last executing test programs:

38.642991061s ago: executing program 5 (id=1627):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}}, 0x0)

38.505184481s ago: executing program 5 (id=1628):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg$unix(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0)

38.222976671s ago: executing program 5 (id=1629):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="2f8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})

37.996718114s ago: executing program 5 (id=1632):
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)

37.763662592s ago: executing program 5 (id=1635):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000808ac1414aa", @ANYRES64=r0], 0x10)

37.474019618s ago: executing program 5 (id=1637):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})

22.875352042s ago: executing program 2 (id=1716):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x1d, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0)

21.616049469s ago: executing program 2 (id=1720):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000080)={[{@sysvgroups}, {@gqnoenforce}, {@nolazytime}, {@ikeep}, {@lazytime}]}, 0x1, 0x9730, &(0x7f0000012f40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c9002000c0000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

18.231104477s ago: executing program 2 (id=1729):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800007f, 0x1c)

17.3736345s ago: executing program 3 (id=1731):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000001c0)={0x28, 0x10000, 0x0, r1, 0xffffffffffffffff, 0x4, 0x8, 0x28fd6f})

17.044941461s ago: executing program 1 (id=1733):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r1, 0x41f, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}]}, 0x3c}}, 0x0)

17.03474527s ago: executing program 3 (id=1734):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000c41"], 0x68}}, 0x0)

16.756968828s ago: executing program 2 (id=1736):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x545)

16.564089239s ago: executing program 1 (id=1737):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x0, 0x2}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000100))

16.543289832s ago: executing program 3 (id=1738):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}]}, 0x3c}}, 0x0)

16.333257587s ago: executing program 2 (id=1739):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0)

16.172579798s ago: executing program 1 (id=1741):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
splice(r0, &(0x7f0000000040)=0x7fffffffffffffff, r1, 0x0, 0x808, 0x0)

16.074979276s ago: executing program 3 (id=1742):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)

15.912509693s ago: executing program 2 (id=1743):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0})

15.73142182s ago: executing program 4 (id=1744):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40186f04, 0x0)

15.675188806s ago: executing program 1 (id=1745):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f67"], 0x78}}, 0x0)

15.655344194s ago: executing program 3 (id=1746):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f00000001c0)=[r1, 0x0], 0x2})

15.278247751s ago: executing program 3 (id=1748):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)

15.160367798s ago: executing program 1 (id=1749):
r0 = socket$inet(0x2, 0x4000000000000001, 0x6)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x8105, 0x4)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0))

14.849425166s ago: executing program 1 (id=1750):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x7d243a6ea807936d, 0x0, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0)

13.625074707s ago: executing program 4 (id=1751):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0)
write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'mem'}, 0x9)
write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock none'], 0xc)

12.681702721s ago: executing program 4 (id=1754):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6e6, &(0x7f0000001640)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

12.102805276s ago: executing program 4 (id=1755):
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2, &(0x7f0000000080), &(0x7f0000002500), &(0x7f0000002540))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0x15, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x9)

11.711277104s ago: executing program 4 (id=1757):
r0 = memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
fcntl$addseals(r0, 0x409, 0xf)

11.407458395s ago: executing program 4 (id=1758):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800f1de2ddb18709ec700000000000000000000100001800c0002800500010000000000300003802c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000008"], 0x24d8}], 0x1}, 0x0)

3.731745384s ago: executing program 0 (id=1766):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

3.608358249s ago: executing program 0 (id=1767):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "8d1763c1ae9b1c03"}}}}}, 0x0)

3.480723279s ago: executing program 0 (id=1768):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x78}}, 0x0)

3.316273266s ago: executing program 0 (id=1769):
r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x1, 0x4, 0x0, 0x40})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f00000004c0)={0x4, 0x41, 0x1, 0x180})

3.201865249s ago: executing program 0 (id=1770):
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05044000000905830391"], 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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")
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x4800)

0s ago: executing program 0 (id=1772):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r1, 0x1, 0x0, 0x0, {0x1c}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

