last executing test programs:

34.375388961s ago: executing program 1 (id=79):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

33.741979782s ago: executing program 1 (id=82):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

33.377907319s ago: executing program 1 (id=86):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c01d}, 0x20000000)

33.02797666s ago: executing program 1 (id=89):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x4, 0x2, 0xffff, 0x6, 0x1, 0xfffffffffffffffd, 0x0, 0x36a, 0xde4})

31.574632083s ago: executing program 1 (id=92):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0x9676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020)

30.456051207s ago: executing program 1 (id=98):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

21.084732931s ago: executing program 2 (id=141):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x88, 0x3, @private=0xa010102, @multicast1}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x1f, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)

20.704084058s ago: executing program 2 (id=143):
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd000, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r1 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x56, 0x4e24, 0x0, 0xa, 0x80}, {0x0, 0xf5, 0x0, 0x10, 0xfffffffffffffffe, 0x2000000, 0x2}, {0x9, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x4, 0x3, 0x3}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

19.327092258s ago: executing program 2 (id=147):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(r1, r1, 0x0)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)

18.738412876s ago: executing program 2 (id=149):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth0_to_bridge\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x2, 0x0, 0x12}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "d55ff1", 0x3f, 0x6, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, {[@hopopts={0x5e, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0x2, [0x9]}}]}], @payload_conn={{{0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2, 0x5, 0x0, 0x3, 0x4, 0x4, 0x0, 0x3, 0x7, 0x3, 0x4e23, 0x4e24}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x75)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', r4, 0x29, 0x40, 0x3, 0xffffffff, 0x0, @local, @local, 0x10, 0x40, 0x7f, 0xe}})
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x1)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac14"], 0x78}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r7 = open(0x0, 0x343480, 0x8)
r8 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback=r5, 0xffffffffffffffff, 0x13, 0x0, 0x0, @void, @value=r7}, 0x20)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

17.863016466s ago: executing program 2 (id=153):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0x9676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020)

16.884071886s ago: executing program 2 (id=158):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r1, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/168, 0xa8}], 0x1)

16.009702595s ago: executing program 4 (id=160):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240))
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2)

14.679258342s ago: executing program 32 (id=98):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

10.892003076s ago: executing program 0 (id=174):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340), 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x2004001)
io_setup(0xff, &(0x7f0000000380))
socket$can_j1939(0x1d, 0x2, 0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x8, 0x0})
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001008000140000000020900010073797a30000000000900020073797a32000000001400000011000100"/119], 0x78}}, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

9.918201511s ago: executing program 4 (id=176):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x82002, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

9.192045462s ago: executing program 3 (id=177):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x4)

8.777709526s ago: executing program 0 (id=178):
r0 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004240200090581031000000000090582"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002020000402505a1a4400001020301090241000101fb00060904000903020600010b24060000612852ea98e6b52691ee000d240f0110000000070004"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0)

8.731927642s ago: executing program 3 (id=179):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x2000c449, &(0x7f0000b63fe4)={0xa, 0x2, 0x10000, @empty}, 0x1c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x83, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x6, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0xf9, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x5, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

7.226378711s ago: executing program 3 (id=182):
unshare(0x22020600)
r0 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r0, 0x0)

6.875450355s ago: executing program 3 (id=184):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000240)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5e0b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31ee56a4bc5fdcd2dad721eb3b32dcc92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd970140400000000000000", @ANYRES32], 0x1, 0x5558, &(0x7f0000000a00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

6.624567899s ago: executing program 5 (id=185):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080))
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1001}], 0x2)

5.95192567s ago: executing program 5 (id=186):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x400, 0x3, 0x4}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

5.599034033s ago: executing program 4 (id=187):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240))
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2)

5.181110419s ago: executing program 5 (id=188):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r1], 0x54}}, 0x0)

4.119910145s ago: executing program 0 (id=189):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r5, 0x2000009)
sendfile(r4, r5, 0x0, 0x7ffff004)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

3.214992117s ago: executing program 4 (id=190):
ioperm(0x0, 0x82, 0x1f)
futex(&(0x7f0000000100)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1)

3.096031433s ago: executing program 3 (id=191):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x4)

2.984691742s ago: executing program 0 (id=192):
close(0xffffffffffffffff)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f0000005d80)=ANY=[@ANYBLOB='iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d63703933322c666d61736b3d30303030303030303030303030303030303030303030342c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d72656d6f756e742d726f2c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303030332c756d61736b3d30303030303030303030303030303030303030303030302c636f6465706167653d63703933322c0087c36ada509ad1217819ccb05e2c31c700a774505074a59028e5cccdd3"], 0x9, 0x1505, &(0x7f0000000180)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
open(&(0x7f0000000300)='./file2\x00', 0x62b000, 0x40)

2.616225352s ago: executing program 0 (id=193):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x2000c449, &(0x7f0000b63fe4)={0xa, 0x2, 0x10000, @empty}, 0x1c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x83, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x6, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0xf9, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x5, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.225021949s ago: executing program 3 (id=194):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

2.115506772s ago: executing program 4 (id=195):
socket$packet(0x11, 0x3, 0x300)
syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a7000000200000109022400010000000009040000010300000009210000000122050009"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
setns(0xffffffffffffffff, 0x8020000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x20000000000, 0x822b01)
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000805, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newchain={0x438, 0x64, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffff}, {0xa, 0x7}, {0xfff3, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40c, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xc, 0xb29, 0x2, 0x2, 0x4, 0x35a7, 0x8, 0x80, 0x6, 0xd6a8, 0x13, 0x6, 0xc8, 0x7f, 0xfff, 0x494, 0x2, 0x7, 0x2, 0x8000, 0xcab, 0x9, 0x40, 0x8, 0x81, 0x8, 0xed1b, 0x7ff, 0x20004a, 0x3, 0x0, 0x4cbd3472, 0x2f9, 0x5, 0x6, 0x5, 0x1, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x5, 0xfc, 0x8, 0x5, 0x80000000, 0x1000, 0x2, 0x4, 0x9, 0x3, 0x10, 0x8, 0x0, 0x6, 0xb, 0xa56a, 0x5, 0x3, 0x1, 0xffff32de, 0x6, 0x8, 0x2, 0x7f, 0x8001, 0xfbe, 0x80, 0x4, 0x2, 0x200, 0x8, 0x4, 0x539d, 0xa, 0x3, 0x7, 0x7, 0x4, 0x4, 0xfffffff9, 0x10001, 0x0, 0x6, 0x37a4, 0x7e9d, 0x0, 0x1, 0xf2c, 0x80000001, 0x7fff, 0x4, 0xfd, 0x7fff, 0x9, 0x4, 0x9, 0x8, 0x8, 0x0, 0x0, 0x9, 0x5, 0x532, 0x5, 0xa9, 0x9, 0x3, 0x8, 0x7, 0x7, 0x6, 0x9, 0x82, 0x1000, 0xaa9, 0x5, 0x4, 0xffffffff, 0x8, 0x4, 0x4, 0x3, 0x6, 0x6, 0xffffff81, 0x10001, 0x7ff, 0x7, 0x3, 0x0, 0x4, 0xfffffffc, 0x0, 0x6, 0x7fff, 0xd7, 0x89000000, 0x4, 0x1, 0xfffffff8, 0x6, 0x7fffffff, 0x9, 0x2, 0x8000, 0xffff, 0x5, 0x9ca, 0x7, 0x7fffffff, 0x8, 0x7, 0x587, 0x10001, 0x9, 0x6, 0x81, 0x6, 0x8, 0x442, 0xfffffffc, 0x10000, 0x9, 0x8e, 0x3, 0x200, 0x1160, 0x0, 0x1, 0x5, 0xddb, 0x80000000, 0x1, 0x6, 0x8017, 0x2, 0x9, 0x4, 0xffffffff, 0x0, 0x3ff, 0x5, 0x6, 0x7, 0x0, 0x1c, 0x1, 0xffffff1a, 0xb, 0x6b56ba75, 0x80, 0x3, 0x658, 0x4, 0x9d8c, 0x7, 0x7, 0x5, 0xc6, 0x100, 0x8, 0x5, 0x1, 0x7, 0xfffffff7, 0xb, 0x1, 0x2, 0x4, 0x8001, 0x7f, 0x2, 0x3, 0x80, 0x4, 0x0, 0x8, 0x6, 0x400, 0xfffffffc, 0x8, 0x0, 0xbfd1, 0xfffffff2, 0x0, 0x1ff, 0x4, 0x0, 0x5, 0x3ff, 0xffffffff, 0x2, 0x9, 0x95, 0x4, 0x6, 0x8, 0x7, 0x4, 0x8, 0x401, 0x2, 0x80, 0x7f, 0x1, 0x3, 0x8, 0xd, 0x6, 0x0, 0x7, 0x9]}]}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x3b)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="080003"], 0x2c}}, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x100004, @remote, 0x9}, 0x1c)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x1c, 0x140f, 0x1, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000)
getsockopt$inet_int(r3, 0x0, 0x12, 0x0, 0x0)

1.623992968s ago: executing program 33 (id=158):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r1, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/168, 0xa8}], 0x1)

525.280629ms ago: executing program 5 (id=197):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080))
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1001}], 0x2)

410.760695ms ago: executing program 5 (id=198):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00d0867e65d443152ee691a70d225b73c01164645c70ff689f607da7a169dbbfebbeb349b043f54d088bcd11a44f2074aa41532279b5718bc4d89fe5010d6bf465008743337cddaefbc0f0293d06483bec82e15366358709c5d5c0049ff9dcb7ea7e855e3c24bc3b4173720476fb379ce25c0ea42027ba6a7d"], 0x1, 0x134, &(0x7f0000000940)="$eJzs2r9Kw1AUBvCjFoQ+glMhAauQ/1oHd0Fw8gkMbZJevPGWRJB2Kr6A4nAdHV3dRDcfIbNPoC9xJW1qbe5uC/1+yz30XL7eLGc6ViZSL84tor3xw/nXZibSVic46sZeHNLUKRG1yqJQ6tEmzcVvv1BjW7tgvFdnO5FnbzHjka9nAAAAAAAAAAAAAAAAAAAAAACsCeO7Kpp9KZ5jxiPvTzcfji5DzqMsn/1iUrWjQ/tP4ri8HyzktRtE5mR/h8mT27LvLvTNWdJuX4qN+v851+nAyYcji6VhEiXRle8HHffAdQ99Z5Ll1BPN++pNVKjXgb5PZL7M94k+XX2fiJrTo7HD5N1NPX3+/SjWrFBbK/EMFKtZ1OcH9bYD46OcH3ZX8N4/zg9togEsyU8AAAD//wxqOHo=")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r1, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)

339.719183ms ago: executing program 4 (id=199):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)

68.156423ms ago: executing program 0 (id=200):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd687fefc0000c11"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f00000000000000000000000000000800"], 0xb4}}, 0x0)

