.932237][  T973] usb 8-1: config 250 has no interface number 0
[  186.971491][  T973] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  187.009924][  T973] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  187.031989][  T973] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  187.052436][  T973] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  187.070333][  T973] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  187.092420][  T973] usb 8-1: config 250 interface 228 has no altsetting 0
[  187.103644][  T973] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  187.122415][  T973] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  187.142495][  T973] usb 8-1: Product: syz
[  187.146752][  T973] usb 8-1: SerialNumber: syz
[  187.169389][  T973] hub 8-1:250.228: bad descriptor, ignoring hub
[  187.186505][  T973] hub: probe of 8-1:250.228 failed with error -5
[  187.303464][ T7706] Mass Storage Function, version: 2009/09/11
[  187.310448][ T7706] LUN: removable file: (no medium)
[  187.417494][  T973] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  187.536783][  T973] usb 8-1: USB disconnect, device number 4
[  187.563647][  T973] usblp0: removed
[  187.646947][ T7709] loop8: detected capacity change from 0 to 8192
[  187.693094][ T7709] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  187.712357][ T7709] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal
[  187.727909][ T7709] REISERFS (device loop8): using ordered data mode
[  187.737506][ T7709] reiserfs: using flush barriers
[  187.752557][ T7709] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  187.774807][ T5815] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  187.789236][ T5815] usb 6-1: USB disconnect, device number 4
[  187.802317][ T7709] REISERFS (device loop8): checking transaction log (loop8)
[  187.844607][ T7709] REISERFS (device loop8): Using r5 hash to sort names
[  187.856240][ T7709] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  188.730693][ T7737] netlink: 48 bytes leftover after parsing attributes in process `syz.5.508'.
[  188.812788][ T5814] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  189.052931][ T5814] usb 9-1: Using ep0 maxpacket: 32
[  189.070130][ T5814] usb 9-1: config index 0 descriptor too short (expected 35577, got 27)
[  189.081197][ T5814] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  189.091059][ T5814] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92
[  189.125316][ T5814] usb 9-1: config 1 has no interface number 0
[  189.131501][ T5814] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  189.174575][ T5814] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  189.223322][ T5814] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  189.241002][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.280248][ T5814] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found
[  189.502664][ T5814] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached
[  189.570973][ T7729] loop9: detected capacity change from 0 to 32768
[  189.610202][ T7729] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  189.747155][ T7729] XFS (loop9): Ending clean mount
[  189.766929][ T7729] XFS (loop9): Quotacheck needed: Please wait.
[  189.891304][ T7729] XFS (loop9): Quotacheck: Done.
[  190.021574][    T9] usb 9-1: USB disconnect, device number 3
[  190.057609][    T9] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected
[  190.194714][ T7775] loop7: detected capacity change from 0 to 512
[  190.252262][   T27] audit: type=1804 audit(1786053325.376:10): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.505" name="/newroot/25/file0/bus" dev="loop9" ino=9291 res=1 errno=0
[  190.381399][ T7235] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.483939][    T9] libceph: connect (1)[c::]:6789 error -101
[  190.513679][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  190.532220][    T9] libceph: connect (1)[c::]:6789 error -101
[  190.541328][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  190.815656][    T9] libceph: connect (1)[c::]:6789 error -101
[  190.821781][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  190.977153][ T7799] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.522'.
[  191.221266][ T7809] netlink: 'syz.7.523': attribute type 1 has an invalid length.
[  191.291880][ T7781] ceph: No mds server is up or the cluster is laggy
[  191.314248][ T7809] 8021q: adding VLAN 0 to HW filter on device bond1
[  191.362973][    T9] libceph: connect (1)[c::]:6789 error -101
[  191.369073][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  191.460422][ T7812] bond1: (slave gretap1): making interface the new active one
[  191.496506][ T7812] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  191.619802][ T7812] syz.7.523 (7812) used greatest stack depth: 20056 bytes left
[  192.617601][ T7850] loop8: detected capacity change from 0 to 1024
[  192.663895][ T7850] EXT4-fs: Ignoring removed bh option
[  192.688554][ T7850] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  192.733947][ T7850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.028938][ T7860] loop7: detected capacity change from 0 to 8192
[  193.041255][ T7185] EXT4-fs error (device loop8): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /20/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  193.088319][ T7860] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  193.125882][ T7185] EXT4-fs (loop8): Remounting filesystem read-only
[  193.131786][ T7867] veth1_to_bond: entered promiscuous mode
[  193.152552][ T7860] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  193.161853][ T7860] REISERFS (device loop7): using ordered data mode
[  193.194202][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.9.545'.
[  193.203551][ T7860] reiserfs: using flush barriers
[  193.250418][ T7860] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  193.345955][ T7860] REISERFS (device loop7): checking transaction log (loop7)
[  193.381612][ T7860] REISERFS (device loop7): Using r5 hash to sort names
[  193.410047][ T7860] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  193.545172][ T7867] veth1_to_bond (unregistering): left promiscuous mode
[  193.618095][ T7867] bond0: (slave bond_slave_1): Releasing backup interface
[  193.969164][ T7185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.073276][ T7885] netlink: 112 bytes leftover after parsing attributes in process `syz.7.542'.
[  194.257635][ T1136] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.338724][ T7886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.432400][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.438765][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  194.501139][ T7886] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.731697][ T1136] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.048808][ T1136] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.113777][ T7908] netlink: 'syz.5.550': attribute type 1 has an invalid length.
[  195.121667][ T7908] netlink: 56 bytes leftover after parsing attributes in process `syz.5.550'.
[  195.281540][ T1136] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.852804][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  195.956251][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.968943][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.986957][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  196.004889][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.019875][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  196.033073][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.046650][    T9] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  196.059229][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.069775][    T9] usb 6-1: Product: syz
[  196.074621][    T9] usb 6-1: Manufacturer: syz
[  196.079276][    T9] usb 6-1: SerialNumber: syz
[  196.093354][    T9] usb 6-1: config 0 descriptor??
[  196.513882][ T7939] loop7: detected capacity change from 0 to 4096
[  196.589297][    T9] usb 6-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213)
[  196.626249][ T7948] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  196.796634][    T9] usb 6-1: Read permanent extended address 16:12:1f:99:a6:93:0e:9f from device
[  196.822959][    T9] usb 6-1: atusb_probe: initialization failed, error = -524
[  196.833368][    T9] atusb: probe of 6-1:0.0 failed with error -524
[  197.044900][    T9] usb 6-1: USB disconnect, device number 5
[  197.238396][ T7956] loop9: detected capacity change from 0 to 256
[  197.278814][ T7956] exfat: Deprecated parameter 'utf8'
[  197.333656][ T7956] exfat: Deprecated parameter 'utf8'
[  197.380686][ T7956] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  197.558404][ T7929] chnl_net:caif_netlink_parms(): no params data found
[  197.929708][ T1136] hsr_slave_0: left promiscuous mode
[  197.984696][ T1136] hsr_slave_1: left promiscuous mode
[  197.992958][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.000423][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.088761][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.112859][ T5085] Bluetooth: hci0: command tx timeout
[  198.149587][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.184191][ T1136] bridge_slave_1: left allmulticast mode
[  198.200381][ T1136] bridge_slave_1: left promiscuous mode
[  198.213062][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.264813][ T1136] bridge_slave_0: left allmulticast mode
[  198.270533][ T1136] bridge_slave_0: left promiscuous mode
[  198.302142][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.401247][ T1136] veth1_macvtap: left promiscuous mode
[  198.407145][ T1136] veth0_macvtap: left promiscuous mode
[  198.421278][ T1136] veth1_vlan: left promiscuous mode
[  198.433790][ T1136] veth0_vlan: left promiscuous mode
[  198.596190][ T7974] loop7: detected capacity change from 0 to 32768
[  198.712249][ T7974] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  199.029803][ T7974] syz.7.564 (7974) used greatest stack depth: 18840 bytes left
[  199.179836][ T7084] ocfs2: Unmounting device (7,7) on (node local)
[  199.765655][ T1136] team0 (unregistering): Port device team_slave_1 removed
[  199.785712][  T973] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  199.829876][ T1136] team0 (unregistering): Port device team_slave_0 removed
[  199.889851][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.988114][  T973] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  200.007219][  T973] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  200.030014][  T973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  200.038476][  T973] usb 8-1: Product: syz
[  200.062019][  T973] usb 8-1: Manufacturer: syz
[  200.068094][  T973] usb 8-1: SerialNumber: syz
[  200.184321][ T5085] Bluetooth: hci0: command tx timeout
[  200.299563][  T973] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  200.404322][ T1136] bond0 (unregistering): Released all slaves
[  200.527973][ T7985] netlink: 'syz.9.566': attribute type 1 has an invalid length.
[  200.562131][    C0] usblp0: nonzero write bulk status received: -71
[  200.563669][ T5814] usb 8-1: USB disconnect, device number 5
[  200.609658][ T5814] usblp0: removed
[  200.833892][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.879186][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.896908][ T7929] bridge_slave_0: entered allmulticast mode
[  200.918132][ T7929] bridge_slave_0: entered promiscuous mode
[  200.942347][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.961529][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.990764][ T7929] bridge_slave_1: entered allmulticast mode
[  201.003986][ T7929] bridge_slave_1: entered promiscuous mode
[  201.127271][ T7929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.166784][ T7929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.231054][ T8019] trusted_key: syz.5.574 sent an empty control message without MSG_MORE.