 T8237] XFS: ikeep mount option is deprecated.
[  175.461673][ T8237] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  175.586036][ T5328] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  175.600390][ T8237] XFS (loop0): Ending clean mount
[  175.612265][ T8237] XFS (loop0): Quotacheck needed: Please wait.
[  175.657416][ T1844] corsair-psu 0003:1B1C:1C0D.0015: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.3-1/input0
[  175.679273][ T4614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.694583][ T4614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.711567][ T4614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.726322][ T4614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.733897][ T8237] XFS (loop0): Quotacheck: Done.
[  175.739260][ T4614] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  175.747458][ T4614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.766557][ T5328] usb 5-1: Using ep0 maxpacket: 16
[  175.776351][ T5328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.788594][ T5328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.801498][ T5328] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  175.820134][ T5328] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  175.829435][ T5328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.847012][ T5328] usb 5-1: config 0 descriptor??
[  175.888386][ T1844] corsair-psu 0003:1B1C:1C0D.0015: unable to initialize device (-71)
[  175.937788][ T1844] corsair-psu 0003:1B1C:1C0D.0015: probe with driver corsair-psu failed with error -71
[  175.956124][ T1844] usb 4-1: USB disconnect, device number 7
[  176.075761][ T7382] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  176.089189][ T5285] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  176.122752][ T8272] chnl_net:caif_netlink_parms(): no params data found
[  176.305577][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.329438][ T5328] shield 0003:0955:7214.0016: item fetching failed at offset 4/5
[  176.335425][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.348550][ T5328] shield 0003:0955:7214.0016: Parse failed
[  176.355275][ T5285] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  176.364508][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.383148][ T5328] shield 0003:0955:7214.0016: probe with driver shield failed with error -22
[  176.384233][ T5285] usb 3-1: config 0 descriptor??
[  176.415012][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.436278][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.443529][ T8272] bridge_slave_0: entered allmulticast mode
[  176.482910][ T8272] bridge_slave_0: entered promiscuous mode
[  176.516816][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.533485][ T5281] usb 5-1: USB disconnect, device number 9
[  176.544403][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.573669][ T8272] bridge_slave_1: entered allmulticast mode
[  176.607341][ T8272] bridge_slave_1: entered promiscuous mode
[  176.742943][ T8272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.787531][ T8272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.832078][ T5285] gembird 0003:11FF:3331.0017: unknown main item tag 0x0
[  176.840817][ T5285] gembird 0003:11FF:3331.0017: unknown main item tag 0x0
[  176.858500][ T5285] gembird 0003:11FF:3331.0017: unknown main item tag 0x0
[  176.881783][ T5285] gembird 0003:11FF:3331.0017: unknown main item tag 0x0
[  176.917250][ T5285] gembird 0003:11FF:3331.0017: unknown main item tag 0x0
[  176.931001][ T5285] gembird 0003:11FF:3331.0017: unknown main item tag 0x0
[  176.948195][ T5285] gembird 0003:11FF:3331.0017: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.2-1/input0
[  176.985194][ T8272] team0: Port device team_slave_0 added
[  177.025178][ T8272] team0: Port device team_slave_1 added
[  177.064525][ T5281] usb 3-1: USB disconnect, device number 6
[  177.273321][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.273345][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.273381][ T8272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.296313][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.296336][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.296373][ T8272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.429493][    C0] vkms_vblank_simulate: vblank timer overrun
[  177.485107][ T8272] hsr_slave_0: entered promiscuous mode
[  177.506439][ T8272] hsr_slave_1: entered promiscuous mode
[  177.510866][ T8272] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.510949][ T8272] Cannot create hsr debugfs directory
[  177.776589][ T4614] Bluetooth: hci0: command tx timeout
[  177.826405][ T8294] loop3: detected capacity change from 0 to 32768
[  177.872327][ T8294] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1012 (8294)
[  177.912856][ T8294] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  177.943863][ T8321] loop4: detected capacity change from 0 to 1024
[  177.965596][ T8294] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  177.996985][ T8294] BTRFS info (device loop3): using free-space-tree
[  178.111706][ T8272] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.203927][ T8323] loop0: detected capacity change from 0 to 4096
[  178.229871][ T8323] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  178.293150][ T8323] ntfs3: loop0: It is recommened to use chkdsk.
[  178.538288][ T8323] ntfs3: loop0: failed to convert "076c" to cp437
[  178.568073][ T8358] loop4: detected capacity change from 0 to 64
[  178.585042][ T8323] ntfs3: loop0: ino=5, "/" directory corrupted
[  178.603213][ T8358] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  178.623472][ T6223] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  178.796613][ T8272] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.912723][   T29] audit: type=1326 audit(1727448162.050:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3757df39 code=0x7ffc0000
[  178.955070][   T29] audit: type=1326 audit(1727448162.080:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd3757df39 code=0x7ffc0000
[  179.066047][ T5323] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  179.068277][   T29] audit: type=1326 audit(1727448162.080:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3757df39 code=0x7ffc0000
[  179.095762][    C0] vkms_vblank_simulate: vblank timer overrun
[  179.145441][ T8272] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.177067][   T29] audit: type=1326 audit(1727448162.080:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3757df39 code=0x7ffc0000
[  179.239256][ T5323] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  179.276901][ T5323] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  179.323295][ T5323] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  179.336078][   T29] audit: type=1326 audit(1727448162.080:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fbd3757df39 code=0x7ffc0000
[  179.375783][ T5323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.385787][   T58] vhci_hcd: vhci_device speed not set
[  179.435504][ T8362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  179.450218][   T29] audit: type=1326 audit(1727448162.080:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3757df39 code=0x7ffc0000
[  179.462150][ T5323] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  179.522161][ T8272] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.562605][   T29] audit: type=1326 audit(1727448162.080:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3757df39 code=0x7ffc0000
[  179.775168][ T5323] usb 6-1: USB disconnect, device number 6
[  179.856264][ T5241] Bluetooth: hci0: command tx timeout
[  179.984051][ T8360] loop2: detected capacity change from 0 to 32768
[  179.998092][ T8272] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  180.024082][ T8272] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  180.034354][ T8272] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  180.066238][ T8272] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  180.066983][ T8360] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  180.174853][ T8360] XFS (loop2): Ending clean mount
[  180.229858][ T8272] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.249981][ T8272] 8021q: adding VLAN 0 to HW filter on device team0
[  180.279618][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.286773][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.328150][   T29] audit: type=1800 audit(1727448163.440:37): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1036" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  180.358179][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.365877][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.396604][ T7100] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  180.481317][ T8272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  181.149719][ T8272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.174016][ T8379] loop3: detected capacity change from 0 to 32768
[  181.319567][ T8272] veth0_vlan: entered promiscuous mode
[  181.394747][ T8422] nbd: illegal input index 1966080
[  181.429453][ T8272] veth1_vlan: entered promiscuous mode
[  181.559545][ T8272] veth0_macvtap: entered promiscuous mode
[  181.623281][ T8272] veth1_macvtap: entered promiscuous mode
[  181.678504][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.689275][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.692496][ T8431] loop0: detected capacity change from 0 to 256
[  181.699713][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.716519][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.726973][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.734670][ T8431] exfat: Deprecated parameter 'utf8'
[  181.738094][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.752928][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.763483][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.764027][ T8431] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  181.773417][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.773441][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.773462][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.773481][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.775227][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.869365][ T8435] loop5: detected capacity change from 0 to 512
[  181.888509][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.899199][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.909119][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.919678][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.930110][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.942423][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.952350][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.963308][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.973668][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.984373][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.994308][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.004859][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.016565][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.029357][ T5241] Bluetooth: hci0: command tx timeout
[  182.037064][ T8272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.045788][ T8272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.054596][ T8272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.063435][ T8272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.157611][ T8435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  182.184741][ T8443] loop4: detected capacity change from 0 to 1024
[  182.187583][ T8435] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.215528][ T8443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  182.271924][ T8435] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  182.283374][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.284806][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.291343][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.313587][ T8435] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  182.323825][ T8435] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.1066: Failed to acquire dquot type 0
[  182.344499][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.404548][ T8443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.528449][ T5230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  182.536140][ T8443] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.4.1070: corrupted in-inode xattr: bad e_name length
[  182.625101][ T8450] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #2: comm syz.4.1070: corrupted in-inode xattr: bad e_name length
[  183.012496][ T8462] ax25_connect(): syz.3.1077 uses autobind, please contact jreuter@yaina.de
[  183.078033][ T5229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.114278][ T8466] openvswitch: netlink: Actions may not be safe on all matching packets
[  183.183351][ T8470] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1083'.
[  183.192834][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'.
[  183.406383][ T4614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  183.429587][ T4614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  183.506526][ T4614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  183.530257][ T4614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  183.613600][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  183.633993][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  183.647492][ T7949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.647901][ T5222] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  183.757700][ T5323] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  183.825870][ T8479] loop4: detected capacity change from 0 to 4096
[  183.876109][ T5222] usb 4-1: Using ep0 maxpacket: 8
[  183.883118][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.894868][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.905971][ T5222] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  183.922024][ T7949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.926425][ T5323] usb 2-1: Using ep0 maxpacket: 16
[  183.948706][ T5323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.961701][ T5323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.982186][ T5222] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  184.010885][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.019437][ T5323] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  184.019492][ T5323] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  184.090751][ T5323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.101662][ T5240] Bluetooth: hci0: command tx timeout
[  184.103249][ T5323] usb 2-1: config 0 descriptor??
[  184.137595][ T8479] ntfs3: loop4: failed to convert "0000" to iso8859-14
[  184.138867][ T5222] usb 4-1: config 0 descriptor??
[  184.158792][ T7949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.161682][ T8479] ntfs3: loop4: failed to convert name for inode 1e.
[  184.256941][ T8484] loop5: detected capacity change from 0 to 32768
[  184.341790][ T7949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.352872][ T8484] JBD2: Ignoring recovery information on journal
[  184.507667][ T8484] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  184.536625][ T5323] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  184.544200][ T5323] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max
[  184.620387][ T5323] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0018/input/input16
[  184.646681][ T5222] sunplus 0003:04FC:05D8.0019: item fetching failed at offset 5/7
[  184.657426][ T5222] sunplus 0003:04FC:05D8.0019: probe with driver sunplus failed with error -22
[  184.701865][ T5323] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  184.755577][ T5323] usb 2-1: USB disconnect, device number 10
[  184.770618][ T5230] ocfs2: Unmounting device (7,5) on (node local)
[  184.874403][ T5222] usb 4-1: USB disconnect, device number 8
[  185.044819][ T8507] loop5: detected capacity change from 0 to 4096
[  185.352627][ T7949] bridge_slave_1: left allmulticast mode
[  185.361115][ T7949] bridge_slave_1: left promiscuous mode
[  185.367172][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.397325][ T8516] sctp: [Deprecated]: syz.4.1099 (pid 8516) Use of int in max_burst socket option.
[  185.397325][ T8516] Use struct sctp_assoc_value instead
[  185.425533][ T7949] bridge_slave_0: left allmulticast mode
[  185.435693][ T7949] bridge_slave_0: left promiscuous mode
[  185.452129][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.619421][ T5240] Bluetooth: hci3: command 0x0406 tx timeout
[  185.626183][ T5240] Bluetooth: hci2: command 0x0406 tx timeout
[  185.690100][ T8523] loop2: detected capacity change from 0 to 8
[  185.709203][ T8523] SQUASHFS error: Unable to read directory block [629:46]
[  185.857020][   T54] Bluetooth: hci4: command tx timeout
[  186.022937][ T8507] nfs4: Deprecated parameter 'intr'
[  186.399483][ T8519] loop1: detected capacity change from 0 to 32768
[  186.484526][ T8519] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  186.572505][ T8519] XFS (loop1): Ending clean mount
[  186.585204][ T8519] XFS (loop1): Quotacheck needed: Please wait.
[  186.665227][ T8519] XFS (loop1): Quotacheck: Done.
[  186.704961][ T7949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.719831][ T7949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.732288][ T7949] bond0 (unregistering): Released all slaves
[  186.750791][ T8475] chnl_net:caif_netlink_parms(): no params data found
[  186.759146][ T8272] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  187.040514][   T29] audit: type=1326 audit(1727448170.180:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.4.1110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd3757df39 code=0x0
[  187.165258][ T8559] loop1: detected capacity change from 0 to 16
[  187.217443][ T8559] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  187.296715][ T5222] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  187.388082][ T8558] loop5: detected capacity change from 0 to 4096
[  187.496768][ T5222] usb 4-1: Using ep0 maxpacket: 16