0s ago: executing program 5 (id=201):
syslog(0x2, &(0x7f0000001100)=""/4086, 0xff6)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0)
pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']})
ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x20, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
getpid()
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x105d, [{}, {0x0, 0x10000000000000}]}, 0xc9)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\n'], 0x0, 0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

 from eth2
[  109.357015][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  109.483194][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  109.500501][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  109.513852][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  109.528536][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  109.647357][ T5837] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  109.659609][ T5837] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  109.679890][ T5837] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  109.694108][ T5837] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  109.815892][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  109.828654][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  109.860618][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  109.875284][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  110.018222][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  110.033585][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  110.077789][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  110.117735][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  110.148753][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.222502][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.265620][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  110.297461][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  110.309175][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  110.324425][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[  110.346853][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.377185][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[  110.412599][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.419831][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.432227][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.439543][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.450093][ T5857] Bluetooth: hci0: command tx timeout
[  110.492993][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.500285][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.512764][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.520019][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.527552][ T5844] Bluetooth: hci5: command tx timeout
[  110.528143][ T5852] Bluetooth: hci2: command tx timeout
[  110.533352][ T5839] Bluetooth: hci4: command tx timeout
[  110.539210][ T5851] Bluetooth: hci1: command tx timeout
[  110.544232][ T5857] Bluetooth: hci3: command tx timeout
[  110.603125][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.677920][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.779631][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[  110.848947][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.856180][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.896087][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.903346][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.974029][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[  111.006628][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.013872][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.105554][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.112785][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.209124][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.279660][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.317765][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.421134][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[  111.516746][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.526700][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.533921][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.552816][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.560036][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.705900][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.785897][ T5841] veth0_vlan: entered promiscuous mode
[  111.884349][ T5841] veth1_vlan: entered promiscuous mode
[  111.925472][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[  112.034306][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.041578][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.093510][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.100768][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.244633][ T5841] veth0_macvtap: entered promiscuous mode
[  112.318660][ T5841] veth1_macvtap: entered promiscuous mode
[  112.366036][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.459302][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.486677][ T5845] veth0_vlan: entered promiscuous mode
[  112.517074][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.524589][ T5857] Bluetooth: hci0: command tx timeout
[  112.584598][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.600630][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.600691][ T5857] Bluetooth: hci1: command tx timeout
[  112.609382][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.614953][ T5857] Bluetooth: hci2: command tx timeout
[  112.627328][ T5839] Bluetooth: hci3: command tx timeout
[  112.629036][ T5851] Bluetooth: hci4: command tx timeout
[  112.634474][ T5839] Bluetooth: hci5: command tx timeout
[  112.652855][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.691069][ T5845] veth1_vlan: entered promiscuous mode
[  112.739024][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.798706][ T5836] veth0_vlan: entered promiscuous mode
[  112.907839][ T5837] veth0_vlan: entered promiscuous mode
[  112.922562][ T5845] veth0_macvtap: entered promiscuous mode
[  112.958508][ T5837] veth1_vlan: entered promiscuous mode
[  112.968923][ T5845] veth1_macvtap: entered promiscuous mode
[  113.029264][ T5836] veth1_vlan: entered promiscuous mode
[  113.039526][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.053200][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.073218][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.084417][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.097417][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.143874][ T5848] veth0_vlan: entered promiscuous mode
[  113.153949][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.165085][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.178021][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.190086][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.228379][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.238599][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.249511][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.258688][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.274879][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.284866][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.291799][ T5848] veth1_vlan: entered promiscuous mode
[  113.338543][ T5837] veth0_macvtap: entered promiscuous mode
[  113.382850][ T5837] veth1_macvtap: entered promiscuous mode
[  113.464315][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  113.473188][ T5848] veth0_macvtap: entered promiscuous mode
[  113.496803][ T5836] veth0_macvtap: entered promiscuous mode
[  113.529498][ T5848] veth1_macvtap: entered promiscuous mode
[  113.551095][ T5836] veth1_macvtap: entered promiscuous mode
[  113.636514][ T5944] loop2: detected capacity change from 0 to 64
[  113.665404][ T5838] veth0_vlan: entered promiscuous mode
[  113.697229][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.716655][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.727892][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.754485][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.767830][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.787078][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.805509][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.823015][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.835036][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.844951][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.856798][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.873084][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.890068][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.897995][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.917706][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.930633][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.960074][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.979785][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.992529][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.029477][ T5838] veth1_vlan: entered promiscuous mode
[  114.035424][ T5946] bpf: Bad value for 'uid'
[  114.039022][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.059519][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.070635][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.082899][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.098591][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.109840][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.123084][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.133964][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.145989][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.158078][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.172263][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.182580][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.197730][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.215288][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.227239][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.244951][ T5948] loop2: detected capacity change from 0 to 4096
[  114.247561][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.314467][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.326745][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.337724][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.348740][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.360145][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.376163][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.387461][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.399070][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.413643][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.437844][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.447861][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.457931][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.466804][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.487758][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.503867][ T5837] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.513548][ T5837] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.514050][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.523677][ T5837] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.554000][ T5837] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.652941][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.667825][ T5950] loop2: detected capacity change from 0 to 16
[  114.670767][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.687884][ T5950] erofs (device loop2): mounted with root inode @ nid 36.
[  114.699285][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.714614][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.849459][ T5838] veth0_macvtap: entered promiscuous mode
[  114.984084][ T5838] veth1_macvtap: entered promiscuous mode
[  115.132245][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.140752][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.239426][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.259572][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.260920][ T5956] loop2: detected capacity change from 0 to 512
[  115.269806][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.293164][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.310293][ T5956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  115.329327][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.340623][ T5956] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  115.350923][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.366769][ T5956] EXT4-fs (loop2): 1 truncate cleaned up
[  115.367708][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.375510][ T5956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.388572][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.416216][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.427912][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.439819][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.478281][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.539221][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.557531][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.580569][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.597749][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.607947][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.630801][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.650040][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.692261][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.716836][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.728239][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.745092][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.778697][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.794288][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.844464][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.854658][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.864793][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.873647][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.906233][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.922619][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.950880][ T5935] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  115.966601][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.995077][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.069761][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.091018][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.130711][ T5935] usb 5-1: Using ep0 maxpacket: 32
[  116.159665][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.218956][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.261453][ T3515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.302957][ T5935] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  116.328944][ T3515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.380343][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.479051][ T5935] usb 5-1: config 0 descriptor??
[  116.486735][ T5965] loop2: detected capacity change from 0 to 40427
[  116.496709][ T5965] =======================================================
[  116.496709][ T5965] WARNING: The mand mount option has been deprecated and
[  116.496709][ T5965]          and is ignored by this kernel. Remove the mand
[  116.496709][ T5965]          option from the mount to silence this warning.
[  116.496709][ T5965] =======================================================
[  116.541042][ T5965] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  116.549178][ T5965] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  116.587588][ T5965] F2FS-fs (loop2): invalid crc value
[  116.730324][ T5965] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  116.737568][ T5965] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  116.755541][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.796239][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.969366][ T5935] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  117.027525][ T5935] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  117.054945][ T5935] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  117.062212][ T5935] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  117.065302][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.069045][ T5935] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  117.086106][ T5935] savu 0003:1E7D:2D5A.0001: unbalanced collection at end of report description
[  117.096277][ T5935] savu 0003:1E7D:2D5A.0001: parse failed
[  117.103675][ T5935] savu 0003:1E7D:2D5A.0001: probe with driver savu failed with error -22
[  117.148036][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.195265][ T5935] usb 5-1: USB disconnect, device number 2
[  118.115422][ T5988] loop3: detected capacity change from 0 to 40427
[  118.134501][ T5988] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3fffff
[  118.143571][ T5988] F2FS-fs (loop3): Image doesn't support compression
[  118.150766][ T5988] F2FS-fs (loop3): Image doesn't support compression
[  118.180670][ T5988] F2FS-fs (loop3): invalid crc value
[  118.277695][ T5988] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  118.360674][  T972] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  118.515462][ T5838] syz-executor: attempt to access beyond end of device
[  118.515462][ T5838] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  118.554582][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) 
[  118.554634][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  118.554654][ T5838] Call Trace:
[  118.554666][ T5838]  <TASK>
[  118.554679][ T5838]  dump_stack_lvl+0x16c/0x1f0
[  118.554733][ T5838]  f2fs_handle_critical_error+0x621/0x9f0
[  118.554783][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.554825][ T5838]  ? __asan_memset+0x23/0x50
[  118.554874][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.554931][ T5838]  f2fs_write_end_io+0x73d/0xac0
[  118.554989][ T5838]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  118.555050][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.555106][ T5838]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  118.555159][ T5838]  bio_endio+0x6d2/0x810
[  118.555217][ T5838]  submit_bio_noacct+0x56d/0x1ec0
[  118.555273][ T5838]  __submit_merged_bio+0x33c/0x770
[  118.555334][ T5838]  __submit_merged_write_cond+0x319/0x3f0
[  118.555402][ T5838]  f2fs_write_cache_pages+0x2139/0x2680
[  118.555496][ T5838]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  118.555554][ T5838]  ? lock_acquire+0x179/0x350
[  118.555598][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.555640][ T5838]  ? lock_acquire+0x179/0x350
[  118.555674][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.555716][ T5838]  ? find_held_lock+0x2b/0x80