[  201.317145][ T7929] team0: Port device team_slave_0 added
[  201.389372][ T7929] team0: Port device team_slave_1 added
[  201.510443][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.538172][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.577001][ T7929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.617447][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.660471][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.754474][ T7929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.024582][ T7929] hsr_slave_0: entered promiscuous mode
[  202.031396][ T7929] hsr_slave_1: entered promiscuous mode
[  202.262598][ T5085] Bluetooth: hci0: command tx timeout
[  202.653447][  T973] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  202.880787][  T973] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.921968][  T973] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.932372][    C0] sched: RT throttling activated
[  202.994290][  T973] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  203.069799][  T973] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  203.133860][  T973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.162891][ T8042] loop9: detected capacity change from 0 to 131072
[  203.176976][ T8042] F2FS-fs (loop9): Invalid log sectorsize (67108873)
[  203.184017][ T8042] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  203.200036][ T8042] F2FS-fs (loop9): invalid crc value
[  203.224293][  T973] usb 8-1: config 0 descriptor??
[  203.236829][ T8042] F2FS-fs (loop9): Found nat_bits in checkpoint
[  203.327028][ T8042] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  203.334215][ T8042] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  203.425175][   T27] audit: type=1800 audit(1786053338.556:11): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.580" name="file1" dev="loop9" ino=7 res=0 errno=0
[  203.716387][  T973] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  203.783304][  T973] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  204.342590][ T5085] Bluetooth: hci0: command tx timeout
[  204.801431][ T8071] loop5: detected capacity change from 0 to 32768
[  204.914233][ T8071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.587 (8071)
[  205.033606][ T8071] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.060325][    C1] plantronics 0003:047F:FFFF.0008: usb_submit_urb(ctrl) failed: -1
[  205.075835][ T6304] usb 8-1: USB disconnect, device number 6
[  205.125729][ T8071] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  205.145288][ T8071] BTRFS info (device loop5): force clearing of disk cache
[  205.189645][ T8071] BTRFS info (device loop5): enabling auto defrag
[  205.232478][ T8071] BTRFS info (device loop5): enabling disk space caching
[  205.270077][ T8071] BTRFS info (device loop5): disk space caching is enabled
[  205.352482][ T7929] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  205.369970][ T7929] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  205.416518][ T7929] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  205.467090][ T7929] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  205.580094][ T8071] BTRFS info (device loop5): enabling ssd optimizations
[  205.644426][ T8071] BTRFS info (device loop5): rebuilding free space tree
[  205.874405][ T8071] BTRFS info (device loop5): disabling free space tree
[  205.885112][ T7929] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.902147][ T8071] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  205.950121][ T8071] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  205.973317][ T7929] 8021q: adding VLAN 0 to HW filter on device team0
[  206.036004][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.043277][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.077121][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.084406][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.470756][ T6567] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.485081][ T3455] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  207.229111][ T7929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.388722][ T7929] veth0_vlan: entered promiscuous mode
[  207.436984][ T7929] veth1_vlan: entered promiscuous mode
[  207.613265][ T7929] veth0_macvtap: entered promiscuous mode
[  207.635069][ T8143] loop9: detected capacity change from 0 to 1024
[  207.674095][ T7929] veth1_macvtap: entered promiscuous mode
[  207.728153][ T8117] loop7: detected capacity change from 0 to 32768
[  207.770134][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.831158][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.842609][ T8117] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  207.852545][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.870009][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.880686][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.891929][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.904950][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.012987][ T8117] XFS (loop7): Ending clean mount
[  208.026472][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.082409][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.130542][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.162895][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.194425][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.273077][ T7929] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.281897][ T7929] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.339044][ T7929] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.359957][ T7929] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.624088][ T8161] loop9: detected capacity change from 0 to 4096
[  208.691364][ T7084] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  208.743880][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.761994][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.820595][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.845313][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.774252][ T8190] loop7: detected capacity change from 0 to 2048
[  209.837159][ T8190] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  209.887551][ T8190] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  209.938605][ T8190] UDF-fs: Scanning with blocksize 512 failed
[  210.018884][ T8190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.207666][   T27] audit: type=1800 audit(1786053345.336:12): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.605" name="file1" dev="loop7" ino=838 res=0 errno=0
[  211.418763][ T8251] loop7: detected capacity change from 0 to 1024
[  211.452317][ T8251] EXT4-fs: Ignoring removed bh option
[  211.500220][ T8251] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  211.674465][ T8251] loop7: detected capacity change from 1024 to 64
[  211.746929][ T8257] syz.7.618: attempt to access beyond end of device
[  211.746929][ T8257] loop7: rw=2051, sector=224, nr_sectors = 32 limit=64
[  211.791568][ T8257] EXT4-fs (loop7): discard request in group:0 block:7 count:16 failed with -5
[  211.801545][ T8257] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  212.334864][ T7084] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  212.369744][ T8252] kmmpd-loop7: attempt to access beyond end of device
[  212.369744][ T8252] loop7: rw=14337, sector=128, nr_sectors = 2 limit=64
[  212.391614][ T8252] Buffer I/O error on dev loop7, logical block 64, lost sync page write
[  213.115763][ T8285] loop9: detected capacity change from 0 to 1024
[  213.152594][ T8285] EXT4-fs: Ignoring removed bh option
[  213.195145][ T8285] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  213.316710][ T8285] loop9: detected capacity change from 1024 to 64
[  213.342769][ T5817] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  213.361551][ T8288] syz.9.633: attempt to access beyond end of device
[  213.361551][ T8288] loop9: rw=2051, sector=224, nr_sectors = 32 limit=64
[  213.424709][ T8288] EXT4-fs (loop9): discard request in group:0 block:7 count:16 failed with -5
[  213.544405][ T5817] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  213.576433][ T5817] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  213.616465][ T5817] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  213.654542][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.688105][ T7466] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  213.741225][ T8286] kmmpd-loop9: attempt to access beyond end of device
[  213.741225][ T8286] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  213.802465][ T8286] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  213.837648][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.892629][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.916211][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.934771][ T5817] usb 3-1: usb_control_msg returned -32
[  213.951280][ T5817] usbtmc 3-1:16.0: can't read capabilities
[  213.957932][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.983666][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.992136][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  214.133195][ T8281] loop5: detected capacity change from 0 to 32768
[  214.145375][  T143] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.175980][ T8281] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop5 scanned by syz.5.634 (8281)
[  214.239724][ T8281] BTRFS info (device loop5): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[  214.274976][ T8281] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  214.315621][ T8281] BTRFS info (device loop5): using free space tree
[  214.331927][  T143] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.438894][  T143] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.521478][ T8281] BTRFS info (device loop5): enabling ssd optimizations
[  214.528729][ T8281] BTRFS info (device loop5): auto enabling async discard
[  214.671591][  T143] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.194338][ T8289] chnl_net:caif_netlink_parms(): no params data found
[  215.270115][ T6567] BTRFS info (device loop5): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[  215.717642][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.738340][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.748482][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.763348][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.771281][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  215.780272][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  216.113968][ T5085] Bluetooth: hci3: command tx timeout
[  216.125156][ T5817] usb 3-1: USB disconnect, device number 7
[  216.251212][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.266717][ T8341] netlink: 208052 bytes leftover after parsing attributes in process `syz.5.640'.
[  216.286149][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.301179][ T8289] bridge_slave_0: entered allmulticast mode
[  216.325335][ T8289] bridge_slave_0: entered promiscuous mode
[  216.338543][ T8345] loop2: detected capacity change from 0 to 512
[  216.346555][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.360758][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.376886][ T8289] bridge_slave_1: entered allmulticast mode
[  216.385070][ T8289] bridge_slave_1: entered promiscuous mode
[  216.484545][ T8345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.544954][ T8289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.558655][ T8289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.705583][ T8345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.787422][ T8289] team0: Port device team_slave_0 added
[  216.825924][ T8289] team0: Port device team_slave_1 added
[  217.061945][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.079804][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.138123][ T8289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.422487][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.440391][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.495132][ T8289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.527057][ T8369] veth1_to_bond: entered allmulticast mode
[  217.636330][ T8369] veth1_to_bond: entered promiscuous mode
[  217.748358][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'.