[  187.535413][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.553087][ T8574] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.576040][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.585823][ T5222] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  187.621490][ T8576] loop1: detected capacity change from 0 to 64
[  187.643352][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.666620][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.687005][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.700782][ T8475] bridge_slave_0: entered allmulticast mode
[  187.725499][ T5222] usb 4-1: config 0 descriptor??
[  187.731895][ T8475] bridge_slave_0: entered promiscuous mode
[  187.799991][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.829414][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.856752][ T8475] bridge_slave_1: entered allmulticast mode
[  187.886745][ T8475] bridge_slave_1: entered promiscuous mode
[  187.946040][ T5224] Bluetooth: hci4: command tx timeout
[  188.015062][ T8587] netlink: 'syz.2.1119': attribute type 3 has an invalid length.
[  188.042144][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'.
[  188.216469][ T5222] logitech 0003:046D:CA03.001A: unknown main item tag 0x0
[  188.249040][ T5222] logitech 0003:046D:CA03.001A: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0
[  188.292603][ T5222] logitech 0003:046D:CA03.001A: no inputs found
[  188.459256][ T8475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.468342][   T58] usb 4-1: USB disconnect, device number 9
[  188.596084][ T7949] hsr_slave_0: left promiscuous mode
[  188.697831][ T7949] hsr_slave_1: left promiscuous mode
[  188.722421][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.760230][ T8610] loop5: detected capacity change from 0 to 256
[  188.760698][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.782094][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.807389][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.862297][ T7949] veth1_macvtap: left promiscuous mode
[  188.877634][ T7949] veth0_macvtap: left promiscuous mode
[  188.890689][ T7949] veth1_vlan: left promiscuous mode
[  188.903169][ T7949] veth0_vlan: left promiscuous mode
[  188.976409][ T5323] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  189.139661][ T5323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.162719][ T5323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.198136][ T5323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  189.250640][ T5323] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  189.289013][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.320650][ T5323] usb 3-1: config 0 descriptor??
[  189.347008][ T8616] loop3: detected capacity change from 0 to 4096
[  189.386768][ T8616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.575746][ T8604] loop4: detected capacity change from 0 to 40427
[  189.647140][ T6223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.656192][ T5285] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  189.702371][ T8604] F2FS-fs (loop4): Found nat_bits in checkpoint
[  189.712205][ T8625] loop1: detected capacity change from 0 to 8
[  189.806898][ T5323] hid-udraw 0003:20D6:CB17.001B: unbalanced delimiter at end of report description
[  189.807528][ T8625] SQUASHFS error: Unable to read directory block [631:43]
[  189.820684][ T5285] usb 6-1: Using ep0 maxpacket: 8
[  189.835100][ T5323] hid-udraw 0003:20D6:CB17.001B: parse failed
[  189.842071][ T5323] hid-udraw 0003:20D6:CB17.001B: probe with driver hid-udraw failed with error -22
[  189.857071][ T5285] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.867525][ T5285] usb 6-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[  189.892110][ T5285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.972939][ T5285] usb 6-1: config 0 descriptor??
[  189.982439][ T8604] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  190.008543][ T5323] usb 3-1: USB disconnect, device number 7
[  190.020054][ T5224] Bluetooth: hci4: command tx timeout
[  190.056403][ T5229] syz-executor: attempt to access beyond end of device
[  190.056403][ T5229] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  190.117033][ T5229] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  190.445332][ T5285] kye 0003:0458:5014.001C: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  190.460601][ T5285] kye 0003:0458:5014.001C: unknown main item tag 0x0
[  190.467980][ T5285] kye 0003:0458:5014.001C: unknown main item tag 0x0
[  190.474841][ T5285] kye 0003:0458:5014.001C: unknown main item tag 0x0
[  190.481834][ T5285] kye 0003:0458:5014.001C: unknown main item tag 0x0
[  190.506405][ T5323] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  190.531295][ T5285] kye 0003:0458:5014.001C: unknown main item tag 0x0
[  190.577053][ T5285] kye 0003:0458:5014.001C: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.5-1/input0
[  190.612799][ T5285] kye 0003:0458:5014.001C: tablet-enabling feature report not found
[  190.634698][ T5285] kye 0003:0458:5014.001C: tablet enabling failed
[  190.670025][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.701188][ T5285] usb 6-1: USB disconnect, device number 7
[  190.707284][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.746229][ T5323] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  190.781983][ T5323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.824803][ T5323] usb 4-1: config 0 descriptor??
[  190.964871][ T7949] team0 (unregistering): Port device team_slave_1 removed
[  191.083771][ T7949] team0 (unregistering): Port device team_slave_0 removed
[  191.166351][ T5222] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  191.281041][ T5323] elecom 0003:056E:010D.001D: item fetching failed at offset 0/3
[  191.309599][ T5323] elecom 0003:056E:010D.001D: probe with driver elecom failed with error -22
[  191.353163][ T5222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  191.372020][ T8648] loop5: detected capacity change from 0 to 1024
[  191.413332][ T5222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.424594][ T5222] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  191.451231][ T5222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.483829][ T5323] usb 4-1: USB disconnect, device number 10
[  191.499551][ T5222] usb 2-1: config 0 descriptor??
[  191.606960][ T8650] loop5: detected capacity change from 0 to 512
[  191.715025][ T8650] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  191.799827][ T8650] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  191.846665][ T8646] loop4: detected capacity change from 0 to 32768
[  191.902384][ T8646] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  191.938503][ T5222] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  191.954965][ T5222] elecom 0003:056E:00FE.001E: unknown main item tag 0x6
[  191.966112][ T5222] elecom 0003:056E:00FE.001E: unknown main item tag 0x5
[  191.973427][ T5222] elecom 0003:056E:00FE.001E: unknown main item tag 0x4
[  191.981966][ T5222] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  191.982269][ T5230] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  191.990148][ T5222] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  192.005557][ T5222] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  192.015511][ T5222] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  192.022791][ T5222] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  192.030304][ T5222] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  192.037801][ T5222] elecom 0003:056E:00FE.001E: unknown global tag 0xd
[  192.044689][ T5222] elecom 0003:056E:00FE.001E: item 0 4 1 13 parsing failed
[  192.053221][ T5222] elecom 0003:056E:00FE.001E: probe with driver elecom failed with error -22
[  192.096141][ T5224] Bluetooth: hci4: command tx timeout
[  192.123740][ T8644] loop2: detected capacity change from 0 to 32768
[  192.143458][ T8646] XFS (loop4): Ending clean mount
[  192.170842][ T5285] usb 2-1: USB disconnect, device number 11
[  192.341414][ T8644] JBD2: Ignoring recovery information on journal
[  192.346142][ T8646] syz.4.1139 (8646) used greatest stack depth: 18992 bytes left
[  192.387295][ T5229] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  192.516578][ T8644] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  192.780026][ T8678] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1156'.
[  192.789417][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1156'.
[  193.047314][ T7100] ocfs2: Unmounting device (7,2) on (node local)
[  193.657920][ T8475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.711735][ T8702] tipc: Started in network mode
[  193.731531][ T8702] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  193.756637][ T5323] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  193.782555][ T1259] ieee802154 phy0 wpan0: encryption failed: -22
[  193.789222][ T1259] ieee802154 phy1 wpan1: encryption failed: -22
[  193.818884][ T8702] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:e000:0002
[  193.853236][ T8702] tipc: Enabled bearer <udp:syz2>, priority 10
[  193.904062][ T8475] team0: Port device team_slave_0 added
[  193.953113][ T8475] team0: Port device team_slave_1 added
[  193.956105][ T5323] usb 2-1: Using ep0 maxpacket: 16
[  193.975786][ T5323] usb 2-1: config 0 has no interfaces?
[  193.987355][ T5323] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb
[  194.001917][ T5323] usb 2-1: New USB device strings: Mfr=7, Product=130, SerialNumber=11
[  194.032553][ T5323] usb 2-1: Product: syz
[  194.049327][ T5323] usb 2-1: Manufacturer: syz
[  194.053972][ T5323] usb 2-1: SerialNumber: syz
[  194.107132][ T5323] usb 2-1: config 0 descriptor??
[  194.171968][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.189969][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.310714][ T8475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.389741][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'.
[  194.438195][    T8] usb 2-1: USB disconnect, device number 12
[  194.504681][ T8721] mkiss: ax0: crc mode is auto.
[  194.506592][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.506614][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.506650][ T8475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.597186][ T8701] loop5: detected capacity change from 0 to 32768
[  194.646744][ T8701] XFS: ikeep mount option is deprecated.
[  194.646776][ T8701] XFS: noikeep mount option is deprecated.
[  194.677322][ T8701] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  194.769403][ T8701] XFS (loop5): Ending clean mount
[  194.771715][ T8701] XFS (loop5): Quotacheck needed: Please wait.
[  194.809569][ T8475] hsr_slave_0: entered promiscuous mode
[  194.828494][ T8475] hsr_slave_1: entered promiscuous mode
[  194.836336][ T8475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.836365][ T8475] Cannot create hsr debugfs directory
[  194.847387][ T5328] tipc: Node number set to 1
[  194.942614][ T8701] XFS (loop5): Quotacheck: Done.
[  194.999313][ T5230] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  195.594466][ T8764] tmpfs: Bad value for 'mpol'
[  196.138369][ T8785] loop5: detected capacity change from 0 to 128
[  196.735684][ T8808] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  196.742263][ T8808] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  196.871376][ T8808] vhci_hcd vhci_hcd.0: Device attached
[  196.909389][ T8809] vhci_hcd: connection closed
[  196.916907][ T1122] vhci_hcd: stop threads
[  196.945990][ T1122] vhci_hcd: release socket
[  196.959305][ T1122] vhci_hcd: disconnect device
[  197.159749][ T8776] loop3: detected capacity change from 0 to 32768
[  197.189495][ T8475] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  197.214482][ T8776] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  197.265160][ T8475] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  197.317835][ T8475] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  197.359667][ T8475] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  197.542418][ T8801] loop5: detected capacity change from 0 to 32768
[  197.612233][ T8776] XFS (loop3): Ending clean mount
[  197.624843][ T8475] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.654248][ T8801] JBD2: Ignoring recovery information on journal
[  197.720362][ T8801] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  197.739911][ T8776] UBIFS error (pid: 8776): cannot open "./bus", error -22
[  197.780887][ T8475] 8021q: adding VLAN 0 to HW filter on device team0
[  197.830506][ T8475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  197.841388][ T8475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.868303][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.875494][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.910441][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.917752][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.152879][ T6223] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.403667][ T5230] ocfs2: Unmounting device (7,5) on (node local)
[  198.711968][ T8475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.069531][ T8475] veth0_vlan: entered promiscuous mode
[  199.107618][ T8475] veth1_vlan: entered promiscuous mode
[  199.587701][ T8475] veth0_macvtap: entered promiscuous mode
[  199.597378][ T8475] veth1_macvtap: entered promiscuous mode
[  199.698168][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.709101][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.719016][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.729555][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.739446][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.750662][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.761208][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.771908][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.781862][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.792429][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.802571][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.813131][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.824787][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.834529][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.845873][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.857064][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.867562][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.877457][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.888031][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.897887][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.908391][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.918300][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.928855][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.938756][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.949899][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.962046][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.976169][ T8898] CUSE: DEVNAME unspecified
[  200.054663][ T8906] loop4: detected capacity change from 0 to 256
[  200.061801][ T8906] exfat: Deprecated parameter 'utf8'
[  200.067897][ T8906] exfat: Deprecated parameter 'utf8'
[  200.073332][ T8906] exfat: Deprecated parameter 'utf8'
[  200.140610][ T8475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.183276][ T8906] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  200.211231][ T8475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.241663][ T8475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.303322][ T8475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.463042][ T8921] loop2: detected capacity change from 0 to 512
[  200.639402][ T8921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.678335][    T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  200.745535][ T8921] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.791778][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.833764][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.842232][ T8918] loop5: detected capacity change from 0 to 32768
[  200.899040][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.917351][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  200.944985][ T8931] loop3: detected capacity change from 0 to 4096
[  200.948571][    T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  200.962432][ T8931] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  200.986110][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  201.043669][ T8918] JBD2: Ignoring recovery information on journal
[  201.071776][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.091246][    T8] usb 2-1: SerialNumber: syz
[  201.124256][ T8931] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  201.157084][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.238000][ T7100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.252680][ T8931] Process accounting resumed
[  201.318455][ T8918] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  201.369299][    T8] usb 2-1: 0:2 : does not exist
[  201.453659][    T8] usb 2-1: USB disconnect, device number 13
[  201.540592][ T8949] binder: BINDER_SET_CONTEXT_MGR already set
[  201.551630][ T5221] udevd[5221]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.592343][ T8949] binder: 8947:8949 ioctl 40046207 0 returned -16
[  201.685422][ T5230] ocfs2: Unmounting device (7,5) on (node local)
[  201.702860][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'.
[  202.541700][ T8983] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1237'.
[  202.556250][ T8983] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1237'.
[  202.619032][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'.
[  203.769889][ T9037] xt_CT: No such helper "syz1"
[  203.863104][ T9043] loop2: detected capacity change from 0 to 1024
[  203.901255][ T9043] hfsplus: invalid extent btree flag
[  203.927128][ T9043] hfsplus: failed to load extents file
[  204.014149][ T9043] RDS: rds_bind could not find a transport for b43:5899:af77:7060:ba8b:29fe:de55:21b8, load rds_tcp or rds_rdma?
[  204.059932][ T9053] loop4: detected capacity change from 0 to 256
[  204.393241][ T7949] bridge_slave_1: left allmulticast mode
[  204.426669][ T7949] bridge_slave_1: left promiscuous mode
[  204.454669][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.532477][ T9071] loop1: detected capacity change from 0 to 512
[  204.544295][ T7949] bridge_slave_0: left allmulticast mode