[  118.555766][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.555833][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.555875][ T5838]  ? __lock_acquire+0xaa4/0x1ba0
[  118.555932][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.555974][ T5838]  ? do_raw_spin_lock+0x12c/0x2b0
[  118.556073][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.556125][ T5838]  f2fs_write_data_pages+0x4ad/0xd90
[  118.556198][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  118.556261][ T5838]  ? check_path.constprop.0+0x24/0x50
[  118.556334][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.556378][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  118.556442][ T5838]  do_writepages+0x1b5/0x820
[  118.556507][ T5838]  ? __pfx_do_writepages+0x10/0x10
[  118.556561][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.556606][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.556648][ T5838]  ? do_raw_spin_lock+0x12c/0x2b0
[  118.556687][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.556729][ T5838]  ? find_held_lock+0x2b/0x80
[  118.556778][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.556826][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.556868][ T5838]  ? do_raw_spin_unlock+0x172/0x230
[  118.556910][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.556963][ T5838]  filemap_fdatawrite_wbc+0x104/0x160
[  118.557022][ T5838]  __filemap_fdatawrite_range+0xb2/0xf0
[  118.557062][ T5838]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  118.557100][ T5838]  ? check_path.constprop.0+0x24/0x50
[  118.557219][ T5838]  ? find_held_lock+0x2b/0x80
[  118.557272][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.557316][ T5838]  ? do_raw_spin_unlock+0x172/0x230
[  118.557358][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.557409][ T5838]  f2fs_sync_dirty_inodes+0x2a9/0x990
[  118.557472][ T5838]  block_operations+0x2a3/0xfd0
[  118.557523][ T5838]  ? __pfx_block_operations+0x10/0x10
[  118.557628][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.557670][ T5838]  ? down_write+0x14d/0x200
[  118.557723][ T5838]  ? __pfx_down_write+0x10/0x10
[  118.557779][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.557822][ T5838]  ? rcu_is_watching+0x12/0xc0
[  118.557875][ T5838]  f2fs_write_checkpoint+0x2b8/0x45b0
[  118.557929][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.557972][ T5838]  ? rcu_is_watching+0x12/0xc0
[  118.558016][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.558058][ T5838]  ? kthread_stop+0x273/0x650
[  118.558101][ T5838]  kill_f2fs_super+0x3c2/0x470
[  118.558141][ T5838]  ? __pfx_kill_f2fs_super+0x10/0x10
[  118.558177][ T5838]  ? lockdep_hardirqs_on+0x7c/0x110
[  118.558254][ T5838]  deactivate_locked_super+0xc1/0x1a0
[  118.558307][ T5838]  deactivate_super+0xde/0x100
[  118.558359][ T5838]  cleanup_mnt+0x225/0x450
[  118.558415][ T5838]  task_work_run+0x150/0x240
[  118.558461][ T5838]  ? __pfx_task_work_run+0x10/0x10
[  118.558500][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.558546][ T5838]  ? __pfx___x64_sys_umount+0x10/0x10
[  118.558615][ T5838]  syscall_exit_to_user_mode+0x27b/0x2a0
[  118.558667][ T5838]  do_syscall_64+0xda/0x260
[  118.558722][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.558758][ T5838] RIP: 0033:0x7f376878e497
[  118.558786][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  118.558820][ T5838] RSP: 002b:00007ffd9d469bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  118.558853][ T5838] RAX: 0000000000000000 RBX: 00007f376880e08c RCX: 00007f376878e497
[  118.558876][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9d469c80
[  118.558898][ T5838] RBP: 00007ffd9d469c80 R08: 0000000000000000 R09: 0000000000000000
[  118.558920][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9d46ad10
[  118.558942][ T5838] R13: 00007f376880e08c R14: 000000000001ce2d R15: 00007ffd9d46ad50
[  118.558995][ T5838]  </TASK>
[  118.559008][ T5838] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  118.583406][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.768716][ T6002] netlink: 'syz.2.14': attribute type 11 has an invalid length.
[  118.897919][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.959706][ T6002] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14'.
[  118.973355][  T972] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  119.143357][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.176379][  T972] usb 1-1: config 0 descriptor??
[  119.428244][  T972] usbhid 1-1:0.0: can't add hid device: -71
[  119.460248][  T972] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  119.489410][  T972] usb 1-1: USB disconnect, device number 2
[  119.671850][ T6006] loop3: detected capacity change from 0 to 64
[  120.498380][ T6012] loop0: detected capacity change from 0 to 32768
[  120.531484][ T6012] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.24 (6012)
[  120.584060][ T6012] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  120.594552][ T6012] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  120.604329][ T6012] BTRFS info (device loop0): using free-space-tree
[  120.715053][ T6016] 9pnet: Could not find request transport: 0xffffffffffffffff
[  120.826498][ T5836] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  120.989436][ T6035] loop3: detected capacity change from 0 to 512
[  121.054932][ T6035] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #13: comm syz.3.28: attempt to clear invalid blocks 2 len 1
[  121.135471][ T6035] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  121.194503][ T5986] warning: `syz.5.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  121.228805][ T6035] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.28: invalid indirect mapped block 1819239214 (level 0)
[  121.264151][ T6035] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.28: invalid indirect mapped block 1819239214 (level 1)
[  121.287291][ T6035] EXT4-fs (loop3): 1 truncate cleaned up
[  121.342894][ T6035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.485338][ T6039] loop0: detected capacity change from 0 to 4096
[  121.558922][ T6039] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  121.697507][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.731743][ T6044] loop5: detected capacity change from 0 to 512
[  121.820213][ T6039] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  121.877988][ T6044] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  121.972835][ T6051] loop3: detected capacity change from 0 to 64
[  121.993727][ T6044] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.30: invalid indirect mapped block 8 (level 2)
[  122.112820][ T6044] EXT4-fs (loop5): Remounting filesystem read-only
[  122.143297][ T6056] process 'syz.3.32' launched './file1' with NULL argv: empty string added
[  122.160659][ T6044] EXT4-fs (loop5): 1 truncate cleaned up
[  122.183089][ T6055] loop1: detected capacity change from 0 to 2048
[  122.193969][ T6044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.236777][ T6055] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.294331][ T6055] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  122.310138][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  122.520705][    T9] usb 5-1: Using ep0 maxpacket: 32
[  122.570865][    T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  122.626048][    T9] usb 5-1: config 0 has no interface number 0
[  122.659366][    T9] usb 5-1: config 0 interface 12 has no altsetting 0
[  122.702525][ T6062] loop0: detected capacity change from 0 to 256
[  122.726280][    T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  122.756489][ T6055] loop1: detected capacity change from 0 to 32768
[  122.758643][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.810216][ T6062] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2f5a013b, utbl_chksum : 0xe619d30d)
[  122.834394][    T9] usb 5-1: Product: syz
[  122.838599][    T9] usb 5-1: Manufacturer: syz
[  122.868874][    T9] usb 5-1: SerialNumber: syz
[  122.913853][ T6044] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring
[  122.958505][    T9] usb 5-1: config 0 descriptor??
[  122.963802][ T6055] syz.1.34: attempt to access beyond end of device
[  122.963802][ T6055] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0
[  122.963939][ T6055] ADFS-fs (nbd1): error: unable to read block 3, try 0
[  123.226571][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.697869][ T5844] Bluetooth: hci1: unexpected cc 0x2039 length: 4 > 1
[  123.728468][ T6070] loop2: detected capacity change from 0 to 32768
[  123.744859][ T6070] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.37 (6070)
[  124.038775][ T6076] loop1: detected capacity change from 0 to 32768
[  124.069823][ T6076] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.39 (6076)
[  124.083685][ T6070] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  124.094414][ T6070] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  124.103953][ T6070] BTRFS info (device loop2): using free-space-tree
[  124.113218][ T6076] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.124459][ T6076] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm
[  124.133396][ T6076] BTRFS info (device loop1): using free-space-tree
[  124.140425][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  124.382090][   T10] usb 1-1: config 0 has no interfaces?
[  124.444444][   T10] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  124.505752][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.567272][   T10] usb 1-1: Product: syz
[  124.582139][   T10] usb 1-1: Manufacturer: syz
[  124.586808][   T10] usb 1-1: SerialNumber: syz
[  124.699236][ T5841] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  124.699619][   T10] usb 1-1: config 0 descriptor??
[  125.311789][ T6080] loop3: detected capacity change from 0 to 32768
[  125.571449][ T5848] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.610001][ T5901] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  125.724124][ T5903] usb 1-1: USB disconnect, device number 3
[  125.815919][ T5901] usb 3-1: config 127 has an invalid interface number: 218 but max is 0
[  125.845649][ T5901] usb 3-1: config 127 has no interface number 0
[  125.875244][ T5901] usb 3-1: config 127 interface 218 has no altsetting 0
[  125.911132][ T5901] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 3.5c
[  125.945865][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.010196][ T5901] usb 3-1: Product: syz
[  126.014498][ T5901] usb 3-1: Manufacturer: syz
[  126.019179][ T5901] usb 3-1: SerialNumber: syz
[  126.112932][ T6125] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  126.325581][    T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  126.649998][    T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  126.670078][ T5901] etas_es58x 3-1:127.218: Starting syz syz (Serial Number syz)
[  126.678568][    T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  126.710337][ T5901] etas_es58x 3-1:127.218: could not retrieve the product info string
[  126.719720][    T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  126.802884][    T9] usb 5-1: USB disconnect, device number 3
[  127.301481][ T6140] loop0: detected capacity change from 0 to 32768
[  127.330172][ T5901] usb 3-1: USB disconnect, device number 2
[  127.339420][ T5901] etas_es58x 3-1:127.218: Disconnecting syz syz
[  127.622694][ T6144] loop5: detected capacity change from 0 to 40427
[  127.639657][ T6144] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3fffff
[  127.650320][ T6144] F2FS-fs (loop5): Image doesn't support compression
[  127.657066][ T6144] F2FS-fs (loop5): Image doesn't support compression
[  127.702988][ T6144] F2FS-fs (loop5): invalid crc value
[  127.791225][ T6153] loop1: detected capacity change from 0 to 64
[  127.824474][ T6144] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  127.860172][   T30] audit: type=1800 audit(1743746572.534:2): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.49" name="bus" dev="loop5" ino=10 res=0 errno=0
[  127.928171][ T6153] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  128.097524][ T5837] F2FS-fs (loop5): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x12d/0x1b0
[  128.187214][ T5837] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  128.323385][ T5837] syz-executor: attempt to access beyond end of device
[  128.323385][ T5837] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  128.438762][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz-executor Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) 
[  128.438811][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  128.438832][ T5837] Call Trace:
[  128.438843][ T5837]  <TASK>
[  128.438857][ T5837]  dump_stack_lvl+0x16c/0x1f0
[  128.438910][ T5837]  f2fs_handle_critical_error+0x621/0x9f0
[  128.438960][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.439003][ T5837]  ? __asan_memset+0x23/0x50
[  128.439052][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.439106][ T5837]  f2fs_write_end_io+0x73d/0xac0
[  128.439163][ T5837]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  128.439224][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.439285][ T5837]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  128.439337][ T5837]  bio_endio+0x6d2/0x810
[  128.439394][ T5837]  submit_bio_noacct+0x56d/0x1ec0
[  128.439443][ T5837]  __submit_merged_bio+0x33c/0x770
[  128.439503][ T5837]  __submit_merged_write_cond+0x319/0x3f0
[  128.439570][ T5837]  f2fs_sync_node_pages+0x1558/0x18b0
[  128.439643][ T5837]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  128.439689][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.439731][ T5837]  ? __lock_acquire+0xaa4/0x1ba0
[  128.439812][ T5837]  ? down_write+0x14d/0x200
[  128.439872][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.439917][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.439960][ T5837]  ? up_write+0x1b2/0x520
[  128.440006][ T5837]  block_operations+0x941/0xfd0
[  128.440056][ T5837]  ? __pfx_block_operations+0x10/0x10
[  128.440152][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.440194][ T5837]  ? down_write+0x14d/0x200
[  128.440246][ T5837]  ? __pfx_down_write+0x10/0x10
[  128.440308][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.440350][ T5837]  ? rcu_is_watching+0x12/0xc0
[  128.440403][ T5837]  f2fs_write_checkpoint+0x2b8/0x45b0
[  128.440455][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.440497][ T5837]  ? rcu_is_watching+0x12/0xc0
[  128.440540][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.440583][ T5837]  ? kthread_stop+0x273/0x650
[  128.440624][ T5837]  kill_f2fs_super+0x3c2/0x470
[  128.440663][ T5837]  ? __pfx_kill_f2fs_super+0x10/0x10
[  128.440700][ T5837]  ? lockdep_hardirqs_on+0x7c/0x110
[  128.440766][ T5837]  deactivate_locked_super+0xc1/0x1a0
[  128.440819][ T5837]  deactivate_super+0xde/0x100
[  128.440873][ T5837]  cleanup_mnt+0x225/0x450
[  128.440929][ T5837]  task_work_run+0x150/0x240
[  128.440973][ T5837]  ? __pfx_task_work_run+0x10/0x10
[  128.441013][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.441059][ T5837]  ? __pfx___x64_sys_umount+0x10/0x10
[  128.441127][ T5837]  syscall_exit_to_user_mode+0x27b/0x2a0
[  128.441179][ T5837]  do_syscall_64+0xda/0x260
[  128.441232][ T5837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.441268][ T5837] RIP: 0033:0x7f4efbd8e497
[  128.441306][ T5837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  128.441340][ T5837] RSP: 002b:00007ffc184066a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  128.441373][ T5837] RAX: 0000000000000000 RBX: 00007f4efbe0e08c RCX: 00007f4efbd8e497
[  128.441395][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc18406760
[  128.441417][ T5837] RBP: 00007ffc18406760 R08: 0000000000000000 R09: 0000000000000000
[  128.441439][ T5837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc184077f0
[  128.441461][ T5837] R13: 00007f4efbe0e08c R14: 000000000001f384 R15: 00007ffc18407830
[  128.441511][ T5837]  </TASK>
[  128.991177][ T5837] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  128.998165][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) 
[  128.998211][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  128.998232][ T5837] Call Trace:
[  128.998243][ T5837]  <TASK>
[  128.998256][ T5837]  dump_stack_lvl+0x16c/0x1f0
[  128.998310][ T5837]  f2fs_handle_critical_error+0x621/0x9f0
[  128.998360][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.998404][ T5837]  ? __asan_memset+0x23/0x50
[  128.998453][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.998508][ T5837]  f2fs_write_end_io+0x73d/0xac0
[  128.998570][ T5837]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  128.998631][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.998685][ T5837]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  128.998738][ T5837]  bio_endio+0x6d2/0x810
[  128.998795][ T5837]  submit_bio_noacct+0x56d/0x1ec0
[  128.998845][ T5837]  __submit_merged_bio+0x33c/0x770
[  128.998906][ T5837]  __submit_merged_write_cond+0x319/0x3f0
[  128.998973][ T5837]  f2fs_sync_node_pages+0x1558/0x18b0
[  128.999043][ T5837]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  128.999090][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.999132][ T5837]  ? __lock_acquire+0xaa4/0x1ba0
[  128.999216][ T5837]  ? down_write+0x14d/0x200
[  128.999270][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.999315][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.999358][ T5837]  ? up_write+0x1b2/0x520
[  128.999404][ T5837]  block_operations+0x941/0xfd0
[  128.999454][ T5837]  ? __pfx_block_operations+0x10/0x10
[  128.999562][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.999605][ T5837]  ? down_write+0x14d/0x200
[  128.999658][ T5837]  ? __pfx_down_write+0x10/0x10
[  128.999714][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.999756][ T5837]  ? rcu_is_watching+0x12/0xc0
[  128.999810][ T5837]  f2fs_write_checkpoint+0x2b8/0x45b0
[  128.999863][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.999909][ T5837]  ? rcu_is_watching+0x12/0xc0
[  128.999954][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.999997][ T5837]  ? kthread_stop+0x273/0x650
[  129.000038][ T5837]  kill_f2fs_super+0x3c2/0x470
[  129.000077][ T5837]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.000112][ T5837]  ? lockdep_hardirqs_on+0x7c/0x110
[  129.000179][ T5837]  deactivate_locked_super+0xc1/0x1a0
[  129.000232][ T5837]  deactivate_super+0xde/0x100
[  129.000284][ T5837]  cleanup_mnt+0x225/0x450
[  129.000340][ T5837]  task_work_run+0x150/0x240
[  129.000385][ T5837]  ? __pfx_task_work_run+0x10/0x10
[  129.000425][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.000472][ T5837]  ? __pfx___x64_sys_umount+0x10/0x10
[  129.000539][ T5837]  syscall_exit_to_user_mode+0x27b/0x2a0
[  129.000598][ T5837]  do_syscall_64+0xda/0x260
[  129.000652][ T5837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.000688][ T5837] RIP: 0033:0x7f4efbd8e497