[  217.872857][ T5085] Bluetooth: hci1: command tx timeout
[  217.917761][ T8373] veth1_to_bond (unregistering): left promiscuous mode
[  217.930992][ T8373] veth1_to_bond (unregistering): left allmulticast mode
[  218.014031][ T8373] bond0: (slave bond_slave_1): Releasing backup interface
[  218.081868][ T8289] hsr_slave_0: entered promiscuous mode
[  218.114393][ T8289] hsr_slave_1: entered promiscuous mode
[  218.141806][ T8289] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.154713][ T8289] Cannot create hsr debugfs directory
[  218.182487][ T5085] Bluetooth: hci3: command tx timeout
[  218.294196][  T143] hsr_slave_0: left promiscuous mode
[  218.335619][  T143] hsr_slave_1: left promiscuous mode
[  218.342051][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.373584][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.392856][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.409061][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.417134][  T143] bridge_slave_1: left allmulticast mode
[  218.423636][  T143] bridge_slave_1: left promiscuous mode
[  218.429430][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.440293][  T143] bridge_slave_0: left allmulticast mode
[  218.447654][  T143] bridge_slave_0: left promiscuous mode
[  218.468095][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.510243][  T143] veth1_macvtap: left promiscuous mode
[  218.516592][  T143] veth0_macvtap: left promiscuous mode
[  218.530028][  T143] veth1_vlan: left promiscuous mode
[  218.540037][  T143] veth0_vlan: left promiscuous mode
[  218.666867][ T8385] gadgetfs: bound to dummy_udc driver
[  219.401218][  T143] team0 (unregistering): Port device team_slave_1 removed
[  219.466743][  T143] team0 (unregistering): Port device team_slave_0 removed
[  219.520819][  T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.952941][ T5085] Bluetooth: hci1: command tx timeout
[  220.116921][  T143] bond0 (unregistering): Released all slaves
[  220.263873][ T5085] Bluetooth: hci3: command tx timeout
[  220.524369][ T8328] chnl_net:caif_netlink_parms(): no params data found
[  221.275024][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.292884][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.300161][ T8328] bridge_slave_0: entered allmulticast mode
[  221.334186][ T8328] bridge_slave_0: entered promiscuous mode
[  221.618238][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.633910][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.652881][ T8328] bridge_slave_1: entered allmulticast mode
[  221.681926][ T8328] bridge_slave_1: entered promiscuous mode
[  221.917876][ T8441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.927884][ T8441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.937283][ T8441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.946507][ T8441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.955676][ T8441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.964879][ T8441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.974046][ T8441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.983237][ T8441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.992420][ T8441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.001550][ T8441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.023259][ T5085] Bluetooth: hci1: command tx timeout
[  222.342846][ T5085] Bluetooth: hci3: command tx timeout
[  222.462060][ T8328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.490621][ T8328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.777014][ T8456] netlink: 'syz.5.662': attribute type 11 has an invalid length.
[  222.844846][ T8328] team0: Port device team_slave_0 added
[  222.924469][ T8328] team0: Port device team_slave_1 added
[  223.168548][ T8466] loop5: detected capacity change from 0 to 1024
[  223.210185][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.228475][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.284121][ T8466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.300453][ T8328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.314195][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.321179][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.347350][ T8328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.568795][ T8328] hsr_slave_0: entered promiscuous mode
[  223.579893][ T8328] hsr_slave_1: entered promiscuous mode
[  223.591157][ T8328] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.605561][ T8328] Cannot create hsr debugfs directory
[  223.741571][ T8289] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  223.749809][ T6567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.806137][ T8289] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  223.855053][ T8289] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  223.900580][ T8289] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  224.115106][ T5085] Bluetooth: hci1: command tx timeout
[  224.669061][ T6308] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  224.717180][ T6308] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  225.100114][ T8289] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.420804][ T8289] 8021q: adding VLAN 0 to HW filter on device team0
[  225.484780][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.492102][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.524278][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.531549][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.925815][ T8328] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  225.971812][ T8328] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  226.006441][ T8328] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  226.062135][ T8328] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  226.376545][ T8328] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.432182][ T8289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.519296][ T8328] 8021q: adding VLAN 0 to HW filter on device team0
[  226.581372][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.588604][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.664274][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.671442][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.891765][ T8289] veth0_vlan: entered promiscuous mode
[  227.008189][ T8289] veth1_vlan: entered promiscuous mode
[  227.031085][ T8546] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  227.154224][ T8289] veth0_macvtap: entered promiscuous mode
[  227.195661][ T8289] veth1_macvtap: entered promiscuous mode
[  227.285106][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.337262][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.370079][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.409205][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.439741][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.463333][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.500441][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.550732][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.592466][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.634279][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.655042][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.684335][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.726296][ T8564] loop5: detected capacity change from 0 to 2048
[  227.734385][ T8289] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.753736][ T8289] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.764483][ T8289] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.776226][ T8289] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.798965][ T8564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  227.926857][ T8328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.158297][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.198572][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.293225][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.301119][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.772736][ T6308] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  228.808380][ T8328] veth0_vlan: entered promiscuous mode
[  228.859953][ T8328] veth1_vlan: entered promiscuous mode
[  228.966645][ T8328] veth0_macvtap: entered promiscuous mode
[  228.992479][ T6308] usb 3-1: Using ep0 maxpacket: 8
[  229.038327][ T6308] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  229.054225][ T8328] veth1_macvtap: entered promiscuous mode
[  229.072521][ T6308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.101178][ T6308] usb 3-1: Product: syz
[  229.116245][ T6308] usb 3-1: Manufacturer: syz
[  229.120935][ T6308] usb 3-1: SerialNumber: syz
[  229.134216][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.152242][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.166796][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.194495][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.222840][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.260407][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.289163][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.342315][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.368130][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.425259][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.468453][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.500696][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.522530][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.550526][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.592467][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.612240][ T8609] loop1: detected capacity change from 0 to 2048
[  229.626184][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.650977][ T8328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.661374][ T8612] loop5: detected capacity change from 0 to 2048
[  229.688203][ T8328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.705781][ T8612] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  229.717073][ T8609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.750247][ T8328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.763198][ T8612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  229.794855][ T8609] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.805505][ T8328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.858305][ T6308] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  229.888963][ T6308] usb 3-1: clock source 0 is not valid, cannot use
[  230.138447][ T6308] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  230.152122][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.181472][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.194249][ T8289] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.203999][ T6308] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  230.238451][ T6308] usb 3-1: clock source 0 is not valid, cannot use
[  230.258798][ T6308] usb 3-1: 2:1: cannot get freq (v2/v3): err -71
[  230.275336][ T6308] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  230.312117][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.329391][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.472966][ T6308] usb 3-1: USB disconnect, device number 8
[  230.813134][   T27] audit: type=1326 audit(1786053365.936:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f339e0d9 code=0x7ffc0000
[  230.894322][   T27] audit: type=1326 audit(1786053365.966:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f339e0d9 code=0x7ffc0000
[  231.032483][   T27] audit: type=1326 audit(1786053365.966:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f339e0d9 code=0x7ffc0000
[  231.142438][   T27] audit: type=1326 audit(1786053365.976:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f71f339e0d9 code=0x7ffc0000
[  231.222792][   T27] audit: type=1326 audit(1786053365.976:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f339e0d9 code=0x7ffc0000
[  231.336332][   T27] audit: type=1326 audit(1786053365.976:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f339e0d9 code=0x7ffc0000
[  231.371351][ T8643] loop2: detected capacity change from 0 to 2048
[  231.397576][   T27] audit: type=1326 audit(1786053365.976:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f339e0d9 code=0x7ffc0000
[  231.443127][   T27] audit: type=1326 audit(1786053365.986:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f71f339e0d9 code=0x7ffc0000
[  231.495229][ T8643]  loop2: p1 p4
[  231.495229][ T8643]  p1: <minix: p5 >
[  231.526394][   T27] audit: type=1326 audit(1786053365.986:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f339e0d9 code=0x7ffc0000
[  231.563780][ T8643] loop2: partition table partially beyond EOD, truncated
[  231.568826][ T8652] loop4: detected capacity change from 0 to 512
[  231.603266][ T8643] loop2: p4 start 184549376 is beyond EOD, truncated
[  231.623006][ T8652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  231.642424][   T27] audit: type=1326 audit(1786053365.986:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f339e0d9 code=0x7ffc0000
[  231.706689][ T8652] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.704: bad orphan inode 131083
[  231.749973][ T8652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.062285][ T8328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.223252][ T6026] udevd[6026]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  232.226413][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  232.376469][ T5948] udevd[5948]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  232.378359][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  232.530360][ T8637] loop5: detected capacity change from 0 to 32768
[  232.701186][ T8637] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  232.872750][ T6308] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  232.901916][ T8637] XFS (loop5): Ending clean mount
[  233.078415][ T8650] loop1: detected capacity change from 0 to 32768
[  233.093774][ T6308] usb 3-1: Using ep0 maxpacket: 8
[  233.132131][ T6308] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  233.145159][ T6308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  233.154264][ T6308] usb 3-1: Product: syz
[  233.158493][ T6308] usb 3-1: Manufacturer: syz
[  233.164072][ T6308] usb 3-1: SerialNumber: syz
[  233.173747][ T6308] usb 3-1: config 0 descriptor??
[  233.207167][ T6308] gspca_main: sq905-2.14.0 probing 2770:9120
[  233.564350][ T8703] Bluetooth: MGMT ver 1.22
[  233.730901][ T6567] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  233.803075][ T8706] atomic_op ffff88805a8ae998 conn xmit_atomic 0000000000000000
[  234.252509][ T6308] gspca_sq905: bulk read fail (-22) len 0/4
[  234.264644][ T6308] sq905: probe of 3-1:0.0 failed with error -5
[  234.491114][ T6308] usb 3-1: USB disconnect, device number 9
[  234.560581][ T8709] loop4: detected capacity change from 0 to 32768
[  234.666334][ T8709] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  234.938902][ T8717] loop1: detected capacity change from 0 to 32768
[  235.001113][ T8717] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.715 (8717)
[  235.112274][ T8717] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  235.207341][ T8717] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  235.265453][ T8717] BTRFS info (device loop1): setting nodatacow, compression disabled
[  235.298885][ T8717] BTRFS info (device loop1): force clearing of disk cache
[  235.308607][ T8328] ocfs2: Unmounting device (7,4) on (node local)
[  235.320264][ T8717] BTRFS info (device loop1): turning off barriers
[  235.349340][ T8717] BTRFS info (device loop1): use no compression
[  235.369768][ T8717] BTRFS info (device loop1): disabling free space tree
[  235.417237][ T8717] BTRFS info (device loop1): enabling ssd optimizations
[  235.435930][ T8717] BTRFS info (device loop1): using spread ssd allocation scheme
[  235.482561][ T8717] BTRFS info (device loop1): not using ssd optimizations
[  235.489700][ T8717] BTRFS info (device loop1): not using spread ssd allocation scheme
[  235.760325][ T8717] BTRFS info (device loop1): rebuilding free space tree
[  235.826022][ T8717] BTRFS info (device loop1): disabling free space tree
[  235.872532][ T8717] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  235.882300][ T8717] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  235.978774][ T8717] BTRFS info (device loop1): checking UUID tree
[  236.297307][ T5815] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  236.372453][  T789] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  236.445291][ T8289] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  236.502639][ T5815] usb 6-1: Using ep0 maxpacket: 32
[  236.553527][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.581985][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.594035][ T5815] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  236.629793][  T789] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  236.651231][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.660289][  T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.701859][ T5815] usb 6-1: config 0 descriptor??
