last executing test programs:

15.32653777s ago: executing program 2 (id=624):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r0, 0x2007ffb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80, "00207d2000000000201b080000000ac74f000000001200000000000900"})

14.644575446s ago: executing program 2 (id=625):
r0 = socket(0x10, 0x3, 0x0)
r1 = dup(r0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x1a, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001200010a"], 0x14}}, 0x0)

13.904792218s ago: executing program 2 (id=632):
r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$binfmt_script(r0, &(0x7f00000100c0), 0x2001ff67)

13.864496311s ago: executing program 2 (id=633):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b)
listxattr(&(0x7f00000002c0)='./file1\x00', 0x0, 0x51)

13.76348667s ago: executing program 4 (id=635):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0x0, <r2=>0x0}, 0x0)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20)
fcntl$setstatus(r1, 0x4, 0x42800)
splice(r0, &(0x7f0000000040), r2, 0x0, 0x808, 0x0)

13.698824415s ago: executing program 4 (id=636):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r0, 0x2007ffb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80, "00207d2000000000201b080000000ac74f000000001200000000000900"})

13.407507539s ago: executing program 2 (id=639):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
shutdown(r0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
symlink(0x0, 0x0)
connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r4 = accept(r1, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000000)='h', 0x1, 0x0, 0x0, 0x0)

13.239550813s ago: executing program 3 (id=641):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6b6f69382d72752c756e695f786c6174653d312c636f6465706167653d313235352c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303030303036342c756e695f786c6174653d302c6e6f6e756d7461696c3d302c696f636861727365743d63703836312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c646973636172642c756e695f786c6174653d302c73686f72746e616d653d6d697865642c002dab0b191fb2ccceb71eb18196c71c4ecf838358be4b21c68a715a06e99db6572f49e2e559818c3ac27fa19cb8456d68b6c399d259b4f2cd832293ba03e6c9d8f6395e4d8e3a863acf841afc158f6f92786028b0bcd3f3b636a0bd8e42bdf24b014d3a37ee7dc0c50c38f9c612ff2d66a952cc2874418c14f502b47358823cc8adbc5c7ae9c61b7aee88dc31761b4f87dfd0c3ec85874ddd916bdab323b4c1e1abf6954b6bd3fccd8ab2b78d0fb371d7348e571cdd28eab749354bf150aa6590fadf7518cf96541bc0269967fe134674e27cde17e4dbf552e56f68123c01b5edf39649b1e4173595b61a95c4084fc443134f"], 0x25, 0x334, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000540)=""/239, 0xef)

12.835703026s ago: executing program 3 (id=645):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000500), &(0x7f0000000140)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12.756470823s ago: executing program 2 (id=646):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}}, 0x1c}}, 0x0)

12.42906178s ago: executing program 4 (id=649):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), 0x4)

12.105327437s ago: executing program 4 (id=650):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b)
listxattr(&(0x7f00000002c0)='./file1\x00', 0x0, 0x51)

11.725245769s ago: executing program 4 (id=651):
syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400044, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x3, 0x638, &(0x7f0000001980)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}})
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x101800, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100)

11.117067169s ago: executing program 4 (id=652):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x0, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0xc}, 0xc)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000280), &(0x7f0000000380)=0x10)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0xfdfffffc}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x40007994}, @IFLA_IFALIAS={0x14, 0x14, 'veth1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x74}}, 0x0)

10.420813287s ago: executing program 1 (id=655):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x25, 0x334, &(0x7f0000000c00)="$eJzs3U1oXNUXAPAzfUkmDfSfLP5QdDW6E6Q0ERe6SigVilloZfBr42BTPzJjIYMDcZHpbBSXihtBV+660GXX4kLEnQu3VpCquLG7QotPZt7Lmzcfsak4qR+/36Iczr1n7nmvl8zLkNy8tB7bF+bj4o0b12NxsRJz62fW42YlVuJYJJG5HADAv8nNNI1f08ydZ7+/tB8tzLgvAGB2Bu//r5wYJqr3shsA4Cgc8vv/p6ZmL82sLQBghibe/x8cGR77mH+u+JkAAOCf65nnX3hyYzPifK22GNF6p1Pv1OPx4fjGxXgtmrEVp2M5bkdkDwrZ00L/3yfObZ49Xev7cSWKTxBa3U49e1LYSAb11ViN5VjJ69OiPunXrw7qaxFxuTtYP1qVTn0+lvL1v1uKrViL5fj/RH3Euc2za7X8Beqt/fpuRC8W99vp938qluObl+NSNONC9GuH/e+t1mpn0s2R+s6V6mAeAAAAAAAAAAAAAAAAAAAAAADMwqlaYaU4/yZtdTtvnx+fsDJyPk49G87PB+pl5wOl1f3Ted5Nxs8HGj2fp1Ofi2P39MoBAAAAAAAAAAAAAAAAAADg76O9uxCNZnNrp7371nY56JYyb3z16RfHY3zO68kwE3PZy43MyXNRqkqiKE+L8jQZmZMHScRw8pWrRcflOdXiKibK+0F1YqiS99RoNk888MNH06p+G2aSmLgto0ElX7801PpflvqDqoODtTvMuZam6UHlex9OVkUlYm7iP+6vCL68/up9j7RPPjrIfJ4f+vDQw8vPXvvgk5+3G83Ib02zubDTvp3+6bWS0v6p5Pe5MmUnTA96w0xvp73bSL795bn73/t6bHIyff+k5cybB6/12XhmIQv6bR7mSuenbP7pwYu3it179zfz5Mfrjat73/902KrSFwkHdQAAAAAAAAAAAAAAAAAAwJEo/a74XXjs6dl1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHb/j3/0tBbyJzmOBWNyaHqls77QMXP36klwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/Y7wEAAP//nGp4yw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000540)=""/239, 0xef)

10.079994685s ago: executing program 1 (id=656):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000140)="f9ae", 0xfdef, 0x0, 0x0, 0x0)

9.996999871s ago: executing program 1 (id=657):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000340)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f0000000180)={0x44, r1, 0xc11, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4, 0x2}]}]}]}, 0x44}}, 0x0)

9.938246646s ago: executing program 3 (id=658):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
read$fb(r0, 0x0, 0x0)

9.830443775s ago: executing program 3 (id=659):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xa4}}, 0x0)

7.887634236s ago: executing program 1 (id=663):
syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c2010203010902440001000000000904000000020a0000052406000005240000000d240f0100000000000000000004241399052406000005ed7311dd0d240f"], 0x0)

7.353796461s ago: executing program 3 (id=664):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x25, 0x334, &(0x7f0000000c00)="$eJzs3U1oXNUXAPAzfUkmDfSfLP5QdDW6E6Q0ERe6SigVilloZfBr42BTPzJjIYMDcZHpbBSXihtBV+660GXX4kLEnQu3VpCquLG7QotPZt7Lmzcfsak4qR+/36Iczr1n7nmvl8zLkNy8tB7bF+bj4o0b12NxsRJz62fW42YlVuJYJJG5HADAv8nNNI1f08ydZ7+/tB8tzLgvAGB2Bu//r5wYJqr3shsA4Cgc8vv/p6ZmL82sLQBghibe/x8cGR77mH+u+JkAAOCf65nnX3hyYzPifK22GNF6p1Pv1OPx4fjGxXgtmrEVp2M5bkdkDwrZ00L/3yfObZ49Xev7cSWKTxBa3U49e1LYSAb11ViN5VjJ69OiPunXrw7qaxFxuTtYP1qVTn0+lvL1v1uKrViL5fj/RH3Euc2za7X8Beqt/fpuRC8W99vp938qluObl+NSNONC9GuH/e+t1mpn0s2R+s6V6mAeAAAAAAAAAAAAAAAAAAAAAADMwqlaYaU4/yZtdTtvnx+fsDJyPk49G87PB+pl5wOl1f3Ted5Nxs8HGj2fp1Ofi2P39MoBAAAAAAAAAAAAAAAAAADg76O9uxCNZnNrp7371nY56JYyb3z16RfHY3zO68kwE3PZy43MyXNRqkqiKE+L8jQZmZMHScRw8pWrRcflOdXiKibK+0F1YqiS99RoNk888MNH06p+G2aSmLgto0ElX7801PpflvqDqoODtTvMuZam6UHlex9OVkUlYm7iP+6vCL68/up9j7RPPjrIfJ4f+vDQw8vPXvvgk5+3G83Ib02zubDTvp3+6bWS0v6p5Pe5MmUnTA96w0xvp73bSL795bn73/t6bHIyff+k5cybB6/12XhmIQv6bR7mSuenbP7pwYu3it179zfz5Mfrjat73/902KrSFwkHdQAAAAAAAAAAAAAAAAAAwJEo/a74XXjs6dl1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHb/j3/0tBbyJzmOBWNyaHqls77QMXP36klwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/Y7wEAAP//nGp4yw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000540)=""/239, 0xef)

7.101384431s ago: executing program 0 (id=666):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000140)="f9ae", 0xfdef, 0x0, 0x0, 0x0)

6.544129148s ago: executing program 0 (id=667):
prctl$PR_SET_TSC(0x1a, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{}, {0x7c}, {0x6, 0x0, 0x0, 0x7ffffffb}]})
prctl$PR_SET_TSC(0x1a, 0x0)
prctl$PR_SET_TSC(0x1a, 0x1)
times(0x0)

6.543991008s ago: executing program 0 (id=668):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
read$fb(r0, 0x0, 0x0)

6.543770988s ago: executing program 0 (id=669):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3810746, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@user_xattr}, {@commit={'commit', 0x3d, 0x5}}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@dioread_nolock}, {@lazytime}, {@quota}]}, 0xff, 0x451, &(0x7f0000000d00)="$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")
open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2)

5.06548975s ago: executing program 3 (id=670):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006311140000000000630a00ff00000000950005000000000069736ede80b33799320818cddc1a8a2a5a5ec0e8e871731e4dae2db1fb7519b5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

4.416200294s ago: executing program 0 (id=671):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"})
r1 = syz_open_pts(r0, 0x801)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
write$binfmt_aout(r1, &(0x7f0000002240)=ANY=[], 0x9d0)

4.415608794s ago: executing program 1 (id=672):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000340)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f0000000180)={0x44, r1, 0xc11, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4, 0x2}]}]}]}, 0x44}}, 0x0)

2.003997264s ago: executing program 1 (id=673):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xa4}}, 0x0)

0s ago: executing program 0 (id=674):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1014800, &(0x7f00000029c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=0x0, @ANYBLOB="23ea354d55dcb3fbf7f036f3f27910e04a0728241007e3d26c04e2d88ef1cfa9c3f93d9fea5a199f114d4ea413207106f15c2543536adc4b605802008db0bd0e8c87d8edad0f16f3152e57217af1d25fb6d4e968cf86a2aa62f79122", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES16], 0x1, 0xda6, &(0x7f0000003c80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0186e87, 0x0)

kernel console output (not intermixed with test programs):