[  204.558690][ T9071] EXT4-fs: Ignoring removed oldalloc option
[  204.569534][ T7949] bridge_slave_0: left promiscuous mode
[  204.575288][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.595797][ T9071] EXT4-fs: Ignoring removed oldalloc option
[  204.621945][ T9071] EXT4-fs (loop1): orphan cleanup on readonly fs
[  204.642015][ T9071] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1283: Parent and EA inode have the same ino 15
[  204.724079][ T9078] loop5: detected capacity change from 0 to 64
[  204.726087][   T58] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  204.769111][ T9071] EXT4-fs (loop1): Remounting filesystem read-only
[  204.778501][ T9071] EXT4-fs (loop1): 1 orphan inode deleted
[  204.797699][ T9071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  204.886288][   T58] usb 4-1: Using ep0 maxpacket: 16
[  204.905086][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.931709][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.956653][ T8272] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.000715][   T58] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  205.030008][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.093228][   T58] usb 4-1: config 0 descriptor??
[  205.270353][ T9068] loop4: detected capacity change from 0 to 32768
[  205.322625][ T9068] XFS: ikeep mount option is deprecated.
[  205.379024][ T9068] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  205.557246][   T58] smartjoyplus 0003:6666:8804.001F: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.3-1/input0
[  205.607725][   T58] smartjoyplus 0003:6666:8804.001F: no output reports found
[  205.673221][ T9068] XFS (loop4): Ending clean mount
[  205.683211][ T9068] XFS (loop4): Quotacheck needed: Please wait.
[  205.724874][ T9068] XFS (loop4): Quotacheck: Done.
[  205.735826][    T8] usb 4-1: USB disconnect, device number 11
[  205.834086][ T5229] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  205.949084][ T7949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.996442][ T7949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.027798][ T7949] bond0 (unregistering): Released all slaves
[  206.057611][ T9076] netlink: 'syz.2.1285': attribute type 30 has an invalid length.
[  206.094830][ T9088] tipc: Started in network mode
[  206.100414][ T9088] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711
[  206.117561][ T9088] tipc: Enabled bearer <udp:s>, priority 10
[  206.751013][ T9130] loop4: detected capacity change from 0 to 164
[  206.796735][ T9130] Unable to read rock-ridge attributes
[  206.818087][ T9130] Unable to read rock-ridge attributes
[  206.876945][    T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  206.962508][ T9132] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1307'.
[  206.977645][ T9132] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  207.016408][ T5320] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  207.103223][ T7949] hsr_slave_0: left promiscuous mode
[  207.103643][    T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  207.148381][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.156679][ T7949] hsr_slave_1: left promiscuous mode
[  207.162401][    T8] usb 2-1: Product: syz
[  207.166908][    T8] usb 2-1: Manufacturer: syz
[  207.171536][    T8] usb 2-1: SerialNumber: syz
[  207.180391][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.181445][    T8] usb 2-1: config 0 descriptor??
[  207.204350][    T8] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  207.208000][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.237340][   T58] tipc: Node number set to 4269801642
[  207.249564][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.252538][ T9141] loop2: detected capacity change from 0 to 512
[  207.266329][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.324276][ T5320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.345431][ T5320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.357644][ T7949] veth1_macvtap: left promiscuous mode
[  207.359108][ T5320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.374823][ T9144] loop5: detected capacity change from 0 to 256
[  207.383188][   T58] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  207.388167][ T9141] EXT4-fs (loop2): failed to initialize system zone (-117)
[  207.391855][ T7949] veth0_macvtap: left promiscuous mode
[  207.399042][ T9141] EXT4-fs (loop2): mount failed
[  207.430788][ T7949] veth1_vlan: left promiscuous mode
[  207.441477][ T5320] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[  207.446885][ T7949] veth0_vlan: left promiscuous mode
[  207.506249][ T5320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.547929][ T5320] usb 4-1: config 0 descriptor??
[  207.548894][   T58] usb 5-1: Using ep0 maxpacket: 32
[  207.590265][   T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.637190][   T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.681997][   T58] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  207.688574][    T8] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17
[  207.712556][   T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.764862][   T58] usb 5-1: config 0 descriptor??
[  207.977598][ T5320] wacom 0003:056A:00BA.0020: Unknown device_type for 'HID 056a:00ba'. Assuming pen.
[  207.999173][ T5320] wacom 0003:056A:00BA.0020: hidraw0: USB HID v0.00 Device [HID 056a:00ba] on usb-dummy_hcd.3-1/input0
[  208.000530][ T5323] usb 2-1: USB disconnect, device number 14
[  208.012389][ T5320] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BA.0020/input/input18
[  208.184850][ T5320] usb 4-1: USB disconnect, device number 12
[  208.261210][ T9157] loop2: detected capacity change from 0 to 164
[  208.295780][   T58] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0
[  208.336944][   T58] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0
[  208.352563][   T58] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0
[  208.370691][   T58] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0
[  208.410426][   T58] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0
[  208.428469][   T58] aquacomputer_d5next 0003:0C70:F003.0021: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0
[  208.569798][   T58] usb 5-1: USB disconnect, device number 10
[  209.168839][ T9175] loop3: detected capacity change from 0 to 512
[  209.223529][ T9175] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1326: bad orphan inode 13
[  209.267010][ T9175] ext4_test_bit(bit=12, block=4) = 1
[  209.272487][ T9175] is_bad_inode(inode)=0
[  209.280544][ T9175] NEXT_ORPHAN(inode)=0
[  209.284814][ T9175] max_ino=32
[  209.288461][ T9175] i_nlink=1
[  209.408016][ T9175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.448286][ T9175] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.1326: Unrecognised inode hash code 20
[  209.475500][ T9175] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1326: Corrupt directory, running e2fsck is recommended
[  209.522212][ T9175] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.1326: Unrecognised inode hash code 20
[  209.546448][ T9175] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1326: Corrupt directory, running e2fsck is recommended
[  209.649704][ T7949] team0 (unregistering): Port device team_slave_1 removed
[  209.660439][ T6223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.694747][ T9173] loop2: detected capacity change from 0 to 32768
[  209.819823][ T9173] JBD2: Ignoring recovery information on journal
[  209.902925][ T7949] team0 (unregistering): Port device team_slave_0 removed
[  209.917348][ T9179] loop0: detected capacity change from 0 to 32768
[  209.952539][ T9173] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  210.013982][ T9179] JBD2: Ignoring recovery information on journal
[  210.056349][   T58] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  210.065759][ T9179] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  210.171010][ T8475] ocfs2: Unmounting device (7,0) on (node local)
[  210.179148][ T7100] ocfs2: Unmounting device (7,2) on (node local)
[  210.240879][   T58] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  210.256121][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.292146][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.326339][   T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  210.366269][   T58] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  210.375365][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.477574][   T58] usb 4-1: config 0 descriptor??
[  210.738464][ T5323] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  210.904087][ T5323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.922266][ T5323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.938816][   T58] uclogic 0003:5543:0003.0022: No inputs registered, leaving
[  210.954125][   T58] uclogic 0003:5543:0003.0022: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.3-1/input0
[  210.978824][ T5323] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  210.991077][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.018115][ T5323] usb 3-1: config 0 descriptor??
[  211.113441][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'.
[  211.141494][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'.
[  211.188604][ T9171] veth1_to_bridge: entered promiscuous mode
[  211.202251][   T58] usb 4-1: USB disconnect, device number 13
[  211.207335][ T9171] macvlan2: entered promiscuous mode
[  211.238184][ T9171] macvlan2: entered allmulticast mode
[  211.250109][ T9171] veth1_to_bridge: entered allmulticast mode
[  211.362281][ T9203] openvswitch: netlink: Actions may not be safe on all matching packets
[  211.451570][ T5323] asus 0003:0B05:17E0.0023: item fetching failed at offset 5/7
[  211.470643][ T5323] asus 0003:0B05:17E0.0023: Asus hid parse failed: -22
[  211.484689][ T5323] asus 0003:0B05:17E0.0023: probe with driver asus failed with error -22
[  211.534296][ T9206] netlink: 'syz.4.1338': attribute type 3 has an invalid length.
[  211.569032][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1339'.
[  211.650187][ T5320] usb 3-1: USB disconnect, device number 8
[  211.683532][ T9207] vlan2: entered promiscuous mode
[  211.698999][ T9207] gretap0: entered promiscuous mode
[  211.720741][ T9211] ucma_write: process 33 (syz.0.1341) changed security contexts after opening file descriptor, this is not allowed.
[  211.783399][ T9213] loop4: detected capacity change from 0 to 64
[  212.501312][ T9236] loop4: detected capacity change from 0 to 4096
[  212.556550][ T9236] NILFS (loop4): invalid segment: Checksum error in segment payload
[  212.564612][ T9236] NILFS (loop4): trying rollback from an earlier position
[  212.671104][ T9236] NILFS (loop4): recovery complete
[  212.699890][ T9250] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  212.736859][ T9249] usb usb8: usbfs: process 9249 (syz.1.1359) did not claim interface 0 before use
[  212.788568][ T9254] loop5: detected capacity change from 0 to 256
[  212.849834][ T9254] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x2fab2b20, utbl_chksum : 0xe619d30d)
[  212.854377][ T9247] loop3: detected capacity change from 0 to 4096
[  213.065757][ T9247] ntfs3: loop3: failed to convert "0000" to iso8859-14
[  213.087390][ T9247] ntfs3: loop3: failed to convert name for inode 1e.
[  213.585690][ T9280] loop0: detected capacity change from 0 to 1024
[  213.623950][ T9280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.649953][ T9276] loop1: detected capacity change from 0 to 4096
[  213.687345][ T9276] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  213.692483][ T9282] loop2: detected capacity change from 0 to 4096
[  213.713036][ T9280] EXT4-fs error (device loop0): ext4_get_first_dir_block:3554: inode #11: comm syz.0.1374: directory missing '..'
[  213.722956][ T9276] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  213.731374][ T9282] NILFS (loop2): invalid segment: Checksum error in segment payload
[  213.731416][ T9282] NILFS (loop2): trying rollback from an earlier position
[  213.767144][ T9287] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.773124][ T9282] NILFS (loop2): recovery complete
[  213.793385][ T9289] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.890764][ T8475] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.069350][ T9296] loop3: detected capacity change from 0 to 8
[  214.206281][ T9296] SQUASHFS error: Unable to read directory block [629:46]
[  214.237621][ T9294] loop5: detected capacity change from 0 to 2048
[  214.403462][ T9309] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.527454][ T9307] loop2: detected capacity change from 0 to 4096
[  214.613447][ T9307] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  214.633551][ T9307] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[  214.672213][ T8514] udevd[8514]: incorrect nilfs2 checksum on /dev/loop2
[  214.703149][ T9316] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.986357][ T9325] loop0: detected capacity change from 0 to 4096
[  215.050946][ T9325] NILFS (loop0): invalid segment: Checksum error in segment payload
[  215.099987][ T9325] NILFS (loop0): trying rollback from an earlier position
[  215.211814][ T9325] NILFS (loop0): recovery complete
[  215.259781][ T9342] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  215.316035][ T5328] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  215.366121][   T58] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  215.488030][ T5328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.517956][ T5328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.544615][ T5328] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  215.548149][   T58] usb 2-1: Using ep0 maxpacket: 8
[  215.581340][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.583329][ T5328] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  215.592713][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.633076][ T5328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.659262][   T58] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  215.666883][ T5328] usb 6-1: config 0 descriptor??
[  215.689716][   T58] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0
[  215.743382][   T58] usb 2-1: Manufacturer: syz
[  215.781984][   T58] usb 2-1: config 0 descriptor??
[  215.821713][ T9355] loop0: detected capacity change from 0 to 1024
[  215.840984][ T9355] EXT4-fs: Ignoring removed orlov option
[  215.850627][ T9355] EXT4-fs: Ignoring removed nomblk_io_submit option
[  215.874642][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  215.908051][ T9355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.144453][ T5328] corsair-cpro 0003:1B1C:1D00.0024: unknown main item tag 0x0
[  216.152125][ T5328] corsair-cpro 0003:1B1C:1D00.0024: unknown main item tag 0x0
[  216.153170][ T8475] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.162785][ T5328] corsair-cpro 0003:1B1C:1D00.0024: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.5-1/input0
[  216.250505][ T5328] corsair-cpro 0003:1B1C:1D00.0024: probe with driver corsair-cpro failed with error -38
[  216.303700][   T58] wacom 0003:056A:00C5.0025: unknown main item tag 0x0
[  216.369942][ T9372] IPv6: NLM_F_CREATE should be specified when creating new route
[  216.393450][   T58] wacom 0003:056A:00C5.0025: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  216.454025][ T5281] usb 6-1: USB disconnect, device number 8
[  216.498900][   T58] usb 2-1: USB disconnect, device number 15
[  216.741020][ T9386] loop3: detected capacity change from 0 to 512
[  216.790922][ T9390] loop0: detected capacity change from 0 to 256
[  216.875313][ T9392] loop2: detected capacity change from 0 to 4096
[  216.885169][ T9392] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  216.941322][ T9390] FAT-fs (loop0): Directory bread(block 64) failed
[  216.950760][ T9390] FAT-fs (loop0): Directory bread(block 65) failed
[  216.961418][ T9390] FAT-fs (loop0): Directory bread(block 66) failed
[  216.968765][ T9390] FAT-fs (loop0): Directory bread(block 67) failed
[  216.975467][ T9390] FAT-fs (loop0): Directory bread(block 68) failed
[  217.000581][ T9386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.028976][ T9392] ntfs3: loop2: Inode r=b is not in use!
[  217.034833][ T9392] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  217.091770][ T9390] FAT-fs (loop0): Directory bread(block 69) failed
[  217.116063][ T9386] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.136900][ T9392] ntfs3: loop2: Failed to load $Extend (-116).
[  217.139782][ T9390] FAT-fs (loop0): Directory bread(block 70) failed
[  217.143802][ T9392] ntfs3: loop2: Failed to initialize $Extend.
[  217.172401][ T9390] FAT-fs (loop0): Directory bread(block 71) failed
[  217.206594][ T9390] FAT-fs (loop0): Directory bread(block 72) failed
[  217.243592][ T9390] FAT-fs (loop0): Directory bread(block 73) failed
[  217.271678][ T9405] loop1: detected capacity change from 0 to 1024
[  217.296955][ T9405] EXT4-fs: Ignoring removed orlov option
[  217.306966][ T9406] loop4: detected capacity change from 0 to 1024
[  217.326040][ T9405] EXT4-fs: Ignoring removed nomblk_io_submit option
[  217.361466][ T9406] hfsplus: bad catalog entry type
[  217.383810][ T6223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.446066][ T5323] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  217.565454][ T9405] EXT4-fs (loop1): Test dummy encryption mode enabled
[  217.626110][ T5323] usb 6-1: Using ep0 maxpacket: 32
[  217.626843][ T9405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.633070][ T5323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.656891][ T5323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.672688][ T5323] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  217.687031][ T5323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.722315][ T5323] usb 6-1: config 0 descriptor??
[  217.782585][ T9415] can0: slcan on ttyprintk.
[  217.949646][ T8272] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.987953][ T9414] can0 (unregistered): slcan off ttyprintk.
[  218.149845][ T5323] waltop 0003:172F:0501.0026: item fetching failed at offset 2/5
[  218.178612][ T5323] waltop 0003:172F:0501.0026: probe with driver waltop failed with error -22
[  218.216947][   T58] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  218.363772][ T5281] usb 6-1: USB disconnect, device number 9