[  236.714072][  T789] usb 5-1: config 0 descriptor??
[  236.729174][ T5815] hub 6-1:0.0: USB hub found
[  236.798486][ T8728] loop2: detected capacity change from 0 to 40427
[  236.839600][ T8728] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  236.877297][ T8728] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  236.939357][ T8728] F2FS-fs (loop2): invalid crc value
[  236.956586][ T5815] hub 6-1:0.0: 1 port detected
[  237.012390][ T8728] F2FS-fs (loop2): Found nat_bits in checkpoint
[  237.226858][ T8728] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  237.255916][ T8728] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  237.578271][ T5815] hub 6-1:0.0: activate --> -90
[  237.838571][ T8768] loop1: detected capacity change from 0 to 32768
[  237.872581][ T8768] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop1 scanned by syz.1.720 (8768)
[  237.922542][ T8768] BTRFS info (device loop1): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[  237.962702][ T8768] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  237.983374][ T8768] BTRFS info (device loop1): using free space tree
[  237.995317][ T5815] usb 6-1-port1: config error
[  238.002985][ T5814] usb 6-1: USB disconnect, device number 6
[  238.009045][  T789] usb 5-1: Cannot set autoneg
[  238.023607][  T789] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71
[  238.065555][  T789] usb 5-1: USB disconnect, device number 2
[  238.210001][ T8768] BTRFS info (device loop1): enabling ssd optimizations
[  238.242579][ T8768] BTRFS info (device loop1): auto enabling async discard
[  238.833220][ T8289] BTRFS info (device loop1): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[  239.183671][ T8819] binder: 8817:8819 ioctl c0306201 2000000003c0 returned -14
[  239.804923][ T8831] loop5: detected capacity change from 0 to 64
[  240.168768][ T8831] syz.5.728: attempt to access beyond end of device
[  240.168768][ T8831] loop5: rw=2049, sector=412, nr_sectors = 2 limit=64
[  240.210026][ T8831] Buffer I/O error on dev loop5, logical block 206, lost async page write
[  240.544255][   T27] kauditd_printk_skb: 13 callbacks suppressed
[  240.544272][   T27] audit: type=1800 audit(1786053375.676:36): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.728" name="file1" dev="loop5" ino=5 res=0 errno=0
[  241.140633][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'.
[  241.591193][ T8858] loop4: detected capacity change from 0 to 32768
[  241.674004][ T8858] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  241.859852][ T8858] XFS (loop4): Ending clean mount
[  241.994738][   T27] audit: type=1800 audit(1786053377.126:37): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.736" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  242.074810][ T8893] XFS (loop4): User initiated shutdown received.
[  242.092663][ T8893] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  242.118987][ T8893] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  242.309679][ T8328] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  243.602469][    T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  243.794782][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  243.811972][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.834215][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  243.860652][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  243.890722][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.934720][    T9] usb 5-1: config 0 descriptor??
[  244.386555][    T9] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  244.422557][ T5814] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  244.425981][    T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  244.675984][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.712700][ T5814] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  244.738581][ T5814] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  244.738913][ T5817] usb 5-1: USB disconnect, device number 3
[  244.761973][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  244.786306][ T5814] usb 3-1: SerialNumber: syz
[  245.011205][ T5814] usb 3-1: 0:2 : does not exist
[  245.025031][ T5814] usb 3-1: unit 48 not found!
[  245.065602][ T5814] usb 3-1: USB disconnect, device number 10
[  245.082438][ T5815] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  245.230792][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  245.286688][ T5815] usb 2-1: Using ep0 maxpacket: 32
[  245.299672][ T5815] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  245.322838][ T5815] usb 2-1: config 0 has no interface number 0
[  245.338006][ T5815] usb 2-1: config 0 interface 184 has no altsetting 0
[  245.357274][ T5815] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  245.379330][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.405381][ T5815] usb 2-1: Product: syz
[  245.419854][ T5815] usb 2-1: Manufacturer: syz
[  245.429973][ T5815] usb 2-1: SerialNumber: syz
[  245.442712][ T5815] usb 2-1: config 0 descriptor??
[  245.463040][ T5815] smsc75xx v1.0.0
[  245.847499][ T9001] loop2: detected capacity change from 0 to 512
[  245.901994][ T9001] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  246.005729][ T9001] EXT4-fs (loop2): 1 truncate cleaned up
[  246.073306][ T9001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.077653][ T5815] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  246.097741][ T5815] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  246.378343][ T7929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.432833][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  246.474896][ T5814] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  246.517829][ T5815] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  246.552410][ T5815] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  246.562157][ T5815] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  246.574905][ T5815] smsc75xx: probe of 2-1:0.184 failed with error -71
[  246.589548][ T5815] usb 2-1: USB disconnect, device number 6
[  246.606315][ T5920] udevd[5920]: setting mode of /dev/bus/usb/002/006 to 020664 failed: No such file or directory
[  246.632156][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  246.643523][    T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  246.660307][ T5920] udevd[5920]: setting owner of /dev/bus/usb/002/006 to uid=0, gid=0 failed: No such file or directory
[  246.703253][ T5814] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  246.715230][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  246.718009][ T5814] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  246.735475][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.760804][    T9] usb 5-1: Product: syz
[  246.763136][ T5814] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  246.769976][    T9] usb 5-1: Manufacturer: syz
[  246.780616][    T9] usb 5-1: SerialNumber: syz
[  246.803317][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0
[  246.822181][ T5814] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  246.831973][ T5814] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  246.853573][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0
[  246.868983][ T5814] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  246.879620][ T5814] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  246.913764][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0
[  246.931991][ T5814] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  246.944511][ T5814] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  246.962144][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0
[  246.971871][ T5814] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  246.985794][ T5814] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  247.000069][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0
[  247.035529][ T5814] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  247.046989][ T5814] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  247.058593][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0
[  247.067148][    T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  247.089104][ T5814] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  247.098567][ T5814] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  247.139240][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0
[  247.163602][ T5814] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  247.205209][ T5814] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  247.238840][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0
[  247.256522][ T5814] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  247.267039][    T9] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  247.270652][ T5814] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  247.298884][ T5814] usb 6-1: Product: syz
[  247.306556][    T9] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[  247.325435][ T5814] usb 6-1: Manufacturer: syz
[  247.350638][ T5814] usb 6-1: SerialNumber: syz
[  247.370663][ T5814] usb 6-1: config 0 descriptor??
[  247.418976][ T5814] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  247.677269][    T9] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  247.710870][    T9] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[  247.753042][ T6303] usb 6-1: USB disconnect, device number 7
[  247.815464][ T6303] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  247.876936][    T9] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  247.944444][    T9] usb 5-1: USB disconnect, device number 4
[  248.032607][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.786246][ T9059] input: syz1 as /devices/virtual/input/input12
[  248.793541][ T9055] netlink: 'syz.4.780': attribute type 4 has an invalid length.
[  249.500849][ T9081] loop4: detected capacity change from 0 to 512
[  249.539534][ T9081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  249.588112][ T9081] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.787: iget: bad i_size value: 38620345925642
[  249.604464][ T9081] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.787: couldn't read orphan inode 15 (err -117)
[  249.684489][ T9081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.731382][ T9081] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.787: bg 0: block 5: invalid block bitmap
[  249.784653][ T9081] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28
[  249.813252][ T9081] EXT4-fs (loop4): This should not happen!! Data will be lost
[  249.813252][ T9081] 
[  249.837036][ T9081] EXT4-fs (loop4): Total free blocks count 0
[  249.857433][ T9081] EXT4-fs (loop4): Free/Dirty block details
[  249.882578][ T9081] EXT4-fs (loop4): free_blocks=0
[  249.905240][ T9081] EXT4-fs (loop4): dirty_blocks=1
[  249.934043][ T9081] EXT4-fs (loop4): Block reservation details
[  249.962530][ T9081] EXT4-fs (loop4): i_reserved_data_blocks=1
[  250.095228][ T8328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.252737][ T9090] loop1: detected capacity change from 0 to 8192
[  250.318011][ T9102] loop2: detected capacity change from 0 to 512
[  250.331909][ T9090] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  250.362608][ T9090] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  250.398169][ T9102] EXT4-fs (loop2): Test dummy encryption mode enabled
[  250.453203][ T9090] REISERFS (device loop1): using ordered data mode
[  250.471544][ T9102] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  250.512185][ T9090] reiserfs: using flush barriers
[  250.552654][ T9102] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  250.561698][ T9102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.623318][ T9090] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  250.725574][ T9090] REISERFS (device loop1): checking transaction log (loop1)
[  250.795730][ T9090] REISERFS (device loop1): Using r5 hash to sort names
[  250.833755][ T9090] REISERFS (device loop1): using 3.5.x disk format
[  250.855924][ T7929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.869308][ T9090] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  251.099971][ T9121] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2
[  251.195390][ T9121] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  251.262439][ T9121] REISERFS (device loop1): Remounting filesystem read-only
[  251.269803][ T9121] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[  251.468921][ T9132] TCP: TCP_TX_DELAY enabled
[  251.691735][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.802'.