setting to 64
[   93.298240][ T4525] loop3: detected capacity change from 0 to 32768
[   93.308892][ T4525] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.227 (4525)
[   93.325159][ T4525] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   93.335367][ T4525] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   93.344098][ T4525] BTRFS info (device loop3): doing ref verification
[   93.350787][ T4525] BTRFS info (device loop3): max_inline at 4096
[   93.357224][ T4525] BTRFS info (device loop3): max_inline at 4096
[   93.359436][ T4414] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   93.363518][ T4525] BTRFS info (device loop3): turning off barriers
[   93.363562][ T4525] BTRFS info (device loop3): using free space tree
[   93.489435][ T4414] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   93.508362][ T4414] usb 1-1: Product: syz
[   93.516080][ T4414] usb 1-1: Manufacturer: syz
[   93.540797][ T4508] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   93.561304][ T4546] loop4: detected capacity change from 0 to 512
[   93.591134][ T4414] hub 1-1:4.0: USB hub found
[   93.666904][ T4546] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.232: inline data xattr refers to an external xattr inode
[   93.692427][ T4546] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.232: couldn't read orphan inode 12 (err -117)
[   93.738874][   T26] kauditd_printk_skb: 29 callbacks suppressed
[   93.738887][   T26] audit: type=1326 audit(1721260513.519:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad7775ad9 code=0x7ffc0000
[   93.770696][ T4546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   93.820294][ T4414] hub 1-1:4.0: 2 ports detected
[   93.957994][   T26] audit: type=1326 audit(1721260513.519:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad7775ad9 code=0x7ffc0000
[   93.993126][   T26] audit: type=1326 audit(1721260513.559:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ad7775ad9 code=0x7ffc0000
[   94.017495][   T26] audit: type=1326 audit(1721260513.559:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad7775ad9 code=0x7ffc0000
[   94.167551][ T3544] EXT4-fs (loop4): unmounting filesystem.
[   94.190304][   T26] audit: type=1326 audit(1721260513.559:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad7775ad9 code=0x7ffc0000
[   94.350387][ T4414] hub 1-1:4.0: set hub depth failed
[   94.373620][   T26] audit: type=1326 audit(1721260513.559:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ad7775ad9 code=0x7ffc0000
[   94.374475][ T3560] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   94.419565][ T4414] usb 1-1: USB disconnect, device number 4
[   94.528965][   T26] audit: type=1326 audit(1721260513.559:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad7775ad9 code=0x7ffc0000
[   94.627503][   T26] audit: type=1326 audit(1721260513.559:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad7775ad9 code=0x7ffc0000
[   94.716865][   T26] audit: type=1326 audit(1721260513.559:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ad7775ad9 code=0x7ffc0000
[   94.878959][   T26] audit: type=1326 audit(1721260513.559:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad7775ad9 code=0x7ffc0000
[   94.969463][ T4569] netlink: 248 bytes leftover after parsing attributes in process `syz.1.239'.
[   95.255126][ T4557] loop2: detected capacity change from 0 to 32768
[   95.285881][ T4576] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   95.292425][ T4576] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   95.338613][ T4576] vhci_hcd vhci_hcd.0: Device attached
[   95.392798][ T3558] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.411020][ T3558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.419036][ T3558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.432127][ T4557] XFS (loop2): Mounting V5 Filesystem
[   95.438159][ T3562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.450940][ T3562] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   95.458197][ T3562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.482390][ T4594] loop3: detected capacity change from 0 to 512
[   95.538570][ T4557] XFS (loop2): Ending clean mount
[   95.547232][ T4594] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.245: inline data xattr refers to an external xattr inode
[   95.549524][ T4557] XFS (loop2): Quotacheck needed: Please wait.
[   95.567225][ T4594] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.245: couldn't read orphan inode 12 (err -117)
[   95.587172][ T4557] XFS (loop2): Quotacheck: Done.
[   95.630359][    T7] usb 9-1: new low-speed USB device number 2 using vhci_hcd
[   95.642084][ T4594] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   95.651987][ T4564] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   95.663417][ T3953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.679472][ T3552] XFS (loop2): Unmounting Filesystem
[   95.760990][ T3560] EXT4-fs (loop3): unmounting filesystem.
[   95.790095][ T3953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.892118][ T4606] loop1: detected capacity change from 0 to 512
[   95.923363][ T4606] EXT4-fs (loop1): 1 orphan inode deleted
[   95.929157][ T4606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   95.939813][ T4606] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff)
[   95.957856][ T3953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.981913][ T3686] EXT4-fs (loop1): unmounting filesystem.
[   96.030581][ T4564] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.053533][ T4564] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[   96.102624][ T3953] bond0: (slave netdevsim0): Releasing backup interface
[   96.107671][ T4564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.136822][ T3953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.178598][ T4564] usb 1-1: config 0 descriptor??
[   96.208970][ T4584] chnl_net:caif_netlink_parms(): no params data found
[   96.224122][ T4616] loop1: detected capacity change from 0 to 256
[   96.245005][ T4564] usb 1-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[   96.277244][ T4564] usb 1-1: No valid video chain found.
[   96.318573][ T4616] FAT-fs (loop1): Directory bread(block 1285) failed
[   96.406805][ T4616] FAT-fs (loop1): Directory bread(block 1285) failed
[   96.437211][ T4616] FAT-fs (loop1): FAT read failed (blocknr 1281)
[   96.484546][ T4618] loop2: detected capacity change from 0 to 32768
[   96.507374][ T4616] FAT-fs (loop1): Directory bread(block 1285) failed
[   96.514255][ T4618] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.247 (4618)
[   96.545551][ T4618] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   96.555879][ T4618] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   96.557214][ T4584] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.565128][ T4618] BTRFS info (device loop2): doing ref verification
[   96.565178][ T4618] BTRFS info (device loop2): max_inline at 4096
[   96.565214][ T4618] BTRFS info (device loop2): max_inline at 4096
[   96.565233][ T4618] BTRFS info (device loop2): turning off barriers
[   96.565253][ T4618] BTRFS info (device loop2): using free space tree
[   96.613810][ T4616] FAT-fs (loop1): Directory bread(block 1285) failed
[   96.629441][ T4416] usb 1-1: USB disconnect, device number 5
[   96.646772][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.648014][ T4616] FAT-fs (loop1): Directory bread(block 1285) failed
[   96.668505][ T4579] vhci_hcd: connection reset by peer
[   96.675367][ T3786] vhci_hcd: stop threads
[   96.679636][ T3786] vhci_hcd: release socket
[   96.696754][ T4584] device bridge_slave_0 entered promiscuous mode
[   96.702858][ T3786] vhci_hcd: disconnect device
[   96.706076][ T4584] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.753254][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.829136][ T4584] device bridge_slave_1 entered promiscuous mode
[   96.844139][ T4616] FAT-fs (loop1): Directory bread(block 1285) failed
[   96.913148][ T4645] FAT-fs (loop1): Directory bread(block 1285) failed
[   96.921017][ T4645] FAT-fs (loop1): Directory bread(block 1285) failed
[   96.952281][ T4645] FAT-fs (loop1): Directory bread(block 1285) failed
[   97.670324][ T3562] Bluetooth: hci0: command tx timeout
[   97.787785][ T4584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.269464][ T4584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.355328][ T4667] netlink: 248 bytes leftover after parsing attributes in process `syz.0.260'.
[   98.367446][ T4662] netlink: 140 bytes leftover after parsing attributes in process `syz.3.259'.
[   98.387955][ T3552] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   98.635157][ T4653] device syzkaller0 entered promiscuous mode
[   98.739984][ T4584] team0: Port device team_slave_0 added
[   99.097587][ T4685] loop2: detected capacity change from 0 to 512
[   99.156282][ T4685] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[   99.195533][ T4685] EXT4-fs (loop2): 1 truncate cleaned up
[   99.201387][ T4685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   99.439671][ T4675] loop3: detected capacity change from 0 to 32768
[   99.544657][ T4675] XFS (loop3): Mounting V5 Filesystem
[   99.576464][ T4687] loop0: detected capacity change from 0 to 32768
[   99.671919][ T4687] XFS (loop0): Mounting V5 Filesystem
[   99.706058][ T4675] XFS (loop3): Ending clean mount
[   99.760482][ T4687] XFS (loop0): Ending clean mount
[   99.775925][ T4687] XFS (loop0): Quotacheck needed: Please wait.
[   99.796634][ T3562] Bluetooth: hci0: command tx timeout
[   99.809874][ T3560] XFS (loop3): Unmounting Filesystem
[   99.838219][ T4687] XFS (loop0): Quotacheck: Done.
[  100.029578][ T3546] XFS (loop0): Unmounting Filesystem
[  100.192018][ T4711] loop3: detected capacity change from 0 to 256
[  100.230620][ T4711] FAT-fs (loop3): Directory bread(block 1285) failed
[  100.262878][ T4711] FAT-fs (loop3): Directory bread(block 1285) failed
[  100.286422][ T4711] FAT-fs (loop3): FAT read failed (blocknr 1281)
[  100.303166][ T4711] FAT-fs (loop3): Directory bread(block 1285) failed
[  100.320570][ T4711] FAT-fs (loop3): Directory bread(block 1285) failed
[  100.332859][ T4711] FAT-fs (loop3): Directory bread(block 1285) failed
[  100.362351][ T4712] FAT-fs (loop3): Directory bread(block 1285) failed
[  100.386893][ T4711] FAT-fs (loop3): Directory bread(block 1285) failed
[  100.399694][ T4711] FAT-fs (loop3): Directory bread(block 1285) failed
[  100.412091][ T4711] FAT-fs (loop3): Directory bread(block 1285) failed
[  101.306001][ T3593] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  101.340608][    T7] vhci_hcd: vhci_device speed not set
[  101.673740][ T3593] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  101.683070][ T3593] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  101.693879][ T3593] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  101.703292][ T3593] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  101.714055][ T4720] loop0: detected capacity change from 0 to 32768
[  101.714715][ T3593] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  101.809316][ T4720] XFS (loop0): Mounting V5 Filesystem
[  101.852676][ T3593] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  101.862812][ T3593] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  101.870484][ T3562] Bluetooth: hci0: command tx timeout
[  101.871045][ T3593] usb 4-1: Product: syz
[  101.880437][ T3593] usb 4-1: Manufacturer: syz
[  101.916050][ T4584] team0: Port device team_slave_1 added
[  101.941367][ T3593] cdc_wdm 4-1:1.0: skipping garbage
[  101.946593][ T3593] cdc_wdm 4-1:1.0: skipping garbage
[  101.981757][ T3552] EXT4-fs (loop2): unmounting filesystem.
[  101.994079][ T4720] XFS (loop0): Ending clean mount
[  102.013643][ T3593] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  102.016205][ T4730] netlink: 248 bytes leftover after parsing attributes in process `syz.1.272'.
[  102.019547][ T3593] cdc_wdm 4-1:1.0: Unknown control protocol
[  102.038322][ T4584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.053267][ T4720] XFS (loop0): Quotacheck needed: Please wait.
[  102.059557][ T4584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.142200][ T4732] loop2: detected capacity change from 0 to 128
[  102.165932][ T4720] XFS (loop0): Quotacheck: Done.
[  102.172786][ T4584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.192091][ T4732] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  102.250922][ T4584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.269748][ T4584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.320856][   T41] usb 4-1: USB disconnect, device number 5
[  102.347798][ T3546] XFS (loop0): Unmounting Filesystem
[  102.376425][ T4738] sctp: [Deprecated]: syz.1.275 (pid 4738) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.376425][ T4738] Use struct sctp_sack_info instead
[  102.437945][ T4584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.467187][   T26] kauditd_printk_skb: 64 callbacks suppressed
[  102.467201][   T26] audit: type=1326 audit(1721260522.249:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9ff575ad9 code=0x0
[  102.526206][ T4732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'.
[  102.716429][ T4745] netlink: 'syz.1.277': attribute type 10 has an invalid length.
[  102.819402][ T4584] device hsr_slave_0 entered promiscuous mode
[  102.849490][ T4584] device hsr_slave_1 entered promiscuous mode
[  102.872151][ T4584] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.895298][ T4584] Cannot create hsr debugfs directory
[  102.929489][ T4751] netlink: 'syz.0.276': attribute type 5 has an invalid length.
[  102.940793][ T4751] netlink: 7 bytes leftover after parsing attributes in process `syz.0.276'.
[  103.030805][ T4748] netlink: 32 bytes leftover after parsing attributes in process `syz.0.276'.
[  103.740772][ T3953] device hsr_slave_0 left promiscuous mode
[  103.764715][ T3953] device hsr_slave_1 left promiscuous mode
[  103.791483][ T3953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.801185][ T3953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.809207][ T3953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.816931][ T3953] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.825091][ T3953] device bridge_slave_1 left promiscuous mode
[  103.829230][ T4757] loop3: detected capacity change from 0 to 32768
[  103.832655][ T3953] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.848189][ T3953] device bridge_slave_0 left promiscuous mode
[  103.859744][ T3953] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.876894][ T4757] XFS (loop3): Mounting V5 Filesystem
[  103.899470][ T3953] device veth1_macvtap left promiscuous mode
[  103.907608][ T3953] device veth0_macvtap left promiscuous mode
[  103.916860][ T4757] XFS (loop3): Ending clean mount
[  103.918278][ T3953] device veth1_vlan left promiscuous mode
[  103.932557][ T3953] device veth0_vlan left promiscuous mode
[  103.940268][ T3562] Bluetooth: hci0: command tx timeout
[  103.989177][ T3560] XFS (loop3): Unmounting Filesystem
[  104.529933][ T4783] loop2: detected capacity change from 0 to 32768
[  104.555768][ T4783] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.284 (4783)
[  104.581875][ T4783] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.592219][ T4783] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  104.600947][ T4783] BTRFS info (device loop2): doing ref verification
[  104.607586][ T4783] BTRFS info (device loop2): max_inline at 4096
[  104.613911][ T4783] BTRFS info (device loop2): max_inline at 4096
[  104.620208][ T4783] BTRFS info (device loop2): turning off barriers
[  104.626640][ T4783] BTRFS info (device loop2): using free space tree
[  104.795463][   T26] audit: type=1326 audit(1721260524.579:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ff575ad9 code=0x7ffc0000
[  105.099366][   T26] audit: type=1326 audit(1721260524.579:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ff575ad9 code=0x7ffc0000
[  105.194690][   T26] audit: type=1326 audit(1721260524.609:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9ff575ad9 code=0x7ffc0000
[  105.201392][ T3552] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.263959][   T26] audit: type=1326 audit(1721260524.609:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ff575ad9 code=0x7ffc0000
[  105.293281][   T26] audit: type=1326 audit(1721260524.609:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ff575ad9 code=0x7ffc0000
[  105.326181][   T26] audit: type=1326 audit(1721260524.609:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9ff575ad9 code=0x7ffc0000
[  105.410546][   T26] audit: type=1326 audit(1721260524.609:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ff575ad9 code=0x7ffc0000
[  105.444479][ T3953] team0 (unregistering): Port device team_slave_1 removed
[  105.450178][   T26] audit: type=1326 audit(1721260524.609:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ff575ad9 code=0x7ffc0000
[  105.527708][   T26] audit: type=1326 audit(1721260524.609:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9ff575ad9 code=0x7ffc0000
[  105.567585][ T3953] team0 (unregistering): Port device team_slave_0 removed
[  105.639513][ T3953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.697587][ T3953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.710324][ T4811] sctp: [Deprecated]: syz.2.286 (pid 4811) Use of struct sctp_assoc_value in delayed_ack socket option.
[  105.710324][ T4811] Use struct sctp_sack_info instead
[  106.068750][ T3953] bond0 (unregistering): Released all slaves
[  106.163350][ T4771] Zero length message leads to an empty skb
[  106.570308][ T4584] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  106.593861][ T4584] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  106.713268][ T4832] netlink: 'syz.1.292': attribute type 10 has an invalid length.
[  106.776458][ T4584] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  106.800968][ T4584] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  107.015494][ T4584] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.055273][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  107.067721][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  107.096877][ T4584] 8021q: adding VLAN 0 to HW filter on device team0
[  107.124025][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  107.148525][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  107.174837][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.181987][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.241408][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  107.249364][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  107.272586][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  107.287870][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.295037][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.327432][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  107.346564][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  107.369353][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  107.399464][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  107.464520][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  107.478414][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  107.519889][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  107.564378][ T4826] loop0: detected capacity change from 0 to 32768
[  107.565043][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  107.599733][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  107.640510][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  107.648853][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  107.658868][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  107.743566][ T4826] XFS (loop0): Mounting V5 Filesystem
[  107.745078][ T4848] loop2: detected capacity change from 0 to 512
[  107.860184][ T4848] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.295: bad orphan inode 15
[  107.881257][ T4848] ext4_test_bit(bit=14, block=5) = 0
[  107.886585][ T4848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  107.909735][ T4826] XFS (loop0): Ending clean mount
[  108.134702][ T3546] XFS (loop0): Unmounting Filesystem
[  108.140768][ T4584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.148700][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  108.166823][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  108.519329][ T3552] EXT4-fs (loop2): unmounting filesystem.
[  109.542237][ T4894] sctp: [Deprecated]: syz.0.297 (pid 4894) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.542237][ T4894] Use struct sctp_sack_info instead
[  109.712286][ T4890] loop3: detected capacity change from 0 to 4096
[  109.777899][ T4890] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  109.846862][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  109.856667][ T4890] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  109.860740][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  109.867258][ T4890] ntfs3: loop3: Failed to load $Extend.
[  109.923099][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  109.954562][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  109.975699][ T4584] device veth0_vlan entered promiscuous mode
[  109.992784][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  110.003957][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  110.034013][ T4584] device veth1_vlan entered promiscuous mode