[  218.386099][   T58] usb 3-1: Using ep0 maxpacket: 32
[  218.405056][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.423271][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.436987][   T58] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  218.447053][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.460200][   T58] usb 3-1: config 0 descriptor??
[  218.490810][   T58] hub 3-1:0.0: USB hub found
[  218.675436][   T58] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  218.738713][ T9449] loop1: detected capacity change from 0 to 4096
[  218.797012][ T9449] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  218.797837][ T5320] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  218.836651][ T9449] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  218.878381][ T5221] udevd[5221]: incorrect nilfs2 checksum on /dev/loop1
[  218.908448][   T58] usbhid 3-1:0.0: can't add hid device: -71
[  218.915691][   T58] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  218.938271][ T9460] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.967282][   T58] usb 3-1: USB disconnect, device number 9
[  219.019492][ T5320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.038590][ T5320] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  219.055141][ T9462] loop5: detected capacity change from 0 to 512
[  219.061735][ T5320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.079308][ T5320] usb 5-1: config 0 descriptor??
[  219.099563][ T9462] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  219.157799][ T9462] EXT4-fs error (device loop5): __ext4_fill_super:5458: inode #2: comm syz.5.1445: iget: special inode unallocated
[  219.215215][ T9462] EXT4-fs (loop5): get root inode failed
[  219.229130][ T9462] EXT4-fs (loop5): mount failed
[  219.359280][ T9462] loop5: detected capacity change from 0 to 512
[  219.387133][ T9470] loop1: detected capacity change from 0 to 4096
[  219.414803][ T9470] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  219.440859][ T9462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.486285][ T9462] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  219.508281][ T5320] wacom 0003:056A:00B3.0027: Unknown device_type for 'HID 056a:00b3'. Assuming pen.
[  219.522342][ T5320] wacom 0003:056A:00B3.0027: hidraw0: USB HID v0.01 Device [HID 056a:00b3] on usb-dummy_hcd.4-1/input0
[  219.535002][ T5320] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B3.0027/input/input24
[  219.559997][ T9477] loop2: detected capacity change from 0 to 16
[  219.596283][ T9477] erofs: (device loop2): mounted with root inode @ nid 36.
[  219.656551][ T5230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.680142][ T9470] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  219.763187][   T58] usb 5-1: USB disconnect, device number 11
[  219.803474][ T7100] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46
[  219.823873][ T9480] loop5: detected capacity change from 0 to 128
[  219.865697][ T7100] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  219.867374][ T9480] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  219.890358][ T9480] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  219.899784][ T7100] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  219.918185][ T9480] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1448: Block bitmap for bg 0 marked uninitialized
[  219.983690][ T5230] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.378200][ T9491] netlink: 'syz.1.1453': attribute type 3 has an invalid length.
[  220.396080][ T9491] netlink: 201364 bytes leftover after parsing attributes in process `syz.1.1453'.
[  220.555356][ T9484] loop2: detected capacity change from 0 to 32768
[  220.586776][ T9484] btrfs: Deprecated parameter 'usebackuproot'
[  220.612143][ T9484] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  220.644735][ T9484] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1449 (9484)
[  220.718260][ T9484] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  220.783328][ T9484] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  220.839479][ T9484] BTRFS info (device loop2): using free-space-tree
[  221.133131][ T9484] BTRFS info (device loop2): rebuilding free space tree
[  221.369015][ T9530] loop5: detected capacity change from 0 to 256
[  221.532999][ T7100] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  221.764439][ T9496] loop4: detected capacity change from 0 to 40427
[  221.896210][ T9496] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  221.903266][ T9496] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  222.013277][ T9496] F2FS-fs (loop4): Found nat_bits in checkpoint
[  222.042475][ T9547] loop1: detected capacity change from 0 to 1024
[  222.060106][ T9547] EXT4-fs: Ignoring removed bh option
[  222.084705][ T9547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  222.129473][ T9496] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  222.136665][ T9496] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  222.198722][ T9547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.318465][ T8272] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.526142][    T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  222.676575][    T8] usb 6-1: Using ep0 maxpacket: 32
[  222.702040][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.732011][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.746870][    T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  222.765290][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.799557][    T8] usb 6-1: config 0 descriptor??
[  222.880637][ T9568] loop1: detected capacity change from 0 to 1024
[  223.054312][ T6719] hfsplus: b-tree write err: -5, ino 4
[  223.223462][    T8] logitech 0003:046D:C50C.0028: unknown main item tag 0x0
[  223.239442][ T9580] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1486'.
[  223.256149][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1486'.
[  223.273761][    T8] logitech 0003:046D:C50C.0028: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.5-1/input0
[  223.359378][ T9582] loop1: detected capacity change from 0 to 1024
[  223.430856][ T9582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.459673][    T8] usb 6-1: USB disconnect, device number 10
[  223.511028][ T9582] EXT4-fs: Ignoring removed mblk_io_submit option
[  223.518543][ T9582] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  223.528123][ T9582] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  223.563301][ T9582] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring
[  223.588433][ T9582] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  223.676878][ T8272] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.883643][   T29] audit: type=1326 audit(2000000000.289:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763ed7df39 code=0x7ffc0000
[  223.906336][   T29] audit: type=1326 audit(2000000000.289:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763ed7df39 code=0x7ffc0000
[  223.929466][   T29] audit: type=1326 audit(2000000000.289:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f763ed7df39 code=0x7ffc0000
[  223.946117][ T9603] loop2: detected capacity change from 0 to 2048
[  223.952374][   T29] audit: type=1326 audit(2000000000.289:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763ed7df39 code=0x7ffc0000
[  223.962493][ T9601] sg_write: data in/out 45479/14 bytes for SCSI command 0x0-- guessing data in;
[  223.962493][ T9601]    program syz.4.1495 not setting count and/or reply_len properly
[  223.980324][   T29] audit: type=1326 audit(2000000000.289:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763ed7df39 code=0x7ffc0000
[  224.096210][ T4677]  loop2: p1 < > p3 < > p4 < >
[  224.101429][ T4677] loop2: partition table partially beyond EOD, truncated
[  224.115345][ T4677] loop2: p3 start 4284289 is beyond EOD, truncated
[  224.132647][ T4677]  loop2: p1 < > p3 < > p4 < >
[  224.137706][ T4677] loop2: partition table partially beyond EOD, truncated
[  224.146603][ T4677] loop2: p3 start 4284289 is beyond EOD, truncated
[  224.160543][ T9603]  loop2: p1 < > p3 < > p4 < >
[  224.165448][ T9603] loop2: partition table partially beyond EOD, truncated
[  224.188081][ T9603] loop2: p3 start 4284289 is beyond EOD, truncated
[  224.338607][   T29] audit: type=1800 audit(2000000000.749:44): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1502" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  224.363453][ T5221] udevd[5221]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  224.419368][ T8514] udevd[8514]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  224.476711][ T9620] loop5: detected capacity change from 0 to 256
[  224.605728][ T8514] udevd[8514]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  224.611213][ T5221] udevd[5221]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  224.656121][    T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  224.771546][ T5221] udevd[5221]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  224.788552][ T8514] udevd[8514]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  224.817179][ T5323] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  224.826348][    T8] usb 2-1: Using ep0 maxpacket: 8
[  224.858665][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.915991][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.950672][    T8] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  224.953286][ T9630] loop0: detected capacity change from 0 to 2048
[  224.990585][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.006152][ T5323] usb 5-1: Using ep0 maxpacket: 16
[  225.013185][ T5323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.030098][ T9630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.037067][    T8] usb 2-1: config 0 descriptor??
[  225.054805][ T5323] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  225.109768][ T5323] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  225.153154][ T5323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.165779][ T9635] Bluetooth: MGMT ver 1.23
[  225.193653][ T5323] usb 5-1: config 0 descriptor??
[  225.558822][    T8] aquacomputer_d5next 0003:0C70:F014.0029: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.1-1/input0
[  225.606468][ T9619] loop2: detected capacity change from 0 to 32768
[  225.622873][ T5323] kye 0003:0458:5015.002A: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  225.663341][ T9619] XFS (loop2): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  225.666419][ T5323] kye 0003:0458:5015.002A: hidraw1: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0
[  225.686205][ T5323] kye 0003:0458:5015.002A: tablet-enabling feature report not found
[  225.694332][ T5323] kye 0003:0458:5015.002A: tablet enabling failed
[  225.734679][    T8] usb 2-1: USB disconnect, device number 16
[  225.821553][ T5328] usb 5-1: USB disconnect, device number 12
[  225.833997][ T9619] XFS (loop2): Ending clean mount
[  225.873638][ T9619] XFS (loop2): Quotacheck needed: Please wait.
[  225.931129][ T9619] XFS (loop2): Quotacheck: Done.
[  226.053409][ T9658] loop5: detected capacity change from 0 to 1024
[  226.093245][ T7100] XFS (loop2): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  226.243507][ T9661] loop5: detected capacity change from 0 to 512
[  226.283343][ T9638] loop0: detected capacity change from 0 to 32768
[  226.292684][ T9661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.328002][ T9661] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.381031][ T9638] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  226.508393][ T9678] tipc: Invalid UDP bearer configuration
[  226.508445][ T9678] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  226.584583][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  226.627822][ T5230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.665390][ T9683] netlink: 'syz.1.1526': attribute type 6 has an invalid length.
[  226.738047][ T9638] XFS (loop0): Ending clean mount
[  226.763805][ T9687] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1527'.
[  226.767330][ T9638] XFS (loop0): Quotacheck needed: Please wait.
[  226.784532][ T9687] Êü: entered promiscuous mode
[  226.903337][ T9638] XFS (loop0): Quotacheck: Done.
[  226.970187][ T9694] loop4: detected capacity change from 0 to 64
[  226.996059][ T8475] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  227.182779][ T9698] netlink: 210596 bytes leftover after parsing attributes in process `syz.5.1533'.
[  227.364572][ T9702] netlink: 'syz.5.1537': attribute type 3 has an invalid length.
[  227.679572][ T9713] loop1: detected capacity change from 0 to 256
[  227.818763][ T9713] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  227.908692][ T9722] openvswitch: netlink: nsh attr 13569 is out of range max 3
[  227.936256][ T9710] loop4: detected capacity change from 0 to 2048
[  228.006846][ T9713] exFAT-fs (loop1): error, in sector 160, dentry 12 should be unused, but 0x85
[  228.025737][ T9710] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  228.474806][ T9748] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  228.901543][ T9757] loop4: detected capacity change from 0 to 4096
[  229.151251][ T9757] ntfs3: loop4: ino=1f, "file2" attr_set_size
[  229.187689][ T9757] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  229.596217][ T9790] loop0: detected capacity change from 0 to 1024
[  229.677008][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  229.693975][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  229.742790][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  229.784412][ T9790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.785363][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  229.821529][   T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  229.832284][ T9803] tipc: Started in network mode
[  229.837340][ T9803] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711
[  229.848246][ T9803] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  229.888633][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  229.964310][ T9808] program syz.4.1583 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  230.200780][ T8475] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.227521][   T58] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  230.364760][ T9817] 9pnet_rdma: rdma_create_trans (9817): problem binding to privport: 13
[  230.376563][ T9819] loop5: detected capacity change from 0 to 64
[  230.398645][   T58] usb 2-1: Using ep0 maxpacket: 32
[  230.414886][   T58] usb 2-1: too many configurations: 30, using maximum allowed: 8
[  230.442300][   T29] audit: type=1400 audit(2000000006.849:45): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  230.456823][   T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.634178][   T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.670718][   T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.682122][   T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.696307][   T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.736524][   T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.761660][   T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.809855][   T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.911640][   T58] usb 2-1: string descriptor 0 read error: -71
[  230.954177][   T58] usb 2-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.40
[  231.016445][   T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.157554][   T58] usb 2-1: rejected 8 configurations due to insufficient available bus power
[  231.182798][   T58] usb 2-1: no configuration chosen from 8 choices
[  231.198624][ T9794] chnl_net:caif_netlink_parms(): no params data found
[  231.261533][   T58] usb 2-1: USB disconnect, device number 17
[  231.719775][ T9823] loop2: detected capacity change from 0 to 131072
[  231.733916][ T9823] F2FS-fs (loop2): Test dummy encryption mode enabled
[  231.742530][ T9823] F2FS-fs (loop2): invalid crc value
[  231.756321][ T9823] F2FS-fs (loop2): Invalid segment type: 16, segno: 21
[  231.827345][ T9794] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.834524][ T9823] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[  231.868882][ T9794] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.876398][ T9794] bridge_slave_0: entered allmulticast mode
[  231.887148][ T9794] bridge_slave_0: entered promiscuous mode
[  231.888074][   T58] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  231.906762][ T9794] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.913918][ T9794] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.934471][ T9794] bridge_slave_1: entered allmulticast mode
[  231.942167][ T9794] bridge_slave_1: entered promiscuous mode
[  232.016320][   T54] Bluetooth: hci6: command tx timeout
[  232.046054][   T58] usb 5-1: Using ep0 maxpacket: 16
[  232.055492][   T58] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53
[  232.071617][   T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.101099][ T9857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1601'.
[  232.164717][ T9857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1601'.
[  232.210275][   T58] usb 5-1: Product: syz
[  232.258543][   T58] usb 5-1: Manufacturer: syz
[  232.288569][   T58] usb 5-1: SerialNumber: syz
[  232.320720][   T58] usb 5-1: config 0 descriptor??
[  232.358785][   T58] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state.
[  232.430070][   T58] dvb-usb: bulk message failed: -22 (2/0)
[  232.436697][   T58] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  232.456367][   T58] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353))
[  232.467369][   T58] usb 5-1: media controller created
[  232.474499][   T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  232.490273][   T58] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  232.500341][   T58] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  232.554919][ T9794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.563437][ T9847] trusted_key: encrypted_key: hex blob is missing
[  232.668473][ T9794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.773732][   T58] rc_core: IR keymap rc-dtt200u not found
[  232.779618][   T58] Registered IR keymap rc-empty
[  232.787127][   T58] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  232.801758][   T58] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input27