[  252.211562][ T9158] sctp: [Deprecated]: syz.2.808 (pid 9158) Use of int in max_burst socket option deprecated.
[  252.211562][ T9158] Use struct sctp_assoc_value instead
[  252.465834][ T9166] loop2: detected capacity change from 0 to 128
[  252.498954][ T9166] EXT4-fs: Ignoring removed bh option
[  252.554749][ T9166] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  252.685265][ T9166] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  252.703847][ T9175] netlink: 27 bytes leftover after parsing attributes in process `syz.4.813'.
[  252.794410][ T9166] loop2: detected capacity change from 128 to 64
[  252.822668][ T5787] Bluetooth: hci2: command 0x0406 tx timeout
[  252.861307][ T9176] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Out of memory
[  252.972410][ T9176] EXT4-fs error (device loop2): ext4_ext_tree_init:891: inode #13: comm syz.2.810: mark_inode_dirty error
[  253.005473][ T9176] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Out of memory
[  253.031874][ T9176] EXT4-fs error (device loop2): __ext4_new_inode:1354: inode #13: comm syz.2.810: mark_inode_dirty error
[  253.061312][ T9176] EXT4-fs error (device loop2) in __ext4_new_inode:1356: Out of memory
[  253.078759][ T9176] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Out of memory
[  253.089622][ T9176] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #13: comm syz.2.810: mark_inode_dirty error
[  253.107690][ T9176] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -12)
[  253.167882][  T973] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  253.414839][  T973] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.433202][  T973] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  253.462053][  T973] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  253.492888][  T973] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  253.513100][  T973] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  253.529816][ T7929] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Out of memory
[  253.549522][  T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.569798][ T7929] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #2: comm syz-executor: mark_inode_dirty error
[  253.601007][ T7929] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  253.768382][ T2906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.087039][ T2906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.269098][ T2906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.398066][ T2906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.669646][  T973] gud 5-1:1.0: USB-1: Failed to add properties (ret=-5)
[  254.701671][  T973] gud 5-1:1.0: Failed to get connectors (error=-5)
[  254.723165][  T973] gud: probe of 5-1:1.0 failed with error -5
[  255.019492][  T789] usb 5-1: USB disconnect, device number 5
[  255.399039][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  255.411463][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  255.420088][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  255.470279][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  255.479490][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  255.487297][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  255.871243][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.877681][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  257.077300][ T9263] netlink: 'syz.5.835': attribute type 1 has an invalid length.
[  257.184237][ T9263] 8021q: adding VLAN 0 to HW filter on device bond1
[  257.217903][ T9265] bond1: (slave gretap1): making interface the new active one
[  257.228430][ T9265] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  257.285732][ T2906] hsr_slave_0: left promiscuous mode
[  257.292300][ T2906] hsr_slave_1: left promiscuous mode
[  257.306401][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.318650][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.339745][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.351114][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.373385][ T2906] bridge_slave_1: left allmulticast mode
[  257.379298][ T2906] bridge_slave_1: left promiscuous mode
[  257.394432][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.427700][ T2906] bridge_slave_0: left allmulticast mode
[  257.440884][ T2906] bridge_slave_0: left promiscuous mode
[  257.471038][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.547448][ T2906] veth1_macvtap: left promiscuous mode
[  257.556010][ T5787] Bluetooth: hci0: command tx timeout
[  257.565010][ T2906] veth0_macvtap: left promiscuous mode
[  257.572628][ T2906] veth1_vlan: left promiscuous mode
[  257.592516][ T2906] veth0_vlan: left promiscuous mode
[  258.188367][ T5787] Bluetooth: hci2: command 0x0406 tx timeout
[  258.222179][ T9231] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  258.268279][ T9275] loop5: detected capacity change from 0 to 32768
[  258.401046][ T9275] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  258.653504][   T27] audit: type=1800 audit(1786053393.766:38): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.837" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  258.864110][ T9231] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  258.933507][ T6567] ocfs2: Unmounting device (7,5) on (node local)
[  258.960019][ T9231] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  258.974710][ T9231] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  259.017338][ T9231] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  259.082506][ T9231] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  259.099015][ T9231] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  259.122673][ T9231] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  259.167418][ T9231] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  259.188277][ T9231] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  259.256446][ T9231] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  259.503630][ T2906] team0 (unregistering): Port device team_slave_1 removed
[  259.627756][ T2906] team0 (unregistering): Port device team_slave_0 removed
[  259.737111][ T9308] loop5: detected capacity change from 0 to 256
[  259.815328][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.262525][ T5787] Bluetooth: hci2: command 0x0406 tx timeout
[  260.751931][ T2906] bond0 (unregistering): Released all slaves
[  260.994814][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout
[  261.153907][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout
[  261.222476][ T5787] Bluetooth: hci0: command 0x040f tx timeout
[  261.664987][ T9217] chnl_net:caif_netlink_parms(): no params data found
[  262.047510][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.055081][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.065240][ T9217] bridge_slave_0: entered allmulticast mode
[  262.072920][ T9217] bridge_slave_0: entered promiscuous mode
[  262.087457][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.115602][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.137956][ T9217] bridge_slave_1: entered allmulticast mode
[  262.172935][ T9217] bridge_slave_1: entered promiscuous mode
[  262.299809][ T9217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.360165][ T9349] netlink: 84 bytes leftover after parsing attributes in process `syz.4.849'.
[  262.417650][ T9217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.447450][ T9349] netlink: 232 bytes leftover after parsing attributes in process `syz.4.849'.
[  262.575138][ T9217] team0: Port device team_slave_0 added
[  262.612146][ T9217] team0: Port device team_slave_1 added
[  262.696287][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_0
[  262.722655][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.750418][ T9217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  262.774313][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_1
[  262.782806][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.813972][ T9217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.863511][ T5817] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  262.940084][ T9217] hsr_slave_0: entered promiscuous mode
[  262.957401][ T9217] hsr_slave_1: entered promiscuous mode
[  263.072579][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout
[  263.078754][ T5817] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  263.118858][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.162105][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.208201][ T5817] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  263.222452][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout
[  263.273528][ T5817] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  263.312543][ T5787] Bluetooth: hci0: command 0x040f tx timeout
[  263.316384][ T5817] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  263.382405][ T5817] usb 6-1: Manufacturer: syz
[  263.439578][ T5817] usb 6-1: config 0 descriptor??
[  263.915367][ T5817] appleir 0003:05AC:8243.000B: unknown main item tag 0x0
[  263.930866][ T5817] appleir 0003:05AC:8243.000B: No inputs registered, leaving
[  263.952908][ T5817] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  265.145699][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout
[  265.169936][ T9217] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  265.246988][ T9217] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  265.302600][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout
[  265.311663][ T9217] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  265.369411][ T9217] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  265.383046][ T5787] Bluetooth: hci0: command 0x040f tx timeout
[  265.650521][ T9217] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.676263][ T9422] loop1: detected capacity change from 0 to 512
[  265.693822][ T9217] 8021q: adding VLAN 0 to HW filter on device team0
[  265.726203][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.733475][ T8923] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.787739][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.795012][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.115923][  T789] usb 6-1: USB disconnect, device number 8
[  266.278802][ T9438] loop1: detected capacity change from 0 to 512
[  266.495625][ T9438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.552807][ T9438] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.710050][ T9217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.717965][ T9438] capability: warning: `syz.1.870' uses deprecated v2 capabilities in a way that may be insecure
[  266.878287][ T8289] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.994933][ T9217] veth0_vlan: entered promiscuous mode
[  267.077013][ T9217] veth1_vlan: entered promiscuous mode
[  267.289874][ T9217] veth0_macvtap: entered promiscuous mode
[  267.420203][ T9217] veth1_macvtap: entered promiscuous mode
[  267.462797][ T5085] Bluetooth: hci0: command 0x040f tx timeout
[  267.481427][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.527365][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.563579][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.602601][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.630268][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.655652][ T9478] loop5: detected capacity change from 0 to 512
[  267.662132][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.682995][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.719401][ T9478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.723308][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.784339][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.891548][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.932483][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.953996][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.984102][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.006662][ T9485] loop1: detected capacity change from 0 to 512
[  268.033083][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.045066][ T9485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.057576][ T9485] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.072880][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.120688][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.130627][ T6567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.137407][ T9217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.148566][ T9217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.157381][ T9217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.171779][ T8289] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.181085][ T9217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.577178][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.634474][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.768915][ T8922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.818903][ T8922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.143000][ T5085] Bluetooth: hci4: command 0x1003 tx timeout
[  269.151460][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  269.553041][ T5787] Bluetooth: hci0: command 0x040f tx timeout
[  269.716322][ T9531] loop1: detected capacity change from 0 to 164
[  269.813232][ T9531] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  270.069620][ T9540] sctp: [Deprecated]: syz.3.897 (pid 9540) Use of struct sctp_assoc_value in delayed_ack socket option.