[  110.117888][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  110.134974][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  110.157692][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  110.191394][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  110.223236][ T4584] device veth0_macvtap entered promiscuous mode
[  110.263441][ T4584] device veth1_macvtap entered promiscuous mode
[  110.328924][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.360428][ T4922] loop3: detected capacity change from 0 to 512
[  110.367864][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.388776][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.415569][ T4922] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.307: casefold flag without casefold feature
[  110.429279][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.449446][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.466445][ T4922] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.307: missing EA_INODE flag
[  110.484563][ T4922] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.307: error while reading EA inode 2 err=-117
[  110.504714][ T4922] EXT4-fs (loop3): 1 orphan inode deleted
[  110.513960][ T4922] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  110.528359][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.612036][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.650954][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.722754][ T4584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.744038][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  110.769012][ T3560] EXT4-fs (loop3): unmounting filesystem.
[  110.769057][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  110.801782][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  110.824856][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  110.846319][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.876722][ T4930] loop1: detected capacity change from 0 to 512
[  110.877527][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.913305][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.947153][ T4930] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.309: bad orphan inode 15
[  110.968625][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.028132][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.045538][ T4930] ext4_test_bit(bit=14, block=5) = 0
[  111.096349][ T4930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  111.111642][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.172392][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.206366][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.257000][ T4584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.331107][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  111.339787][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.352374][ T4584] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.362510][ T4584] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.372229][ T4584] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.373361][ T3686] EXT4-fs (loop1): unmounting filesystem.
[  111.383229][ T4584] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.120665][ T4949] loop1: detected capacity change from 0 to 8
[  112.127707][ T4949] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  112.248819][ T4949] cramfs: unsupported filesystem features
[  112.257969][ T4951] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  112.264498][ T4951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  112.273343][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.303904][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.336016][ T4951] vhci_hcd vhci_hcd.0: Device attached
[  112.345589][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  112.526650][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.696630][ T4965] loop1: detected capacity change from 0 to 64
[  112.706742][ T3547] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  112.951872][ T4965] hfs: invalid catalog max_key_len 7
[  112.957925][ T4965] hfs: unable to open catalog tree
[  113.028495][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.217481][ T3554] usb 15-1: new low-speed USB device number 2 using vhci_hcd
[  113.250295][ T3547] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.320737][ T3547] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  113.330911][ T3547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.345684][ T3547] usb 4-1: config 0 descriptor??
[  113.365501][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  113.392651][ T3547] usb 4-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  113.407030][ T3547] usb 4-1: No valid video chain found.
[  113.699414][ T4954] vhci_hcd: connection reset by peer
[  113.705532][  T102] vhci_hcd: stop threads
[  113.709787][  T102] vhci_hcd: release socket
[  113.716513][ T4417] usb 4-1: USB disconnect, device number 6
[  113.730349][   T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  113.735936][  T102] vhci_hcd: disconnect device
[  113.811861][ T3591] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  114.070243][ T3591] usb 5-1: Using ep0 maxpacket: 8
[  114.100922][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.113914][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.126628][   T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.139897][   T22] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  114.150058][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.165905][   T22] usb 2-1: config 0 descriptor??
[  114.208348][ T3591] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  114.221706][ T3591] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  114.234322][ T3591] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  114.249082][ T3591] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  114.265681][ T3591] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.309106][ T3591] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  114.340813][ T3591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.381780][ T4981] device syzkaller0 entered promiscuous mode
[  114.429261][ T4984] loop3: detected capacity change from 0 to 164
[  114.610712][ T3591] usb 5-1: usb_control_msg returned -32
[  114.617468][ T3591] usbtmc 5-1:16.0: can't read capabilities
[  114.688716][   T22] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[  114.756454][ T4987] loop3: detected capacity change from 0 to 512
[  114.778970][ T4987] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.323: bad orphan inode 15
[  114.800791][ T4987] ext4_test_bit(bit=14, block=5) = 0
[  114.806273][ T4987] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  114.873397][   T22] usb 2-1: USB disconnect, device number 5
[  114.926958][ T3560] EXT4-fs (loop3): unmounting filesystem.
[  115.115045][ T4993] loop2: detected capacity change from 0 to 1764
[  115.174611][ T3536] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  115.230396][   T22] usb 5-1: USB disconnect, device number 2
[  115.266294][ T4993] loop2: detected capacity change from 0 to 512
[  115.319462][ T4993] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.325: casefold flag without casefold feature
[  115.332898][ T4993] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  115.347933][ T4993] EXT4-fs (loop2): mount failed
[  115.821238][ T4999] loop1: detected capacity change from 0 to 256
[  117.568662][ T5003] loop1: detected capacity change from 0 to 4096
[  117.687493][ T5003] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  117.767484][ T5005] loop4: detected capacity change from 0 to 1024
[  118.341502][ T3554] vhci_hcd: vhci_device speed not set
[  118.381698][ T5005] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  118.395751][ T5005] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  118.510909][ T5003] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  118.536668][ T5003] ntfs3: loop1: Failed to load $Extend.
[  118.614411][ T4584] EXT4-fs (loop4): unmounting filesystem.
[  119.519717][ T3559] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.529609][ T3559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.537437][ T3559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.545977][ T3559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.554990][ T3559] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  119.565470][ T3559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.777598][ T5015] loop1: detected capacity change from 0 to 32768
[  119.879601][ T5015] XFS (loop1): Mounting V5 Filesystem
[  119.993337][ T5022] netlink: 'syz.3.334': attribute type 10 has an invalid length.
[  120.013058][ T5022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.334'.
[  120.044963][ T5015] XFS (loop1): Ending clean mount
[  120.061038][ T5022] bridge0: port 3(hsr_slave_1) entered blocking state
[  120.081286][ T5022] bridge0: port 3(hsr_slave_1) entered disabled state
[  120.107714][ T5022] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  120.111249][ T5032] loop0: detected capacity change from 0 to 512
[  120.182526][ T3686] XFS (loop1): Unmounting Filesystem
[  120.189514][ T5032] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.335: casefold flag without casefold feature
[  120.215198][ T5032] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.335: missing EA_INODE flag
[  120.228059][ T5032] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.335: error while reading EA inode 12 err=-117
[  120.295400][ T5032] EXT4-fs (loop0): 1 orphan inode deleted
[  120.308054][  T102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.319786][ T5032] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  120.336903][ T5038] loop3: detected capacity change from 0 to 1024
[  120.381002][ T5038] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.401746][ T5038] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  120.413484][ T5038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  120.474088][  T102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.478248][ T3546] EXT4-fs (loop0): unmounting filesystem.
[  120.509962][ T5038] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  120.518250][ T5038] System zones: 0-1, 3-36
[  120.549647][ T5038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  120.584197][  T102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.657602][ T5046] loop2: detected capacity change from 0 to 8
[  120.696030][ T5046] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  120.711232][  T102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.725326][ T5046] cramfs: unsupported filesystem features
[  120.753470][ T5016] chnl_net:caif_netlink_parms(): no params data found
[  120.936600][ T3560] EXT4-fs (loop3): unmounting filesystem.
[  121.100953][ T5061] loop2: detected capacity change from 0 to 64
[  121.116636][ T5061] hfs: invalid catalog max_key_len 7
[  121.122615][ T5061] hfs: unable to open catalog tree
[  121.620733][ T3562] Bluetooth: hci0: command tx timeout
[  121.685074][ T5055] device syzkaller0 entered promiscuous mode
[  121.773167][ T5070] syz.0.348[5070] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  121.774255][ T5070] syz.0.348[5070] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  121.789096][ T5066] netlink: 'syz.3.347': attribute type 10 has an invalid length.
[  121.793537][ T5067] loop2: detected capacity change from 0 to 4096
[  121.814757][ T5066] netlink: 40 bytes leftover after parsing attributes in process `syz.3.347'.
[  121.833652][ T5066] bridge0: port 3(hsr_slave_1) entered blocking state
[  121.858281][ T5066] bridge0: port 3(hsr_slave_1) entered disabled state
[  121.883205][ T5066] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  121.911600][ T5067] NILFS (loop2): invalid segment: Checksum error in segment payload
[  121.925660][ T5067] NILFS (loop2): trying rollback from an earlier position
[  121.959428][ T5067] NILFS (loop2): recovery complete
[  121.981599][ T5074] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.473150][ T5096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'.
[  123.629357][ T5098] loop3: detected capacity change from 0 to 1024
[  123.661355][ T5098] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  123.701527][ T3562] Bluetooth: hci0: command tx timeout
[  123.740628][ T5098] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  124.277968][ T3560] EXT4-fs (loop3): unmounting filesystem.
[  124.348287][ T5101] loop3: detected capacity change from 0 to 8
[  124.355169][ T5101] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  124.376904][ T5101] cramfs: unsupported filesystem features
[  124.777716][ T5104] loop3: detected capacity change from 0 to 64
[  124.795506][ T5104] hfs: invalid catalog max_key_len 7
[  124.801513][ T5104] hfs: unable to open catalog tree
[  125.350429][ T3536] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  125.759696][ T5112] loop3: detected capacity change from 0 to 4096
[  125.780555][ T3562] Bluetooth: hci0: command tx timeout
[  125.800680][ T5112] NILFS (loop3): invalid segment: Checksum error in segment payload
[  125.808694][ T5112] NILFS (loop3): trying rollback from an earlier position
[  125.830669][ T5112] NILFS (loop3): recovery complete
[  125.843077][ T5113] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.276624][ T5091] netlink: 'syz.0.354': attribute type 5 has an invalid length.
[  126.295269][ T5091] netlink: 7 bytes leftover after parsing attributes in process `syz.0.354'.
[  126.325663][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.357085][ T5016] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.370372][   T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  126.399770][ T5016] device bridge_slave_0 entered promiscuous mode
[  126.427578][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.465426][ T5124] process 'syz.1.365' launched './file0' with NULL argv: empty string added
[  126.475284][ T5016] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.489814][ T5016] device bridge_slave_1 entered promiscuous mode
[  126.522126][ T5128] loop2: detected capacity change from 0 to 8
[  126.579801][ T5128] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  126.621360][ T5016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.638055][   T22] usb 4-1: Using ep0 maxpacket: 8
[  126.644467][ T5128] cramfs: unsupported filesystem features
[  126.659134][ T5016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.913730][   T22] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  126.922675][   T22] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  126.932508][   T22] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  126.942357][   T22] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  126.945376][ T5016] team0: Port device team_slave_0 added
[  126.952792][   T22] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  126.972127][   T22] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  126.988614][ T5016] team0: Port device team_slave_1 added
[  126.995186][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.142252][ T5139] loop2: detected capacity change from 0 to 64
[  127.158340][ T5139] hfs: invalid catalog max_key_len 7
[  127.164362][ T5139] hfs: unable to open catalog tree
[  127.540296][   T22] usb 4-1: usb_control_msg returned -32
[  127.545903][   T22] usbtmc 4-1:16.0: can't read capabilities
[  127.816535][ T5126] loop0: detected capacity change from 0 to 32768
[  127.830857][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.837818][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.874481][ T3562] Bluetooth: hci0: command tx timeout
[  127.882676][ T5126] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.366 (5126)
[  127.907693][ T5016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.943215][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.952747][ T5126] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.979472][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.033400][ T5126] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  128.069209][ T5016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.070470][ T5126] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  128.150324][ T3596] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  128.152675][ T5126] BTRFS info (device loop0): use zstd compression, level 3
[  128.195216][ T5126] BTRFS info (device loop0): using free space tree
[  128.219058][   T22] usb 4-1: USB disconnect, device number 7
[  128.422828][ T5126] BTRFS info (device loop0): enabling ssd optimizations
[  128.561610][ T5016] device hsr_slave_0 entered promiscuous mode
[  128.607963][ T5126] BTRFS info (device loop0): checking UUID tree
[  128.691344][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.813359][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.870954][ T3596] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.991278][ T3596] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  129.055925][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.078535][ T3596] usb 3-1: config 0 descriptor??
[  129.091327][ T5016] device hsr_slave_1 entered promiscuous mode
[  129.114642][ T5016] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.176218][ T5016] Cannot create hsr debugfs directory
[  129.438642][ T5189] netlink: 'syz.3.376': attribute type 5 has an invalid length.
[  129.448755][ T5189] netlink: 7 bytes leftover after parsing attributes in process `syz.3.376'.
[  129.502387][ T5191] loop1: detected capacity change from 0 to 1024
[  129.556107][ T5192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.376'.
[  129.574851][ T3596] koneplus 0003:1E7D:2D51.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[  129.575413][ T3536] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  129.680681][ T3546] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.804969][ T3596] usb 3-1: USB disconnect, device number 3
[  130.059127][  T102] device hsr_slave_0 left promiscuous mode
[  130.074694][  T102] device hsr_slave_1 left promiscuous mode
[  130.106703][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.129544][  T102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.156208][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.179601][  T102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.353792][ T5210] input: syz1 as /devices/virtual/input/input5
[  130.578593][  T102] device bridge_slave_1 left promiscuous mode
[  130.636494][  T102] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.883222][  T102] device bridge_slave_0 left promiscuous mode
[  130.889462][  T102] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.193505][  T102] device veth1_macvtap left promiscuous mode
[  131.199601][  T102] device veth0_macvtap left promiscuous mode
[  131.232370][  T102] device veth1_vlan left promiscuous mode
[  131.252384][  T102] device veth0_vlan left promiscuous mode
[  131.547331][ T3562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  131.560067][ T3562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  131.570588][ T3562] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  131.581197][ T3558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.589578][ T3558] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  131.597732][ T3558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  132.127036][ T5240] input: syz1 as /devices/virtual/input/input6
[  132.583500][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  132.593869][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  132.821403][  T102] team0 (unregistering): Port device team_slave_1 removed
[  133.029294][  T102] team0 (unregistering): Port device team_slave_0 removed
[  133.442390][  T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.621555][ T3558] Bluetooth: hci4: command tx timeout
[  133.752257][  T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.381134][  T102] bond0 (unregistering): Released all slaves
[  134.586483][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.588289][ T5262] loop0: detected capacity change from 0 to 1024
[  134.598385][ T5234] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  134.612958][ T5234] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  134.869061][ T5262] EXT4-fs: Ignoring removed orlov option
[  134.898493][ T5262] EXT4-fs (loop0): Test dummy encryption mode enabled
[  134.930084][ T5262] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  134.973470][ T5262] EXT4-fs (loop0): unmounting filesystem.
[  135.391575][ T5016] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  135.431461][ T5016] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  135.484476][ T5229] chnl_net:caif_netlink_parms(): no params data found
[  135.502126][ T5016] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  135.511134][ T5268] loop2: detected capacity change from 0 to 32768
[  135.546019][ T5016] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  135.556558][ T5268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.398 (5268)
[  135.632718][ T5268] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.672242][ T5268] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  135.700221][ T3558] Bluetooth: hci4: command tx timeout
[  135.775794][ T5268] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  135.802874][ T5297] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  135.821132][ T5297] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  135.850244][ T5268] BTRFS info (device loop2): use zstd compression, level 3