[  129.000716][ T5837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.000751][ T5837] RSP: 002b:00007ffc184066a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.000784][ T5837] RAX: 0000000000000000 RBX: 00007f4efbe0e08c RCX: 00007f4efbd8e497
[  129.000807][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc18406760
[  129.000829][ T5837] RBP: 00007ffc18406760 R08: 0000000000000000 R09: 0000000000000000
[  129.000851][ T5837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc184077f0
[  129.000874][ T5837] R13: 00007f4efbe0e08c R14: 000000000001f384 R15: 00007ffc18407830
[  129.000924][ T5837]  </TASK>
[  129.468428][ T5837] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  129.525789][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz-executor Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) 
[  129.525837][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  129.525858][ T5837] Call Trace:
[  129.525869][ T5837]  <TASK>
[  129.525882][ T5837]  dump_stack_lvl+0x16c/0x1f0
[  129.525936][ T5837]  f2fs_handle_critical_error+0x621/0x9f0
[  129.525985][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.526030][ T5837]  ? __asan_memset+0x23/0x50
[  129.526078][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.526134][ T5837]  f2fs_write_end_io+0x73d/0xac0
[  129.526191][ T5837]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  129.526252][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.526305][ T5837]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  129.526358][ T5837]  bio_endio+0x6d2/0x810
[  129.526415][ T5837]  submit_bio_noacct+0x56d/0x1ec0
[  129.526465][ T5837]  __submit_merged_bio+0x33c/0x770
[  129.526529][ T5837]  __submit_merged_write_cond+0x319/0x3f0
[  129.526596][ T5837]  f2fs_sync_node_pages+0x1558/0x18b0
[  129.526666][ T5837]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  129.526712][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.526755][ T5837]  ? __lock_acquire+0xaa4/0x1ba0
[  129.526837][ T5837]  ? down_write+0x14d/0x200
[  129.526892][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.526937][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.526979][ T5837]  ? up_write+0x1b2/0x520
[  129.527025][ T5837]  block_operations+0x941/0xfd0
[  129.527076][ T5837]  ? __pfx_block_operations+0x10/0x10
[  129.527172][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.527215][ T5837]  ? down_write+0x14d/0x200
[  129.527266][ T5837]  ? __pfx_down_write+0x10/0x10
[  129.527322][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.527365][ T5837]  ? rcu_is_watching+0x12/0xc0
[  129.527418][ T5837]  f2fs_write_checkpoint+0x2b8/0x45b0
[  129.527473][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.527520][ T5837]  ? rcu_is_watching+0x12/0xc0
[  129.527565][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.527607][ T5837]  ? kthread_stop+0x273/0x650
[  129.527649][ T5837]  kill_f2fs_super+0x3c2/0x470
[  129.527688][ T5837]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.527725][ T5837]  ? lockdep_hardirqs_on+0x7c/0x110
[  129.527792][ T5837]  deactivate_locked_super+0xc1/0x1a0
[  129.527844][ T5837]  deactivate_super+0xde/0x100
[  129.527896][ T5837]  cleanup_mnt+0x225/0x450
[  129.527952][ T5837]  task_work_run+0x150/0x240
[  129.527997][ T5837]  ? __pfx_task_work_run+0x10/0x10
[  129.528037][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.528097][ T5837]  ? __pfx___x64_sys_umount+0x10/0x10
[  129.528164][ T5837]  syscall_exit_to_user_mode+0x27b/0x2a0
[  129.528216][ T5837]  do_syscall_64+0xda/0x260
[  129.528270][ T5837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.528306][ T5837] RIP: 0033:0x7f4efbd8e497
[  129.528333][ T5837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.528368][ T5837] RSP: 002b:00007ffc184066a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.528401][ T5837] RAX: 0000000000000000 RBX: 00007f4efbe0e08c RCX: 00007f4efbd8e497
[  129.528424][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc18406760
[  129.528446][ T5837] RBP: 00007ffc18406760 R08: 0000000000000000 R09: 0000000000000000
[  129.528468][ T5837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc184077f0
[  129.528490][ T5837] R13: 00007f4efbe0e08c R14: 000000000001f384 R15: 00007ffc18407830
[  129.528545][ T5837]  </TASK>
[  129.905762][ T6171] loop0: detected capacity change from 0 to 2048
[  129.917355][ T5837] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  130.010386][ T6171] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.480248][ T6179] netlink: 92 bytes leftover after parsing attributes in process `syz.2.60'.
[  130.601613][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.4.61'.
[  130.660060][ T6185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.61'.
[  130.700253][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.4.61'.
[  130.775627][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.4.61'.
[  131.050685][ T6193] loop2: detected capacity change from 0 to 128
[  131.158157][ T6193] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  131.432864][ T6193] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.505752][ T6199] loop0: detected capacity change from 0 to 256
[  131.550142][ T6170] loop3: detected capacity change from 0 to 32768
[  131.659850][ T6201] loop5: detected capacity change from 0 to 512
[  131.690524][ T6199] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  131.745219][ T6201] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  131.777054][ T6201] EXT4-fs (loop5): orphan cleanup on readonly fs
[  131.795108][ T6201] EXT4-fs warning (device loop5): ext4_enable_quotas:7166: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  131.895478][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  131.903397][ T6201] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  131.915116][ T6201] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.54: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  131.990076][ T6201] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.54: couldn't read orphan inode 13 (err -117)
[  132.025969][ T6201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  132.135992][   T10] usb 5-1: Using ep0 maxpacket: 16
[  132.153719][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  132.220028][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  132.278528][ T6221] capability: warning: `syz.2.71' uses 32-bit capabilities (legacy support in use)
[  132.311117][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.316800][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  132.349608][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.384217][   T10] usb 5-1: Product: syz
[  132.416890][   T10] usb 5-1: Manufacturer: syz
[  132.434786][   T10] usb 5-1: SerialNumber: syz
[  132.450075][  T972] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  132.458434][   T10] usb 5-1: config 0 descriptor??
[  132.498317][   T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  132.529690][   T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  132.641032][  T972] usb 1-1: Using ep0 maxpacket: 16
[  132.662367][ T6228] block nbd1: shutting down sockets
[  132.685428][  T972] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  132.725697][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  132.795044][  T972] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  132.830048][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.881283][  T972] usb 1-1: Product: syz
[  132.885511][  T972] usb 1-1: Manufacturer: syz
[  132.915455][  T972] usb 1-1: SerialNumber: syz
[  132.973464][  T972] usb 1-1: config 0 descriptor??
[  133.007870][  T972] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  133.070038][  T972] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  133.113981][   T10] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  133.213826][   T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  133.247271][   T10] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  133.265206][   T10] em28xx 5-1:0.0: No AC97 audio processor
[  133.672666][  T972] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  133.718040][  T972] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  133.768214][ T6246] loop2: detected capacity change from 0 to 256
[  133.792782][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.79'.
[  133.848520][ T6247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.79'.
[  133.908556][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.79'.
[  133.930665][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.79'.
[  133.930855][ T6246] FAT-fs (loop2): Directory bread(block 64) failed
[  133.988581][ T6246] FAT-fs (loop2): Directory bread(block 65) failed
[  134.037169][ T6246] FAT-fs (loop2): Directory bread(block 66) failed
[  134.065403][ T6246] FAT-fs (loop2): Directory bread(block 67) failed
[  134.087795][ T6246] FAT-fs (loop2): Directory bread(block 68) failed
[  134.094883][ T6255] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  134.129068][ T6246] FAT-fs (loop2): Directory bread(block 69) failed
[  134.136387][ T6246] FAT-fs (loop2): Directory bread(block 70) failed
[  134.155421][ T6246] FAT-fs (loop2): Directory bread(block 71) failed
[  134.166646][ T6246] FAT-fs (loop2): Directory bread(block 72) failed
[  134.177663][ T6246] FAT-fs (loop2): Directory bread(block 73) failed
[  134.769375][  T972] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc00fe
[  134.820083][   T10] usb 5-1: USB disconnect, device number 4
[  134.834655][ T6276] syz.2.84 uses obsolete (PF_INET,SOCK_PACKET)
[  134.878170][   T10] em28xx 5-1:0.0: Disconnecting em28xx
[  134.961619][   T10] em28xx 5-1:0.0: Freeing device
[  135.206714][ T6277] loop5: detected capacity change from 0 to 32768
[  135.227023][ T6285] loop1: detected capacity change from 0 to 512
[  135.361168][ T6285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.439521][ T6285] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.462881][  T972] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  135.490908][  T972] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  135.495957][ T6286] loop4: detected capacity change from 0 to 32768
[  135.516934][  T972] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  135.669864][ T6277] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,no_data_io
[  135.699008][ T6277] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  135.707609][ T6277] bcachefs (loop5): Version upgrade required:
[  135.707609][ T6277] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete
[  135.707609][ T6277] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags
[  135.707609][ T6277]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  135.782337][  T972] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  135.814739][  T972] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  135.830479][  T972] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  135.855590][  T972] usb 1-1: USB disconnect, device number 4
[  135.945859][ T6277] bcachefs (loop5): bcachefs (loop5): error validating btree node at btree alloc level 0/0
[  135.945899][ T6277]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  135.945928][ T6277]   node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing
[  135.987478][ T6277] bcachefs (loop5): btree_node_read_work: rewriting btree node at due to error
[  135.987478][ T6277]   btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  136.105850][ T6277] bcachefs (loop5): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  136.117811][ T6277] bcachefs (loop5): bcachefs (loop5): error validating btree node on loop5 at btree lru level 0/0
[  136.117846][ T6277]   u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4278190847 len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0
[  136.117878][ T6277]   node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: 
[  136.154300][ T6277] bcachefs (loop5): flagging btree lru lost data
[  136.162906][ T6277] bcachefs (loop5): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[  136.241980][ T6277] bcachefs (loop5): check_topology... done
[  136.248660][ T6277] bcachefs (loop5): accounting_read... done
[  136.286332][ T6277] bcachefs (loop5): alloc_read... done
[  136.292275][ T6277] bcachefs (loop5): snapshots_read... done
[  136.298551][ T6277] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  136.312611][ T6277] bcachefs (loop5): done starting filesystem
[  136.342445][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.377470][ T6277] syz.5.87 (6277) used greatest stack depth: 21248 bytes left
[  136.570634][ T5837] bcachefs (loop5): shutting down
[  136.582974][ T6309] netlink: 92 bytes leftover after parsing attributes in process `syz.0.93'.
[  136.758089][ T6316] loop1: detected capacity change from 0 to 512
[  136.873128][ T6316] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  136.876354][ T5837] bcachefs (loop5): shutdown complete
[  136.905134][ T6316] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.92: invalid indirect mapped block 8 (level 2)
[  137.027749][ T6316] EXT4-fs (loop1): Remounting filesystem read-only
[  137.102494][ T6316] EXT4-fs (loop1): 1 truncate cleaned up
[  137.180214][ T6316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.250712][ T6321] loop0: detected capacity change from 0 to 32768
[  137.303113][  T972] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  137.463849][ T6321] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  137.489996][  T972] usb 3-1: Using ep0 maxpacket: 16
[  137.507595][  T972] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  137.528541][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.554192][  T972] usb 3-1: config 0 descriptor??
[  137.582177][  T972] gspca_main: sonixj-2.14.0 probing 0471:0327
[  137.656061][ T5836] ocfs2: Unmounting device (7,0) on (node local)
[  138.211368][ T6323] loop2: detected capacity change from 0 to 1024
[  138.218869][ T6323] EXT4-fs: Ignoring removed orlov option
[  138.481160][  T972] gspca_sonixj: reg_w1 err -110
[  138.486157][  T972] sonixj 3-1:0.0: probe with driver sonixj failed with error -110
[  138.526951][ T6323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.829387][ T6343] loop3: detected capacity change from 0 to 512
[  138.857487][ T6343] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  138.880267][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  138.943688][ T6343] EXT4-fs (loop3): 1 truncate cleaned up
[  138.970718][ T6343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.051603][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.080227][   T10] usb 1-1: Using ep0 maxpacket: 16
[  139.093782][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  139.112591][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  139.145059][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  139.159144][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.169843][   T10] usb 1-1: Product: syz
[  139.178799][   T10] usb 1-1: Manufacturer: syz
[  139.187205][   T10] usb 1-1: SerialNumber: syz
[  139.227119][   T10] usb 1-1: config 0 descriptor??
[  139.261681][   T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  139.289129][   T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  139.895202][   T10] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  139.910890][   T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  139.937406][   T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  139.957894][   T10] em28xx 1-1:0.0: No AC97 audio processor
[  140.100122][ T5901] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  140.148517][   T10] usb 3-1: USB disconnect, device number 3
[  140.261016][ T5901] usb 5-1: Using ep0 maxpacket: 8
[  140.303262][ T5901] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  140.333535][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.369957][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.409397][ T6355] loop3: detected capacity change from 0 to 32768
[  140.431356][ T5901] usb 5-1: config 0 descriptor??
[  140.518790][ T6355] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  140.554341][ T6355] (syz.3.108,6355,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72
[  140.572661][ T6355] ocfs2: Unmounting device (7,3) on (node local)
[  140.673441][ T5901] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  140.794473][ T6363] netlink: 36 bytes leftover after parsing attributes in process `syz.5.94'.
[  140.840144][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.5.94'.
[  140.874942][ T6363] netlink: 36 bytes leftover after parsing attributes in process `syz.5.94'.
[  140.905219][ T6363] netlink: 36 bytes leftover after parsing attributes in process `syz.5.94'.
[  141.082548][ T5901] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  141.103602][ T5901] asix 5-1:0.0: probe with driver asix failed with error -71
[  141.109846][  T972] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  141.181542][ T5901] usb 5-1: USB disconnect, device number 5
[  141.307362][  T972] usb 4-1: Using ep0 maxpacket: 16
[  141.332944][  T972] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  141.361315][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  141.396601][  T972] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  141.419066][  T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.435242][  T972] usb 4-1: Product: syz
[  141.456557][  T972] usb 4-1: Manufacturer: syz
[  141.470506][  T972] usb 4-1: SerialNumber: syz
[  141.484424][  T972] usb 4-1: config 0 descriptor??
[  141.502475][  T972] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  141.574187][ T5899] usb 1-1: USB disconnect, device number 5
[  141.600749][ T5899] em28xx 1-1:0.0: Disconnecting em28xx
[  141.661456][ T5899] em28xx 1-1:0.0: Freeing device
[  142.019472][ T6382] loop4: detected capacity change from 0 to 512
[  142.077574][ T6382] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  142.081875][ T6378] loop0: detected capacity change from 0 to 32768
[  142.371711][ T6382] EXT4-fs (loop4): 1 truncate cleaned up
[  142.450924][ T6382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.480662][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  142.487216][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  142.633008][ T6389] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  143.024091][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.371971][ T6397] loop4: detected capacity change from 0 to 128
[  143.812911][ T6386] loop2: detected capacity change from 0 to 32768
[  143.873564][ T6402] netlink: 36 bytes leftover after parsing attributes in process `syz.5.124'.
[  143.915300][ T6386] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  143.931488][ T5899] usb 4-1: USB disconnect, device number 2
[  143.993509][ T6402] netlink: 16 bytes leftover after parsing attributes in process `syz.5.124'.
[  144.020682][ T6386] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  144.039635][ T6402] netlink: 36 bytes leftover after parsing attributes in process `syz.5.124'.