[  270.069620][ T9540] Use struct sctp_sack_info instead
[  270.706424][ T9529] loop4: detected capacity change from 0 to 40427
[  270.725825][ T9529] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  270.739913][ T9529] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  270.750866][ T9529] F2FS-fs (loop4): invalid crc value
[  270.823445][ T9529] F2FS-fs (loop4): Found nat_bits in checkpoint
[  271.029401][ T9529] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  271.049857][ T9529] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  272.901638][ T9576] loop1: detected capacity change from 0 to 32768
[  272.944162][ T9576] 
[  272.944162][ T9576]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  272.944162][ T9576] 
[  273.055193][ T9576] ERROR: (device loop1): diWrite: ixpxd invalid
[  273.055193][ T9576] 
[  273.141826][ T9576] ERROR: (device loop1): txCommit: 
[  273.141826][ T9576] 
[  273.167779][ T9601] loop4: detected capacity change from 0 to 1024
[  273.211303][ T9601] EXT4-fs: Ignoring removed oldalloc option
[  273.273188][ T9601] EXT4-fs: Ignoring removed bh option
[  273.306635][ T9607] input: syz0 as /devices/virtual/input/input13
[  273.395028][ T9601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  273.448984][ T9601] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.536607][ T8289] 
[  273.536607][ T8289]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  273.536607][ T8289] 
[  273.583094][ T8289] 
[  273.583094][ T8289]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  273.583094][ T8289] 
[  273.603555][ T9601] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 3: comm syz.4.912: lblock 3 mapped to illegal pblock 3 (length 3)
[  273.667350][ T9601] EXT4-fs (loop4): Remounting filesystem read-only
[  274.298543][ T8328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  274.673848][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  274.875401][    T9] usb 2-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00
[  274.901947][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.330884][ T9656] overlayfs: failed to decode file handle (len=13, type=251, flags=0, err=-22)
[  275.394397][    T9] mxuport 2-1:1.0: mxuport_recv_ctrl_urb - short read (0 / 4)
[  275.402286][    T9] mxuport: probe of 2-1:1.0 failed with error -5
[  275.572665][ T6303] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  275.782665][ T6303] usb 6-1: Using ep0 maxpacket: 8
[  275.809968][ T6303] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  275.830670][ T6303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.849183][ T6303] usb 6-1: Product: syz
[  275.856897][ T6303] usb 6-1: Manufacturer: syz
[  275.868737][ T6303] usb 6-1: SerialNumber: syz
[  275.883792][ T6303] usb 6-1: config 0 descriptor??
[  275.898604][ T6303] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  276.224479][ T9680] loop3: detected capacity change from 0 to 512
[  276.289890][ T9680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.337376][ T9680] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.515163][   T27] audit: type=1326 audit(1786053411.646:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.3.929" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb36b59e0d9 code=0x0
[  277.076047][ T9217] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.182656][ T6303] gspca_sonixj: reg_w1 err -71
[  277.242671][ T6303] sonixj: probe of 6-1:0.0 failed with error -71
[  277.270408][ T6303] usb 6-1: USB disconnect, device number 9
[  277.443611][    T9] usb 2-1: USB disconnect, device number 7
[  277.572855][ T6304] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  277.782581][ T6304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.810001][ T6304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.820513][ T9718] netlink: 'syz.3.937': attribute type 1 has an invalid length.
[  277.838841][ T6304] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  277.872684][ T6304] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  277.907506][ T6304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.951774][ T6304] usb 5-1: config 0 descriptor??
[  278.436725][ T6304] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  278.488965][ T6304] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  279.216515][ T9759] loop1: detected capacity change from 0 to 1024
[  279.297512][ T9759] hfsplus: bad catalog folder thread
[  279.726661][    C0] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -1
[  279.739348][ T5815] usb 5-1: USB disconnect, device number 6
[  279.758620][ T9774] loop1: detected capacity change from 0 to 16
[  279.812101][ T9774] erofs: (device loop1): mounted with root inode @ nid 36.
[  279.926730][   T27] audit: type=1800 audit(1786053415.056:40): pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.951" name="file1" dev="overlay" ino=86 res=0 errno=0
[  280.554424][ T9796] printk: console [ttyGS0] disabled
[  280.882436][ T5815] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  281.072855][ T5815] usb 4-1: Using ep0 maxpacket: 32
[  281.113307][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short
[  281.122792][ T5815] usb 4-1: config 8 has an invalid interface number: 94 but max is 0
[  281.162598][ T5815] usb 4-1: config 8 has no interface number 0
[  281.168781][ T5815] usb 4-1: config 8 interface 94 has no altsetting 0
[  281.197759][ T5815] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62
[  281.212393][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.220438][ T5815] usb 4-1: Product: syz
[  281.231070][ T5815] usb 4-1: Manufacturer: syz
[  281.236113][ T5815] usb 4-1: SerialNumber: syz
[  286.284409][ T5815] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  286.291691][ T5815] gspca_sn9c2028: read1 error -32
[  286.302866][ T5815] gspca_sn9c2028: read1 error -32
[  286.308736][ T5815] gspca_sn9c2028: read1 error -32
[  286.321167][ T5815] sn9c2028: probe of 4-1:8.94 failed with error -32
[  317.308183][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.315452][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  378.747626][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.754148][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  428.034703][   T29] INFO: task syz-executor:5762 blocked for more than 143 seconds.
[  428.042718][   T29]       Not tainted syzkaller #0
[  428.047714][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.058387][   T29] task:syz-executor    state:D stack:22728 pid:5762  ppid:5761   flags:0x00004002
[  428.067837][   T29] Call Trace:
[  428.071171][   T29]  <TASK>
[  428.074724][   T29]  __schedule+0x15ae/0x4660
[  428.079393][   T29]  ? mark_lock+0x94/0x320
[  428.086036][   T29]  ? asan.module_dtor+0x20/0x20
[  428.090952][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  428.096308][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  428.102407][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  428.112328][   T29]  schedule+0xbd/0x170
[  428.116455][   T29]  io_schedule+0x80/0xd0
[  428.120717][   T29]  bit_wait_io+0x11/0xd0
[  428.125319][   T29]  __wait_on_bit+0x9f/0x2c0
[  428.129888][   T29]  ? bit_wait+0xd0/0xd0
[  428.134217][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  428.139739][   T29]  ? bit_wait+0xd0/0xd0
[  428.144096][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  428.148915][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  428.155147][   T29]  ? bit_waitqueue+0x30/0x30
[  428.159817][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  428.165583][   T29]  do_get_write_access+0x5c9/0xe00
[  428.170756][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  428.176850][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  428.184093][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  428.190301][   T29]  ? __might_sleep+0xe0/0xe0
[  428.195959][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  428.201667][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  428.207937][   T29]  ext4_dirty_inode+0xcb/0x110
[  428.212808][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  428.218695][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  428.223857][   T29]  file_update_time+0x187/0x1a0
[  428.228778][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  428.233959][   T29]  ? do_wp_page+0x4ce/0x34d0
[  428.238600][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  428.245171][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  428.250246][   T29]  do_page_mkwrite+0x153/0x3f0
[  428.256217][   T29]  do_wp_page+0xd4d/0x34d0
[  428.260711][   T29]  ? folio_put+0xd0/0xd0
[  428.265124][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  428.270210][   T29]  ? __rwlock_init+0x150/0x150
[  428.275490][   T29]  handle_mm_fault+0x1306/0x4a50
[  428.280502][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  428.286883][   T29]  ? numa_migrate_prep+0x350/0x350
[  428.292165][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  428.297629][   T29]  do_user_addr_fault+0x736/0x12d0
[  428.303106][   T29]  exc_page_fault+0x64/0x100
[  428.307746][   T29]  ? clear_bhb_loop+0x40/0x90
[  428.312554][   T29]  asm_exc_page_fault+0x26/0x30
[  428.317467][   T29] RIP: 0033:0x7fb571c7c662
[  428.321934][   T29] RSP: 002b:00007ffff8564f00 EFLAGS: 00010202
[  428.328279][   T29] RAX: 00007fb56fa14000 RBX: 000055558abee1b0 RCX: 0000000000000005
[  428.336356][   T29] RDX: 000000000000279a RSI: 000055558abf3548 RDI: 0000000000000020
[  428.344675][   T29] RBP: 00007ffff8565400 R08: 000055558abf3588 R09: 0000000000000092
[  428.352970][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffff8565240
[  428.362900][   T29] R13: 00007ffff8565030 R14: 585858582e7a7973 R15: 00007ffff8564f80
[  428.370957][   T29]  </TASK>
[  428.374104][   T29] INFO: task syz.3.959:9798 blocked for more than 143 seconds.