[  135.867734][ T5268] BTRFS info (device loop2): using free space tree
[  135.877934][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.900873][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.923815][ T5229] device bridge_slave_0 entered promiscuous mode
[  135.978973][ T5309] device vlan2 entered promiscuous mode
[  136.006463][ T5309] device bond0 entered promiscuous mode
[  136.026015][ T5309] device bond_slave_0 entered promiscuous mode
[  136.045544][ T5309] device bond_slave_1 entered promiscuous mode
[  136.111955][ T5309] device netdevsim0 entered promiscuous mode
[  136.120559][ T5268] BTRFS info (device loop2): enabling ssd optimizations
[  136.151138][ T5309] device bond0 left promiscuous mode
[  136.159889][ T5268] BTRFS info (device loop2): checking UUID tree
[  136.188221][ T5309] device bond_slave_0 left promiscuous mode
[  136.199741][ T5309] device bond_slave_1 left promiscuous mode
[  136.240693][ T5309] device netdevsim0 left promiscuous mode
[  136.319506][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.334845][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.359355][ T5229] device bridge_slave_1 entered promiscuous mode
[  136.382072][ T5328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'.
[  136.413249][ T5328] netlink: 'syz.1.408': attribute type 15 has an invalid length.
[  136.474815][ T5328] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0
[  136.484103][ T5328] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0
[  136.493017][ T5328] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0
[  136.502326][ T5328] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0
[  136.520971][ T5328] device vxlan0 entered promiscuous mode
[  136.579463][ T3552] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.821385][ T5016] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.834148][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.870499][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  136.879398][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  136.908031][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.940615][ T5016] 8021q: adding VLAN 0 to HW filter on device team0
[  137.042232][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  137.051850][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.090470][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.097569][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.138568][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  137.159906][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  137.176490][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.183683][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.194604][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  137.239451][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  137.249753][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  137.271540][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  137.291237][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  137.308115][ T5016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  137.346777][ T5356] loop2: detected capacity change from 0 to 1024
[  137.371148][ T5016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  137.400839][ T5356] EXT4-fs: Ignoring removed orlov option
[  137.430396][ T5356] EXT4-fs (loop2): Test dummy encryption mode enabled
[  137.455341][ T5229] team0: Port device team_slave_0 added
[  137.492296][ T5356] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  137.511613][ T5229] team0: Port device team_slave_1 added
[  137.526016][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  137.533524][ T5356] EXT4-fs (loop2): unmounting filesystem.
[  137.541700][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  137.561452][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  137.578404][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  137.589685][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  137.608433][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  137.623491][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  137.639910][ T5369] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  137.653517][ T5369] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  137.766381][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  137.780343][ T3558] Bluetooth: hci4: command tx timeout
[  137.952183][ T5381] netlink: 'syz.0.419': attribute type 29 has an invalid length.
[  137.979055][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.993627][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.118390][ T5386] input: syz1 as /devices/virtual/input/input7
[  138.748556][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.763783][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.780316][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.877846][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.915239][ T5381] netlink: 'syz.0.419': attribute type 29 has an invalid length.
[  139.018569][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'.
[  139.038796][ T5393] netlink: 'syz.1.421': attribute type 15 has an invalid length.
[  139.085286][ T5229] device hsr_slave_0 entered promiscuous mode
[  139.126723][ T5229] device hsr_slave_1 entered promiscuous mode
[  139.150453][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.186622][ T5229] Cannot create hsr debugfs directory
[  139.261209][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  139.268669][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  139.302895][ T5016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.675944][ T5229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.698479][ T5388] loop2: detected capacity change from 0 to 32768
[  139.807024][ T5229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.860558][ T3558] Bluetooth: hci4: command tx timeout
[  139.867629][ T5388] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  139.867629][ T5388] 
[  139.899671][ T5388] ERROR: (device loop2): remounting filesystem as read-only
[  139.954287][ T5419] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  139.954287][ T5419] 
[  139.998174][ T5229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.064984][  T134] blkno = 5002c, nblocks = 1
[  140.069618][  T134] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  140.069618][  T134] 
[  140.098339][ T5422] loop1: detected capacity change from 0 to 1024
[  140.128703][ T5229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.131158][ T5422] EXT4-fs: Ignoring removed orlov option
[  140.182749][ T5422] EXT4-fs (loop1): Test dummy encryption mode enabled
[  140.281830][ T5422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  140.335550][ T5422] EXT4-fs (loop1): unmounting filesystem.
[  140.564532][ T5439] input: syz1 as /devices/virtual/input/input8
[  141.220888][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  141.229692][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.396420][ T5442] loop0: detected capacity change from 0 to 2048
[  141.426185][ T5442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.430312][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  141.483954][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.611472][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.619715][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  141.641207][ T5016] device veth0_vlan entered promiscuous mode
[  141.731097][ T5016] device veth1_vlan entered promiscuous mode
[  141.739137][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  141.932828][ T5016] device veth0_macvtap entered promiscuous mode
[  141.948262][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  141.959518][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  141.975046][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  141.994530][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  142.012102][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.057631][ T5464] device vlan2 entered promiscuous mode
[  142.071505][ T5464] device bond0 entered promiscuous mode
[  142.077131][ T5464] device bond_slave_0 entered promiscuous mode
[  142.095598][ T5464] device bond_slave_1 entered promiscuous mode
[  142.108669][ T5464] device netdevsim0 entered promiscuous mode
[  142.272011][ T5444] input: syz1 as /devices/virtual/input/input9
[  142.415742][ T5464] device bond0 left promiscuous mode
[  142.415781][ T5464] device bond_slave_0 left promiscuous mode
[  142.416603][ T5464] device bond_slave_1 left promiscuous mode
[  142.417058][ T5464] device netdevsim0 left promiscuous mode
[  142.762310][ T5016] device veth1_macvtap entered promiscuous mode
[  142.789260][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  142.799961][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  142.816178][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.836902][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.963418][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.992914][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.023408][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.051780][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.089768][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.100921][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.128223][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.152287][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.176521][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.249815][ T5487] loop2: detected capacity change from 0 to 512
[  143.289947][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.303983][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.353376][ T5487] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  143.386690][ T5487] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038 (0x7fffffff)
[  143.440265][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'.
[  143.451771][ T3552] EXT4-fs (loop2): unmounting filesystem.
[  143.472615][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.494448][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.504745][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.517122][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.527320][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.538256][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.548754][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.620433][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.632824][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.649324][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  143.674062][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  143.706395][ T5016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.723237][ T5016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.732928][ T5016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.752032][ T5016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.975414][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.995474][  T102] device hsr_slave_0 left promiscuous mode
[  144.017106][  T102] device hsr_slave_1 left promiscuous mode
[  144.058139][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.096466][  T102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.111563][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.134529][  T102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.159595][  T102] device bridge_slave_1 left promiscuous mode
[  144.176889][  T102] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.217938][  T102] device bridge_slave_0 left promiscuous mode
[  144.230212][ T5512] loop1: detected capacity change from 0 to 1024
[  144.239051][  T102] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.346922][  T102] device veth1_macvtap left promiscuous mode
[  144.405901][  T102] device veth0_macvtap left promiscuous mode
[  144.440533][  T102] device veth1_vlan left promiscuous mode
[  144.446377][  T102] device veth0_vlan left promiscuous mode
[  144.816952][ T3559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  144.827882][ T3559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  144.836331][ T3559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  144.845138][ T3559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  144.853915][ T3559] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  144.943982][ T3559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  147.162496][  T102] team0 (unregistering): Port device team_slave_1 removed
[  147.195195][  T102] team0 (unregistering): Port device team_slave_0 removed
[  147.222273][ T3562] Bluetooth: hci2: command tx timeout
[  147.229097][  T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.263655][  T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.531193][  T102] bond0 (unregistering): Released all slaves
[  147.706635][ T5229] 8021q: adding VLAN 0 to HW filter on device team0
[  147.750516][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  147.758576][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.776503][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.801215][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  147.809841][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.819241][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.831937][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.839064][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.871104][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.896924][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.906164][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.913301][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.961107][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.991684][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  148.020929][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  148.029654][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  148.098063][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  148.131870][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  148.169357][ T5558] loop2: detected capacity change from 0 to 65
[  148.193994][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  148.204970][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.214071][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  148.225008][ T5558] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  148.226859][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.238911][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  148.257952][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  148.268807][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  148.321096][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  148.351844][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  148.424704][ T5229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  148.478000][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  148.512272][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  148.815500][ T5528] chnl_net:caif_netlink_parms(): no params data found
[  149.152751][ T5528] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.198156][ T5528] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.217284][ T5528] device bridge_slave_0 entered promiscuous mode
[  149.239169][ T5528] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.262596][ T5589] loop4: detected capacity change from 0 to 512
[  149.294545][ T5528] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.301738][ T3558] Bluetooth: hci2: command tx timeout
[  149.341420][ T5528] device bridge_slave_1 entered promiscuous mode
[  149.368958][ T5589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  149.378380][ T5589] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff)
[  149.402929][ T5528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.434846][ T5528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.485691][ T5016] EXT4-fs (loop4): unmounting filesystem.
[  149.521930][ T5528] team0: Port device team_slave_0 added
[  149.564366][ T5528] team0: Port device team_slave_1 added
[  149.672341][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.700146][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.761675][ T5528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.785877][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.799636][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.897011][ T5528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.176412][ T5614] loop2: detected capacity change from 0 to 256
[  150.217240][ T5614] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  150.420723][   T26] kauditd_printk_skb: 28 callbacks suppressed
[  150.420849][   T26] audit: type=1804 audit(1721260570.089:155): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.475" name="/newroot/108/file0/file0" dev="loop2" ino=1048606 res=1 errno=0
[  150.768292][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  150.786018][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  150.825507][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.009287][ T5528] device hsr_slave_0 entered promiscuous mode
[  151.073020][ T5528] device hsr_slave_1 entered promiscuous mode
[  151.097139][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'.
[  151.133212][ T5528] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.147699][ T5528] Cannot create hsr debugfs directory
[  151.189504][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  151.204794][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  151.380512][ T3562] Bluetooth: hci2: command tx timeout
[  151.415688][ T5229] device veth0_vlan entered promiscuous mode
[  151.425146][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  151.434221][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  151.449946][ T5229] device veth1_vlan entered promiscuous mode
[  151.466501][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  151.475789][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  151.484043][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  151.500160][    T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  151.509938][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  151.522891][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  151.532764][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  151.542911][ T5229] device veth0_macvtap entered promiscuous mode
[  151.621899][ T5528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.659520][ T5229] device veth1_macvtap entered promiscuous mode
[  151.746374][ T5528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.765807][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.777053][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.804457][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.812754][ T5625] loop4: detected capacity change from 0 to 32768
[  151.818857][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.836869][ T5625] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.479 (5625)
[  151.843042][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.863456][ T3562] Bluetooth: hci1: ISO packet for unknown connection handle 4095
[  151.873405][ T3562] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  151.884347][ T3562] CPU: 1 PID: 3562 Comm: kworker/u5:7 Not tainted 6.1.99-syzkaller #0
[  151.892516][ T3562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  151.902565][ T3562] Workqueue: hci1 hci_rx_work
[  151.907251][ T3562] Call Trace:
[  151.910523][ T3562]  <TASK>
[  151.913445][ T3562]  dump_stack_lvl+0x1e3/0x2cb
[  151.918127][ T3562]  ? nf_tcp_handle_invalid+0x642/0x642
[  151.923588][ T3562]  ? panic+0x764/0x764
[  151.927657][ T3562]  sysfs_create_dir_ns+0x2c6/0x390
[  151.932771][ T3562]  ? sysfs_warn_dup+0xa0/0xa0
[  151.937451][ T3562]  kobject_add_internal+0x6df/0xd10
[  151.942654][ T3562]  kobject_add+0x14e/0x210
[  151.947072][ T3562]  ? device_add+0x3c2/0xfd0
[  151.951570][ T3562]  ? kobject_init+0x1d0/0x1d0
[  151.956246][ T3562]  ? __raw_spin_lock_init+0x41/0x100
[  151.961527][ T3562]  ? get_device_parent+0x128/0x400
[  151.966641][ T3562]  device_add+0x476/0xfd0
[  151.970973][ T3562]  hci_conn_add_sysfs+0xe4/0x1f0
[  151.975908][ T3562]  le_conn_complete_evt+0xcc6/0x1320
[  151.981190][ T3562]  ? trace_contention_end+0x61/0x170
[  151.986474][ T3562]  ? hci_le_big_info_adv_report_evt+0x390/0x390
[  151.992722][ T3562]  ? __mutex_unlock_slowpath+0x218/0x750
[  151.998364][ T3562]  ? mutex_unlock+0x10/0x10
[  152.002862][ T3562]  ? skb_pull_data+0x10e/0x220
[  152.007629][ T3562]  hci_le_enh_conn_complete_evt+0x181/0x410
[  152.013525][ T3562]  hci_event_packet+0xa40/0x1510
[  152.018466][ T3562]  ? hci_remote_host_features_evt+0x210/0x210
[  152.024538][ T3562]  ? bis_list+0x290/0x290
[  152.028862][ T3562]  ? do_raw_spin_unlock+0x137/0x8a0
[  152.034057][ T3562]  ? kcov_remote_start+0x4b5/0x7d0
[  152.039164][ T3562]  ? lockdep_hardirqs_on+0x50/0x130
[  152.044361][ T3562]  ? hci_send_to_monitor+0x99/0x4d0
[  152.049557][ T3562]  hci_rx_work+0x3cd/0xce0
[  152.053989][ T3562]  ? process_one_work+0x7a9/0x11d0
[  152.059102][ T3562]  process_one_work+0x8a9/0x11d0
[  152.064050][ T3562]  ? worker_detach_from_pool+0x260/0x260
[  152.069684][ T3562]  ? _raw_spin_lock_irqsave+0x120/0x120
[  152.075225][ T3562]  ? kthread_data+0x4e/0xc0