[  144.070109][ T6402] netlink: 36 bytes leftover after parsing attributes in process `syz.5.124'.
[  144.280209][ T6386] XFS (loop2): Ending clean mount
[  144.353156][ T6386] XFS (loop2): Quotacheck needed: Please wait.
[  144.372293][ T6419] input: syz1 as /devices/virtual/input/input5
[  144.580359][ T6386] XFS (loop2): Quotacheck: Done.
[  144.670182][ T5825] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  144.824493][ T5841] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  144.830180][ T5825] usb 5-1: Using ep0 maxpacket: 16
[  144.881173][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  144.900234][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  144.928659][ T5825] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  144.953038][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.013689][ T5825] usb 5-1: Product: syz
[  145.017897][ T5825] usb 5-1: Manufacturer: syz
[  145.039967][ T5825] usb 5-1: SerialNumber: syz
[  145.112689][ T5825] usb 5-1: config 0 descriptor??
[  145.135158][ T5825] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  145.175505][ T5825] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  145.499870][ T6436] loop5: detected capacity change from 0 to 512
[  145.565981][ T6436] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  145.610038][ T6436] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  145.694198][ T6436] System zones: 0-1, 15-15, 18-18, 34-34
[  145.794361][ T6436] EXT4-fs (loop5): orphan cleanup on readonly fs
[  145.864793][ T6436] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  145.943099][ T6442] loop2: detected capacity change from 0 to 512
[  145.960223][ T6436] EXT4-fs warning (device loop5): ext4_enable_quotas:7166: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  145.995385][ T6442] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  146.029829][ T6436] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  146.067806][ T6442] EXT4-fs (loop2): 1 truncate cleaned up
[  146.095575][ T6436] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.134: bg 0: block 40: padding at end of block bitmap is not set
[  146.115373][ T6440] loop0: detected capacity change from 0 to 40427
[  146.123283][ T6442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.125027][ T5825] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  146.145107][ T6440] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  146.152963][ T6440] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  146.167254][ T5825] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  146.189679][ T5825] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  146.197259][ T6436] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  146.206478][ T5825] em28xx 5-1:0.0: No AC97 audio processor
[  146.213760][ T6440] F2FS-fs (loop0): invalid crc value
[  146.229373][ T6436] EXT4-fs (loop5): 1 truncate cleaned up
[  146.284214][ T6436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  146.354594][ T6440] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  146.361778][ T6440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  146.403132][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.420226][   T30] audit: type=1804 audit(1743746591.084:3): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.136" name="/newroot/19/file0/file1" dev="loop0" ino=10 res=1 errno=0
[  146.660293][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.912569][ T6456] syz_tun: entered allmulticast mode
[  146.950678][ T6455] syz_tun: left allmulticast mode
[  147.537463][    T9] usb 5-1: USB disconnect, device number 6
[  147.581994][    T9] em28xx 5-1:0.0: Disconnecting em28xx
[  147.627321][    T9] em28xx 5-1:0.0: Freeing device
[  147.772325][ T6449] loop3: detected capacity change from 0 to 32768
[  147.799513][ T6449] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.137 (6449)
[  147.914459][ T6449] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  147.975439][ T6449] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  148.015366][ T6449] BTRFS info (device loop3): using free-space-tree
[  149.188631][ T5838] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  149.312910][ T6542] loop4: detected capacity change from 0 to 512
[  149.360098][ T6542] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  149.430680][ T6542] EXT4-fs (loop4): 1 truncate cleaned up
[  149.440167][ T6542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.655089][ T6544] netlink: 88 bytes leftover after parsing attributes in process `syz.2.149'.
[  149.831045][ T5899] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  149.847442][ T6469] loop5: detected capacity change from 0 to 32768
[  149.910489][ T6469] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  149.931784][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.022117][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  150.046522][ T5899] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  150.064435][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  150.079951][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.092467][ T5899] usb 1-1: Product: syz
[  150.096660][ T5899] usb 1-1: Manufacturer: syz
[  150.111177][ T6469] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  150.136492][ T5899] usb 1-1: SerialNumber: syz
[  150.224463][ T6570] loop2: detected capacity change from 0 to 512
[  150.224491][ T6564] loop3: detected capacity change from 0 to 2048
[  150.279634][ T6564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.287472][ T6469] XFS (loop5): Ending clean mount
[  150.323611][ T6570] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  150.344458][ T6469] XFS (loop5): Quotacheck needed: Please wait.
[  150.455944][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.460701][ T6570] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.153: invalid indirect mapped block 8 (level 2)
[  150.499774][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.540595][ T5899] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  150.566601][ T6469] XFS (loop5): Quotacheck: Done.
[  150.591802][ T6570] EXT4-fs (loop2): Remounting filesystem read-only
[  150.602690][ T5899] usb 1-1: USB disconnect, device number 6
[  150.608881][ T6570] EXT4-fs (loop2): 1 truncate cleaned up
[  150.619606][ T6570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.824656][ T5837] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  151.090008][ T5899] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  151.290292][ T5899] usb 1-1: Using ep0 maxpacket: 8
[  151.380725][ T5899] usb 1-1: config index 0 descriptor too short (expected 301, got 72)
[  151.422845][ T6581] loop4: detected capacity change from 0 to 40427
[  151.425230][ T5899] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  151.447540][ T6581] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3fffff
[  151.456076][ T6581] F2FS-fs (loop4): Image doesn't support compression
[  151.463006][ T6581] F2FS-fs (loop4): Image doesn't support compression
[  151.480178][ T6581] F2FS-fs (loop4): invalid crc value
[  151.549344][ T5899] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  151.594783][ T5899] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  151.632901][ T6581] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  151.670980][ T5899] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  151.690409][   T30] audit: type=1800 audit(1743746596.354:4): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.157" name="bus" dev="loop4" ino=10 res=0 errno=0
[  151.701586][ T5899] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.769185][ T5899] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  151.813108][ T5899] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  151.836938][ T5845] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x12d/0x1b0
[  151.861185][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.870342][ T5845] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  151.912204][ T5845] syz-executor: attempt to access beyond end of device
[  151.912204][ T5845] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  151.940131][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) 
[  151.940180][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  151.940201][ T5845] Call Trace:
[  151.940212][ T5845]  <TASK>
[  151.940225][ T5845]  dump_stack_lvl+0x16c/0x1f0
[  151.940297][ T5845]  f2fs_handle_critical_error+0x621/0x9f0
[  151.940347][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.940391][ T5845]  ? __asan_memset+0x23/0x50
[  151.940441][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.940498][ T5845]  f2fs_write_end_io+0x73d/0xac0
[  151.940558][ T5845]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  151.940624][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.940680][ T5845]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  151.940733][ T5845]  bio_endio+0x6d2/0x810
[  151.940792][ T5845]  submit_bio_noacct+0x56d/0x1ec0
[  151.940845][ T5845]  __submit_merged_bio+0x33c/0x770
[  151.940907][ T5845]  __submit_merged_write_cond+0x319/0x3f0
[  151.940977][ T5845]  f2fs_sync_node_pages+0x1558/0x18b0
[  151.941051][ T5845]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  151.941098][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.941140][ T5845]  ? __lock_acquire+0xaa4/0x1ba0
[  151.941231][ T5845]  ? down_write+0x14d/0x200
[  151.941286][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.941331][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.941377][ T5845]  ? up_write+0x1b2/0x520
[  151.941427][ T5845]  block_operations+0x941/0xfd0
[  151.941480][ T5845]  ? __pfx_block_operations+0x10/0x10
[  151.941589][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.941632][ T5845]  ? down_write+0x14d/0x200
[  151.941684][ T5845]  ? __pfx_down_write+0x10/0x10
[  151.941741][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.941783][ T5845]  ? rcu_is_watching+0x12/0xc0
[  151.941837][ T5845]  f2fs_write_checkpoint+0x2b8/0x45b0
[  151.941892][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.941934][ T5845]  ? rcu_is_watching+0x12/0xc0
[  151.941979][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.942021][ T5845]  ? kthread_stop+0x273/0x650
[  151.942064][ T5845]  kill_f2fs_super+0x3c2/0x470
[  151.942104][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  151.942141][ T5845]  ? lockdep_hardirqs_on+0x7c/0x110
[  151.942212][ T5845]  deactivate_locked_super+0xc1/0x1a0
[  151.942265][ T5845]  deactivate_super+0xde/0x100
[  151.942318][ T5845]  cleanup_mnt+0x225/0x450
[  151.942374][ T5845]  task_work_run+0x150/0x240
[  151.942420][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  151.942460][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.942506][ T5845]  ? __pfx___x64_sys_umount+0x10/0x10
[  151.942580][ T5845]  syscall_exit_to_user_mode+0x27b/0x2a0
[  151.942633][ T5845]  do_syscall_64+0xda/0x260
[  151.942688][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.942724][ T5845] RIP: 0033:0x7fca36f8e497
[  151.942753][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  151.942787][ T5845] RSP: 002b:00007ffea27507d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  151.942820][ T5845] RAX: 0000000000000000 RBX: 00007fca3700e08c RCX: 00007fca36f8e497
[  151.942843][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea2750890
[  151.942865][ T5845] RBP: 00007ffea2750890 R08: 0000000000000000 R09: 0000000000000000
[  151.942886][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea2751920
[  151.942909][ T5845] R13: 00007fca3700e08c R14: 00000000000250a2 R15: 00007ffea2751960
[  151.942963][ T5845]  </TASK>
[  151.942976][ T5845] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  152.249664][ T5899] usb 1-1: usb_control_msg returned -32
[  152.257129][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) 
[  152.257174][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  152.257195][ T5845] Call Trace:
[  152.257207][ T5845]  <TASK>
[  152.257220][ T5845]  dump_stack_lvl+0x16c/0x1f0
[  152.257274][ T5845]  f2fs_handle_critical_error+0x621/0x9f0
[  152.257322][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.257364][ T5845]  ? __asan_memset+0x23/0x50
[  152.257412][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.257468][ T5845]  f2fs_write_end_io+0x73d/0xac0
[  152.257526][ T5845]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  152.257593][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.257648][ T5845]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  152.257699][ T5845]  bio_endio+0x6d2/0x810
[  152.257756][ T5845]  submit_bio_noacct+0x56d/0x1ec0
[  152.257808][ T5845]  __submit_merged_bio+0x33c/0x770
[  152.257868][ T5845]  __submit_merged_write_cond+0x319/0x3f0
[  152.257936][ T5845]  f2fs_sync_node_pages+0x1558/0x18b0
[  152.258007][ T5845]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  152.258052][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.258093][ T5845]  ? __lock_acquire+0xaa4/0x1ba0
[  152.258183][ T5845]  ? down_write+0x14d/0x200
[  152.258237][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.258281][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.258321][ T5845]  ? up_write+0x1b2/0x520
[  152.258368][ T5845]  block_operations+0x941/0xfd0
[  152.258420][ T5845]  ? __pfx_block_operations+0x10/0x10
[  152.258527][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.258571][ T5845]  ? down_write+0x14d/0x200
[  152.258622][ T5845]  ? __pfx_down_write+0x10/0x10
[  152.258676][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.258717][ T5845]  ? rcu_is_watching+0x12/0xc0
[  152.258771][ T5845]  f2fs_write_checkpoint+0x2b8/0x45b0
[  152.258826][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.258866][ T5845]  ? rcu_is_watching+0x12/0xc0
[  152.258909][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.258950][ T5845]  ? kthread_stop+0x273/0x650
[  152.258993][ T5845]  kill_f2fs_super+0x3c2/0x470
[  152.259032][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  152.259067][ T5845]  ? lockdep_hardirqs_on+0x7c/0x110
[  152.259137][ T5845]  deactivate_locked_super+0xc1/0x1a0
[  152.259189][ T5845]  deactivate_super+0xde/0x100
[  152.259241][ T5845]  cleanup_mnt+0x225/0x450
[  152.259297][ T5845]  task_work_run+0x150/0x240
[  152.259342][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  152.259380][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.259426][ T5845]  ? __pfx___x64_sys_umount+0x10/0x10
[  152.259493][ T5845]  syscall_exit_to_user_mode+0x27b/0x2a0
[  152.259544][ T5845]  do_syscall_64+0xda/0x260
[  152.259601][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.259636][ T5845] RIP: 0033:0x7fca36f8e497
[  152.259665][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  152.259698][ T5845] RSP: 002b:00007ffea27507d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  152.259730][ T5845] RAX: 0000000000000000 RBX: 00007fca3700e08c RCX: 00007fca36f8e497
[  152.259752][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea2750890
[  152.259774][ T5845] RBP: 00007ffea2750890 R08: 0000000000000000 R09: 0000000000000000
[  152.259795][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea2751920
[  152.259817][ T5845] R13: 00007fca3700e08c R14: 00000000000250a2 R15: 00007ffea2751960
[  152.259872][ T5845]  </TASK>
[  152.259885][ T5845] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  152.278025][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.281312][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) 
[  152.281358][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  152.281378][ T5845] Call Trace:
[  152.281390][ T5845]  <TASK>
[  152.281403][ T5845]  dump_stack_lvl+0x16c/0x1f0
[  152.281456][ T5845]  f2fs_handle_critical_error+0x621/0x9f0
[  152.281504][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.281546][ T5845]  ? __asan_memset+0x23/0x50
[  152.281599][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.281652][ T5845]  f2fs_write_end_io+0x73d/0xac0
[  152.281708][ T5845]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  152.281766][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.281819][ T5845]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  152.281869][ T5845]  bio_endio+0x6d2/0x810
[  152.281924][ T5845]  submit_bio_noacct+0x56d/0x1ec0
[  152.281973][ T5845]  __submit_merged_bio+0x33c/0x770
[  152.282031][ T5845]  __submit_merged_write_cond+0x319/0x3f0
[  152.282097][ T5845]  f2fs_sync_node_pages+0x1558/0x18b0
[  152.282164][ T5845]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  152.282208][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.282249][ T5845]  ? __lock_acquire+0xaa4/0x1ba0
[  152.282330][ T5845]  ? down_write+0x14d/0x200
[  152.282382][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.282426][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.282467][ T5845]  ? up_write+0x1b2/0x520
[  152.282511][ T5845]  block_operations+0x941/0xfd0
[  152.282566][ T5845]  ? __pfx_block_operations+0x10/0x10
[  152.282660][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.282701][ T5845]  ? down_write+0x14d/0x200
[  152.282751][ T5845]  ? __pfx_down_write+0x10/0x10
[  152.282805][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.282845][ T5845]  ? rcu_is_watching+0x12/0xc0
[  152.282897][ T5845]  f2fs_write_checkpoint+0x2b8/0x45b0
[  152.282948][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.282989][ T5845]  ? rcu_is_watching+0x12/0xc0
[  152.283032][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.283073][ T5845]  ? kthread_stop+0x273/0x650
[  152.283114][ T5845]  kill_f2fs_super+0x3c2/0x470
[  152.283152][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  152.283187][ T5845]  ? lockdep_hardirqs_on+0x7c/0x110
[  152.283253][ T5845]  deactivate_locked_super+0xc1/0x1a0
[  152.283304][ T5845]  deactivate_super+0xde/0x100
[  152.283354][ T5845]  cleanup_mnt+0x225/0x450
[  152.283409][ T5845]  task_work_run+0x150/0x240
[  152.283453][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  152.283491][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.283536][ T5845]  ? __pfx___x64_sys_umount+0x10/0x10
[  152.283605][ T5845]  syscall_exit_to_user_mode+0x27b/0x2a0
[  152.283655][ T5845]  do_syscall_64+0xda/0x260
[  152.283707][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.283742][ T5845] RIP: 0033:0x7fca36f8e497
[  152.283770][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  152.283803][ T5845] RSP: 002b:00007ffea27507d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  152.283835][ T5845] RAX: 0000000000000000 RBX: 00007fca3700e08c RCX: 00007fca36f8e497
[  152.283857][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea2750890
[  152.283878][ T5845] RBP: 00007ffea2750890 R08: 0000000000000000 R09: 0000000000000000
[  152.283899][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea2751920
[  152.283921][ T5845] R13: 00007fca3700e08c R14: 00000000000250a2 R15: 00007ffea2751960
[  152.283970][ T5845]  </TASK>