[  428.381685][   T29]       Not tainted syzkaller #0
[  428.386734][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.395510][   T29] task:syz.3.959       state:D stack:27048 pid:9798  ppid:9217   flags:0x00004004
[  428.404867][   T29] Call Trace:
[  428.408203][   T29]  <TASK>
[  428.411184][   T29]  __schedule+0x15ae/0x4660
[  428.415817][   T29]  ? mark_lock+0x94/0x320
[  428.420200][   T29]  ? asan.module_dtor+0x20/0x20
[  428.430923][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  428.436092][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  428.442055][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  428.447463][   T29]  schedule+0xbd/0x170
[  428.451577][   T29]  io_schedule+0x80/0xd0
[  428.455954][   T29]  bit_wait_io+0x11/0xd0
[  428.461401][   T29]  __wait_on_bit+0x9f/0x2c0
[  428.466231][   T29]  ? bit_wait+0xd0/0xd0
[  428.470444][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  428.476069][   T29]  ? bit_wait+0xd0/0xd0
[  428.480303][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  428.485225][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  428.490299][   T29]  ? bit_waitqueue+0x30/0x30
[  428.496514][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  428.501743][   T29]  do_get_write_access+0x5c9/0xe00
[  428.507524][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  428.517032][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  428.524474][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  428.530692][   T29]  ? __might_sleep+0xe0/0xe0
[  428.536557][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  428.542209][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  428.548784][   T29]  ext4_dirty_inode+0xcb/0x110
[  428.553669][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  428.559538][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  428.565847][   T29]  file_update_time+0x187/0x1a0
[  428.570805][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  428.576182][   T29]  ? filemap_fault+0x103c/0x1540
[  428.581175][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  428.588166][   T29]  ? pte_alloc_one+0x3b6/0x540
[  428.593059][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  428.599365][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  428.604539][   T29]  do_page_mkwrite+0x153/0x3f0
[  428.609369][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  428.614413][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  428.619434][   T29]  ? numa_migrate_prep+0x350/0x350
[  428.624718][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  428.630060][   T29]  do_user_addr_fault+0x736/0x12d0
[  428.636468][   T29]  exc_page_fault+0x64/0x100
[  428.641136][   T29]  asm_exc_page_fault+0x26/0x30
[  428.647101][   T29] RIP: 0033:0x7fb36b472789
[  428.651569][   T29] RSP: 002b:00007fffe1c2db30 EFLAGS: 00010202
[  428.657830][   T29] RAX: 0000001b33e24000 RBX: 0000000000000000 RCX: 00000000005ffde8
[  428.667958][   T29] RDX: 0000001b33e23ffc RSI: 00000000005ffde8 RDI: 00007fb36c355700
[  428.676103][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fb36b812000
[  428.684368][   T29] R10: 00007fb36c355700 R11: 0000000000000000 R12: 0000000000000000
[  428.692454][   T29] R13: 0000000000017e12 R14: ffffffff813215fe R15: 00007fb36c355720
[  428.700471][   T29]  ? fpregs_activate+0x8e/0x1b0
[  428.705467][   T29]  </TASK>
[  428.708563][   T29] INFO: task syz.5.961:9806 blocked for more than 144 seconds.
[  428.716210][   T29]       Not tainted syzkaller #0
[  428.721197][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.729970][   T29] task:syz.5.961       state:D stack:27048 pid:9806  ppid:6567   flags:0x00004004
[  428.739293][   T29] Call Trace:
[  428.742900][   T29]  <TASK>
[  428.745920][   T29]  __schedule+0x15ae/0x4660
[  428.750507][   T29]  ? mark_lock+0x94/0x320
[  428.755035][   T29]  ? asan.module_dtor+0x20/0x20
[  428.759956][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  428.766297][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  428.772358][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  428.777623][   T29]  schedule+0xbd/0x170
[  428.781755][   T29]  io_schedule+0x80/0xd0
[  428.786195][   T29]  bit_wait_io+0x11/0xd0
[  428.790522][   T29]  __wait_on_bit+0x9f/0x2c0
[  428.795309][   T29]  ? bit_wait+0xd0/0xd0
[  428.799648][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  428.805230][   T29]  ? bit_wait+0xd0/0xd0
[  428.809428][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  428.814566][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  428.819659][   T29]  ? bit_waitqueue+0x30/0x30
[  428.824990][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  428.830256][   T29]  do_get_write_access+0x5c9/0xe00
[  428.836649][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  428.843101][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  428.849321][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  428.855758][   T29]  ? __might_sleep+0xe0/0xe0
[  428.860438][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  428.866278][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  428.873125][   T29]  ext4_dirty_inode+0xcb/0x110
[  428.877965][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  428.885081][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  428.890176][   T29]  file_update_time+0x187/0x1a0
[  428.895376][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  428.900456][   T29]  ? filemap_fault+0x103c/0x1540
[  428.906396][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  428.912348][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  428.918693][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  428.923870][   T29]  ? __pte_offset_map+0x20d/0x280
[  428.928954][   T29]  do_page_mkwrite+0x153/0x3f0
[  428.934149][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  428.939140][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  428.944519][   T29]  ? numa_migrate_prep+0x350/0x350
[  428.949776][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  428.955370][   T29]  do_user_addr_fault+0x736/0x12d0
[  428.960562][   T29]  exc_page_fault+0x64/0x100
[  428.965300][   T29]  asm_exc_page_fault+0x26/0x30
[  428.971307][   T29] RIP: 0033:0x7f7238272eb2
[  428.975870][   T29] RSP: 002b:00007ffee546cce0 EFLAGS: 00010202
[  428.981983][   T29] RAX: 000000000000e008 RBX: 00007f7239155720 RCX: 0000000000000000
[  428.990755][   T29] RDX: 0000001b2e316000 RSI: 0000000000000008 RDI: 00007f7239155720
[  428.998871][   T29] RBP: 0000000000000a14 R08: 00007f7238610000 R09: 00007f7238626038
[  429.008443][   T29] R10: 0000000000000007 R11: 0000000000000004 R12: ffffffff8a7d9227
[  429.016718][   T29] R13: 00007f7238626038 R14: 0000000000000071 R15: ffffffffffff2000
[  429.024874][   T29]  ? string+0x257/0x290
[  429.029104][   T29]  </TASK>
[  429.032181][   T29] INFO: task syz.4.963:9816 blocked for more than 144 seconds.
[  429.039804][   T29]       Not tainted syzkaller #0
[  429.044834][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  429.053663][   T29] task:syz.4.963       state:D stack:26728 pid:9816  ppid:8328   flags:0x00004004
[  429.063331][   T29] Call Trace:
[  429.066653][   T29]  <TASK>
[  429.069614][   T29]  __schedule+0x15ae/0x4660
[  429.077045][   T29]  ? mark_lock+0x94/0x320
[  429.081436][   T29]  ? asan.module_dtor+0x20/0x20
[  429.086403][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  429.091499][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  429.098544][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  429.103908][   T29]  schedule+0xbd/0x170
[  429.108036][   T29]  io_schedule+0x80/0xd0
[  429.112412][   T29]  bit_wait_io+0x11/0xd0
[  429.116806][   T29]  __wait_on_bit+0x9f/0x2c0
[  429.121366][   T29]  ? bit_wait+0xd0/0xd0
[  429.125866][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  429.131373][   T29]  ? bit_wait+0xd0/0xd0
[  429.135618][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  429.140463][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  429.145691][   T29]  ? bit_waitqueue+0x30/0x30
[  429.150447][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  429.155792][   T29]  do_get_write_access+0x5c9/0xe00
[  429.160968][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  429.167082][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  429.173345][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  429.180978][   T29]  ? __might_sleep+0xe0/0xe0
[  429.188546][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  429.194224][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  429.199811][   T29]  ext4_dirty_inode+0xcb/0x110
[  429.204870][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  429.210735][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  429.215883][   T29]  file_update_time+0x187/0x1a0
[  429.220804][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  429.226255][   T29]  ? filemap_fault+0x103c/0x1540
[  429.231269][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  429.241188][   T29]  ? pte_alloc_one+0x3b6/0x540
[  429.246114][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  429.252646][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  429.257735][   T29]  do_page_mkwrite+0x153/0x3f0
[  429.262673][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  429.267669][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  429.272954][   T29]  ? numa_migrate_prep+0x350/0x350
[  429.278859][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  429.284314][   T29]  do_user_addr_fault+0x736/0x12d0
[  429.289503][   T29]  exc_page_fault+0x64/0x100
[  429.294396][   T29]  asm_exc_page_fault+0x26/0x30
[  429.299328][   T29] RIP: 0033:0x7f71f3272789
[  429.303972][   T29] RSP: 002b:00007ffca9c59010 EFLAGS: 00010202
[  429.310089][   T29] RAX: 0000001b2d424000 RBX: 0000000000000000 RCX: 00000000005ffde8
[  429.318522][   T29] RDX: 0000001b2d423ffc RSI: 00000000005ffde8 RDI: 00007f71f4155700
[  429.326798][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f71f3612000
[  429.335061][   T29] R10: 00007f71f4155700 R11: 0000000000000000 R12: 0000000000000000
[  429.343340][   T29] R13: 00000000000012a3 R14: ffffffff81321540 R15: 00007f71f4155720
[  429.351372][   T29]  ? fpregs_assert_state_consistent+0xb0/0xe0
[  429.358613][   T29]  </TASK>
[  429.361750][   T29] INFO: task syz.1.964:9818 blocked for more than 144 seconds.