[  152.079732][ T3562]  ? wq_worker_running+0x97/0x190
[  152.084762][ T3562]  worker_thread+0xa47/0x1200
[  152.089437][ T3562]  ? _raw_spin_unlock+0x40/0x40
[  152.094285][ T3562]  ? __sched_text_start+0x8/0x8
[  152.099138][ T3562]  ? _raw_spin_unlock+0x40/0x40
[  152.103998][ T3562]  kthread+0x28d/0x320
[  152.108060][ T3562]  ? worker_clr_flags+0x190/0x190
[  152.113079][ T3562]  ? kthread_blkcg+0xd0/0xd0
[  152.117687][ T3562]  ret_from_fork+0x1f/0x30
[  152.122117][ T3562]  </TASK>
[  152.131149][ T3562] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  152.146198][ T3562] Bluetooth: hci1: failed to register connection device
[  152.158173][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.167328][ T5625] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  152.168693][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.189282][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.201184][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.201185][    T7] usb 3-1: config index 0 descriptor too short (expected 274, got 18)
[  152.201228][    T7] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  152.213053][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.240267][ T5625] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  152.240839][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.249488][ T5625] BTRFS info (device loop4): using free space tree
[  152.264317][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.266620][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.284634][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.295074][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.306349][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.308569][    T7] usb 3-1: config 0 descriptor??
[  152.328943][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.339943][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.358192][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.369018][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  152.391302][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  152.410436][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  152.430020][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  152.451110][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  152.484607][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  152.513554][ T5625] BTRFS info (device loop4): enabling ssd optimizations
[  152.514969][ T5528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.544306][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.563206][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.680192][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.783469][   T26] audit: type=1804 audit(1721260572.569:156): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.479" name="/newroot/8/file0/file1" dev="loop4" ino=260 res=1 errno=0
[  153.451885][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.462763][ T3562] Bluetooth: hci2: command tx timeout
[  153.462807][ T3558] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  153.477239][ T3558] Bluetooth: hci0: Injecting HCI hardware error event
[  153.489888][    T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  153.503601][ T3562] Bluetooth: hci0: hardware error 0x00
[  153.588721][    T7] asix: probe of 3-1:0.0 failed with error -71
[  153.617139][    T7] usb 3-1: USB disconnect, device number 4
[  153.744772][ T5016] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  153.793782][ T5528] bond0: (slave netdevsim0): Releasing backup interface
[  153.893307][ T5528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.046414][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  154.137999][ T5672] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  154.184508][ T3558] Bluetooth: hci1: command tx timeout
[  154.222072][ T4154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.272077][ T4154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.311748][ T5674] loop1: detected capacity change from 0 to 256
[  154.339022][ T5674] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  154.411477][   T26] audit: type=1804 audit(1721260574.169:157): pid=5674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.487" name="/newroot/100/file0/file0" dev="loop1" ino=1048607 res=1 errno=0
[  154.778331][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  154.896450][ T4154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.920337][    T7] usb 3-1: device descriptor read/all, error -71
[  154.988474][ T4154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.789498][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  155.927282][ T5528] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  155.984185][ T5528] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  156.003838][ T3562] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  156.058086][ T5686] loop3: detected capacity change from 0 to 8
[  156.084068][ T5528] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  156.090025][ T5686] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  156.102723][ T5689] loop4: detected capacity change from 0 to 128
[  156.111402][ T5686] cramfs: unsupported filesystem features
[  157.668502][ T5686] loop3: detected capacity change from 0 to 64
[  157.692622][ T5686] hfs: invalid catalog max_key_len 7
[  157.698101][ T5686] hfs: unable to open catalog tree
[  157.858830][ T5528] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  158.409541][ T5717] loop4: detected capacity change from 0 to 8
[  158.559655][ T5696] loop1: detected capacity change from 0 to 32768
[  158.597533][ T5696] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.493 (5696)
[  158.626743][ T5696] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  158.660409][ T5696] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  158.715412][ T5696] BTRFS info (device loop1): using free space tree
[  159.010647][ T5528] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.099722][ T5752] loop2: detected capacity change from 0 to 256
[  159.139125][ T5752] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  159.203451][   T26] audit: type=1804 audit(1721260578.969:158): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.508" name="/newroot/119/file0/file0" dev="loop2" ino=1048611 res=1 errno=0
[  159.759735][ T5696] BTRFS error (device loop1): open_ctree failed
[  160.005074][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  160.031070][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  160.080821][ T5528] 8021q: adding VLAN 0 to HW filter on device team0
[  160.109537][  T102] device hsr_slave_0 left promiscuous mode
[  160.125249][  T102] device hsr_slave_1 left promiscuous mode
[  160.153850][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.185378][  T102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.212031][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.225942][  T102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.236343][ T5766] loop3: detected capacity change from 0 to 8
[  160.247561][  T102] device bridge_slave_1 left promiscuous mode
[  160.259158][  T102] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.297216][  T102] device bridge_slave_0 left promiscuous mode
[  160.319663][  T102] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.332767][ T5768] loop1: detected capacity change from 0 to 128
[  160.479004][  T102] device veth1_macvtap left promiscuous mode
[  160.485186][  T102] device veth0_macvtap left promiscuous mode
[  160.496686][  T102] device veth1_vlan left promiscuous mode
[  160.505471][  T102] device veth0_vlan left promiscuous mode
[  161.952728][ T5783] loop4: detected capacity change from 0 to 512
[  161.991637][ T5783] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  162.009477][ T5783] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff)
[  162.058063][ T5016] EXT4-fs (loop4): unmounting filesystem.
[  162.493753][ T5800] loop4: detected capacity change from 0 to 8
[  162.556313][    T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  162.566852][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'.
[  162.768427][  T102] team0 (unregistering): Port device team_slave_1 removed
[  162.798006][  T102] team0 (unregistering): Port device team_slave_0 removed
[  162.811323][    T7] usb 3-1: Using ep0 maxpacket: 8
[  162.839713][  T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.872034][  T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.114022][    T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  163.123889][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.132173][    T7] usb 3-1: Product: syz
[  163.136352][    T7] usb 3-1: Manufacturer: syz
[  163.141000][    T7] usb 3-1: SerialNumber: syz
[  163.156022][    T7] usb 3-1: config 0 descriptor??
[  163.207992][  T102] bond0 (unregistering): Released all slaves
[  163.269003][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  163.281535][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  163.289949][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.297079][ T5344] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.306283][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  163.314876][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  163.323830][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.330954][ T5344] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.339121][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  163.430381][    T7] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  163.492584][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  163.514877][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  163.532458][ T5807] loop3: detected capacity change from 0 to 1024
[  163.551031][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  163.566906][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  163.588591][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  163.608861][ T5807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.625823][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  163.638487][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  163.659115][ T3562] Bluetooth: hci1: ISO packet for unknown connection handle 4095
[  163.667051][ T3562] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  163.676341][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.715202][ T5528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  163.726714][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  163.778682][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  163.789361][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  163.828835][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  164.142335][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  164.159102][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  164.190058][ T5528] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.265623][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.279185][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.297762][ T5811] loop4: detected capacity change from 0 to 32768
[  164.323485][ T5811] XFS: attr2 mount option is deprecated.
[  164.331374][ T5828] loop3: detected capacity change from 0 to 512
[  164.342962][ T5811] XFS: ikeep mount option is deprecated.
[  164.344690][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.357610][    T7] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  164.358349][ T5811] XFS: noikeep mount option is deprecated.
[  164.379817][    T7] usb 3-1: USB disconnect, device number 7
[  164.422965][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.435182][ T5528] device veth0_vlan entered promiscuous mode
[  164.445877][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.445952][ T5828] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  164.455184][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.486173][ T5828] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff)
[  164.536969][ T5528] device veth1_vlan entered promiscuous mode
[  164.559118][ T5840] loop1: detected capacity change from 0 to 8
[  164.569838][ T5811] XFS (loop4): Mounting V5 Filesystem
[  164.669182][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  164.683587][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  164.700866][ T5811] XFS (loop4): Ending clean mount
[  164.703217][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.708864][ T5811] XFS (loop4): Quotacheck needed: Please wait.
[  164.714790][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.744146][ T5528] device veth0_macvtap entered promiscuous mode
[  164.753181][ T5229] EXT4-fs (loop3): unmounting filesystem.
[  164.812896][ T5811] XFS (loop4): Quotacheck: Done.
[  164.849890][ T5528] device veth1_macvtap entered promiscuous mode
[  164.857091][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'.
[  164.941258][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.004675][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.019684][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.036014][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.073200][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.087124][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.105960][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.118876][ T5855] loop3: detected capacity change from 0 to 16
[  165.126664][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.138723][ T5855] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  165.147343][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.150631][ T5016] XFS (loop4): Unmounting Filesystem
[  165.165287][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  165.178378][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  165.225739][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  165.254730][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  165.270251][ T3630] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  165.294134][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.317205][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.349401][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.397878][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.433858][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.465858][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.478557][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.490329][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.504228][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.524491][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.533096][ T3630] usb 2-1: Using ep0 maxpacket: 32
[  165.546357][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.582684][ T5528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.600350][ T5528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.618582][ T5528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.640367][ T5528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.650370][ T3630] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  165.665170][ T3630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.706972][ T3630] usb 2-1: config 0 descriptor??
[  165.764445][ T3630] gspca_main: sunplus-2.14.0 probing 041e:400b
[  165.863466][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.885500][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.989859][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  166.023742][ T3786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.046056][ T3786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.078787][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  166.589226][   T26] audit: type=1326 audit(1721260586.369:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.1.540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb889175ad9 code=0x0
[  166.772972][ T3630] gspca_sunplus: reg_r err -110
[  166.778101][ T3630] sunplus: probe of 2-1:0.0 failed with error -110
[  166.821551][ T5876] loop2: detected capacity change from 0 to 8
[  166.830690][ T4564] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  167.270432][ T4564] usb 5-1: config index 0 descriptor too short (expected 274, got 18)
[  167.281277][ T4564] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  167.300717][ T4564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.351525][ T4564] usb 5-1: config 0 descriptor??
[  167.559204][ T5869] loop0: detected capacity change from 0 to 32768
[  167.580279][ T5869] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.545 (5869)
[  167.645281][ T5869] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  167.681540][ T5869] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  167.711221][ T5869] BTRFS info (device loop0): using free space tree
[  167.779128][ T5899] loop2: detected capacity change from 0 to 64
[  167.950302][ T4564] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  167.961947][ T4564] asix: probe of 5-1:0.0 failed with error -71
[  167.997354][ T4564] usb 5-1: USB disconnect, device number 3
[  168.050739][ T5913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.557'.
[  168.051903][ T5869] BTRFS info (device loop0): enabling ssd optimizations
[  168.068427][ T5913] device gretap0 entered promiscuous mode
[  168.079543][ T5913] device macsec1 entered promiscuous mode
[  168.089293][ T5913] device gretap0 left promiscuous mode
[  168.294534][ T5887] loop3: detected capacity change from 0 to 32768
[  168.310759][ T5887] XFS: attr2 mount option is deprecated.
[  168.316469][ T5887] XFS: ikeep mount option is deprecated.
[  168.332472][ T5887] XFS: noikeep mount option is deprecated.
[  168.438114][   T26] audit: type=1804 audit(1721260588.219:160): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.545" name="/newroot/1/file0/file1" dev="loop0" ino=260 res=1 errno=0
[  168.557943][ T4564] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  168.824079][ T5887] XFS (loop3): Mounting V5 Filesystem
[  168.962308][ T5887] XFS (loop3): Ending clean mount
[  168.994598][ T5528] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  169.008115][ T5887] XFS (loop3): Quotacheck needed: Please wait.
[  169.071681][ T5887] XFS (loop3): Quotacheck: Done.
[  169.121690][ T4564] usb 5-1: config index 0 descriptor too short (expected 274, got 18)
[  169.147353][ T5929] loop2: detected capacity change from 0 to 4096
[  169.169688][ T4564] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  169.187942][ T4564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.220542][ T4564] usb 5-1: config 0 descriptor??
[  169.281221][ T5229] XFS (loop3): Unmounting Filesystem
[  169.295214][ T4417] usb 2-1: USB disconnect, device number 6
[  169.441995][ T5931] loop1: detected capacity change from 0 to 16
[  169.501894][ T5931] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  169.550314][ T4564] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  169.592154][ T4564] asix: probe of 5-1:0.0 failed with error -71
[  169.655695][ T4564] usb 5-1: USB disconnect, device number 4
[  170.169702][ T5949] loop0: detected capacity change from 0 to 64
[  170.318351][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.569'.
[  170.425934][ T5951] device gretap0 entered promiscuous mode
[  170.462987][ T5951] device macsec1 entered promiscuous mode
[  170.737019][ T5344] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  171.000686][ T5344] usb 5-1: Using ep0 maxpacket: 8
[  171.018976][ T5951] device gretap0 left promiscuous mode
[  171.280423][ T5344] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  171.309497][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.309526][ T5344] usb 5-1: Product: syz
[  171.309542][ T5344] usb 5-1: Manufacturer: syz
[  171.309557][ T5344] usb 5-1: SerialNumber: syz
[  171.321181][ T5344] usb 5-1: config 0 descriptor??
[  171.580277][ T5344] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  171.997934][ T5976] loop3: detected capacity change from 0 to 4096
[  172.058881][ T5976] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096).  This is not supported.  Sorry.
[  172.282840][ T4279] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  172.494598][ T5344] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  172.521882][ T5344] usb 5-1: USB disconnect, device number 5
[  172.670624][ T4279] usb 1-1: config index 0 descriptor too short (expected 274, got 18)
[  172.680927][ T4279] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  172.690299][   T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  172.709958][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.735960][ T4279] usb 1-1: config 0 descriptor??
[  172.930281][   T22] usb 2-1: Using ep0 maxpacket: 32
[  172.939707][ T6008] loop2: detected capacity change from 0 to 16
[  172.959588][ T6008] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  173.211125][   T22] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  173.226224][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.246300][   T22] usb 2-1: Product: syz
[  173.273164][   T22] usb 2-1: Manufacturer: syz
[  173.296623][   T22] usb 2-1: SerialNumber: syz
[  173.333053][   T22] usb 2-1: config 0 descriptor??
[  173.342148][ T6015] loop4: detected capacity change from 0 to 4096
[  173.349861][ T6015] ntfs: (device loop4): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096).  This is not supported.  Sorry.
[  173.350305][ T4279] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  173.421149][   T22] cdc_ether 2-1:0.0: More than one union descriptor, skipping ...