[  152.283983][ T5845] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  152.399548][ T5899] usbtmc 1-1:16.0: can't read capabilities
[  152.420082][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.282128][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.337750][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.372145][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.378276][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.384338][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.390497][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.396528][    C1] usbtmc 1-1:16.0: invalid notification: 11
[  153.404394][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.411619][    C1] usbtmc 1-1:16.0: invalid notification: 2
[  153.417751][    C1] usbtmc 1-1:16.0: invalid notification: 5
[  153.423848][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.430626][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.436787][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.450019][    C1] usbtmc 1-1:16.0: invalid notification: 12
[  153.456144][    C1] usbtmc 1-1:16.0: invalid notification: 3
[  153.462227][    C1] usbtmc 1-1:16.0: invalid notification: 2
[  153.468264][    C1] usbtmc 1-1:16.0: invalid notification: 26
[  153.474424][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.480735][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.486782][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.492945][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.499845][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.507878][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.514513][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.520845][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.526953][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.533068][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.539099][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.545132][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.551212][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.557242][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.563363][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.569460][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.575531][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.581598][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.587641][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.593779][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.599862][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.606423][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.613658][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.620835][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.626872][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.632938][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.639147][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.645991][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.652154][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.658281][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.664364][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.670422][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.676468][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.682548][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.688611][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.694691][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.700735][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.706776][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.714917][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.721339][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.727422][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.733513][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.739760][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.745891][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.751935][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.758200][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.767396][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.773851][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.780119][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.786389][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.792747][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.799014][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.805402][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.811771][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.820890][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.827185][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.833340][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.839369][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.845899][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.852444][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.858488][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.864584][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.870724][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.876762][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.882820][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.888850][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.894927][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.900956][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.906992][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.913040][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.920419][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.930933][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.936994][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.943031][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.949075][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.955127][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.962831][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.969475][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.975557][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.981622][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.987650][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.993728][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  153.999809][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.005868][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.011899][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.019869][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.025938][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.031980][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.038012][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.044063][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.050181][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.056216][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.062270][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.068325][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.074392][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.080446][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.086478][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.092542][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.098582][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.099657][ T6599] loop5: detected capacity change from 0 to 1024
[  154.104600][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.116900][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.124602][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.131663][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.137753][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.143786][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.149822][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.155878][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.163248][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.169298][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.175417][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.181475][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.188458][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.194545][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.200742][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.206783][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.212869][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.218903][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.227230][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.233335][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.239376][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.245434][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.251498][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.257534][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.263622][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.269668][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.275743][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.281816][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.288104][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.294236][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.300522][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.306576][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.312612][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.318738][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.326540][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.332724][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.338761][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.344849][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.350915][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.356993][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.363044][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.369078][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.375126][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.381160][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.387187][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.393230][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.399269][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.405425][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.411539][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.417575][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.423622][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.431596][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.437626][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.443860][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.449895][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.450937][ T5903] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  154.455958][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.469267][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.475301][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.481385][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.487440][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.493504][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.499582][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.505738][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.511877][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.518051][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.524132][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.531894][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.537964][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.544026][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  154.587670][ T5825] usb 1-1: USB disconnect, device number 7
[  154.684883][   T36] hfsplus: b-tree write err: -5, ino 4
[  154.741122][ T5903] usb 4-1: Using ep0 maxpacket: 32
[  154.769304][ T5903] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  154.785618][ T6603] loop0: detected capacity change from 0 to 256
[  154.807904][ T5903] usb 4-1: config 0 has no interface number 0
[  154.830977][ T5903] usb 4-1: config 0 interface 12 has no altsetting 0
[  154.854142][ T5903] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  154.881890][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.915730][ T5903] usb 4-1: Product: syz
[  154.952657][ T5903] usb 4-1: Manufacturer: syz
[  154.957348][ T5903] usb 4-1: SerialNumber: syz
[  155.042125][ T5903] usb 4-1: config 0 descriptor??
[  155.085336][ T6603] FAT-fs (loop0): Directory bread(block 64) failed
[  155.115198][ T6603] FAT-fs (loop0): Directory bread(block 65) failed
[  155.136942][ T6603] FAT-fs (loop0): Directory bread(block 66) failed
[  155.210638][ T6603] FAT-fs (loop0): Directory bread(block 67) failed
[  155.217446][ T6603] FAT-fs (loop0): Directory bread(block 68) failed
[  155.250418][ T6603] FAT-fs (loop0): Directory bread(block 69) failed
[  155.270120][ T6603] FAT-fs (loop0): Directory bread(block 70) failed
[  155.290082][ T6603] FAT-fs (loop0): Directory bread(block 71) failed
[  155.303341][ T6603] FAT-fs (loop0): Directory bread(block 72) failed
[  155.340368][ T6603] FAT-fs (loop0): Directory bread(block 73) failed
[  155.462557][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  155.472310][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  155.480866][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  155.490247][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.498690][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  155.573951][   T30] audit: type=1800 audit(1743746600.254:5): pid=6603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.166" name="file2" dev="loop0" ino=4 res=0 errno=0
[  155.577211][ T6610] loop5: detected capacity change from 0 to 512
[  155.601630][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.637221][ T6610] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  155.771497][ T6610] EXT4-fs (loop5): 1 truncate cleaned up
[  155.779868][ T6610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.834902][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.858811][ T6610] fuse: Bad value for 'group_id'
[  155.864150][ T6610] fuse: Bad value for 'group_id'
[  156.052446][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.129513][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.423413][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.584050][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.846063][ T6611] loop4: detected capacity change from 0 to 32768
[  156.920856][ T6611] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.160 (6611)
[  157.016075][ T6611] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  157.050192][ T6611] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  157.121241][ T5903] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  157.123883][ T6611] BTRFS info (device loop4): using free-space-tree
[  157.158186][ T5903] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  157.230232][ T5903] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  157.298907][ T5903] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  157.393582][ T5903] usb 4-1: USB disconnect, device number 3
[  157.490914][ T6606] chnl_net:caif_netlink_parms(): no params data found
[  157.561223][ T5844] Bluetooth: hci4: command tx timeout
[  157.618180][   T36] bridge_slave_1: left allmulticast mode
[  157.680175][   T36] bridge_slave_1: left promiscuous mode
[  157.687722][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.932641][ T6617] loop5: detected capacity change from 0 to 32768
[  157.969878][   T36] bridge_slave_0: left allmulticast mode
[  158.012364][   T36] bridge_slave_0: left promiscuous mode
[  158.020552][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.040472][ T6617] BTRFS: device /dev/loop5 (7:5) using temp-fsid e28770ca-c94c-4050-a012-e1a9f4cbc31d
[  158.119519][ T6617] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.170 (6617)
[  158.121367][ T5845] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  158.232492][ T6617] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  158.330174][ T6617] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  158.339698][ T6617] BTRFS info (device loop5): using free-space-tree
[  158.872874][ T6670] netlink: 92 bytes leftover after parsing attributes in process `syz.3.177'.
[  159.381564][ T5837] BTRFS info (device loop5): last unmount of filesystem e28770ca-c94c-4050-a012-e1a9f4cbc31d
[  159.500929][  T972] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  159.640359][ T5844] Bluetooth: hci4: command tx timeout
[  159.684795][  T972] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.705092][  T972] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  159.737037][  T972] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  159.755227][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.774989][  T972] usb 1-1: Product: syz
[  159.782364][  T972] usb 1-1: Manufacturer: syz
[  159.791975][  T972] usb 1-1: SerialNumber: syz
[  159.976178][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.001844][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.021394][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.030877][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.062084][   T36] bond0 (unregistering): Released all slaves
[  160.092756][  T972] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  160.130340][  T972] usb 1-1: USB disconnect, device number 8
[  160.198486][ T6683] loop5: detected capacity change from 0 to 512
[  160.268352][ T6683] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  160.310811][ T6683] EXT4-fs (loop5): orphan cleanup on readonly fs
[  160.332560][ T6683] EXT4-fs warning (device loop5): ext4_enable_quotas:7166: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  160.357020][ T6683] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  160.367607][ T6683] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.180: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  160.387880][ T6683] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.180: couldn't read orphan inode 13 (err -117)
[  160.403720][ T6683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  160.484481][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.578458][  T972] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  160.785882][  T972] usb 1-1: Using ep0 maxpacket: 8
[  160.854615][  T972] usb 1-1: config index 0 descriptor too short (expected 301, got 72)
[  160.862897][  T972] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  160.873592][  T972] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  160.885369][  T972] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  160.930015][  T972] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  160.950003][  T972] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.976305][  T972] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  161.035561][ T6694] loop5: detected capacity change from 0 to 164