[  429.369639][   T29]       Not tainted syzkaller #0
[  429.375075][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  429.385410][   T29] task:syz.1.964       state:D stack:27560 pid:9818  ppid:8289   flags:0x00004004
[  429.395998][   T29] Call Trace:
[  429.399330][   T29]  <TASK>
[  429.402466][   T29]  __schedule+0x15ae/0x4660
[  429.407484][   T29]  ? mark_lock+0x94/0x320
[  429.411862][   T29]  ? asan.module_dtor+0x20/0x20
[  429.416898][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  429.421986][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  429.427998][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  429.433342][   T29]  schedule+0xbd/0x170
[  429.437471][   T29]  io_schedule+0x80/0xd0
[  429.441761][   T29]  bit_wait_io+0x11/0xd0
[  429.447071][   T29]  __wait_on_bit+0x9f/0x2c0
[  429.451643][   T29]  ? bit_wait+0xd0/0xd0
[  429.457390][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  429.468577][   T29]  ? bit_wait+0xd0/0xd0
[  429.472894][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  429.478814][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  429.488301][   T29]  ? bit_waitqueue+0x30/0x30
[  429.493233][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  429.498459][   T29]  do_get_write_access+0x5c9/0xe00
[  429.505051][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  429.511115][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  429.517582][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  429.523902][   T29]  ? __might_sleep+0xe0/0xe0
[  429.528561][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  429.534240][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  429.539782][   T29]  ext4_dirty_inode+0xcb/0x110
[  429.545087][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  429.550963][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  429.556188][   T29]  file_update_time+0x187/0x1a0
[  429.561105][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  429.569829][   T29]  ? filemap_fault+0x103c/0x1540
[  429.576586][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  429.586541][   T29]  ? pte_alloc_one+0x3b6/0x540
[  429.591369][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  429.597878][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  429.603376][   T29]  do_page_mkwrite+0x153/0x3f0
[  429.608206][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  429.613539][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  429.618547][   T29]  ? numa_migrate_prep+0x350/0x350
[  429.624981][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  429.630348][   T29]  do_user_addr_fault+0x736/0x12d0
[  429.635854][   T29]  exc_page_fault+0x64/0x100
[  429.640512][   T29]  ? clear_bhb_loop+0x40/0x90
[  429.645539][   T29]  asm_exc_page_fault+0x26/0x30
[  429.650437][   T29] RIP: 0033:0x7f13d106ba23
[  429.655106][   T29] RSP: 002b:00007ffe4131a190 EFLAGS: 00010246
[  429.661211][   T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b32364000
[  429.669336][   T29] RDX: 0000001b32324000 RSI: 0000000000600000 RDI: 00007f13d13e0708
[  429.677490][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  429.689363][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  429.699325][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe4131a420
[  429.707613][   T29]  </TASK>
[  429.710706][   T29] 
[  429.710706][   T29] Showing all locks held in the system:
[  429.718695][   T29] 1 lock held by khungtaskd/29:
[  429.724005][   T29]  #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  429.734193][   T29] 2 locks held by getty/5529:
[  429.738898][   T29]  #0: ffff88802d6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  429.749044][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  429.759452][   T29] 3 locks held by syz-executor/5762:
[  429.765000][   T29]  #0: ffff88802e8f4da0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  429.775267][   T29]  #1: ffff88814df26510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  429.785646][   T29]  #2: ffff88814df32990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  429.799997][   T29] 2 locks held by kworker/u4:13/8920:
[  429.806637][   T29] 4 locks held by kworker/u4:16/8923:
[  429.812065][   T29]  #0: ffff88814167a138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  429.823831][   T29]  #1: ffffc900051e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  429.836624][   T29]  #2: ffff88814df260e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[  429.847465][   T29]  #3: ffff88814df30c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  429.858258][   T29] 3 locks held by syz.3.959/9798:
[  429.863569][   T29]  #0: ffff88802ee20b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  429.873769][   T29]  #1: ffff88814df26510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  429.883685][   T29]  #2: ffff88814df32990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  429.894216][   T29] 3 locks held by syz.5.961/9806:
[  429.899299][   T29]  #0: ffff88802ee24420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  429.909475][   T29]  #1: ffff88814df26510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  429.920719][   T29]  #2: ffff88814df32990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  429.930865][   T29] 3 locks held by syz.4.963/9816:
[  429.936129][   T29]  #0: ffff88802ee214a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  429.951463][   T29]  #1: ffff88814df26510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  429.963411][   T29]  #2: ffff88814df32990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  429.974349][   T29] 3 locks held by syz.1.964/9818:
[  429.979470][   T29]  #0: ffff88802ee23aa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  429.989509][   T29]  #1: ffff88814df26510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  430.001035][   T29]  #2: ffff88814df32990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  430.011010][   T29] 
[  430.013681][   T29] =============================================
[  430.013681][   T29] 
[  430.022132][   T29] NMI backtrace for cpu 1
[  430.026492][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  430.033727][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  430.043893][   T29] Call Trace:
[  430.047185][   T29]  <TASK>
[  430.050142][   T29]  dump_stack_lvl+0x18c/0x250
[  430.054834][   T29]  ? __wake_up_klogd+0xd9/0x100
[  430.059703][   T29]  ? show_regs_print_info+0x20/0x20
[  430.064920][   T29]  ? load_image+0x420/0x420
[  430.069449][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  430.074422][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  430.080677][   T29]  ? load_image+0x420/0x420
[  430.085223][   T29]  ? wq_watchdog_touch+0xef/0x170
[  430.090285][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  430.096393][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  430.102423][   T29]  watchdog+0xf59/0xfa0
[  430.106626][   T29]  ? watchdog+0x1e1/0xfa0
[  430.111000][   T29]  kthread+0x2fa/0x390
[  430.115101][   T29]  ? hungtask_pm_notify+0x50/0x50
[  430.120158][   T29]  ? kthread_blkcg+0xd0/0xd0
[  430.124790][   T29]  ret_from_fork+0x48/0x80
[  430.129236][   T29]  ? kthread_blkcg+0xd0/0xd0
[  430.133853][   T29]  ret_from_fork_asm+0x11/0x20
[  430.138669][   T29]  </TASK>
[  430.143227][   T29] Sending NMI from CPU 1 to CPUs 0:
[  430.148508][    C0] NMI backtrace for cpu 0
[  430.148518][    C0] CPU: 0 PID: 3428 Comm: kworker/u4:8 Not tainted syzkaller #0
[  430.148534][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  430.148544][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  430.148566][    C0] RIP: 0010:kmem_cache_alloc_node+0x27e/0x310
[  430.148594][    C0] Code: 24 08 48 89 da 4c 89 f9 45 89 f0 41 89 e9 e8 b9 08 e6 ff 65 ff 0d fa 98 24 7e 0f 85 46 ff ff ff e8 d7 7d 21 ff e9 3c ff ff ff <83> 3d 7b c5 43 0b 00 0f 85 e8 fd ff ff 4c 89 e7 4c 89 ee 44 89 f2
[  430.148608][    C0] RSP: 0018:ffffc9000c917a58 EFLAGS: 00000282
[  430.148620][    C0] RAX: ffff888141a4c640 RBX: 0000000000000000 RCX: 0000000000000000
[  430.148631][    C0] RDX: 0000000000000000 RSI: 00000000000000f0 RDI: ffffffff8d2300a0
[  430.148641][    C0] RBP: 00000000ffffffff R08: 0000000000000820 R09: 1ffffffff223d6bd
[  430.148653][    C0] R10: dffffc0000000000 R11: fffffbfff223d6be R12: ffff888141a4c640
[  430.148665][    C0] R13: 00000000000000f0 R14: 0000000000000820 R15: ffff888141a4c640
[  430.148675][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  430.148689][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  430.148699][    C0] CR2: 000056510cb11660 CR3: 000000000cf32000 CR4: 00000000003506f0
[  430.148714][    C0] Call Trace:
[  430.148719][    C0]  <TASK>
[  430.148725][    C0]  ? __alloc_skb+0x103/0x2c0
[  430.148745][    C0]  __alloc_skb+0x103/0x2c0
[  430.148763][    C0]  nsim_dev_trap_report_work+0x253/0xa90
[  430.148786][    C0]  ? process_scheduled_works+0x975/0x1600
[  430.148809][    C0]  process_scheduled_works+0xa60/0x1600
[  430.148844][    C0]  ? worker_attach_to_pool+0x370/0x370
[  430.148868][    C0]  ? assign_work+0x3cc/0x5d0
[  430.148891][    C0]  worker_thread+0xa5e/0xfe0
[  430.148924][    C0]  kthread+0x2fa/0x390
[  430.148939][    C0]  ? pr_cont_work+0x550/0x550
[  430.148959][    C0]  ? kthread_blkcg+0xd0/0xd0
[  430.148975][    C0]  ret_from_fork+0x48/0x80
[  430.148994][    C0]  ? kthread_blkcg+0xd0/0xd0
[  430.149010][    C0]  ret_from_fork_asm+0x11/0x20
[  430.149039][    C0]  </TASK>
[  430.172864][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  430.172907][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  430.172960][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  430.172999][   T29] Call Trace:
[  430.173022][   T29]  <TASK>
[  430.173044][   T29]  dump_stack_lvl+0x18c/0x250
[  430.173121][   T29]  ? show_regs_print_info+0x20/0x20
[  430.173189][   T29]  ? load_image+0x420/0x420
[  430.173305][   T29]  panic+0x2ca/0x720
[  430.173390][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  430.173465][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  430.173539][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  430.173624][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  430.173719][   T29]  watchdog+0xf98/0xfa0
[  430.173800][   T29]  ? watchdog+0x1e1/0xfa0
[  430.173883][   T29]  kthread+0x2fa/0x390
[  430.173946][   T29]  ? hungtask_pm_notify+0x50/0x50
[  430.174031][   T29]  ? kthread_blkcg+0xd0/0xd0
[  430.174090][   T29]  ret_from_fork+0x48/0x80
[  430.174123][   T29]  ? kthread_blkcg+0xd0/0xd0
[  430.174170][   T29]  ret_from_fork_asm+0x11/0x20
[  430.174295][   T29]  </TASK>
[  430.463203][   T29] Kernel Offset: disabled
[  430.467540][   T29] Rebooting in 86400 seconds..