[  173.429160][ T4279] asix: probe of 1-1:0.0 failed with error -71
[  173.439432][   T22] cdc_ether 2-1:0.0: skipping garbage
[  173.462763][   T22] usb 2-1: bad CDC descriptors
[  173.473128][ T4279] usb 1-1: USB disconnect, device number 6
[  173.485576][   T22] usb 2-1: unsupported MDLM descriptors
[  173.624615][   T22] usb 2-1: USB disconnect, device number 7
[  173.850271][ T4279] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  174.210346][ T4279] usb 1-1: config index 0 descriptor too short (expected 274, got 18)
[  174.234875][ T4279] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  174.277858][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.336340][ T4279] usb 1-1: config 0 descriptor??
[  174.630237][   T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  174.650255][ T4564] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  174.690330][ T4279] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  174.735988][ T4279] asix: probe of 1-1:0.0 failed with error -71
[  174.750937][ T6048] program syz.1.613 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  174.778216][ T4279] usb 1-1: USB disconnect, device number 7
[  174.793893][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'.
[  174.870287][   T22] usb 5-1: Using ep0 maxpacket: 8
[  174.910173][ T4564] usb 4-1: Using ep0 maxpacket: 8
[  175.045833][ T4564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 59391, setting to 1024
[  175.150303][   T22] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  175.189744][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.209667][   T22] usb 5-1: Product: syz
[  175.214175][   T22] usb 5-1: Manufacturer: syz
[  175.218785][   T22] usb 5-1: SerialNumber: syz
[  175.230618][ T4564] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46
[  175.244354][   T22] usb 5-1: config 0 descriptor??
[  175.249934][ T4564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.270257][ T4564] usb 4-1: Product: syz
[  175.274456][ T4564] usb 4-1: Manufacturer: syz
[  175.289493][ T4564] usb 4-1: SerialNumber: syz
[  175.339579][ T4564] usb 4-1: config 0 descriptor??
[  175.380733][ T6042] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  175.402256][ T4564] radio-si470x 4-1:0.0: could not find interrupt in endpoint
[  175.409724][ T4564] radio-si470x: probe of 4-1:0.0 failed with error -5
[  175.440423][ T4564] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  175.504810][   T22] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  175.639454][ T4564] usb 4-1: USB disconnect, device number 8
[  175.690288][ T4283] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  175.945244][ T4283] usb 1-1: Using ep0 maxpacket: 32
[  176.021633][ T6074] loop2: detected capacity change from 0 to 40427
[  176.029215][ T6074] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  176.038710][ T6074] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  176.064997][ T6074] F2FS-fs (loop2): Found nat_bits in checkpoint
[  176.106746][ T6074] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  176.114602][ T6074] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  176.148474][   T26] audit: type=1800 audit(1721260595.929:161): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.624" name="bus" dev="loop2" ino=10 res=0 errno=0
[  176.170229][   T26] audit: type=1800 audit(1721260595.929:162): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.624" name="bus" dev="loop2" ino=10 res=0 errno=0
[  176.250658][ T4283] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  176.259739][ T4283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.264163][  T102] kworker/u4:4: attempt to access beyond end of device
[  176.264163][  T102] loop2: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  176.274477][ T4283] usb 1-1: Product: syz
[  176.286253][ T4283] usb 1-1: Manufacturer: syz
[  176.288049][ T6082] loop3: detected capacity change from 0 to 512
[  176.291000][ T4283] usb 1-1: SerialNumber: syz
[  176.304634][ T6082] EXT4-fs: Ignoring removed mblk_io_submit option
[  176.315265][ T6082] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  176.339612][ T4283] usb 1-1: config 0 descriptor??
[  176.346559][ T6082] EXT4-fs error (device loop3): __ext4_iget:5044: inode #11: block 1: comm syz.3.626: invalid block
[  176.380990][ T4283] cdc_ether 1-1:0.0: More than one union descriptor, skipping ...
[  176.388830][ T4283] cdc_ether 1-1:0.0: skipping garbage
[  176.401955][ T6082] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.626: couldn't read orphan inode 11 (err -117)
[  176.445413][ T6086] loop1: detected capacity change from 0 to 256
[  176.446621][ T4283] usb 1-1: bad CDC descriptors
[  176.456806][   T22] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  176.473105][ T6082] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  176.494721][ T4283] usb 1-1: unsupported MDLM descriptors
[  176.526773][   T22] usb 5-1: USB disconnect, device number 6
[  176.556287][ T6086] FAT-fs (loop1): Directory bread(block 64) failed
[  176.574286][ T6086] FAT-fs (loop1): Directory bread(block 65) failed
[  176.591126][ T5229] EXT4-fs (loop3): unmounting filesystem.
[  176.594617][ T6086] FAT-fs (loop1): Directory bread(block 66) failed
[  176.610671][ T6086] FAT-fs (loop1): Directory bread(block 67) failed
[  176.627308][ T4283] usb 1-1: USB disconnect, device number 8
[  176.627530][ T6086] FAT-fs (loop1): Directory bread(block 68) failed
[  176.680255][ T6086] FAT-fs (loop1): Directory bread(block 69) failed
[  176.692410][ T6086] FAT-fs (loop1): Directory bread(block 70) failed
[  176.715812][ T6086] FAT-fs (loop1): Directory bread(block 71) failed
[  176.730747][ T6086] FAT-fs (loop1): Directory bread(block 72) failed
[  176.737917][ T6086] FAT-fs (loop1): Directory bread(block 73) failed
[  176.940747][ T6094] program syz.3.631 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  176.980006][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'.
[  177.048874][ T6102] loop2: detected capacity change from 0 to 512
[  177.091125][ T6102] EXT4-fs: Ignoring removed i_version option
[  177.107405][ T6102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  177.151337][ T6102] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  177.204836][ T6102] EXT4-fs (loop2): 1 truncate cleaned up
[  177.222114][ T6102] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  177.294628][  T153] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  177.458637][ T3552] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1)
[  177.533848][ T3552] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  177.563895][ T3552] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #15: comm syz-executor: mark_inode_dirty error
[  177.586286][ T3552] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  177.618891][ T3552] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error
[  177.661349][ T3552] EXT4-fs (loop2): unmounting filesystem.
[  177.700523][  T153] usb 2-1: config index 0 descriptor too short (expected 274, got 18)
[  177.713226][  T153] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  177.719522][ T6121] loop3: detected capacity change from 0 to 256
[  177.742952][  T153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.785354][ T6121] FAT-fs (loop3): Directory bread(block 64) failed
[  177.790417][  T153] usb 2-1: config 0 descriptor??
[  177.803740][ T6121] FAT-fs (loop3): Directory bread(block 65) failed
[  177.819909][ T6121] FAT-fs (loop3): Directory bread(block 66) failed
[  177.841308][ T6121] FAT-fs (loop3): Directory bread(block 67) failed
[  177.848077][ T6121] FAT-fs (loop3): Directory bread(block 68) failed
[  177.859174][ T6121] FAT-fs (loop3): Directory bread(block 69) failed
[  177.884016][ T6121] FAT-fs (loop3): Directory bread(block 70) failed
[  177.894056][ T6121] FAT-fs (loop3): Directory bread(block 71) failed
[  177.896124][ T6112] loop4: detected capacity change from 0 to 40427
[  177.912534][ T6121] FAT-fs (loop3): Directory bread(block 72) failed
[  177.926483][ T6112] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  177.936805][ T6112] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  177.944257][ T6121] FAT-fs (loop3): Directory bread(block 73) failed
[  178.001808][ T6112] F2FS-fs (loop4): Found nat_bits in checkpoint
[  178.139898][ T4154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.175908][ T6112] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  178.183146][ T6112] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  178.240534][ T4154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.264738][   T26] audit: type=1800 audit(1721260598.049:163): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.636" name="bus" dev="loop4" ino=10 res=0 errno=0
[  178.290650][  T153] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  178.300240][   T26] audit: type=1800 audit(1721260598.079:164): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.636" name="bus" dev="loop4" ino=10 res=0 errno=0
[  178.347465][  T153] asix: probe of 2-1:0.0 failed with error -71
[  178.350340][ T4283] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  178.368207][  T153] usb 2-1: USB disconnect, device number 8
[  178.419128][ T4154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.475321][   T35] kworker/u4:2: attempt to access beyond end of device
[  178.475321][   T35] loop4: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  178.485874][ T3559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  178.499166][ T3559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  178.512270][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  178.520884][ T3559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  178.528364][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  178.544574][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  178.553502][ T4154] bond0: (slave netdevsim0): Releasing backup interface
[  178.577252][ T4154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.590496][ T4564] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  178.610337][ T4283] usb 4-1: Using ep0 maxpacket: 8
[  178.750413][  T153] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  178.823008][ T6144] loop4: detected capacity change from 0 to 512
[  178.829877][ T6144] EXT4-fs: Ignoring removed i_version option
[  178.844393][ T4564] usb 1-1: Using ep0 maxpacket: 32
[  178.856454][ T6144] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  178.890665][ T4283] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  178.899726][ T4283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.925692][ T6144] EXT4-fs (loop4): 1 truncate cleaned up
[  178.935863][ T4283] usb 4-1: Product: syz
[  178.940888][ T6144] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  178.970353][ T4283] usb 4-1: Manufacturer: syz
[  178.974977][ T4283] usb 4-1: SerialNumber: syz
[  179.027498][ T4283] usb 4-1: config 0 descriptor??
[  179.057971][ T6138] chnl_net:caif_netlink_parms(): no params data found
[  179.133819][ T5016] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1)
[  179.157195][ T4564] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  179.166472][  T153] usb 2-1: config index 0 descriptor too short (expected 274, got 18)
[  179.175515][  T153] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  179.185361][ T4564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.193459][ T4564] usb 1-1: Product: syz
[  179.198359][  T153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.206519][ T4564] usb 1-1: Manufacturer: syz
[  179.212072][ T4564] usb 1-1: SerialNumber: syz
[  179.217534][  T153] usb 2-1: config 0 descriptor??
[  179.225798][ T5016] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  179.229031][ T4564] usb 1-1: config 0 descriptor??
[  179.244765][ T5016] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #15: comm syz-executor: mark_inode_dirty error
[  179.277208][ T5016] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  179.287991][ T4564] cdc_ether 1-1:0.0: More than one union descriptor, skipping ...
[  179.296284][ T4564] cdc_ether 1-1:0.0: skipping garbage
[  179.304405][ T4564] usb 1-1: bad CDC descriptors
[  179.309208][ T5016] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error
[  179.310303][ T4283] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  179.320977][ T4564] usb 1-1: unsupported MDLM descriptors
[  179.331763][ T5016] EXT4-fs (loop4): unmounting filesystem.
[  179.516062][ T5344] usb 1-1: USB disconnect, device number 9
[  179.530810][  T153] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  179.549369][  T153] asix: probe of 2-1:0.0 failed with error -71
[  179.560906][  T153] usb 2-1: USB disconnect, device number 9
[  179.607088][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.615562][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.624039][ T6138] device bridge_slave_0 entered promiscuous mode
[  179.649243][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.662874][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.670818][ T6138] device bridge_slave_1 entered promiscuous mode
[  179.698787][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.738529][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.782595][ T6138] team0: Port device team_slave_0 added
[  179.793670][ T6138] team0: Port device team_slave_1 added
[  179.882428][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.889394][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.927225][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.034676][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.043637][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.086576][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.240314][ T4283] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  180.266590][ T4283] usb 4-1: USB disconnect, device number 9
[  180.372964][ T6138] device hsr_slave_0 entered promiscuous mode
[  180.389988][ T6138] device hsr_slave_1 entered promiscuous mode
[  180.421717][ T6138] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.457029][ T6138] Cannot create hsr debugfs directory
[  180.466141][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'.
[  180.484134][ T6185] loop1: detected capacity change from 0 to 256
[  180.500067][ T6181] netlink: 'syz.0.654': attribute type 14 has an invalid length.
[  180.506437][ T3558] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  180.514673][ T6181] netlink: 'syz.0.654': attribute type 12 has an invalid length.
[  180.528393][ T6181] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.535017][ T3557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  180.537203][ T6181] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.552945][ T6181] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.561859][ T6181] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.571342][ T6181] device vxlan0 entered promiscuous mode
[  180.578504][ T3557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  180.585494][ T3558] Bluetooth: hci3: command tx timeout
[  180.593865][ T6185] FAT-fs (loop1): Directory bread(block 64) failed
[  180.601706][ T6185] FAT-fs (loop1): Directory bread(block 65) failed
[  180.605918][ T3557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  180.610578][ T6185] FAT-fs (loop1): Directory bread(block 66) failed
[  180.618090][ T3557] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  180.630049][ T3557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  180.637375][ T6185] FAT-fs (loop1): Directory bread(block 67) failed
[  180.644082][ T6185] FAT-fs (loop1): Directory bread(block 68) failed
[  180.651001][ T6185] FAT-fs (loop1): Directory bread(block 69) failed
[  180.692871][ T6185] FAT-fs (loop1): Directory bread(block 70) failed
[  180.701274][ T6185] FAT-fs (loop1): Directory bread(block 71) failed
[  180.707968][ T6185] FAT-fs (loop1): Directory bread(block 72) failed
[  180.714856][ T6185] FAT-fs (loop1): Directory bread(block 73) failed
[  180.741010][ T3557] Bluetooth: hci1: command 0x0406 tx timeout
[  180.903729][ T4154] device hsr_slave_0 left promiscuous mode
[  180.915458][ T4154] device hsr_slave_1 left promiscuous mode
[  180.934428][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.946423][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.957401][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.978423][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.987647][ T4154] device bridge_slave_1 left promiscuous mode
[  181.000406][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.009358][ T4154] device bridge_slave_0 left promiscuous mode
[  181.051197][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.081822][ T4154] device veth1_macvtap left promiscuous mode
[  181.088325][ T4154] device veth0_macvtap left promiscuous mode
[  181.095068][ T4154] device veth1_vlan left promiscuous mode
[  181.125770][ T4154] device veth0_vlan left promiscuous mode
[  182.185778][ T6213] loop0: detected capacity change from 0 to 4096
[  182.218862][ T6213] NILFS (loop0): invalid segment: Checksum error in segment payload
[  182.238004][ T6213] NILFS (loop0): trying rollback from an earlier position
[  182.278636][ T6213] NILFS (loop0): recovery complete
[  182.288679][ T6215] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.470063][ T4154] team0 (unregistering): Port device team_slave_1 removed
[  182.503632][ T4154] team0 (unregistering): Port device team_slave_0 removed
[  182.532244][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.563569][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.661664][ T3559] Bluetooth: hci3: command tx timeout
[  182.682462][ T3559] Bluetooth: hci0: command tx timeout
[  182.875544][ T4154] bond0 (unregistering): Released all slaves
[  182.985840][    C0] hrtimer: interrupt took 5937492 ns
[  183.531174][ T6221] loop3: detected capacity change from 0 to 256
[  183.560179][ T4279] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  183.830203][ T4279] usb 2-1: Using ep0 maxpacket: 32
[  183.989543][ T6238] loop0: detected capacity change from 0 to 512
[  184.022581][ T6238] EXT4-fs: Ignoring removed mblk_io_submit option
[  184.347646][ T6221] FAT-fs (loop3): Directory bread(block 64) failed
[  184.360398][ T4279] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  184.373510][ T6221] FAT-fs (loop3): Directory bread(block 65) failed
[  184.377507][ T6238] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  184.385819][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.405411][ T6221] FAT-fs (loop3): Directory bread(block 66) failed
[  184.418377][ T6221] FAT-fs (loop3): Directory bread(block 67) failed
[  184.423323][ T6183] chnl_net:caif_netlink_parms(): no params data found
[  185.245188][ T3559] Bluetooth: hci0: command tx timeout
[  185.252277][ T3559] Bluetooth: hci3: command tx timeout
[  185.283968][ T6221] FAT-fs (loop3): Directory bread(block 68) failed
[  185.290181][ T4279] usb 2-1: Product: syz
[  185.290507][ T6221] FAT-fs (loop3): Directory bread(block 69) failed
[  185.301217][ T6221] FAT-fs (loop3): Directory bread(block 70) failed
[  185.306106][ T4279] usb 2-1: Manufacturer: syz
[  185.307721][ T6221] FAT-fs (loop3): Directory bread(block 71) failed
[  185.318856][ T6221] FAT-fs (loop3): Directory bread(block 72) failed
[  185.325384][ T6221] FAT-fs (loop3): Directory bread(block 73) failed
[  185.325704][ T4279] usb 2-1: SerialNumber: syz
[  185.389366][ T4279] usb 2-1: config 0 descriptor??
[  185.451081][ T4279] cdc_ether 2-1:0.0: More than one union descriptor, skipping ...
[  185.469094][ T4279] cdc_ether 2-1:0.0: skipping garbage
[  185.474857][ T4279] usb 2-1: bad CDC descriptors
[  185.491598][ T4279] usb 2-1: unsupported MDLM descriptors
[  185.616592][ T6238] EXT4-fs error (device loop0): __ext4_iget:5044: inode #11: block 1: comm syz.0.669: invalid block
[  185.637877][ T6238] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.669: couldn't read orphan inode 11 (err -117)
[  185.675107][ T4279] usb 2-1: USB disconnect, device number 10
[  185.710284][ T6238] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  186.454177][ T5528] EXT4-fs (loop0): unmounting filesystem.
[  187.612101][ T3559] Bluetooth: hci0: command tx timeout
[  187.617545][ T3559] Bluetooth: hci3: command tx timeout
[  189.433286][ T6266] loop0: detected capacity change from 0 to 4096
[  191.125910][ T3557] Bluetooth: hci0: command tx timeout
[  210.872933][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  210.879252][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  368.419213][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 116s! [kworker/0:15:4564]
[  368.427760][    C0] Modules linked in:
[  368.431654][    C0] irq event stamp: 357671
[  368.435972][    C0] hardirqs last  enabled at (357670): [<ffffffff813c1ce2>] kvm_wait+0x1a2/0x200
[  368.445007][    C0] hardirqs last disabled at (357671): [<ffffffff8a8b2e1a>] sysvec_apic_timer_interrupt+0xa/0xb0
[  368.455423][    C0] softirqs last  enabled at (357510): [<ffffffff888553a1>] neigh_periodic_work+0xb31/0xd40
[  368.465405][    C0] softirqs last disabled at (357511): [<ffffffff81542252>] do_softirq+0x162/0x240
[  368.475226][    C0] CPU: 0 PID: 4564 Comm: kworker/0:15 Not tainted 6.1.99-syzkaller #0
[  368.483386][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  368.494441][    C0] Workqueue: events_power_efficient neigh_periodic_work