[  232.819627][   T58] dvb-usb: schedule remote query interval to 300 msecs.
[  232.826851][   T58] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected.
[  232.843701][   T58] usb 5-1: USB disconnect, device number 13
[  232.976099][ T9794] team0: Port device team_slave_0 added
[  233.027218][ T9794] team0: Port device team_slave_1 added
[  233.093148][   T58] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected.
[  233.270716][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.296352][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.388529][ T9794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.405414][ T9891] nbd: socks must be embedded in a SOCK_ITEM attr
[  233.456107][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.481456][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.508038][ T9794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.730395][ T9794] hsr_slave_0: entered promiscuous mode
[  233.805819][ T9794] hsr_slave_1: entered promiscuous mode
[  233.879957][ T9905] loop4: detected capacity change from 0 to 512
[  233.917895][ T9905] EXT4-fs: Ignoring removed nomblk_io_submit option
[  234.001841][ T9905] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  234.063708][ T9905] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  234.096392][   T54] Bluetooth: hci6: command tx timeout
[  234.180226][ T9905] EXT4-fs (loop4): 1 truncate cleaned up
[  234.196188][    T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  234.217250][ T9905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.346609][ T9905] EXT4-fs: group quota file already specified
[  234.357861][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.375978][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.414888][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  234.472030][    T8] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  234.477888][ T5229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.510357][ T9794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.525978][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.553472][    T8] usb 2-1: config 0 descriptor??
[  234.705382][ T9908] loop0: detected capacity change from 0 to 40427
[  234.755333][ T9908] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  234.772496][ T9908] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  234.823466][ T9908] F2FS-fs (loop0): Found nat_bits in checkpoint
[  234.915103][ T9794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.030769][ T9908] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  235.040816][    T8] kye 0003:0458:0153.002B: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.1-1/input0
[  235.056472][ T9908] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  235.096134][ T9794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.244111][ T9794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.247217][    T8] usb 2-1: USB disconnect, device number 18
[  235.529581][ T9794] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  235.557495][ T9794] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  235.570035][ T9794] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  235.586097][ T9794] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  235.802670][ T9932] loop2: detected capacity change from 0 to 32768
[  235.831729][ T9932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1636 (9932)
[  235.851265][ T9928] loop4: detected capacity change from 0 to 40427
[  235.862342][ T9794] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.887667][ T9928] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  235.901575][ T9928] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  235.946570][ T9794] 8021q: adding VLAN 0 to HW filter on device team0
[  235.964815][ T9932] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.996101][ T9932] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  236.004604][ T9932] BTRFS info (device loop2): using free-space-tree
[  236.025000][ T9928] F2FS-fs (loop4): invalid crc value
[  236.042665][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.049863][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.067664][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.074809][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.249775][ T9928] F2FS-fs (loop4): Found nat_bits in checkpoint
[  236.377312][ T9941] loop1: detected capacity change from 0 to 40427
[  236.388325][   T54] Bluetooth: hci6: command tx timeout
[  236.405020][ T9941] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  236.426318][ T9941] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  236.524969][ T9941] F2FS-fs (loop1): Found nat_bits in checkpoint
[  236.526086][ T9928] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  236.566068][ T9928] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  236.635340][ T7100] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.672992][ T9928] syz.4.1634: attempt to access beyond end of device
[  236.672992][ T9928] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  236.692650][ T9941] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  236.719498][ T9941] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  236.760266][ T5229] syz-executor: attempt to access beyond end of device
[  236.760266][ T5229] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  236.815316][ T9794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.866083][ T5229] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  236.947535][ T9794] veth0_vlan: entered promiscuous mode
[  236.959695][ T9794] veth1_vlan: entered promiscuous mode
[  236.992719][ T9794] veth0_macvtap: entered promiscuous mode
[  237.002992][ T9794] veth1_macvtap: entered promiscuous mode
[  237.020919][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.031420][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.041307][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.052122][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.062092][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.073039][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.083407][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.094052][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.103950][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.114535][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.125116][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.136273][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.148676][ T9794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.158567][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.169236][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.179122][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.189633][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.199517][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.210005][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.220602][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.231601][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.245557][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.256074][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.266008][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.276487][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.287903][ T9794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.299360][ T9794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.309145][ T9794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.317969][ T9794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.327375][ T9794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.530396][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.558268][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.590632][ T7949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.616349][ T7949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.416936][   T54] Bluetooth: hci6: command tx timeout
[  238.578465][ T9986] loop2: detected capacity change from 0 to 32768
[  238.675535][ T9986] JBD2: Ignoring recovery information on journal
[  238.687596][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1649'.
[  238.761876][ T9986] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  238.874221][ T7100] ocfs2: Unmounting device (7,2) on (node local)
[  238.998289][ T5328] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  239.176285][ T5328] usb 4-1: Using ep0 maxpacket: 32
[  239.200734][ T5328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.243837][ T5328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.286027][ T5328] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  239.295140][ T5328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.359438][ T5328] usb 4-1: config 0 descriptor??
[  239.379535][T10000] loop4: detected capacity change from 0 to 32768
[  239.407053][T10000] XFS: attr2 mount option is deprecated.
[  239.540042][T10000] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  239.639708][T10034] loop1: detected capacity change from 0 to 256
[  239.732095][T10000] XFS (loop4): Ending clean mount
[  239.740785][T10000] XFS (loop4): Quotacheck needed: Please wait.
[  239.777737][T10037] loop0: detected capacity change from 0 to 512
[  239.788396][ T5328] aureal 0003:0755:2626.002C: item fetching failed at offset 0/2
[  239.799204][ T5328] aureal 0003:0755:2626.002C: probe with driver aureal failed with error -22
[  239.849779][T10037] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  239.959494][T10000] XFS (loop4): Quotacheck: Done.
[  240.014074][ T5222] usb 4-1: USB disconnect, device number 14
[  240.117053][T10032] loop2: detected capacity change from 0 to 32768
[  240.236348][ T5229] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  240.349878][T10032] XFS (loop2): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  240.451324][T10032] XFS (loop2): Ending clean mount
[  240.748641][ T7100] XFS (loop2): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  241.464739][T10065] loop3: detected capacity change from 0 to 2048
[  241.572382][T10065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.217862][T10057] loop0: detected capacity change from 0 to 32768
[  243.411808][T10057] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  243.584326][T10096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1687'.
[  243.686795][T10096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1687'.
[  243.774628][T10096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1687'.
[  243.795113][T10101] netlink: 'syz.4.1688': attribute type 1 has an invalid length.
[  243.831498][T10057] XFS (loop0): Ending clean mount
[  243.859841][T10101] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.1688'.
[  243.896010][T10057] XFS (loop0): Quotacheck needed: Please wait.
[  244.079591][T10057] XFS (loop0): Quotacheck: Done.
[  244.331394][T10109] loop4: detected capacity change from 0 to 512
[  244.443391][T10109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.552764][T10109] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.623975][ T8475] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  245.022254][ T5229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.971480][T10123] netlink: 'syz.0.1693': attribute type 3 has an invalid length.
[  246.036923][T10125] netlink: 'syz.4.1697': attribute type 29 has an invalid length.
[  246.047497][T10123] netlink: 'syz.0.1693': attribute type 1 has an invalid length.
[  246.055255][T10123] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1693'.
[  246.117954][T10125] netlink: 'syz.4.1697': attribute type 29 has an invalid length.
[  246.314295][T10103] loop2: detected capacity change from 0 to 32768
[  246.520269][T10103] XFS (loop2): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  246.624710][T10137] tmpfs: Cannot change global quota limit on remount
[  246.784573][T10103] XFS (loop2): Ending clean mount
[  246.887362][T10103] XFS (loop2): Quotacheck needed: Please wait.
[  247.059725][T10103] XFS (loop2): Quotacheck: Done.
[  247.081921][T10142] loop4: detected capacity change from 0 to 256
[  247.310859][ T5224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  247.323057][ T5224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  247.340350][ T5224] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  247.350256][ T5224] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  247.364314][ T5224] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  247.372234][ T5224] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  247.382734][ T7100] XFS (loop2): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  248.809279][T10161] loop1: detected capacity change from 0 to 1024
[  248.879139][T10161] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c02c, mo2=0003]
[  248.902926][T10145] chnl_net:caif_netlink_parms(): no params data found
[  248.953406][T10161] System zones: 0-1, 3-36
[  249.023347][T10127] loop3: detected capacity change from 0 to 32768
[  249.036402][T10161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.059384][T10166] usb usb7: usbfs: process 10166 (syz.4.1712) did not claim interface 0 before use
[  249.306576][T10170] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.1.1711: corrupted in-inode xattr: bad e_name length
[  249.457097][ T5224] Bluetooth: hci7: command tx timeout
[  249.492215][T10170] EXT4-fs (loop1): Remounting filesystem read-only
[  249.668114][T10145] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.681881][T10145] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.763190][   T16] sched: DL replenish lagged too much
[  249.773578][T10145] bridge_slave_0: entered allmulticast mode
[  249.806587][T10145] bridge_slave_0: entered promiscuous mode
[  249.842390][ T8272] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.913274][T10145] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.982381][T10145] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.032170][T10145] bridge_slave_1: entered allmulticast mode
[  250.090937][T10145] bridge_slave_1: entered promiscuous mode
[  250.315732][T10145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.336815][ T5323] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  250.361457][T10145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.528484][ T5323] usb 5-1: Using ep0 maxpacket: 32
[  250.577030][ T5323] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  250.626181][ T5323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.658377][T10145] team0: Port device team_slave_0 added
[  250.687909][ T5323] usb 5-1: Product: syz
[  250.692144][ T5323] usb 5-1: Manufacturer: syz
[  250.710798][T10145] team0: Port device team_slave_1 added
[  250.745780][ T5323] usb 5-1: SerialNumber: syz
[  250.809364][T10159] loop0: detected capacity change from 0 to 32768
[  250.860229][ T5323] usb 5-1: config 0 descriptor??
[  250.894013][T10159] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  250.951535][T10145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.016588][T10145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.176806][T10159] XFS (loop0): Ending clean mount
[  251.182220][T10145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.412831][T10145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.459467][T10145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.492204][ T8475] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  251.542397][ T5224] Bluetooth: hci7: command tx timeout
[  251.657604][T10145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.719161][ T5323] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  252.299204][T10145] hsr_slave_0: entered promiscuous mode
[  252.416815][T10145] hsr_slave_1: entered promiscuous mode
[  252.502214][T10145] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  252.540668][T10145] Cannot create hsr debugfs directory
[  253.065581][T10194] loop1: detected capacity change from 0 to 32768
[  253.188832][T10194] JBD2: Ignoring recovery information on journal
[  253.223222][T10195] loop2: detected capacity change from 0 to 32768
[  253.307509][T10195] XFS: ikeep mount option is deprecated.
[  253.370302][T10194] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  253.380580][ T5323] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71
[  253.463995][T10195] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  253.487545][ T5323] usb 5-1: USB disconnect, device number 14
[  253.616126][ T5224] Bluetooth: hci7: command tx timeout
[  253.777395][T10195] XFS (loop2): Ending clean mount
[  253.812645][T10195] XFS (loop2): Quotacheck needed: Please wait.
[  253.923306][ T8272] ocfs2: Unmounting device (7,1) on (node local)
[  253.970001][T10195] XFS (loop2): Quotacheck: Done.
[  254.344921][ T7100] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  254.898241][T10224] loop3: detected capacity change from 0 to 8
[  254.956968][T10224] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  255.222583][ T1259] ieee802154 phy0 wpan0: encryption failed: -22
[  255.239730][ T1259] ieee802154 phy1 wpan1: encryption failed: -22
[  255.518513][T10205] loop4: detected capacity change from 0 to 32768
[  255.631324][T10205] jfs_mount: dbMount failed w/rc = -22
[  255.680733][T10205] Mount JFS Failure: -22
[  255.685042][T10205] jfs_mount failed w/return code = -22
[  255.698895][   T54] Bluetooth: hci7: command tx timeout
[  255.931239][T10238] loop0: detected capacity change from 0 to 64
[  256.036407][T10238] hfs: unable to locate alternate MDB
[  256.041830][T10238] hfs: continuing without an alternate MDB
[  257.091902][T10259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1745'.
[  257.162202][T10259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1745'.
[  257.299826][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  258.478321][T10256] loop4: detected capacity change from 0 to 32768
[  258.539006][T10256] JBD2: Ignoring recovery information on journal
[  258.563790][T10262] loop0: detected capacity change from 0 to 32768
[  258.629677][T10262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1747 (10262)
[  258.695246][T10256] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  258.719215][T10262] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  258.765092][T10262] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  258.811352][T10262] BTRFS info (device loop0): using free-space-tree
