last executing test programs:

37.846010987s ago: executing program 4 (id=2687):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x60, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}]}]}, 0x60}}, 0x0)

37.57112448s ago: executing program 4 (id=2693):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,nodiscard,iocharset=koi8-r,errors=continue,errors=continue,nointegrity\x00uid=', @ANYRESHEX=0x0, @ANYBLOB="2c71756f74612c646973636172643d3078303030303030303030303030313530332c75737271756f74612c6572726f72733d72656d6f756e742d726f2c646973636172642c6e6f7175559f571b8a06926f74612c726573697a652c61707072616973655f747970653d696d617369672c726f6f74636f6e746578743d73797361646d5f752c00"], 0x1, 0x60cc, &(0x7f000000c4c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/132, 0x84)

35.558776332s ago: executing program 4 (id=2703):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', <r3=>0x0})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendto$packet(r2, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)

34.411877976s ago: executing program 4 (id=2705):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000006ad600850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

34.143184817s ago: executing program 4 (id=2708):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
bind$l2tp(r0, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10)

30.447500866s ago: executing program 0 (id=2730):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x65, 0x38, 0x67]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000002480)={{r1}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x3})
pwritev2(r0, &(0x7f00000011c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)

29.137244852s ago: executing program 0 (id=2732):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="e844d3e675d50f6f92045aabeb877f5a32bb6d98d39c5cfa39838439f7d7117a7d46ad817e7b788717263f00cb769a03a525c1d67a8563250b4215e648d9c165e460a7fd7ae90281b9856fd45f17ddc19d7bff668531870ca8ff0620d06da251038809631d3737d2624b372e802f69231fc628be3c6aab6962fa310122f885ed5d7c356c767a7d893983b64aec2982f31c5659b04be89ed834ebb77df696ed7e603aa9e831a82d3c34ca765e0ff86f0b8292c8d1e7af0169235776e693", @ANYRES16, @ANYRESHEX], 0x0, 0xa7, &(0x7f00000003c0)="$eJzszrFNw0AYBeBnWxhovAAFG3gHRkEuoaMCIXkiVmEEb0BBm+Yix0mkVCmiKFH0fdLdvdPdL73f1c9TuqSMSSmltEkes+SPz6+31/d5b7Jxl537cBPq7XpI8twt+e9lfmn3f6b/72GqMsznJbsCAACnqdMf3Kv0/dGhMUlzxlIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2QdAAD//0dpGb4=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

28.907054921s ago: executing program 0 (id=2733):
r0 = socket(0x10, 0x803, 0x0)
unshare(0x26020480)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4)

28.636656953s ago: executing program 0 (id=2734):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4, 0x6, 0x0, @broadcast, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x2}, '/2+D'}}}}}}, 0x0)

28.531580491s ago: executing program 0 (id=2736):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r1 = socket(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)