[  368.501689][    C0] RIP: 0010:kvm_wait+0x1b4/0x200
[  368.506640][    C0] Code: e0 48 c1 e8 03 42 0f b6 04 28 84 c0 75 42 45 0f b6 34 24 e8 0e 3c 55 00 44 3a 74 24 1c 75 10 66 90 0f 00 2d ae 4d ad 09 fb f4 <e9> c8 fe ff ff fb e9 c2 fe ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 54
[  368.526247][    C0] RSP: 0018:ffffc90000007300 EFLAGS: 00000246
[  368.532321][    C0] RAX: 5a3d01436bc6eb00 RBX: 1ffff92000000e64 RCX: ffffffff816ad6da
[  368.540296][    C0] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: ffffffff8b3d47e0
[  368.548275][    C0] RBP: ffffc900000073d0 R08: dffffc0000000000 R09: fffffbfff209384c
[  368.556253][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8e3a0aa4
[  368.564226][    C0] R13: dffffc0000000000 R14: 0000000000000003 R15: ffffc90000007340
[  368.572224][    C0] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  368.581155][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  368.587743][    C0] CR2: 0000000000000000 CR3: 00000000283d9000 CR4: 00000000003506f0
[  368.595718][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  368.603689][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  368.611659][    C0] Call Trace:
[  368.614938][    C0]  <IRQ>
[  368.617814][    C0]  ? watchdog_timer_fn+0x484/0x5a0
[  368.622937][    C0]  ? proc_watchdog_cpumask+0xe0/0xe0
[  368.628230][    C0]  ? __hrtimer_run_queues+0x5a7/0xe50
[  368.633626][    C0]  ? hrtimer_interrupt+0x980/0x980
[  368.638742][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  368.644853][    C0]  ? hrtimer_interrupt+0x392/0x980
[  368.649993][    C0]  ? __sysvec_apic_timer_interrupt+0x156/0x580
[  368.656155][    C0]  ? sysvec_apic_timer_interrupt+0x3e/0xb0
[  368.661963][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  368.668131][    C0]  ? mark_lock+0x9a/0x340
[  368.672472][    C0]  ? kvm_wait+0x1b4/0x200
[  368.676816][    C0]  ? kvm_arch_para_hints+0x30/0x30
[  368.681938][    C0]  ? pv_hash+0x7e/0x140
[  368.686095][    C0]  __pv_queued_spin_lock_slowpath+0x6fb/0xc50
[  368.692176][    C0]  ? __pv_queued_spin_unlock_slowpath+0x2e0/0x2e0
[  368.698608][    C0]  queued_spin_lock_slowpath+0x42/0x50
[  368.704068][    C0]  queued_write_lock_slowpath+0x343/0x441
[  368.709798][    C0]  ? queued_read_lock_slowpath+0x2b0/0x2b0
[  368.715613][    C0]  ? read_lock_is_recursive+0x10/0x10
[  368.721000][    C0]  do_raw_write_lock+0x38b/0x4e0
[  368.725944][    C0]  ? do_raw_read_unlock+0x70/0x70
[  368.730971][    C0]  ? ndisc_constructor+0x5cc/0x7a0
[  368.736084][    C0]  ? ___neigh_create+0xef4/0x24b0
[  368.741118][    C0]  ___neigh_create+0xef4/0x24b0
[  368.745988][    C0]  ? ip6_finish_output2+0x698/0x1530
[  368.751282][    C0]  ip6_finish_output2+0x14f2/0x1530
[  368.756497][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  368.761528][    C0]  ? ip6_finish_output2+0x698/0x1530
[  368.766819][    C0]  ? nf_hook+0x450/0x450
[  368.771078][    C0]  ? ip6_mtu+0x7d/0x3e0
[  368.775243][    C0]  ip6_finish_output+0x6a0/0xa80
[  368.780202][    C0]  ndisc_send_skb+0xbab/0x14e0
[  368.784972][    C0]  ? ndisc_send_skb+0x5a8/0x14e0
[  368.789925][    C0]  ? ndisc_mc_map+0x7d0/0x7d0
[  368.794608][    C0]  ? skb_dst+0xd0/0xd0
[  368.798678][    C0]  ? skb_set_owner_w+0x20b/0x380
[  368.803647][    C0]  ? ndisc_send_rs+0x517/0x6a0
[  368.808434][    C0]  addrconf_rs_timer+0x357/0x610
[  368.813391][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  368.819475][    C0]  call_timer_fn+0x1ad/0x6b0
[  368.824084][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  368.830160][    C0]  ? call_timer_fn+0xc2/0x6b0
[  368.834843][    C0]  ? __run_timers+0x890/0x890
[  368.839541][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  368.844745][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  368.849954][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  368.856027][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  368.861234][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  368.867311][    C0]  __run_timers+0x67c/0x890
[  368.871830][    C0]  ? detach_timer+0x380/0x380
[  368.876517][    C0]  ? print_irqtrace_events+0x210/0x210
[  368.881993][    C0]  run_timer_softirq+0x63/0xf0
[  368.886764][    C0]  handle_softirqs+0x2ee/0xa40
[  368.891542][    C0]  ? do_softirq+0x162/0x240
[  368.896057][    C0]  ? do_softirq+0x240/0x240
[  368.900576][    C0]  do_softirq+0x162/0x240
[  368.904914][    C0]  </IRQ>
[  368.907845][    C0]  <TASK>
[  368.910785][    C0]  ? __local_bh_enable_ip+0x1f0/0x1f0
[  368.916164][    C0]  ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0
[  368.922287][    C0]  ? __local_bh_enable_ip+0x102/0x1f0
[  368.932016][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  368.937358][    C0]  __local_bh_enable_ip+0x1b1/0x1f0
[  368.942580][    C0]  ? neigh_periodic_work+0xb31/0xd40
[  368.947869][    C0]  ? _local_bh_enable+0xa0/0xa0
[  368.952727][    C0]  ? neigh_destroy+0x417/0x570
[  368.957503][    C0]  neigh_periodic_work+0xb31/0xd40
[  368.962631][    C0]  ? process_one_work+0x7a9/0x11d0
[  368.967745][    C0]  process_one_work+0x8a9/0x11d0
[  368.972699][    C0]  ? worker_detach_from_pool+0x260/0x260
[  368.978335][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  368.983886][    C0]  ? kthread_data+0x4e/0xc0
[  368.988400][    C0]  ? wq_worker_running+0x97/0x190
[  368.993436][    C0]  worker_thread+0xa47/0x1200
[  368.998124][    C0]  ? _raw_spin_unlock+0x40/0x40
[  369.002988][    C0]  kthread+0x28d/0x320
[  369.007056][    C0]  ? worker_clr_flags+0x190/0x190
[  369.012080][    C0]  ? kthread_blkcg+0xd0/0xd0
[  369.016671][    C0]  ret_from_fork+0x1f/0x30
[  369.021106][    C0]  </TASK>
[  369.024136][    C0] Sending NMI from CPU 0 to CPUs 1:
[  369.029351][    C1] NMI backtrace for cpu 1
[  369.029361][    C1] CPU: 1 PID: 4282 Comm: kworker/1:12 Not tainted 6.1.99-syzkaller #0
[  369.029378][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  369.029388][    C1] Workqueue: events_power_efficient gc_worker
[  369.029408][    C1] RIP: 0010:__stack_depot_save+0x87/0x470
[  369.029429][    C1] Code: 71 f5 75 83 fe 04 72 6b 44 89 ed 44 89 e8 4c 89 fa 03 02 03 6a 04 44 03 6a 08 44 89 ef c1 c7 04 44 29 e8 31 c7 41 01 ed 29 fd <89> fb c1 c3 06 31 eb 44 01 ef 89 d9 c1 c1 08 41 29 dd 44 31 e9 01
[  369.029442][    C1] RSP: 0018:ffffc900001e0538 EFLAGS: 00000a87
[  369.029455][    C1] RAX: 000000003d568a02 RBX: 0000000097bf86dc RCX: 00000000809e306b
[  369.029466][    C1] RDX: ffffc900001e05e8 RSI: 000000000000000a RDI: 0000000085f44ead
[  369.029477][    C1] RBP: 00000000c142fe41 R08: 000000000000000e R09: 0000000000000001
[  369.029487][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000a20
[  369.029498][    C1] R13: 0000000042c17938 R14: 0000000000000000 R15: ffffc900001e05a0
[  369.029509][    C1] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  369.029523][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  369.029536][    C1] CR2: 00007faabd2356e0 CR3: 000000005a23d000 CR4: 00000000003506e0
[  369.029550][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  369.029559][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  369.029569][    C1] Call Trace:
[  369.029574][    C1]  <NMI>
[  369.029579][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  369.029607][    C1]  ? read_lock_is_recursive+0x10/0x10
[  369.029630][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  369.029652][    C1]  ? nmi_handle+0x25/0x440
[  369.029681][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  369.029702][    C1]  ? nmi_handle+0x12e/0x440
[  369.029723][    C1]  ? nmi_handle+0x25/0x440
[  369.029743][    C1]  ? __stack_depot_save+0x87/0x470
[  369.029759][    C1]  ? default_do_nmi+0x62/0x150
[  369.029776][    C1]  ? exc_nmi+0xa8/0x100
[  369.029791][    C1]  ? end_repeat_nmi+0x16/0x31
[  369.029816][    C1]  ? __stack_depot_save+0x87/0x470
[  369.029833][    C1]  ? __stack_depot_save+0x87/0x470
[  369.029851][    C1]  ? __stack_depot_save+0x87/0x470
[  369.029868][    C1]  </NMI>
[  369.029872][    C1]  <IRQ>
[  369.029881][    C1]  kasan_set_track+0x60/0x70
[  369.029901][    C1]  ? kasan_set_track+0x4b/0x70
[  369.029919][    C1]  ? __kasan_kmalloc+0x97/0xb0
[  369.029933][    C1]  ? dst_cow_metrics_generic+0x52/0x1b0
[  369.029949][    C1]  ? icmp6_dst_alloc+0x2bf/0x470
[  369.029967][    C1]  ? ndisc_send_skb+0x344/0x14e0
[  369.029982][    C1]  ? addrconf_rs_timer+0x357/0x610
[  369.029998][    C1]  ? call_timer_fn+0x1ad/0x6b0
[  369.030013][    C1]  ? __run_timers+0x67c/0x890
[  369.030028][    C1]  ? run_timer_softirq+0x63/0xf0
[  369.030043][    C1]  ? handle_softirqs+0x2ee/0xa40
[  369.030063][    C1]  ? __irq_exit_rcu+0x157/0x240
[  369.030082][    C1]  ? irq_exit_rcu+0x5/0x20
[  369.030101][    C1]  ? sysvec_apic_timer_interrupt+0x91/0xb0
[  369.030117][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  369.030137][    C1]  ? seqcount_lockdep_reader_access+0x1dc/0x220
[  369.030152][    C1]  ? gc_worker+0x325/0x1530
[  369.030166][    C1]  ? process_one_work+0x8a9/0x11d0
[  369.030182][    C1]  ? worker_thread+0xa47/0x1200
[  369.030197][    C1]  ? kthread+0x28d/0x320
[  369.030209][    C1]  ? ret_from_fork+0x1f/0x30
[  369.030246][    C1]  ? rcu_is_watching+0x11/0xb0
[  369.030261][    C1]  __kasan_kmalloc+0x97/0xb0
[  369.030276][    C1]  dst_cow_metrics_generic+0x52/0x1b0
[  369.030294][    C1]  icmp6_dst_alloc+0x2bf/0x470
[  369.030317][    C1]  ndisc_send_skb+0x344/0x14e0
[  369.030341][    C1]  ? ndisc_mc_map+0x7d0/0x7d0
[  369.030360][    C1]  ? skb_set_owner_w+0x20b/0x380
[  369.030383][    C1]  ? ndisc_send_rs+0x517/0x6a0
[  369.030403][    C1]  addrconf_rs_timer+0x357/0x610
[  369.030423][    C1]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  369.030445][    C1]  call_timer_fn+0x1ad/0x6b0
[  369.030462][    C1]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  369.030478][    C1]  ? call_timer_fn+0xc2/0x6b0
[  369.030494][    C1]  ? __run_timers+0x890/0x890
[  369.030514][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  369.030530][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  369.030546][    C1]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  369.030563][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  369.030580][    C1]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  369.030602][    C1]  __run_timers+0x67c/0x890
[  369.030625][    C1]  ? detach_timer+0x380/0x380
[  369.030640][    C1]  ? asm_common_interrupt+0x22/0x40
[  369.030668][    C1]  run_timer_softirq+0x63/0xf0
[  369.030684][    C1]  handle_softirqs+0x2ee/0xa40
[  369.030708][    C1]  ? __irq_exit_rcu+0x157/0x240
[  369.030731][    C1]  ? do_softirq+0x240/0x240
[  369.030749][    C1]  ? hrtimer_interrupt+0x84c/0x980
[  369.030768][    C1]  ? irqtime_account_irq+0xd0/0x1e0
[  369.030786][    C1]  __irq_exit_rcu+0x157/0x240
[  369.030806][    C1]  ? irq_exit_rcu+0x20/0x20
[  369.030832][    C1]  irq_exit_rcu+0x5/0x20
[  369.030851][    C1]  sysvec_apic_timer_interrupt+0x91/0xb0
[  369.030868][    C1]  </IRQ>
[  369.030872][    C1]  <TASK>
[  369.030877][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  369.030897][    C1] RIP: 0010:seqcount_lockdep_reader_access+0x1dc/0x220
[  369.030914][    C1] Code: f8 4d 85 ed 75 16 e8 b3 a0 c6 f8 eb 15 e8 ac a0 c6 f8 e8 e7 43 c7 01 4d 85 ed 74 ea e8 9d a0 c6 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00
[  369.030926][    C1] RSP: 0018:ffffc900032bfa40 EFLAGS: 00000293
[  369.030938][    C1] RAX: ffffffff88c3f5b3 RBX: 0000000000000000 RCX: ffff888024d03b80
[  369.030950][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  369.030959][    C1] RBP: ffffc900032bfaf0 R08: ffffffff88c3f589 R09: fffffbfff2093856
[  369.030970][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  369.030981][    C1] R13: 0000000000000200 R14: 0000000000000046 R15: 1ffff92000657f48
[  369.030996][    C1]  ? seqcount_lockdep_reader_access+0x1a9/0x220
[  369.031010][    C1]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  369.031030][    C1]  ? nf_conntrack_hash_check_insert+0x9a0/0x9a0
[  369.031052][    C1]  gc_worker+0x325/0x1530
[  369.031070][    C1]  ? gc_worker+0x27a/0x1530
[  369.031090][    C1]  ? init_conntrack+0x14e0/0x14e0
[  369.031106][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  369.031125][    C1]  ? process_one_work+0x7a9/0x11d0
[  369.031141][    C1]  process_one_work+0x8a9/0x11d0
[  369.031166][    C1]  ? worker_detach_from_pool+0x260/0x260
[  369.031186][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  369.031202][    C1]  ? kthread_data+0x4e/0xc0
[  369.031224][    C1]  ? wq_worker_running+0x97/0x190
[  369.031247][    C1]  worker_thread+0xa47/0x1200
[  369.031266][    C1]  ? __sched_text_start+0x8/0x8
[  369.031296][    C1]  kthread+0x28d/0x320
[  369.031309][    C1]  ? worker_clr_flags+0x190/0x190
[  369.031324][    C1]  ? kthread_blkcg+0xd0/0xd0
[  369.031339][    C1]  ret_from_fork+0x1f/0x30
[  369.031365][    C1]  </TASK>
[  369.032357][    C0] Kernel panic - not syncing: softlockup: hung tasks
[  369.085585][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  369.085624][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  369.122431][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  369.122442][    C1] rcu: 	1-...!: (1 ticks this GP) idle=0c94/1/0x4000000000000000 softirq=20328/20337 fqs=1
[  369.122468][    C1] 	(t=12637 jiffies g=23561 q=486 ncpus=2)
[  369.122480][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 4929 jiffies! g23561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  369.122497][    C1] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=13350
[  369.122504][    C1] rcu: rcu_preempt kthread starved for 4930 jiffies! g23561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[  369.122522][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  369.122529][    C1] rcu: RCU grace-period kthread stack dump:
[  369.122538][    C1] task:rcu_preempt     state:I stack:25528 pid:16    ppid:2      flags:0x00004000
[  369.122566][    C1] Call Trace:
[  369.122570][    C1]  <TASK>
[  369.122579][    C1]  __schedule+0x142d/0x4550
[  369.122604][    C1]  ? _raw_spin_unlock+0x40/0x40
[  369.122629][    C1]  ? __mod_timer+0x956/0xee0
[  369.122651][    C1]  ? __sched_text_start+0x8/0x8
[  369.122671][    C1]  ? lockdep_softirqs_off+0x420/0x420
[  369.122688][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  369.122706][    C1]  ? _raw_spin_unlock+0x40/0x40
[  369.122727][    C1]  schedule+0xbf/0x180
[  369.122741][    C1]  schedule_timeout+0x1b9/0x300
[  369.122757][    C1]  ? console_conditional_schedule+0x40/0x40
[  369.122775][    C1]  ? update_process_times+0x1b0/0x1b0
[  369.122796][    C1]  ? prepare_to_swait_event+0x329/0x350
[  369.122819][    C1]  rcu_gp_fqs_loop+0x2d2/0x1150
[  369.122841][    C1]  ? dump_blkd_tasks+0x810/0x810
[  369.122861][    C1]  ? rcu_gp_init+0x15f0/0x15f0
[  369.122875][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  369.122898][    C1]  ? finish_swait+0xcf/0x1e0
[  369.122919][    C1]  rcu_gp_kthread+0xa3/0x3b0
[  369.122937][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  369.122951][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  369.122973][    C1]  ? __kthread_parkme+0x168/0x1c0
[  369.122997][    C1]  kthread+0x28d/0x320
[  369.123009][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  369.123023][    C1]  ? kthread_blkcg+0xd0/0xd0
[  369.123038][    C1]  ret_from_fork+0x1f/0x30
[  369.123066][    C1]  </TASK>
[  369.123071][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  369.123078][    C1] CPU: 1 PID: 6138 Comm: syz-executor Tainted: G             L     6.1.99-syzkaller #0
[  369.123093][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  369.123101][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60
[  369.123120][    C1] Code: e8 25 00 00 00 0f 0b 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 58 ed e8 0c 48 89 de 5b e9 d7 ac 56 00 cc cc cc cc cc cc cc <48> 8b 04 24 65 48 8b 0d e4 d8 77 7e 65 8b 15 e5 d8 77 7e f7 c2 00
[  369.123131][    C1] RSP: 0018:ffffc90003faf398 EFLAGS: 00000202
[  369.123143][    C1] RAX: 0000000000000000 RBX: 1ffff920007f5e91 RCX: ffff888016fa5940
[  369.123153][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  369.123161][    C1] RBP: ffffc90003faf718 R08: ffffffff817f0c54 R09: fffff520007f5e3d
[  369.123172][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  369.123181][    C1] R13: 0000000000000001 R14: ffffc90003faf488 R15: 0000000000000000
[  369.123191][    C1] FS:  0000555555948500(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  369.123204][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  369.123214][    C1] CR2: 00007faabd2356e0 CR3: 0000000077352000 CR4: 00000000003506e0
[  369.123227][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  369.123236][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  369.123251][    C1] Call Trace:
[  369.123255][    C1]  <IRQ>
[  369.123260][    C1]  ? rcu_check_gp_kthread_starvation+0x1b8/0x220
[  369.123281][    C1]  ? print_cpu_stall+0x341/0x5f0
[  369.123300][    C1]  ? rcu_sched_clock_irq+0x997/0x1200
[  369.123319][    C1]  ? rcutree_dead_cpu+0x20/0x20
[  369.123334][    C1]  ? hrtimer_run_queues+0x163/0x450
[  369.123355][    C1]  ? update_process_times+0x147/0x1b0
[  369.123372][    C1]  ? tick_sched_timer+0x386/0x550
[  369.123386][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[  369.123400][    C1]  ? __hrtimer_run_queues+0x5a7/0xe50
[  369.123431][    C1]  ? hrtimer_interrupt+0x980/0x980
[  369.123447][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[  369.123470][    C1]  ? hrtimer_interrupt+0x392/0x980
[  369.123504][    C1]  ? __sysvec_apic_timer_interrupt+0x156/0x580
[  369.123524][    C1]  ? sysvec_apic_timer_interrupt+0x8c/0xb0
[  369.123540][    C1]  </IRQ>
[  369.123544][    C1]  <TASK>
[  369.123549][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  369.123573][    C1]  ? smp_call_function_single+0x494/0x2680
[  369.123593][    C1]  ? audit_tree_destroy_watch+0x20/0x20
[  369.123611][    C1]  smp_call_function_single+0x4ba/0x2680
[  369.123632][    C1]  ? mark_lock+0x9a/0x340
[  369.123653][    C1]  ? __lock_acquire+0x125b/0x1f80
[  369.123670][    C1]  ? rcu_barrier_entrain+0x200/0x200
[  369.123686][    C1]  ? flush_smp_call_function_queue+0x3a0/0x3a0
[  369.123703][    C1]  ? rcu_barrier_entrain+0x200/0x200
[  369.123733][    C1]  ? mark_lock+0x9a/0x340
[  369.123754][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  369.123775][    C1]  ? print_irqtrace_events+0x210/0x210
[  369.123795][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  369.123811][    C1]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  369.123827][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  369.123843][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  369.123861][    C1]  ? _raw_spin_unlock+0x40/0x40
[  369.123880][    C1]  ? __init_swait_queue_head+0xaa/0x140
[  369.123896][    C1]  ? _find_next_bit+0x7f/0x120
[  369.123917][    C1]  rcu_barrier+0x323/0x5f0
[  369.123938][    C1]  netdev_run_todo+0x37c/0xf40
[  369.123958][    C1]  ? bpf_offload_dev_netdev_unregister+0x140a/0x15f0
[  369.123978][    C1]  ? netdev_refcnt_read+0x50/0x50
[  369.123998][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  369.124013][    C1]  ? bpf_offload_dev_netdev_register+0xe10/0xe10
[  369.124033][    C1]  ? _raw_spin_unlock+0x24/0x40
[  369.124049][    C1]  ? simple_release_fs+0x98/0xd0
[  369.124067][    C1]  nsim_destroy+0xac/0x140
[  369.124084][    C1]  __nsim_dev_port_del+0x153/0x1b0
[  369.124101][    C1]  nsim_dev_reload_destroy+0x286/0x490
[  369.124120][    C1]  ? nsim_bus_probe+0x20/0x20
[  369.124135][    C1]  nsim_drv_remove+0x5c/0x160
[  369.124151][    C1]  device_release_driver_internal+0x4f3/0x880
[  369.124174][    C1]  bus_remove_device+0x2e5/0x400
[  369.124197][    C1]  device_del+0x6e2/0xbd0
[  369.124219][    C1]  ? kill_device+0x160/0x160
[  369.124243][    C1]  device_unregister+0x1c/0xc0
[  369.124265][    C1]  del_device_store+0x35f/0x480
[  369.124284][    C1]  ? del_port_store+0x1d0/0x1d0
[  369.124303][    C1]  ? sysfs_kf_write+0x181/0x2a0
[  369.124324][    C1]  ? sysfs_kf_read+0x300/0x300
[  369.124341][    C1]  kernfs_fop_write_iter+0x3a2/0x4f0
[  369.124364][    C1]  vfs_write+0x857/0xbc0
[  369.124385][    C1]  ? file_end_write+0x250/0x250
[  369.124397][    C1]  ? do_sys_openat2+0x1f9/0x4f0
[  369.124427][    C1]  ? __fdget_pos+0x2c1/0x360
[  369.124444][    C1]  ksys_write+0x19c/0x2c0
[  369.124458][    C1]  ? print_irqtrace_events+0x210/0x210
[  369.124479][    C1]  ? __ia32_sys_read+0x80/0x80
[  369.124493][    C1]  ? syscall_enter_from_user_mode+0x2e/0x230
[  369.124509][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  369.124525][    C1]  ? syscall_enter_from_user_mode+0x2e/0x230
[  369.124543][    C1]  do_syscall_64+0x3b/0xb0
[  369.124560][    C1]  ? clear_bhb_loop+0x45/0xa0
[  369.124579][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  369.124597][    C1] RIP: 0033:0x7ffb6b77465f
[  369.124614][    C1] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48
[  369.124625][    C1] RSP: 002b:00007ffe5fd932f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  369.124640][    C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ffb6b77465f
[  369.124649][    C1] RDX: 0000000000000001 RSI: 00007ffe5fd93340 RDI: 0000000000000005
[  369.124658][    C1] RBP: 00007ffb6b7e45b2 R08: 0000000000000000 R09: 00007ffe5fd93147