[  161.050092][  T972] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  161.086885][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.336202][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.336432][  T972] usb 1-1: usb_control_msg returned -32
[  161.347759][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.393173][  T972] usbtmc 1-1:16.0: can't read capabilities
[  161.434791][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.477639][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.495021][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.532348][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.544488][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.550707][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.556740][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.562985][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.567260][ T6606] bridge_slave_0: entered allmulticast mode
[  161.569191][    C1] usbtmc 1-1:16.0: invalid notification: 11
[  161.590061][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.597840][    C1] usbtmc 1-1:16.0: invalid notification: 2
[  161.603887][    C1] usbtmc 1-1:16.0: invalid notification: 5
[  161.609980][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.616056][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.620137][ T6606] bridge_slave_0: entered promiscuous mode
[  161.622080][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.633843][    C1] usbtmc 1-1:16.0: invalid notification: 12
[  161.640261][    C1] usbtmc 1-1:16.0: invalid notification: 3
[  161.646316][    C1] usbtmc 1-1:16.0: invalid notification: 2
[  161.659998][    C1] usbtmc 1-1:16.0: invalid notification: 26
[  161.666151][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.672233][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.678265][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.684312][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.690387][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.697703][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.704096][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.710183][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.716229][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.721292][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.722854][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.735132][ T5844] Bluetooth: hci4: command tx timeout
[  161.735132][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.735368][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.752471][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.758503][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.764538][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.770618][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.776657][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.782732][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.788987][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.793183][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.800125][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.809693][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.815756][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.821792][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.827823][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.833854][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.840015][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.846109][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.852144][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.858169][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.864236][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.870322][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.874768][ T6606] bridge_slave_1: entered allmulticast mode
[  161.876329][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.888191][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.894551][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.901042][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.908330][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.914361][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.920406][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.926486][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.932780][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.938824][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.944862][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.950924][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.956988][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.963017][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.969044][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.975082][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.981148][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.987183][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  161.990285][ T6606] bridge_slave_1: entered promiscuous mode
[  161.993186][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.005767][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.012294][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.018324][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.024340][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.030371][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.036505][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.042632][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.048663][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.054718][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.060802][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.066831][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.072851][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.078876][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.084897][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.090928][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.096953][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.102984][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.110430][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.116454][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.122484][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.128513][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.134540][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.140575][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.146621][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.152698][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.158711][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.164772][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.170864][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.176890][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.182959][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.188989][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.195009][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.201086][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.207715][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.215272][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.222711][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.228743][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.235079][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.241197][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.247487][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.253989][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.260120][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.266147][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.272432][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.278467][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.284654][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.290707][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.296821][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.302850][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.308881][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.316267][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.322313][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.328359][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.334506][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.340540][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.346580][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.352702][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.358731][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.364765][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.370800][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.376831][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.382860][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.389256][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.395517][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.401758][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.407808][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.415338][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.421382][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.427421][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.433457][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.439495][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.445546][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.451586][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.457638][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.463752][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.469811][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.475869][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.481933][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.487978][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.494026][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.500128][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.506172][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.512266][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.519625][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.525724][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.531756][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.537966][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.544070][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.550150][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.556183][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.562233][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.568266][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.574299][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.580331][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.586382][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.592419][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.598465][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.601388][ T6606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.604694][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.620846][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.626891][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.633137][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.639300][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.645380][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.651487][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.657546][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.665510][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.671927][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.678236][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.684326][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.690371][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.696407][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.702499][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.708535][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.714564][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.722044][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.728356][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.734445][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.740511][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.746650][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.752695][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.756636][ T6606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.758716][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.773730][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.779769][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.785833][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.791899][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.797943][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.804013][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.810107][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.816153][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.822220][    C1] usbtmc 1-1:16.0: invalid notification: 0
[  162.966835][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.188'.
[  163.009152][   T36] hsr_slave_0: left promiscuous mode
[  163.047893][  T972] usb 1-1: USB disconnect, device number 9
[  163.050015][   T36] hsr_slave_1: left promiscuous mode
[  163.095472][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.141784][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.173959][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.188555][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.243837][   T36] veth1_macvtap: left promiscuous mode
[  163.267560][   T36] veth0_macvtap: left promiscuous mode
[  163.283685][   T36] veth1_vlan: left promiscuous mode
[  163.289134][   T36] veth0_vlan: left promiscuous mode
[  163.536009][ T6696] loop3: detected capacity change from 0 to 40427
[  163.592871][ T6696] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  163.614912][ T6696] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  163.667115][ T6696] F2FS-fs (loop3): invalid crc value
[  163.800259][ T5844] Bluetooth: hci4: command tx timeout
[  163.896829][ T6712] loop4: detected capacity change from 0 to 32768
[  163.993158][ T6712] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.187 (6712)
[  164.237993][ T6712] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  164.270182][ T6712] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  164.320182][ T6712] BTRFS info (device loop4): using free-space-tree
[  164.677304][ T5845] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  164.945530][ T6745] loop0: detected capacity change from 0 to 256
[  164.967568][ T6745] exfat: Deprecated parameter 'namecase'
[  165.091381][ T6745] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  165.453551][ T6749] netlink: 92 bytes leftover after parsing attributes in process `syz.3.191'.
[  165.888500][   T36] team0 (unregistering): Port device team_slave_1 removed
[  165.986887][   T36] team0 (unregistering): Port device team_slave_0 removed
[  166.030522][  T972] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  166.072269][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  166.193105][  T972] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  166.234621][  T972] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  166.246263][  T972] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  166.251651][    T9] usb 4-1: Using ep0 maxpacket: 32
[  166.280786][  T972] usb 5-1: Manufacturer: syz
[  166.291786][    T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  166.295001][  T972] usb 5-1: config 0 descriptor??
[  166.300631][    T9] usb 4-1: config 0 has no interface number 0
[  166.329104][  T972] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  166.330882][    T9] usb 4-1: config 0 interface 12 has no altsetting 0
[  166.366825][    T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  166.394156][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.415234][    T9] usb 4-1: Product: syz
[  166.419427][    T9] usb 4-1: Manufacturer: syz
[  166.429515][    T9] usb 4-1: SerialNumber: syz
[  166.452309][    T9] usb 4-1: config 0 descriptor??
[  166.903511][ T5901] usb 5-1: USB disconnect, device number 7
[  167.104993][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  167.117544][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  167.136510][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  167.157000][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  167.165757][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  167.439051][ T6606] team0: Port device team_slave_0 added
[  167.469243][ T6606] team0: Port device team_slave_1 added
[  167.569840][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.621505][ T6767] loop5: detected capacity change from 0 to 22
[  167.628708][ T6767] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  167.642201][ T6767] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  167.764396][ T6770] loop4: detected capacity change from 0 to 128
[  167.922841][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.930466][ T6770] loop4: detected capacity change from 128 to 0
[  167.935656][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.970618][ T6770] 
[  167.973004][ T6770] ======================================================
[  167.980031][ T6770] WARNING: possible circular locking dependency detected
[  167.987059][ T6770] 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 Not tainted
[  167.993830][ T6770] ------------------------------------------------------
[  168.000848][ T6770] syz.4.199/6770 is trying to acquire lock:
[  168.006741][ T6770] ffffffff906974a8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870
[  168.016556][ T6770] 
[  168.016556][ T6770] but task is already holding lock:
[  168.023918][ T6770] ffff88802595bb28 (&q->q_usage_counter(io)#21){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  168.035205][ T6770] 
[  168.035205][ T6770] which lock already depends on the new lock.
[  168.035205][ T6770] 
[  168.045617][ T6770] 
[  168.045617][ T6770] the existing dependency chain (in reverse order) is:
[  168.054635][ T6770] 
[  168.054635][ T6770] -> #2 (&q->q_usage_counter(io)#21){++++}-{0:0}:
[  168.063279][ T6770]        blk_alloc_queue+0x619/0x760
[  168.068609][ T6770]        blk_mq_alloc_queue+0x179/0x290
[  168.074172][ T6770]        __blk_mq_alloc_disk+0x29/0x120
[  168.079735][ T6770]        loop_add+0x496/0xb70
[  168.084425][ T6770]        loop_init+0x164/0x270
[  168.089204][ T6770]        do_one_initcall+0x123/0x6e0
[  168.094522][ T6770]        kernel_init_freeable+0x5c2/0x900
[  168.100261][ T6770]        kernel_init+0x1c/0x2b0