28.363461215s ago: executing program 0 (id=2738):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellinkprop={0x34, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x37, 'syzkaller1\x00'}]}, 0x34}}, 0x0)
ftruncate(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
socketpair(0x1, 0x0, 0x8001, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000300)={{}, "6870f0234133e156c7ee099c67450cbd5e7541df2075c6b97b278936890201817acc2b999313f1179e35fbb9a372adca75b15fb32bc23c815f6f51cb2d9835a60f8e1bd8c356a02a2e419d039897cd1628110177ae97e18cd1285f76fcfcbd19bf1cbb8d92bd67c648c0909bb1bc787ecf0b548d4b22e1ecaf9c8057e570a02042820a87fd6f4d483488fe6694afa5dc4332c48cfc154495ee1659dc20b15272f23fcea388e4bf03d4e4ebec762c0af2e4797d9ff77ed6a39dfd19465855e40cce7abb37407fddcb7edc1cd6dae3aa528346192276d88262879118d0ef2e023427e7e3c217e628b3960fe0785d48916c758a8dc839792da5055a69c3ea05edeba130334a82abe946f96a1a0fe8cced0eb93e9a7b3715a89a654c01d5f5b837a2921116b99fb6ed6acb2205d6fd8042fe63db54ad7d8c921e2ca31ac1c70d4e29dbc4281c997383d079be1efda468c6e67ffe16e2e2257acc944389d453f51e137c1b5d54338d651a953192c63b28e79a9599ae3990d4c68de272ea427ec0560bfe488bc7266d300109920e3c7520c16bc410deaf555f8a41c687a990f4b848f8b0eead813988a629efc383594950b4f772e58bb5b4b7c80cc6fe4cafdad8396aeb4cdd7465d013ebcf6a4a2e7e49850ebb6459245b67f6024295558ac710bf65c0c6672668b1c4530ad9cd434210df5083b64dacebca9da347249f032d534e9cd6368f89fdde622d5bb3ff2cf3e320c86f5d2dc2eb44b8d607f4be52ede2c35d88a6e03b4bc5849a398f76c83ad67b4f5eadf6edeb405cf7f8ee9d6f3da2d24dd928166aa4aa4e56a6810a96bb0e03a49a7c4068c5f8d155f80faee1cd260e2e5670215816c47b41bb9edff01a60b37c89bdfa7ecaf946e0411e671bc93ca96167c133414c81ec65c3dd2c8eb42b8bccbc5dfcb68963ee90715a5e3bd4aac7d0f9dfe9a206f68ab982638b4227c2cf7109b2655b181a1477524f398056066974132e721d731b7e10cc579afd6b5257097540da289647bdc3874fc22f9f1e69c890c5ec5794a9af2b8b40fce9396ced03988453643cac46b26a63b6edf49482d290525ad690abce72873310152f3846331553d58608d381ff2a75fa5782d8efee432b946d41c81036b323cb9935983547a4a2c95713ce270c2c526065f63d0ba237426f0dd414f4f306d866fbb7ce0e47d867f050e4d15053b10f45f49ca8faa4d4cec7c214ae3ecac0131f97aeba34c86df0eb586dbe5fe08ebd74d4a95102458d9f779935b864110347f5649b0b3b0d3cbc6eb1cedfa01909dd9ff39c03556790e57a952a0c34674f8f5802a49a9147ce10c1cbc780c31ffc0c38df3745d54b8d670698e97d34a9a8e41675a83da1ff0ec26703f239a86083b79918bec25e565100070195c749c655958c374f60892dd96f7542b71eea75b334d1f0a282649df145058cece2d63676eebc003da88cf4b81b070e8d59b79570d4e3ebee69a23280f2c83a571bbe516974a478a107e7ab529c50efd438ca53cc09ae92a9f4fef50e0bc93108d82132e5f995a276d68e8e5984ee5bd871b83b17a5db944f066be57d67f1ed2e46ffab07b03c39d7bc716a020290b206cc8445bf7e650c797218bd6e4e2c371df15998700585afab24a061f3848d63da91af5cffa1b632066d5914355326135b1c35479b13735b029fa7f0e4d04d3f8dfb622c77fd702528b3c9e7b7ef68d79043c27ebddcfd523feac15f0887e5d192305e76c810ffdfb2529e09c04104b385df9f6b3eaf454e444a8e1bb34db791648457ba21b4d160e21630830dc2117b3841d86dd93e76f8b271f36d4f57a11da601592886b06e1206a71ca0232a397a2a0b6984ec0bd24e3e457317725a1b5e8215de46a12ba