[  258.926410][ T5229] ocfs2: Unmounting device (7,4) on (node local)
[  259.260751][ T8475] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  259.913767][T10293] loop0: detected capacity change from 0 to 736
[  260.113271][T10293] rock: directory entry would overflow storage
[  260.122819][T10295] loop4: detected capacity change from 0 to 1024
[  260.160998][T10293] rock: sig=0x3b10, size=4, remaining=3
[  260.442411][   T12] hfsplus: b-tree write err: -5, ino 4
[  260.737134][T10298] loop0: detected capacity change from 0 to 16
[  260.794643][T10298] erofs: (device loop0): mounted with root inode @ nid 36.
[  260.897480][T10298] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  260.980234][T10298] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  261.032464][T10298] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  261.390595][T10305] loop0: detected capacity change from 0 to 512
[  261.424291][T10305] EXT4-fs: Ignoring removed nobh option
[  261.468482][T10305] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  261.502905][T10305] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1759: attempt to clear invalid blocks 2 len 1
[  261.564556][T10305] EXT4-fs (loop0): Remounting filesystem read-only
[  261.588511][T10305] EXT4-fs (loop0): 1 truncate cleaned up
[  261.611853][T10305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.747498][T10305] EXT4-fs: user quota file already specified
[  261.855774][ T8475] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.502561][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  267.513460][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  267.539109][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  267.547532][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  267.558936][   T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  267.566761][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  268.164837][ T5224] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  268.177686][ T5224] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  268.188720][ T5224] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  268.206603][ T5224] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  268.214293][ T5224] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  268.222215][ T5224] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  268.617853][ T5224] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  268.628564][ T5224] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  268.637263][ T5224] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  268.645772][ T5224] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  268.658584][ T5224] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  268.666906][ T5224] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  269.616181][ T5224] Bluetooth: hci8: command tx timeout
[  270.256935][ T5224] Bluetooth: hci9: command tx timeout
[  270.740953][ T5224] Bluetooth: hci10: command tx timeout
[  271.696190][ T5224] Bluetooth: hci8: command tx timeout
[  271.999757][   T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  272.015816][   T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  272.026298][   T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  272.039057][   T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  272.047110][   T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  272.058375][   T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  272.336308][   T54] Bluetooth: hci9: command tx timeout
[  272.816170][   T54] Bluetooth: hci10: command tx timeout
[  273.776340][   T54] Bluetooth: hci8: command tx timeout
[  274.096595][   T54] Bluetooth: hci11: command tx timeout
[  274.416326][   T54] Bluetooth: hci9: command tx timeout
[  274.896247][   T54] Bluetooth: hci10: command tx timeout
[  275.856171][   T54] Bluetooth: hci8: command tx timeout
[  276.176301][   T54] Bluetooth: hci11: command tx timeout
[  276.496251][   T54] Bluetooth: hci9: command tx timeout
[  276.976206][   T54] Bluetooth: hci10: command tx timeout
[  278.259057][   T54] Bluetooth: hci11: command tx timeout
[  280.340607][   T54] Bluetooth: hci11: command tx timeout
[  283.764844][ T5224] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  283.779178][ T5224] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  283.787338][ T5224] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  283.798483][ T5224] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  283.806268][ T5224] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  283.826499][ T5224] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  285.857799][ T5224] Bluetooth: hci12: command tx timeout
[  287.940294][ T5224] Bluetooth: hci12: command tx timeout
[  290.016215][ T5224] Bluetooth: hci12: command tx timeout
[  292.096130][ T5224] Bluetooth: hci12: command tx timeout
[  298.263754][ T5224] Bluetooth: hci0: command 0x0406 tx timeout
[  306.386820][ T5224] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  306.399508][ T5224] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  306.410020][ T5224] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  306.428951][ T5224] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  306.437312][ T5224] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  306.448569][ T5224] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  308.504307][   T54] Bluetooth: hci13: command tx timeout
[  308.510271][ T5224] Bluetooth: hci4: command 0x0406 tx timeout
[  310.576129][ T5241] Bluetooth: hci13: command tx timeout
[  312.656878][ T5241] Bluetooth: hci13: command tx timeout
[  314.737558][ T5241] Bluetooth: hci13: command tx timeout
[  316.662959][ T1259] ieee802154 phy0 wpan0: encryption failed: -22
[  316.669686][ T1259] ieee802154 phy1 wpan1: encryption failed: -22
[  329.609954][ T5224] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  329.619922][ T5224] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  329.629328][ T5224] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  329.638745][ T5224] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  329.646818][ T5224] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  329.656776][ T5224] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  329.716758][ T5241] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  329.730536][ T5241] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  329.741448][ T5241] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  329.750420][ T5241] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  329.758886][ T5241] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  329.766711][ T5241] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  329.824292][ T5224] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  329.836080][ T5224] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  329.846057][ T5224] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  329.858270][ T5224] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  329.866473][ T5224] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  329.873870][ T5224] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  331.696173][ T5241] Bluetooth: hci14: command tx timeout
[  331.856115][ T5241] Bluetooth: hci15: command tx timeout
[  331.937203][ T5241] Bluetooth: hci16: command tx timeout
[  332.521203][ T5224] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  332.530232][ T5224] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  332.539685][ T5224] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  332.547778][ T5224] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  332.557616][ T5224] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  332.565047][ T5224] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  333.776131][ T5224] Bluetooth: hci14: command tx timeout
[  333.936214][ T5224] Bluetooth: hci15: command tx timeout
[  334.016504][ T5224] Bluetooth: hci16: command tx timeout
[  334.656143][ T5224] Bluetooth: hci17: command tx timeout
[  335.858287][ T5224] Bluetooth: hci14: command tx timeout
[  336.018555][ T5224] Bluetooth: hci15: command tx timeout
[  336.097063][ T5224] Bluetooth: hci16: command tx timeout
[  336.736770][ T5224] Bluetooth: hci17: command tx timeout
[  337.936110][ T5224] Bluetooth: hci14: command tx timeout
[  338.097170][ T5224] Bluetooth: hci15: command tx timeout
[  338.179509][ T5224] Bluetooth: hci16: command tx timeout
[  338.816189][ T5224] Bluetooth: hci17: command tx timeout
[  340.896184][ T5224] Bluetooth: hci17: command tx timeout
[  344.306575][ T5241] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  344.315797][ T5241] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  344.325406][ T5241] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  344.335800][ T5241] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  344.344539][ T5241] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  344.353414][ T5241] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  346.416121][ T5241] Bluetooth: hci18: command tx timeout
[  348.496098][ T5241] Bluetooth: hci18: command tx timeout
[  350.576262][ T5241] Bluetooth: hci18: command tx timeout
[  352.656127][ T5241] Bluetooth: hci18: command tx timeout
[  354.586122][ T5241] Bluetooth: hci6: command 0x0406 tx timeout
[  367.261529][ T5241] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  367.271664][ T5241] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  367.279772][ T5241] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  367.291562][ T5241] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  367.299737][ T5241] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3
[  367.309055][ T5241] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  369.376620][ T5241] Bluetooth: hci19: command tx timeout
[  369.943700][ T5241] Bluetooth: hci7: command 0x0406 tx timeout
[  371.456355][ T5224] Bluetooth: hci19: command tx timeout
[  373.536393][ T5224] Bluetooth: hci19: command tx timeout
[  375.620673][ T5224] Bluetooth: hci19: command tx timeout
[  378.108011][ T1259] ieee802154 phy0 wpan0: encryption failed: -22
[  378.114351][ T1259] ieee802154 phy1 wpan1: encryption failed: -22
[  382.896385][T10145] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.118742][T10303] netlink: 'syz.4.1758': attribute type 1 has an invalid length.
[  383.198169][T10303] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.1758'.
[  383.309632][T10303] netlink: 'syz.4.1758': attribute type 1 has an invalid length.
[  388.796621][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  388.811979][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  388.826822][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  388.834733][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  388.844425][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  388.851825][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  389.360043][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  389.372841][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  389.383455][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  389.394637][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  389.402864][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  389.410491][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  389.778687][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  389.797561][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  389.805545][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  389.816793][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  389.825085][ T5241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  389.834565][ T5241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  390.896068][ T5241] Bluetooth: hci0: command tx timeout
[  391.456292][ T5241] Bluetooth: hci5: command tx timeout
[  391.856115][ T5241] Bluetooth: hci6: command tx timeout
[  392.602637][ T5224] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  392.611378][ T5224] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  392.619455][ T5224] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  392.627482][ T5224] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  392.635306][ T5224] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  392.642916][ T5224] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  392.976046][ T5224] Bluetooth: hci0: command tx timeout
[  393.536131][ T5224] Bluetooth: hci5: command tx timeout
[  393.936199][ T5224] Bluetooth: hci6: command tx timeout
[  394.736345][ T5224] Bluetooth: hci8: command tx timeout
[  395.056137][ T5224] Bluetooth: hci0: command tx timeout
[  395.616058][ T5224] Bluetooth: hci5: command tx timeout
[  396.016124][ T5224] Bluetooth: hci6: command tx timeout
[  396.816434][ T5224] Bluetooth: hci8: command tx timeout
[  397.136098][ T5224] Bluetooth: hci0: command tx timeout
[  397.700745][ T5224] Bluetooth: hci5: command tx timeout
[  398.096221][ T5224] Bluetooth: hci6: command tx timeout
[  398.896114][ T5224] Bluetooth: hci8: command tx timeout
[  400.976018][ T5224] Bluetooth: hci8: command tx timeout
[  404.921255][ T5241] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  404.933939][ T5241] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  404.945101][ T5241] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  404.954500][ T5241] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  404.966003][ T5241] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  404.976540][ T5241] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  407.056211][ T5241] Bluetooth: hci9: command tx timeout
[  409.136023][ T5241] Bluetooth: hci9: command tx timeout
[  411.217263][ T5241] Bluetooth: hci9: command tx timeout
[  413.296060][ T5241] Bluetooth: hci9: command tx timeout
[  425.456360][   T30] INFO: task syz.0.1772:10339 blocked for more than 143 seconds.
[  425.464708][   T30]       Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  425.506500][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  425.535178][   T30] task:syz.0.1772      state:D stack:27392 pid:10339 tgid:10338 ppid:8475   flags:0x00004004
[  425.588483][   T30] Call Trace:
[  425.591909][   T30]  <TASK>
[  425.594869][   T30]  __schedule+0x1895/0x4b30
[  425.656116][   T30]  ? __pfx___schedule+0x10/0x10
[  425.661072][   T30]  ? __pfx_lock_release+0x10/0x10
[  425.765941][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  425.771507][   T30]  ? schedule+0x90/0x320
[  425.854163][   T30]  schedule+0x14b/0x320
[  425.884604][   T30]  schedule_preempt_disabled+0x13/0x30
[  425.911402][   T30]  __mutex_lock+0x6a7/0xd70
[  425.935979][   T30]  ? __mutex_lock+0x52a/0xd70
[  425.940732][   T30]  ? genl_rcv_msg+0x121/0xec0
[  425.996130][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  426.001246][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  426.061359][   T30]  ? radix_tree_lookup+0x238/0x290
[  426.081525][   T30]  genl_rcv_msg+0x121/0xec0
[  426.106137][   T30]  ? mark_lock+0x9a/0x360
[  426.110542][   T30]  ? __lock_acquire+0x1384/0x2050
[  426.115632][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  426.172214][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  426.205994][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  426.211725][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  426.256213][   T30]  ? __pfx___might_resched+0x10/0x10
[  426.275925][   T30]  netlink_rcv_skb+0x1e5/0x430
[  426.280802][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  426.316045][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  426.321451][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  426.367289][   T30]  ? __netlink_deliver_tap+0x77e/0x7c0
[  426.372899][   T30]  genl_rcv+0x28/0x40
[  426.419607][   T30]  netlink_unicast+0x7f8/0x990
[  426.424571][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  426.463161][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  426.484166][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  426.511470][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  426.530944][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  426.555835][   T30]  ? __check_object_size+0x48e/0x900
[  426.585972][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  426.590828][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.642498][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  426.665980][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  426.671013][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  426.723953][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.738334][   T30]  __sock_sendmsg+0x223/0x270
[  426.743076][   T30]  __sys_sendto+0x39b/0x4f0
[  426.783839][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  426.796020][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  426.801696][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  426.831816][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  426.851213][   T30]  ? exc_page_fault+0x590/0x8c0
[  426.870467][   T30]  __x64_sys_sendto+0xde/0x100
[  426.875320][   T30]  do_syscall_64+0xf3/0x230
[  426.899045][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.905031][   T30] RIP: 0033:0x7f5593d7fdcc
[  426.921883][   T30] RSP: 002b:00007f5594b59ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  426.933493][   T30] RAX: ffffffffffffffda RBX: 00007f5594b59fc0 RCX: 00007f5593d7fdcc
[  426.949675][   T30] RDX: 0000000000000020 RSI: 00007f5594b5a010 RDI: 0000000000000004
[  426.962444][   T30] RBP: 0000000000000000 R08: 00007f5594b59f14 R09: 000000000000000c
[  426.976318][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  426.984419][   T30] R13: 00007f5594b59f68 R14: 00007f5594b5a010 R15: 0000000000000000
[  427.011641][   T30]  </TASK>
[  427.014799][   T30] 
[  427.014799][   T30] Showing all locks held in the system:
[  427.030129][   T30] 2 locks held by ksoftirqd/0/16:
[  427.035183][   T30] 1 lock held by khungtaskd/30:
[  427.044938][   T30]  #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  427.067867][   T30] 3 locks held by kworker/u8:3/52:
[  427.083788][   T30]  #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  427.105187][   T30]  #1: ffffc90000bd7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  427.132356][   T30]  #2: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  427.146001][   T30] 2 locks held by dhcpcd/4891:
[  427.150812][   T30]  #0: ffff88802635d6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80
[  427.171467][   T30]  #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200
[  427.187518][   T30] 2 locks held by getty/4974:
[  427.193190][   T30]  #0: ffff88814bdd10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  427.206220][   T30]  #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  427.230870][   T30] 4 locks held by kworker/0:3/5222:
[  427.243404][   T30] 3 locks held by kworker/1:4/5281:
[  427.251295][   T30]  #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  427.269856][   T30]  #1: ffffc9000317fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  427.289608][   T30]  #2: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  427.310967][   T30] 6 locks held by kworker/0:7/5320:
[  427.320100][   T30] 3 locks held by kworker/1:6/5323:
[  427.325342][   T30]  #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  427.352586][   T30]  #1: ffffc90004abfd00 ((work_completion)(&nlk->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  427.367863][   T30]  #2: ffffffff8fd368e8 (genl_mutex){+.+.}-{3:3}, at: genl_done+0x100/0x210
[  427.386725][   T30] 3 locks held by kworker/0:8/5328:
[  427.394296][   T30] 8 locks held by syz-executor/10145:
[  427.409685][   T30]  #0: ffff88802e25e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  427.423520][   T30]  #1: ffff888023c06888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  427.442919][   T30]  #2: ffff888140fbe4b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  427.465943][   T30]  #3: ffffffff8f56f368 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  427.485927][   T30]  #4: ffff8880619da0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  427.506235][   T30]  #5: ffff88807f889250 (&devlink->lock_key#2){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160
[  427.525762][   T30]  #6: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0
[  427.534895][   T30]  #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0
[  427.558043][   T30] 1 lock held by syz.2.1743/10254:
[  427.563222][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  427.590447][   T30] 1 lock held by syz.3.1748/10266:
[  427.595643][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  427.610764][   T30] 1 lock held by syz.1.1750/10269:
[  427.625634][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  427.635213][   T30] 3 locks held by syz.4.1758/10303:
[  427.646407][   T30]  #0: ffffffff8fd36a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[  427.654810][   T30]  #1: ffffffff8fd368e8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0
[  427.673449][   T30]  #2: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: macsec_del_rxsa+0x39a/0x7c0
[  427.700318][   T30] 2 locks held by syz.0.1772/10339:
[  427.705589][   T30]  #0: ffffffff8fd36a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[  427.723012][   T30]  #1: ffffffff8fd368e8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0
[  427.733634][   T30] 1 lock held by syz-executor/10355:
[  427.746306][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  427.765331][   T30] 1 lock held by syz-executor/10356:
[  427.771915][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  427.795853][   T30] 1 lock held by syz-executor/10360:
[  427.801216][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  427.830284][   T30] 1 lock held by syz-executor/10366:
[  427.835710][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  427.855071][   T30] 1 lock held by syz-executor/10369:
[  427.866098][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  427.887506][   T30] 1 lock held by syz-executor/10376:
[  427.894974][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  427.914779][   T30] 1 lock held by syz-executor/10387:
[  427.922829][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  427.946219][   T30] 1 lock held by syz-executor/10393:
[  427.951579][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  427.973569][   T30] 1 lock held by syz-executor/10395:
[  427.981774][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  428.001660][   T30] 1 lock held by syz-executor/10398:
[  428.009929][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  428.034742][   T30] 1 lock held by syz-executor/10401:
[  428.055222][   T30]  #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  428.065779][   T30] 
[  428.077734][   T30] =============================================
[  428.077734][   T30] 
[  428.097428][   T30] NMI backtrace for cpu 1
[  428.101821][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0
[  428.112262][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  428.122426][   T30] Call Trace:
[  428.125722][   T30]  <TASK>
[  428.128669][   T30]  dump_stack_lvl+0x241/0x360
[  428.133393][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  428.138637][   T30]  ? __pfx__printk+0x10/0x10
[  428.143280][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  428.148258][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  428.153746][   T30]  ? _printk+0xd5/0x120
[  428.157940][   T30]  ? __pfx__printk+0x10/0x10
[  428.162565][   T30]  ? __wake_up_klogd+0xcc/0x110
[  428.167448][   T30]  ? __pfx__printk+0x10/0x10
[  428.172077][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.177736][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  428.182800][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  428.188816][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  428.194830][   T30]  watchdog+0xff4/0x1040
[  428.199110][   T30]  ? watchdog+0x1ea/0x1040
[  428.203565][   T30]  ? __pfx_watchdog+0x10/0x10
[  428.208272][   T30]  kthread+0x2f2/0x390
[  428.212362][   T30]  ? __pfx_watchdog+0x10/0x10
[  428.217073][   T30]  ? __pfx_kthread+0x10/0x10
[  428.221684][   T30]  ret_from_fork+0x4d/0x80
[  428.226136][   T30]  ? __pfx_kthread+0x10/0x10
[  428.230749][   T30]  ret_from_fork_asm+0x1a/0x30
[  428.235562][   T30]  </TASK>
[  428.240257][   T30] Sending NMI from CPU 1 to CPUs 0:
[  428.245488][    C0] NMI backtrace for cpu 0
[  428.245502][    C0] CPU: 0 UID: 0 PID: 5320 Comm: kworker/0:7 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0
[  428.245528][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  428.245543][    C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker
[  428.245578][    C0] RIP: 0010:mark_lock+0x5/0x360
[  428.245602][    C0] Code: ff ff e8 ae 6c 54 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 <41> 55 41 54 53 48 83 ec 10 49 89 f7 48 89 3c 24 49 bd 00 00 00 00
[  428.245621][    C0] RSP: 0018:ffffc90000006ac0 EFLAGS: 00000002
[  428.245640][    C0] RAX: 00000000000407a1 RBX: ffff888025f1e508 RCX: ffffffff8170885a
[  428.245657][    C0] RDX: 0000000000000002 RSI: ffff888025f1e508 RDI: ffff888025f1da00
[  428.245673][    C0] RBP: ffffc90000006b88 R08: ffffffff9426c92f R09: 1ffffffff284d925
[  428.245691][    C0] R10: dffffc0000000000 R11: fffffbfff284d926 R12: ffff888025f1e528
[  428.245709][    C0] R13: 0000000000000001 R14: ffff888025f1e4d8 R15: 1ffff11004be3c9b
[  428.245728][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  428.245747][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  428.245763][    C0] CR2: 00005555593b75c8 CR3: 000000000e734000 CR4: 0000000000350ef0
[  428.245790][    C0] Call Trace:
[  428.245799][    C0]  <NMI>
[  428.245808][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  428.245838][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  428.245878][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  428.245916][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  428.245950][    C0]  ? nmi_handle+0x151/0x5a0
[  428.245975][    C0]  ? nmi_handle+0x2a/0x5a0
[  428.246000][    C0]  ? mark_lock+0x5/0x360
[  428.246022][    C0]  ? default_do_nmi+0x63/0x160
[  428.246053][    C0]  ? exc_nmi+0x123/0x1f0
[  428.246082][    C0]  ? end_repeat_nmi+0xf/0x53
[  428.246108][    C0]  ? mark_lock+0x9a/0x360
[  428.246132][    C0]  ? mark_lock+0x5/0x360
[  428.246154][    C0]  ? mark_lock+0x5/0x360
[  428.246178][    C0]  ? mark_lock+0x5/0x360
[  428.246200][    C0]  </NMI>
[  428.246209][    C0]  <IRQ>
[  428.246219][    C0]  lockdep_hardirqs_on_prepare+0x282/0x780
[  428.246258][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  428.246294][    C0]  ? rt_set_nexthop+0x664/0xa50
[  428.246336][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.246361][    C0]  ? rcu_is_watching+0x15/0xb0
[  428.246389][    C0]  trace_hardirqs_on+0x28/0x40
[  428.246420][    C0]  __local_bh_enable_ip+0x168/0x200
[  428.246453][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  428.246484][    C0]  ? ipt_do_table+0x312/0x1860
[  428.246517][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  428.246549][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.246576][    C0]  ipt_do_table+0x1552/0x1860
[  428.246623][    C0]  ? ipt_do_table+0x312/0x1860
[  428.246657][    C0]  ? __pfx_ipt_do_table+0x10/0x10
[  428.246690][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.246715][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.246738][    C0]  ? ip_route_me_harder+0xc98/0x1300
[  428.246766][    C0]  ? ipv4_conntrack_defrag+0x2a2/0x5a0
[  428.246802][    C0]  ? __pfx_ipt_do_table+0x10/0x10
[  428.246834][    C0]  nf_hook_slow+0xc5/0x220
[  428.246863][    C0]  ? __pfx_dst_output+0x10/0x10
[  428.246895][    C0]  nf_hook+0x2c4/0x450
[  428.246926][    C0]  ? nf_hook+0x9e/0x450
[  428.246955][    C0]  ? __pfx_nf_hook+0x10/0x10
[  428.246986][    C0]  ? __pfx_dst_output+0x10/0x10
[  428.247020][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.247043][    C0]  ? ip_fast_csum+0x1f0/0x2b0
[  428.247070][    C0]  __ip_local_out+0x3d9/0x4e0
[  428.247099][    C0]  ? __pfx_dst_output+0x10/0x10
[  428.247132][    C0]  ip_local_out+0x26/0x70
[  428.247163][    C0]  synproxy_send_client_synack+0x8b8/0xf30
[  428.247202][    C0]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  428.247234][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.247259][    C0]  ? synproxy_pernet+0x45/0x270
[  428.247293][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.247318][    C0]  nft_synproxy_eval_v4+0x3ca/0x610
[  428.247355][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  428.247391][    C0]  ? nf_ip_checksum+0x13a/0x500
[  428.247428][    C0]  nft_synproxy_do_eval+0x362/0xa60
[  428.247465][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  428.247498][    C0]  ? ktime_get+0x9b/0xb0
[  428.247523][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.247549][    C0]  ? __pfx_validate_chain+0x10/0x10
[  428.247575][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.247602][    C0]  nft_do_chain+0x4af/0x1da0
[  428.247643][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  428.247677][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  428.247711][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.247743][    C0]  ? __pfx_nf_nat_inet_fn+0x10/0x10
[  428.247788][    C0]  nft_do_chain_inet+0x418/0x6b0
[  428.247825][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  428.247857][    C0]  ? ipt_do_table+0x312/0x1860
[  428.247899][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  428.247932][    C0]  nf_hook_slow+0xc5/0x220
[  428.247962][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  428.247988][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  428.248014][    C0]  NF_HOOK+0x29e/0x450
[  428.248037][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.248062][    C0]  ? NF_HOOK+0x9a/0x450
[  428.248086][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  428.248111][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  428.248141][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.248164][    C0]  ? ip_rcv_finish+0x406/0x560
[  428.248189][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  428.248215][    C0]  NF_HOOK+0x3a6/0x450
[  428.248237][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.248261][    C0]  ? __lock_acquire+0x1384/0x2050
[  428.248296][    C0]  ? NF_HOOK+0x9a/0x450
[  428.248319][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  428.248343][    C0]  ? ip_rcv_core+0x801/0xd10
[  428.248368][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  428.248397][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  428.248422][    C0]  __netif_receive_skb+0x2bf/0x650
[  428.248452][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  428.248486][    C0]  ? __pfx___netif_receive_skb+0x10/0x10
[  428.248513][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  428.248548][    C0]  ? __pfx_lock_release+0x10/0x10
[  428.248583][    C0]  ? _raw_spin_lock_irq+0xdf/0x120
[  428.248621][    C0]  process_backlog+0x662/0x15b0
[  428.248653][    C0]  ? process_backlog+0x33b/0x15b0
[  428.248688][    C0]  ? __pfx_process_backlog+0x10/0x10
[  428.248717][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  428.248754][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  428.248794][    C0]  __napi_poll+0xcd/0x490
[  428.248823][    C0]  net_rx_action+0x89b/0x1240
[  428.248864][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  428.248895][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  428.248945][    C0]  handle_softirqs+0x2c7/0x980
[  428.248978][    C0]  ? do_softirq+0x11b/0x1e0
[  428.249008][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  428.249040][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.249065][    C0]  do_softirq+0x11b/0x1e0
[  428.249094][    C0]  </IRQ>
[  428.249101][    C0]  <TASK>
[  428.249110][    C0]  ? __pfx_do_softirq+0x10/0x10
[  428.249140][    C0]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  428.249174][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  428.249208][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.249232][    C0]  ? rcu_is_watching+0x15/0xb0
[  428.249257][    C0]  __local_bh_enable_ip+0x1bb/0x200
[  428.249288][    C0]  ? wg_packet_decrypt_worker+0x2a9/0xd80
[  428.249319][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  428.249349][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.249373][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.249396][    C0]  ? wg_packet_decrypt_worker+0xcf/0xd80
[  428.249429][    C0]  wg_packet_decrypt_worker+0x2a9/0xd80
[  428.249468][    C0]  ? __pfx_validate_chain+0x10/0x10
[  428.249493][    C0]  ? __pfx_wg_packet_decrypt_worker+0x10/0x10
[  428.249527][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.249553][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.249576][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.249599][    C0]  ? look_up_lock_class+0x77/0x170
[  428.249634][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.249657][    C0]  ? register_lock_class+0x102/0x980
[  428.249691][    C0]  ? try_to_wake_up+0x5f4/0x1480
[  428.249728][    C0]  ? do_raw_spin_lock+0x14f/0x370
[  428.249756][    C0]  ? __pfx_lock_release+0x10/0x10
[  428.249797][    C0]  ? __pfx_register_lock_class+0x10/0x10
[  428.249834][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.249857][    C0]  ? mark_lock+0x9a/0x360
[  428.249879][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.249902][    C0]  ? __lock_acquire+0x1384/0x2050
[  428.249946][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.249973][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  428.250008][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.250030][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  428.250067][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  428.250107][    C0]  ? process_scheduled_works+0x976/0x1850
[  428.250140][    C0]  process_scheduled_works+0xa65/0x1850
[  428.250185][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  428.250221][    C0]  ? assign_work+0x364/0x3d0
[  428.250253][    C0]  worker_thread+0x870/0xd30
[  428.250288][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.250313][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  428.250335][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  428.250370][    C0]  ? __kthread_parkme+0x169/0x1d0
[  428.250405][    C0]  ? __pfx_worker_thread+0x10/0x10
[  428.250437][    C0]  kthread+0x2f2/0x390
[  428.250458][    C0]  ? __pfx_worker_thread+0x10/0x10
[  428.250490][    C0]  ? __pfx_kthread+0x10/0x10
[  428.250511][    C0]  ret_from_fork+0x4d/0x80
[  428.250543][    C0]  ? __pfx_kthread+0x10/0x10
[  428.250564][    C0]  ret_from_fork_asm+0x1a/0x30
[  428.250605][    C0]  </TASK>
[  429.253658][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  429.260558][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0
[  429.270731][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  429.280807][   T30] Call Trace:
[  429.284100][   T30]  <TASK>
[  429.287050][   T30]  dump_stack_lvl+0x241/0x360
[  429.291776][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  429.297021][   T30]  ? __pfx__printk+0x10/0x10
[  429.301652][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.307309][   T30]  ? vscnprintf+0x5d/0x90
[  429.311670][   T30]  panic+0x349/0x880
[  429.315642][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.321306][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  429.327491][   T30]  ? __pfx_panic+0x10/0x10
[  429.332048][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  429.337449][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.343108][   T30]  ? __irq_work_queue_local+0x137/0x410
[  429.348686][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.354344][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  429.359742][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  429.365930][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  429.372117][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.377773][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  429.383957][   T30]  watchdog+0x1033/0x1040
[  429.388332][   T30]  ? watchdog+0x1ea/0x1040
[  429.392789][   T30]  ? __pfx_watchdog+0x10/0x10
[  429.397501][   T30]  kthread+0x2f2/0x390
[  429.401639][   T30]  ? __pfx_watchdog+0x10/0x10
[  429.406389][   T30]  ? __pfx_kthread+0x10/0x10
[  429.411049][   T30]  ret_from_fork+0x4d/0x80
[  429.415523][   T30]  ? __pfx_kthread+0x10/0x10
[  429.420169][   T30]  ret_from_fork_asm+0x1a/0x30
[  429.425063][   T30]  </TASK>
[  429.428490][   T30] Kernel Offset: disabled
[  429.433060][   T30] Rebooting in 86400 seconds..