[  168.105116][ T6770]        ret_from_fork+0x48/0x80
[  168.110067][ T6770]        ret_from_fork_asm+0x1a/0x30
[  168.115390][ T6770] 
[  168.115390][ T6770] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  168.122631][ T6770]        fs_reclaim_acquire+0x102/0x150
[  168.128199][ T6770]        kmem_cache_alloc_node_noprof+0x57/0x3b0
[  168.134562][ T6770]        __alloc_skb+0x2b2/0x380
[  168.139526][ T6770]        alloc_uevent_skb+0x7d/0x210
[  168.144858][ T6770]        kobject_uevent_env+0xca4/0x1870
[  168.150530][ T6770]        kobject_synth_uevent+0x7d4/0x8a0
[  168.156284][ T6770]        bus_uevent_store+0x3d/0x90
[  168.161503][ T6770]        bus_attr_store+0x74/0xb0
[  168.166541][ T6770]        sysfs_kf_write+0xf2/0x150
[  168.171682][ T6770]        kernfs_fop_write_iter+0x354/0x510
[  168.177508][ T6770]        vfs_write+0x5bd/0x1180
[  168.182481][ T6770]        ksys_write+0x12a/0x240
[  168.187374][ T6770]        do_syscall_64+0xcd/0x260
[  168.192427][ T6770]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.198853][ T6770] 
[  168.198853][ T6770] -> #0 (uevent_sock_mutex){+.+.}-{4:4}:
[  168.206707][ T6770]        __lock_acquire+0x1173/0x1ba0
[  168.212088][ T6770]        lock_acquire+0x179/0x350
[  168.217121][ T6770]        __mutex_lock+0x199/0xb90
[  168.222168][ T6770]        kobject_uevent_env+0xb36/0x1870
[  168.227829][ T6770]        loop_set_status+0x9c7/0xb90
[  168.233130][ T6770]        lo_ioctl+0x729/0x26d0
[  168.237903][ T6770]        blkdev_ioctl+0x277/0x6d0
[  168.242956][ T6770]        __x64_sys_ioctl+0x193/0x200
[  168.248261][ T6770]        do_syscall_64+0xcd/0x260
[  168.253312][ T6770]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.259745][ T6770] 
[  168.259745][ T6770] other info that might help us debug this:
[  168.259745][ T6770] 
[  168.269977][ T6770] Chain exists of:
[  168.269977][ T6770]   uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#21
[  168.269977][ T6770] 
[  168.283789][ T6770]  Possible unsafe locking scenario:
[  168.283789][ T6770] 
[  168.291366][ T6770]        CPU0                    CPU1
[  168.296746][ T6770]        ----                    ----
[  168.302119][ T6770]   lock(&q->q_usage_counter(io)#21);
[  168.307958][ T6770]                                lock(fs_reclaim);
[  168.314477][ T6770]                                lock(&q->q_usage_counter(io)#21);
[  168.322401][ T6770]   lock(uevent_sock_mutex);
[  168.327006][ T6770] 
[  168.327006][ T6770]  *** DEADLOCK ***
[  168.327006][ T6770] 
[  168.335148][ T6770] 3 locks held by syz.4.199/6770:
[  168.340180][ T6770]  #0: ffff88802597db68 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2a/0xb90
[  168.349642][ T6770]  #1: ffff88802595bb28 (&q->q_usage_counter(io)#21){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  168.361376][ T6770]  #2: ffff88802595bb60 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  168.373384][ T6770] 
[  168.373384][ T6770] stack backtrace:
[  168.379274][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.4.199 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) 
[  168.379316][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  168.379337][ T6770] Call Trace:
[  168.379351][ T6770]  <TASK>
[  168.379363][ T6770]  dump_stack_lvl+0x116/0x1f0
[  168.379409][ T6770]  print_circular_bug+0x275/0x350
[  168.379465][ T6770]  check_noncircular+0x14c/0x170
[  168.379522][ T6770]  __lock_acquire+0x1173/0x1ba0
[  168.379561][ T6770]  lock_acquire+0x179/0x350
[  168.379589][ T6770]  ? kobject_uevent_env+0xb36/0x1870
[  168.379645][ T6770]  ? __pfx___might_resched+0x10/0x10
[  168.379697][ T6770]  __mutex_lock+0x199/0xb90
[  168.379740][ T6770]  ? kobject_uevent_env+0xb36/0x1870
[  168.379791][ T6770]  ? rcu_is_watching+0x12/0xc0
[  168.379834][ T6770]  ? kobject_uevent_env+0xb36/0x1870
[  168.379888][ T6770]  ? __pfx___mutex_lock+0x10/0x10
[  168.379943][ T6770]  ? __asan_memcpy+0x3c/0x60
[  168.379988][ T6770]  ? srso_alias_return_thunk+0x5/0xfbef5
[  168.380028][ T6770]  ? kobject_get_path+0x8e/0x2a0
[  168.380077][ T6770]  ? kobject_uevent_env+0xb36/0x1870
[  168.380128][ T6770]  ? srso_alias_return_thunk+0x5/0xfbef5
[  168.380166][ T6770]  kobject_uevent_env+0xb36/0x1870
[  168.380223][ T6770]  ? srso_alias_return_thunk+0x5/0xfbef5
[  168.380262][ T6770]  ? __asan_memcpy+0x3c/0x60
[  168.380307][ T6770]  loop_set_status+0x9c7/0xb90
[  168.380370][ T6770]  lo_ioctl+0x729/0x26d0
[  168.380408][ T6770]  ? srso_alias_return_thunk+0x5/0xfbef5
[  168.380447][ T6770]  ? kasan_save_stack+0x42/0x60
[  168.380496][ T6770]  ? kasan_save_stack+0x33/0x60
[  168.380542][ T6770]  ? kasan_save_track+0x14/0x30
[  168.380588][ T6770]  ? kasan_save_free_info+0x3b/0x60
[  168.380628][ T6770]  ? __kasan_slab_free+0x51/0x70
[  168.380677][ T6770]  ? kfree+0x2b6/0x4d0
[  168.380717][ T6770]  ? tomoyo_path_number_perm+0x470/0x580
[  168.380755][ T6770]  ? security_file_ioctl+0x9b/0x240
[  168.380794][ T6770]  ? __x64_sys_ioctl+0xb7/0x200
[  168.380832][ T6770]  ? do_syscall_64+0xcd/0x260
[  168.380874][ T6770]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.380914][ T6770]  ? __pfx_lo_ioctl+0x10/0x10
[  168.380978][ T6770]  ? srso_alias_return_thunk+0x5/0xfbef5
[  168.381017][ T6770]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  168.381054][ T6770]  ? srso_alias_return_thunk+0x5/0xfbef5
[  168.381092][ T6770]  ? blkdev_common_ioctl+0x1dd/0x2250
[  168.381144][ T6770]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  168.381181][ T6770]  ? srso_alias_return_thunk+0x5/0xfbef5
[  168.381219][ T6770]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  168.381255][ T6770]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  168.381307][ T6770]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  168.381353][ T6770]  ? srso_alias_return_thunk+0x5/0xfbef5
[  168.381405][ T6770]  ? srso_alias_return_thunk+0x5/0xfbef5
[  168.381443][ T6770]  ? find_held_lock+0x2b/0x80
[  168.381484][ T6770]  ? srso_alias_return_thunk+0x5/0xfbef5
[  168.381524][ T6770]  ? __pfx_lo_ioctl+0x10/0x10
[  168.381559][ T6770]  blkdev_ioctl+0x277/0x6d0
[  168.381609][ T6770]  ? __pfx_blkdev_ioctl+0x10/0x10
[  168.381658][ T6770]  ? __entry_text_end+0x1020c5/0x1020c9
[  168.381699][ T6770]  ? __pfx_blkdev_ioctl+0x10/0x10
[  168.381751][ T6770]  __x64_sys_ioctl+0x193/0x200
[  168.381793][ T6770]  do_syscall_64+0xcd/0x260
[  168.381838][ T6770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.381870][ T6770] RIP: 0033:0x7fca36f8d169
[  168.381895][ T6770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.381927][ T6770] RSP: 002b:00007fca37db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.381957][ T6770] RAX: ffffffffffffffda RBX: 00007fca371a5fa0 RCX: 00007fca36f8d169
[  168.381979][ T6770] RDX: 00002000000000c0 RSI: 0000000000004c04 RDI: 0000000000000005
[  168.381999][ T6770] RBP: 00007fca3700e2a0 R08: 0000000000000000 R09: 0000000000000000
[  168.382019][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.382039][ T6770] R13: 0000000000000000 R14: 00007fca371a5fa0 R15: 00007ffea2751548
[  168.382071][ T6770]  </TASK>
[  168.773414][ T6606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.785820][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.792831][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.819519][ T6606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.937227][ T6772] syz.4.199: attempt to access beyond end of device
[  168.937227][ T6772] loop4: rw=524288, sector=35, nr_sectors = 1 limit=0
[  168.955422][    C0] I/O error, dev loop4, sector 34 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  169.115092][ T6772] syz.4.199: attempt to access beyond end of device
[  169.115092][ T6772] loop4: rw=524288, sector=36, nr_sectors = 1 limit=0
[  169.186926][ T6606] hsr_slave_0: entered promiscuous mode
[  169.237976][ T6606] hsr_slave_1: entered promiscuous mode
[  169.243829][ T5839] Bluetooth: hci3: command tx timeout
[  169.253846][ T6772] syz.4.199: attempt to access beyond end of device
[  169.253846][ T6772] loop4: rw=524288, sector=37, nr_sectors = 1 limit=0
[  169.275600][ T6606] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.284273][ T6606] Cannot create hsr debugfs directory
[  169.290065][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  169.290629][ T6772] syz.4.199: attempt to access beyond end of device
[  169.290629][ T6772] loop4: rw=524288, sector=38, nr_sectors = 1 limit=0
[  169.310948][ T6772] syz.4.199: attempt to access beyond end of device
[  169.310948][ T6772] loop4: rw=524288, sector=39, nr_sectors = 1 limit=0
[  169.311290][    T9] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  169.350751][ T6772] syz.4.199: attempt to access beyond end of device
[  169.350751][ T6772] loop4: rw=524288, sector=40, nr_sectors = 1 limit=0
[  169.367066][    T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  169.381051][ T6772] syz.4.199: attempt to access beyond end of device
[  169.381051][ T6772] loop4: rw=524288, sector=41, nr_sectors = 1 limit=0
[  169.410207][    T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  169.435512][    T9] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  169.438722][ T6772] syz.4.199: attempt to access beyond end of device
[  169.438722][ T6772] loop4: rw=0, sector=34, nr_sectors = 1 limit=0
[  169.467831][ T6772] FAT-fs (loop4): Directory bread(block 34) failed
[  169.474816][ T6772] syz.4.199: attempt to access beyond end of device
[  169.474816][ T6772] loop4: rw=0, sector=35, nr_sectors = 1 limit=0
[  169.494287][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.503702][ T6772] FAT-fs (loop4): Directory bread(block 35) failed
[  169.509981][    T9] usb 4-1: USB disconnect, device number 4
[  169.513419][ T6772] syz.4.199: attempt to access beyond end of device
[  169.513419][ T6772] loop4: rw=0, sector=36, nr_sectors = 1 limit=0
[  169.530045][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  169.550367][   T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  169.559532][ T6772] FAT-fs (loop4): Directory bread(block 36) failed
[  169.567152][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.587508][ T6772] FAT-fs (loop4): Directory bread(block 37) failed
[  169.591514][   T10] usb 6-1: config 0 descriptor??
[  169.608272][ T6772] FAT-fs (loop4): Directory bread(block 38) failed
[  169.618488][ T6772] FAT-fs (loop4): Directory bread(block 39) failed
[  169.623160][   T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  169.641892][ T6772] FAT-fs (loop4): Directory bread(block 40) failed
[  169.649832][ T6772] FAT-fs (loop4): Directory bread(block 41) failed
[  169.663135][ T6776] FAT-fs (loop4): Directory bread(block 34) failed
[  169.676861][ T6776] FAT-fs (loop4): Directory bread(block 35) failed
[  169.768081][ T5845] FAT-fs (loop4): unable to read boot sector to mark fs as dirty
[  169.877002][ T6762] chnl_net:caif_netlink_parms(): no params data found
[  169.888769][ T6606] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  169.912104][ T6606] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  169.928795][ T6606] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  169.952047][ T6606] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  170.074719][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.084909][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.095394][ T6762] bridge_slave_0: entered allmulticast mode
[  170.105545][ T6762] bridge_slave_0: entered promiscuous mode
[  170.139703][ T6762] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.149435][ T6762] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.157392][ T6762] bridge_slave_1: entered allmulticast mode
[  170.164166][ T6762] bridge_slave_1: entered promiscuous mode
[  170.192947][ T6762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.207427][ T6762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.259861][ T6762] team0: Port device team_slave_0 added
[  170.275431][ T6762] team0: Port device team_slave_1 added
[  170.326730][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.335292][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.368375][ T6762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.388382][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.395539][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.422722][ T6762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.438309][ T6606] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.495668][ T6606] 8021q: adding VLAN 0 to HW filter on device team0
[  170.506600][ T6762] hsr_slave_0: entered promiscuous mode
[  170.518836][ T6762] hsr_slave_1: entered promiscuous mode
[  170.525434][ T6762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.537141][ T6762] Cannot create hsr debugfs directory
[  170.567331][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.574559][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.614386][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.621656][ T6503] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.724569][ T6606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  170.778122][ T6762] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  170.799449][ T6762] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  170.822258][ T6762] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  170.845147][ T6762] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  170.989209][ T5903] usb 6-1: USB disconnect, device number 2
[  171.011206][ T6606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.042155][ T6762] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.092379][ T6762] 8021q: adding VLAN 0 to HW filter on device team0
[  171.123670][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.130844][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.182134][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.189268][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.320621][ T5839] Bluetooth: hci3: command tx timeout
[  171.444779][ T6606] veth0_vlan: entered promiscuous mode
[  171.457235][ T6606] veth1_vlan: entered promiscuous mode
[  171.503874][ T6606] veth0_macvtap: entered promiscuous mode
[  171.518692][ T6606] veth1_macvtap: entered promiscuous mode
[  171.538965][ T6762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.587409][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.599595][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.629985][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.642110][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.652287][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.662823][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.672700][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.683300][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.693164][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.703758][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.714669][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.742703][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.761614][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.772155][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.783260][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.793306][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.804188][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.814329][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.825226][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.836337][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.846856][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.857865][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.872553][ T6606] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.902481][ T6606] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.913878][ T6606] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.924028][ T6606] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.978817][ T6762] veth0_vlan: entered promiscuous mode
[  171.996004][ T6762] veth1_vlan: entered promiscuous mode
[  172.021879][ T6606] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht'
[  172.067471][ T6497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.069329][ T6606] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht'
[  172.083674][ T6497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.092579][ T6762] veth0_macvtap: entered promiscuous mode
[  172.136427][ T6762] veth1_macvtap: entered promiscuous mode
[  172.151054][ T6512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.158978][ T6512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.169483][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.180798][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.192037][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.203199][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.214730][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.226009][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.236657][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.248261][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.258198][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.268673][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.278620][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.290183][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.301130][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.327859][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.363290][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.375861][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.389459][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.399399][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.419958][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.429803][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.443496][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.459170][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.469722][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.479689][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.490303][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.512406][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.540442][ T6762] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.564966][ T6762] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.575175][ T6762] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.584301][ T6762] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.634112][ T6762] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht'
[  172.675026][ T6497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.685746][ T6762] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht'
[  172.698121][ T6497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.744084][ T6497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.756142][ T6497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.400282][ T5839] Bluetooth: hci3: command tx timeout
[  175.480002][ T5839] Bluetooth: hci3: command tx timeout