[  369.124668][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  369.124676][    C1] R13: 00007ffe5fd93340 R14: 00007ffb6c434620 R15: 0000000000000003
[  369.124698][    C1]  </TASK>
[  369.124719][    C1] Sending NMI from CPU 1 to CPUs 0:
[  369.124738][    C0] NMI backtrace for cpu 0
[  369.124747][    C0] CPU: 0 PID: 4564 Comm: kworker/0:15 Tainted: G             L     6.1.99-syzkaller #0
[  369.124764][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  369.124774][    C0] Workqueue: events_power_efficient neigh_periodic_work
[  369.124794][    C0] RIP: 0010:io_serial_in+0x72/0xb0
[  369.124816][    C0] Code: d4 e7 d8 fc 89 e9 41 d3 e6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 75 6b 30 fd 44 03 33 44 89 f2 ec <0f> b6 c0 5b 41 5e 41 5f 5d c3 89 e9 80 e1 07 38 c1 7c ad 48 89 ef
[  369.124828][    C0] RSP: 0018:ffffc90000006698 EFLAGS: 00000002
[  369.124841][    C0] RAX: 1ffffffff2403a00 RBX: ffffffff9201d500 RCX: 0000000000000000
[  369.124852][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  369.124863][    C0] RBP: 0000000000000000 R08: ffffffff84b1ae72 R09: ffffed1003ebe047
[  369.124874][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff91cd6e30
[  369.124885][    C0] R13: 000000000000269d R14: 00000000000003fd R15: dffffc0000000000
[  369.124896][    C0] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  369.124910][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  369.124922][    C0] CR2: 0000000000000000 CR3: 00000000283d9000 CR4: 00000000003506f0
[  369.124935][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  369.124944][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  369.124954][    C0] Call Trace:
[  369.124960][    C0]  <NMI>
[  369.124965][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[  369.124988][    C0]  ? read_lock_is_recursive+0x10/0x10
[  369.125010][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  369.125032][    C0]  ? nmi_handle+0x25/0x440
[  369.125061][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  369.125081][    C0]  ? nmi_handle+0x12e/0x440
[  369.125102][    C0]  ? nmi_handle+0x25/0x440
[  369.125123][    C0]  ? io_serial_in+0x72/0xb0
[  369.125142][    C0]  ? default_do_nmi+0x62/0x150
[  369.125158][    C0]  ? exc_nmi+0xa8/0x100
[  369.125172][    C0]  ? end_repeat_nmi+0x16/0x31
[  369.125195][    C0]  ? io_serial_in+0x42/0xb0
[  369.125216][    C0]  ? io_serial_in+0x72/0xb0
[  369.125237][    C0]  ? io_serial_in+0x72/0xb0
[  369.125257][    C0]  ? io_serial_in+0x72/0xb0
[  369.125277][    C0]  </NMI>
[  369.125281][    C0]  <IRQ>
[  369.125287][    C0]  serial8250_console_write+0x1057/0x1750
[  369.125318][    C0]  ? serial8250_set_defaults+0x5f0/0x5f0
[  369.125342][    C0]  ? info_print_prefix+0x200/0x300
[  369.125359][    C0]  ? msg_add_dict_text+0x3c0/0x3c0
[  369.125374][    C0]  ? __lock_acquire+0x125b/0x1f80
[  369.125394][    C0]  ? write_msg+0x250/0x2b0
[  369.125408][    C0]  ? console_emit_next_record+0x86b/0x1000
[  369.125426][    C0]  console_emit_next_record+0xbb4/0x1000
[  369.125445][    C0]  ? console_emit_next_record+0xa9c/0x1000
[  369.125465][    C0]  ? info_print_prefix+0x300/0x300
[  369.125500][    C0]  ? _raw_spin_unlock+0x40/0x40
[  369.125526][    C0]  console_unlock+0x278/0x7c0
[  369.125547][    C0]  ? console_unlock+0x2b1/0x7c0
[  369.125568][    C0]  ? vprintk_emit+0x740/0x740
[  369.125590][    C0]  ? format_decode+0x72f/0x1f10
[  369.125608][    C0]  ? _printk+0xd1/0x111
[  369.125623][    C0]  vprintk_emit+0x523/0x740
[  369.125644][    C0]  ? printk_sprint+0x490/0x490
[  369.125665][    C0]  ? vprintk_emit+0x740/0x740
[  369.125685][    C0]  ? vsnprintf+0x1dc/0x1c70
[  369.125702][    C0]  ? memcpy+0x3c/0x60
[  369.125722][    C0]  _printk+0xd1/0x111
[  369.125739][    C0]  ? panic+0x262/0x764
[  369.125754][    C0]  ? panic+0x764/0x764
[  369.125770][    C0]  ? 0xffffffffa0001f98
[  369.125784][    C0]  ? vscnprintf+0x59/0x80
[  369.125803][    C0]  panic+0x2a6/0x764
[  369.125820][    C0]  ? watchdog_timer_fn+0x555/0x5a0
[  369.125839][    C0]  ? memcpy_page_flushcache+0xfc/0xfc
[  369.125865][    C0]  watchdog_timer_fn+0x593/0x5a0
[  369.125884][    C0]  ? proc_watchdog_cpumask+0xe0/0xe0
[  369.125904][    C0]  __hrtimer_run_queues+0x5a7/0xe50
[  369.125932][    C0]  ? hrtimer_interrupt+0x980/0x980
[  369.125950][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  369.125975][    C0]  hrtimer_interrupt+0x392/0x980
[  369.126004][    C0]  __sysvec_apic_timer_interrupt+0x156/0x580
[  369.126025][    C0]  sysvec_apic_timer_interrupt+0x3e/0xb0
[  369.126042][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  369.126063][    C0] RIP: 0010:kvm_wait+0x1b4/0x200
[  369.126083][    C0] Code: e0 48 c1 e8 03 42 0f b6 04 28 84 c0 75 42 45 0f b6 34 24 e8 0e 3c 55 00 44 3a 74 24 1c 75 10 66 90 0f 00 2d ae 4d ad 09 fb f4 <e9> c8 fe ff ff fb e9 c2 fe ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 54
[  369.126096][    C0] RSP: 0018:ffffc90000007300 EFLAGS: 00000246
[  369.126108][    C0] RAX: 5a3d01436bc6eb00 RBX: 1ffff92000000e64 RCX: ffffffff816ad6da
[  369.126120][    C0] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: ffffffff8b3d47e0
[  369.126132][    C0] RBP: ffffc900000073d0 R08: dffffc0000000000 R09: fffffbfff209384c
[  369.126144][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8e3a0aa4
[  369.126155][    C0] R13: dffffc0000000000 R14: 0000000000000003 R15: ffffc90000007340
[  369.126170][    C0]  ? mark_lock+0x9a/0x340
[  369.126195][    C0]  ? kvm_arch_para_hints+0x30/0x30
[  369.126219][    C0]  ? pv_hash+0x7e/0x140
[  369.126235][    C0]  __pv_queued_spin_lock_slowpath+0x6fb/0xc50
[  369.126260][    C0]  ? __pv_queued_spin_unlock_slowpath+0x2e0/0x2e0
[  369.126286][    C0]  queued_spin_lock_slowpath+0x42/0x50
[  369.126303][    C0]  queued_write_lock_slowpath+0x343/0x441
[  369.126325][    C0]  ? queued_read_lock_slowpath+0x2b0/0x2b0
[  369.126346][    C0]  ? read_lock_is_recursive+0x10/0x10
[  369.126369][    C0]  do_raw_write_lock+0x38b/0x4e0
[  369.126388][    C0]  ? do_raw_read_unlock+0x70/0x70
[  369.126403][    C0]  ? ndisc_constructor+0x5cc/0x7a0
[  369.126421][    C0]  ? ___neigh_create+0xef4/0x24b0
[  369.126441][    C0]  ___neigh_create+0xef4/0x24b0
[  369.126468][    C0]  ? ip6_finish_output2+0x698/0x1530
[  369.126489][    C0]  ip6_finish_output2+0x14f2/0x1530
[  369.126517][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  369.126536][    C0]  ? ip6_finish_output2+0x698/0x1530
[  369.126557][    C0]  ? nf_hook+0x450/0x450
[  369.126579][    C0]  ? ip6_mtu+0x7d/0x3e0
[  369.126602][    C0]  ip6_finish_output+0x6a0/0xa80
[  369.126627][    C0]  ndisc_send_skb+0xbab/0x14e0
[  369.126645][    C0]  ? ndisc_send_skb+0x5a8/0x14e0
[  369.126667][    C0]  ? ndisc_mc_map+0x7d0/0x7d0
[  369.126685][    C0]  ? skb_dst+0xd0/0xd0
[  369.126701][    C0]  ? skb_set_owner_w+0x20b/0x380
[  369.126725][    C0]  ? ndisc_send_rs+0x517/0x6a0
[  369.126745][    C0]  addrconf_rs_timer+0x357/0x610
[  369.126765][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  369.126788][    C0]  call_timer_fn+0x1ad/0x6b0
[  369.126805][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  369.126821][    C0]  ? call_timer_fn+0xc2/0x6b0
[  369.126837][    C0]  ? __run_timers+0x890/0x890
[  369.126857][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  369.126873][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  369.126890][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  369.126907][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  369.126924][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  369.126941][    C0]  __run_timers+0x67c/0x890
[  369.126963][    C0]  ? detach_timer+0x380/0x380
[  369.126983][    C0]  ? print_irqtrace_events+0x210/0x210
[  369.127007][    C0]  run_timer_softirq+0x63/0xf0
[  369.127024][    C0]  handle_softirqs+0x2ee/0xa40
[  369.127050][    C0]  ? do_softirq+0x162/0x240
[  369.127072][    C0]  ? do_softirq+0x240/0x240
[  369.127097][    C0]  do_softirq+0x162/0x240
[  369.127117][    C0]  </IRQ>
[  369.127121][    C0]  <TASK>
[  369.127126][    C0]  ? __local_bh_enable_ip+0x1f0/0x1f0
[  369.127147][    C0]  ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0
[  369.127170][    C0]  ? __local_bh_enable_ip+0x102/0x1f0
[  369.127190][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  369.127209][    C0]  __local_bh_enable_ip+0x1b1/0x1f0
[  369.127230][    C0]  ? neigh_periodic_work+0xb31/0xd40
[  369.127248][    C0]  ? _local_bh_enable+0xa0/0xa0
[  369.127268][    C0]  ? neigh_destroy+0x417/0x570
[  369.127290][    C0]  neigh_periodic_work+0xb31/0xd40
[  369.127314][    C0]  ? process_one_work+0x7a9/0x11d0
[  369.127331][    C0]  process_one_work+0x8a9/0x11d0
[  369.127356][    C0]  ? worker_detach_from_pool+0x260/0x260
[  369.127375][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  369.127392][    C0]  ? kthread_data+0x4e/0xc0
[  369.127415][    C0]  ? wq_worker_running+0x97/0x190
[  369.127437][    C0]  worker_thread+0xa47/0x1200
[  369.127460][    C0]  ? _raw_spin_unlock+0x40/0x40
[  369.127484][    C0]  kthread+0x28d/0x320
[  369.127501][    C0]  ? worker_clr_flags+0x190/0x190
[  369.127517][    C0]  ? kthread_blkcg+0xd0/0xd0
[  369.127531][    C0]  ret_from_fork+0x1f/0x30
[  369.127558][    C0]  </TASK>
[  369.127733][    C1] CPU: 1 PID: 6138 Comm: syz-executor Tainted: G             L     6.1.99-syzkaller #0
[  369.127749][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  369.127757][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60
[  369.127774][    C1] Code: e8 25 00 00 00 0f 0b 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 58 ed e8 0c 48 89 de 5b e9 d7 ac 56 00 cc cc cc cc cc cc cc <48> 8b 04 24 65 48 8b 0d e4 d8 77 7e 65 8b 15 e5 d8 77 7e f7 c2 00
[  369.127785][    C1] RSP: 0018:ffffc90003faf398 EFLAGS: 00000202
[  369.127797][    C1] RAX: 0000000000000000 RBX: 1ffff920007f5e91 RCX: ffff888016fa5940
[  369.127807][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  369.127816][    C1] RBP: ffffc90003faf718 R08: ffffffff817f0c54 R09: fffff520007f5e3d
[  369.127826][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  369.127836][    C1] R13: 0000000000000001 R14: ffffc90003faf488 R15: 0000000000000000
[  369.127845][    C1] FS:  0000555555948500(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  369.127857][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  369.127868][    C1] CR2: 00007faabd2356e0 CR3: 0000000077352000 CR4: 00000000003506e0
[  369.127881][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  369.127889][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  369.127898][    C1] Call Trace:
[  369.127902][    C1]  <IRQ>
[  369.127907][    C1]  ? rcu_dump_cpu_stacks+0x296/0x4f0
[  369.127930][    C1]  ? print_cpu_stall+0x346/0x5f0
[  369.127948][    C1]  ? rcu_sched_clock_irq+0x997/0x1200
[  369.127967][    C1]  ? rcutree_dead_cpu+0x20/0x20
[  369.127983][    C1]  ? hrtimer_run_queues+0x163/0x450
[  369.128004][    C1]  ? update_process_times+0x147/0x1b0
[  369.128020][    C1]  ? tick_sched_timer+0x386/0x550
[  369.128035][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[  369.128049][    C1]  ? __hrtimer_run_queues+0x5a7/0xe50
[  369.128080][    C1]  ? hrtimer_interrupt+0x980/0x980
[  369.128096][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[  369.128121][    C1]  ? hrtimer_interrupt+0x392/0x980
[  369.128156][    C1]  ? __sysvec_apic_timer_interrupt+0x156/0x580
[  369.128175][    C1]  ? sysvec_apic_timer_interrupt+0x8c/0xb0
[  369.128189][    C1]  </IRQ>
[  369.128193][    C1]  <TASK>
[  369.128199][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  369.128223][    C1]  ? smp_call_function_single+0x494/0x2680
[  369.128242][    C1]  ? audit_tree_destroy_watch+0x20/0x20
[  369.128265][    C1]  smp_call_function_single+0x4ba/0x2680
[  369.128286][    C1]  ? mark_lock+0x9a/0x340
[  369.128308][    C1]  ? __lock_acquire+0x125b/0x1f80
[  369.128324][    C1]  ? rcu_barrier_entrain+0x200/0x200
[  369.128340][    C1]  ? flush_smp_call_function_queue+0x3a0/0x3a0
[  369.128358][    C1]  ? rcu_barrier_entrain+0x200/0x200
[  369.128387][    C1]  ? mark_lock+0x9a/0x340
[  369.128408][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  369.128429][    C1]  ? print_irqtrace_events+0x210/0x210
[  369.128448][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  369.128463][    C1]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  369.128480][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  369.128496][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  369.128513][    C1]  ? _raw_spin_unlock+0x40/0x40
[  369.128533][    C1]  ? __init_swait_queue_head+0xaa/0x140
[  369.128549][    C1]  ? _find_next_bit+0x7f/0x120
[  369.128569][    C1]  rcu_barrier+0x323/0x5f0
[  369.128590][    C1]  netdev_run_todo+0x37c/0xf40
[  369.128609][    C1]  ? bpf_offload_dev_netdev_unregister+0x140a/0x15f0
[  369.128629][    C1]  ? netdev_refcnt_read+0x50/0x50
[  369.128648][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  369.128662][    C1]  ? bpf_offload_dev_netdev_register+0xe10/0xe10
[  369.128683][    C1]  ? _raw_spin_unlock+0x24/0x40
[  369.128698][    C1]  ? simple_release_fs+0x98/0xd0
[  369.128716][    C1]  nsim_destroy+0xac/0x140
[  369.128732][    C1]  __nsim_dev_port_del+0x153/0x1b0
[  369.128749][    C1]  nsim_dev_reload_destroy+0x286/0x490
[  369.128768][    C1]  ? nsim_bus_probe+0x20/0x20
[  369.128783][    C1]  nsim_drv_remove+0x5c/0x160
[  369.128799][    C1]  device_release_driver_internal+0x4f3/0x880
[  369.128821][    C1]  bus_remove_device+0x2e5/0x400
[  369.128844][    C1]  device_del+0x6e2/0xbd0
[  369.128867][    C1]  ? kill_device+0x160/0x160
[  369.128891][    C1]  device_unregister+0x1c/0xc0
[  369.128907][    C1]  del_device_store+0x35f/0x480
[  369.128926][    C1]  ? del_port_store+0x1d0/0x1d0
[  369.128945][    C1]  ? sysfs_kf_write+0x181/0x2a0
[  369.128966][    C1]  ? sysfs_kf_read+0x300/0x300
[  369.128984][    C1]  kernfs_fop_write_iter+0x3a2/0x4f0
[  369.129007][    C1]  vfs_write+0x857/0xbc0
[  369.129027][    C1]  ? file_end_write+0x250/0x250
[  369.129039][    C1]  ? do_sys_openat2+0x1f9/0x4f0
[  369.129070][    C1]  ? __fdget_pos+0x2c1/0x360
[  369.129087][    C1]  ksys_write+0x19c/0x2c0
[  369.129100][    C1]  ? print_irqtrace_events+0x210/0x210
[  369.129121][    C1]  ? __ia32_sys_read+0x80/0x80
[  369.129136][    C1]  ? syscall_enter_from_user_mode+0x2e/0x230
[  369.129151][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  369.129168][    C1]  ? syscall_enter_from_user_mode+0x2e/0x230
[  369.129186][    C1]  do_syscall_64+0x3b/0xb0
[  369.129203][    C1]  ? clear_bhb_loop+0x45/0xa0
[  369.129222][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  369.129239][    C1] RIP: 0033:0x7ffb6b77465f
[  369.129256][    C1] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48
[  369.129267][    C1] RSP: 002b:00007ffe5fd932f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  369.129281][    C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ffb6b77465f
[  369.129291][    C1] RDX: 0000000000000001 RSI: 00007ffe5fd93340 RDI: 0000000000000005
[  369.129300][    C1] RBP: 00007ffb6b7e45b2 R08: 0000000000000000 R09: 00007ffe5fd93147
[  369.129309][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  369.129317][    C1] R13: 00007ffe5fd93340 R14: 00007ffb6c434620 R15: 0000000000000003
[  369.129340][    C1]  </TASK>
[  371.918183][    C0] CPU: 0 PID: 4564 Comm: kworker/0:15 Tainted: G             L     6.1.99-syzkaller #0
[  371.927814][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  371.937865][    C0] Workqueue: events_power_efficient neigh_periodic_work
[  371.944813][    C0] Call Trace:
[  371.948086][    C0]  <IRQ>
[  371.950927][    C0]  dump_stack_lvl+0x1e3/0x2cb
[  371.955616][    C0]  ? nf_tcp_handle_invalid+0x642/0x642
[  371.961077][    C0]  ? panic+0x764/0x764
[  371.965143][    C0]  ? 0xffffffffa0001f98
[  371.969298][    C0]  ? vscnprintf+0x59/0x80
[  371.973630][    C0]  panic+0x318/0x764
[  371.977524][    C0]  ? watchdog_timer_fn+0x555/0x5a0
[  371.982639][    C0]  ? memcpy_page_flushcache+0xfc/0xfc
[  371.988026][    C0]  watchdog_timer_fn+0x593/0x5a0
[  371.992969][    C0]  ? proc_watchdog_cpumask+0xe0/0xe0
[  371.998258][    C0]  __hrtimer_run_queues+0x5a7/0xe50
[  372.003492][    C0]  ? hrtimer_interrupt+0x980/0x980
[  372.008618][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  372.014695][    C0]  hrtimer_interrupt+0x392/0x980
[  372.019655][    C0]  __sysvec_apic_timer_interrupt+0x156/0x580
[  372.025642][    C0]  sysvec_apic_timer_interrupt+0x3e/0xb0
[  372.031273][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  372.037260][    C0] RIP: 0010:kvm_wait+0x1b4/0x200
[  372.042203][    C0] Code: e0 48 c1 e8 03 42 0f b6 04 28 84 c0 75 42 45 0f b6 34 24 e8 0e 3c 55 00 44 3a 74 24 1c 75 10 66 90 0f 00 2d ae 4d ad 09 fb f4 <e9> c8 fe ff ff fb e9 c2 fe ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 54
[  372.061804][    C0] RSP: 0018:ffffc90000007300 EFLAGS: 00000246
[  372.067879][    C0] RAX: 5a3d01436bc6eb00 RBX: 1ffff92000000e64 RCX: ffffffff816ad6da
[  372.075852][    C0] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: ffffffff8b3d47e0
[  372.083825][    C0] RBP: ffffc900000073d0 R08: dffffc0000000000 R09: fffffbfff209384c
[  372.091793][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8e3a0aa4
[  372.099766][    C0] R13: dffffc0000000000 R14: 0000000000000003 R15: ffffc90000007340
[  372.107749][    C0]  ? mark_lock+0x9a/0x340
[  372.112098][    C0]  ? kvm_arch_para_hints+0x30/0x30
[  372.117219][    C0]  ? pv_hash+0x7e/0x140
[  372.121371][    C0]  __pv_queued_spin_lock_slowpath+0x6fb/0xc50
[  372.127453][    C0]  ? __pv_queued_spin_unlock_slowpath+0x2e0/0x2e0
[  372.133879][    C0]  queued_spin_lock_slowpath+0x42/0x50
[  372.139337][    C0]  queued_write_lock_slowpath+0x343/0x441
[  372.145065][    C0]  ? queued_read_lock_slowpath+0x2b0/0x2b0
[  372.150878][    C0]  ? read_lock_is_recursive+0x10/0x10
[  372.156255][    C0]  do_raw_write_lock+0x38b/0x4e0
[  372.161196][    C0]  ? do_raw_read_unlock+0x70/0x70
[  372.166220][    C0]  ? ndisc_constructor+0x5cc/0x7a0
[  372.171332][    C0]  ? ___neigh_create+0xef4/0x24b0
[  372.176361][    C0]  ___neigh_create+0xef4/0x24b0
[  372.181229][    C0]  ? ip6_finish_output2+0x698/0x1530
[  372.186517][    C0]  ip6_finish_output2+0x14f2/0x1530
[  372.191722][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  372.196750][    C0]  ? ip6_finish_output2+0x698/0x1530
[  372.202036][    C0]  ? nf_hook+0x450/0x450
[  372.206287][    C0]  ? ip6_mtu+0x7d/0x3e0
[  372.210450][    C0]  ip6_finish_output+0x6a0/0xa80
[  372.215406][    C0]  ndisc_send_skb+0xbab/0x14e0
[  372.220171][    C0]  ? ndisc_send_skb+0x5a8/0x14e0
[  372.225118][    C0]  ? ndisc_mc_map+0x7d0/0x7d0
[  372.229796][    C0]  ? skb_dst+0xd0/0xd0
[  372.233863][    C0]  ? skb_set_owner_w+0x20b/0x380
[  372.238810][    C0]  ? ndisc_send_rs+0x517/0x6a0
[  372.243580][    C0]  addrconf_rs_timer+0x357/0x610
[  372.248522][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  372.254598][    C0]  call_timer_fn+0x1ad/0x6b0
[  372.259185][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  372.265250][    C0]  ? call_timer_fn+0xc2/0x6b0
[  372.269923][    C0]  ? __run_timers+0x890/0x890
[  372.274600][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  372.279796][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  372.284995][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  372.291063][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  372.296260][    C0]  ? addrconf_disable_policy_idev+0x4e0/0x4e0
[  372.302334][    C0]  __run_timers+0x67c/0x890
[  372.306851][    C0]  ? detach_timer+0x380/0x380
[  372.311537][    C0]  ? print_irqtrace_events+0x210/0x210
[  372.317013][    C0]  run_timer_softirq+0x63/0xf0
[  372.321776][    C0]  handle_softirqs+0x2ee/0xa40
[  372.326547][    C0]  ? do_softirq+0x162/0x240
[  372.331057][    C0]  ? do_softirq+0x240/0x240
[  372.335570][    C0]  do_softirq+0x162/0x240
[  372.339902][    C0]  </IRQ>
[  372.342826][    C0]  <TASK>
[  372.345751][    C0]  ? __local_bh_enable_ip+0x1f0/0x1f0
[  372.351123][    C0]  ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0
[  372.357108][    C0]  ? __local_bh_enable_ip+0x102/0x1f0
[  372.362483][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  372.367769][    C0]  __local_bh_enable_ip+0x1b1/0x1f0
[  372.372972][    C0]  ? neigh_periodic_work+0xb31/0xd40
[  372.378260][    C0]  ? _local_bh_enable+0xa0/0xa0
[  372.383115][    C0]  ? neigh_destroy+0x417/0x570
[  372.387887][    C0]  neigh_periodic_work+0xb31/0xd40
[  372.393016][    C0]  ? process_one_work+0x7a9/0x11d0
[  372.398125][    C0]  process_one_work+0x8a9/0x11d0
[  372.403076][    C0]  ? worker_detach_from_pool+0x260/0x260
[  372.408711][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  372.414252][    C0]  ? kthread_data+0x4e/0xc0
[  372.418761][    C0]  ? wq_worker_running+0x97/0x190
[  372.423795][    C0]  worker_thread+0xa47/0x1200
[  372.428482][    C0]  ? _raw_spin_unlock+0x40/0x40
[  372.433341][    C0]  kthread+0x28d/0x320
[  372.437403][    C0]  ? worker_clr_flags+0x190/0x190
[  372.442422][    C0]  ? kthread_blkcg+0xd0/0xd0
[  372.447010][    C0]  ret_from_fork+0x1f/0x30
[  372.451441][    C0]  </TASK>
[  373.572683][    C0] Shutting down cpus with NMI
[  373.577619][    C0] Kernel Offset: disabled
[  373.581931][    C0] Rebooting in 86400 seconds..