443960ad078703ff4e49984645594c8f3e7fe96f8967a617005de4f8b8c959ce78937f8a91fe1b45a7f06a7e4406f28bb0bcc9539813953eef9c1b04629210108be11c7aab495966fd27a170338698a179ba5afb9bc5f37a6400545fe85ead06b7cecb6c7d7a362926177ce84b634669c6d0115b5317c26a30ae4ac70e756e1070f03fc447cbeab9361edcbc6233f96941fe05d7b37d8a348d696ef23513b32b1a6a342304ffe80211b8af64161bdbe759bebed5fdbc52ff3d29326f9a849dea3e1529ab21f002ee3e29d98eca64979b675fb735dff93cf8ed8fcfb60d579111eae3e88bc80d556ef8b9bdbab020d9c261750a8a62a628a2e2bb4d36ced3b852391119c9bc4187a5bb125cbdc34dc2d63f4a32038a9e7e681ab0284fa178a65b996696334e9dc7fee5de7b586027b529c2532c4ed613ae9c2e8d8be3c55155213a9756ec8b973018e46158001b09ec57aaac6f872fd51e586440b456acf42181dc190a3a4c7c72969af192777e37f8073e1537b45215c92be6bd3300a9c5c10faeb736dfb33996d13d251e3587898921adfcb7567467f4e5d992d721185a1a5a30e91f81aea8605db66c8ef889356c1e15ccb44a323d48be3fbad3a52410273f17c084402942eec424fefc96d94bcbc39a681fa8a96ef4e6e70dd00c464a4ba9fdf29c55b15eefca71e1bbe791eb277635d9900e7c508bb2882bbf95174120c7cd869eeb1666c673eb30b543faa9d81d468dba0b74f12d00bc0357d85fde8ad8d450bd4a3466bf862b9eddbf1d356015e6b075dd184407e9d955e41de0cb3e965a2cc4e64108c7363edf442432860e7a151efe8863b138f60105cf4c6a3dc430810b49670e33c45ca1fc96f9bfe9735ff1b58883a1e29382e48fea5b40d806709aadafc9a26d5b711c412b77079c4171cc681acee34868867d582970d7979a1512ba77629fcdcef21d8b131ab7b10b94048bd4ab479222c46e0abc6757364c13ecd13921c478666ed5bca32f086a79fe0f392be767ebad2f727fb5fb0c375c4cc3da3c576484282af5c3ca32304fa38d97f3ca4fc33b937d23d0d3f10b550631e07a0c950e6452ad6b278fd5b0e3288a867c6c8c976966039d1da04fd8888406326028ebfb87ef5b2a9582124cf779f2389b868d33615f9d15eb44eb06be474af9cf4c4dea6db300939700943eba9d901b54b7379c79bba9f18c0602f7eae8378b2ee8bad9fb56f4086dc3829a3d03f37ac31ed3f57c9bdf0cda3c387266350cc697f8c71169e179516fd84a72f5f1c8c3b6ec85ed40f98a0ea834e0c85ccd8c191354966623614ce7d558447ac3ef44b17241a737ae262332c1e1b00ee932e7bd0eb62127ca28bdb5f0823aaf4f3d7a3914958b378d944d1c08bd5ce4c97a18a54608df10feccea5480a53d7485690a497b20a0bf6979f1cddcf4e29c5a99e476a78568e8239949d9b2d96d3667631c0e94b43ed2472292583ecca3e5e822404b1acc85df863d8af289b4799b944c1e7e4208c24af06ed6690aa1d86c889167f4c4e137ec233bd17ed1d2e6c62e247d2489cdc8ae66104b2c433c27e56f825b26aa4fcdae62ed96eab6dff0acdff82ec5453a5dbbf70c12f7603613512515e854280d433ab502b76dda89596de27c1bcd4c75011b2953cadf357db915a19c5bf598ad3d8ea487385942cc6776c6d6d2ab179bb8479f196252a711c2823ef470500ae94fdb0c0ac82fd9cb91997249349d35826813bb4d1d3d905bc302a5bfd827d8ee37e8830eb09e477fc4e9363b3680c014ec2779754a328df18cc51e9a8bb4b0edb07e8e5b877cd0e7bc93a7fe9e705b52cd0b0ae7f744961a2093728b5ffd37b678a738b5f84f0b5dd51e6fd6318966f224718ca5affaa884b0b0f7e10fe8aaa97d56632b549a234cd2281016396bcf14a4737f905fb252c2de3bdc6004e7212edc2d01038b72bc28ed0b0dea08d78336e73704668ab48b06a87930e63a9efe2135d5ab5236a88982731adb275e73dab540b48a4218a2b2b58007a52d75eb099a5f7ede29e761efd9bc73a341a7b0acc049a74a4e88c45f55c4525f0e620183d275b3ae9321c01629abff86227f436edeeecc76eb17926c023e07de8f0fcc960ca3c205349e7d15eaceb9046e838f045ecb88e21d0d58d3284821b6c25449d5567b1f98c66d1f9ac27c50b4534c0e0658256e94b19e596e90e695c68fbbad368c8a9733c89df7d6c0c96fd0fcb47482c2fe064b85d2010c58429e98887b77823603133e76fa20afe5f94619f22a8b194b58d6c064e9319f05d93cb1f48cd0e137fcd80cb97a028bc00945aef86e99ab6ff1135f936bca4f501ec53d5e25139409166d648f691468f4a24cc54f547c97c07c264471bb315a61ef0bac332c136512a163e06bc0ea75998bae2c2251ffb8c238c58f19563a9e07cf2bf60e6851f06a6eac94e1394f944002945a8dc3a73be18e7cbfb18a8206398ac1157e869740b20993df3e58f22bb5701073ea5c4c419727cd15c003d3fadf00705560541c3c41ed70101a6650153aaf0f08896d6be59dae1a28fb1914216d44ab5534a346e7563321796cd16814f02a68df0b2ce13f9e9035d451063e43a9d36f2fa9149d52babb7104fc241980c14188d9cf194b8c7e6d8c9888b978223cab17e0a5b6eb78d9b9d72257e1ca294ba9812b5064e833ae4307c0040e002cac637bc0fee5a650140739c957d27728147e7e9b6ed79c05c88a9313148a019929a59a2dd537ff161516ef41a91bee7e2c89ff11d59eeb38099610f4401e23bd53c5580e3119832e84ff39d91a8c02537b12dd15fee5eb88d7a163131f95b4463cc9337a852cc1d861c739cef66a1404894455f863f2515c817693d5f7d10bb7abbd254de9d565d69105f5f70d21e3bda742a3b1fd1100dc75e937be98dec5a5d98cfe0d6a8ae13e5b415cad4acb2f4ddd6cdaddc4781225c622aa1c810f4d7a5307f8f7ded7b2fde350957a72ce1c291252d7dda33828fc2e439d9e0254f741c8f2f84b3e18eea2079df6430598444a9e8d6f7b3ca3bd339e385e88c0a1405b1fd17010d6fdab64be4586c05e0be4d0e61c3478856378694e1a52cfab58decf6ab3070716d669d218ebc90a0d3529f7927fcf9c5860514a7efbe7443adaaae457694bf3aeb6802334e1a2da7e5299e3b69974507cdab4e32f984edd44d4cb626230402b3b1279f4af3515f28c340eb8e8898e82cf01c48244980bab8a27b475e384e09914875773fdf566ffa6e256953359e947afe98e381f66950f4d37bffb7cc338b21a4f017b4b227e18f7d86315a87dd78bd101c6c2ccc8010e37ccd158c8ae7259546bc8d42f59f1e865732af2ea637be3441b195a15b076658e56b8eb2982b84821bf646ae99e53a7f4527a21e0c7fb71a899fe7c4011b6f15c19c9a19f49d2a41e838b1376cfb1cb6a28b6408588a07b3dc83d39f4f419d7d69c4f8ea4454bdd8d22c63324cf1f4ee3b4d9a010e38cd6105262e83f957441b3856756a2aa50655333d92b04561e3f3604f3f69de8949c5886fa2e663ca1a6e87e7f4647326a6336232ac8fa696196afbbfcdfe0e0dbaf02d718327f32482a7c8ddd386e82b763cabe27d99933e9a4c768a5e10fe2a6c637ffbf611a1ef9a70dca9fba6a9b681a6123080327594fbf9b5f9b3b0e49e9379805d7e91cbe459daeac2eafdedbe86ca892da3889f696f7785bd15a9d2e96d65bb5b84a4ac33fe9c9612ad6b01fb165b8a9f1aa601ba783977214603ddd34a559329bda54115cec76ba0853beeed5560c99d859cd9ccf01cc8b57a71e7a27a71c30a9413620dc32daa7a309487e708f42f0c6109a9a7e9ca5e2c551e18c12ef05a61ee476b25d21a3db069293093eb"})
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r4, &(0x7f0000000040), 0x2, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sync()

7.546725529s ago: executing program 4 (id=2711):
syslog(0x4, &(0x7f00000002c0)=""/232, 0xe8)

3.897149864s ago: executing program 3 (id=2847):
syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0)

3.82977425s ago: executing program 3 (id=2848):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="23010200002a17006000000002000020"])

3.711208099s ago: executing program 3 (id=2850):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000640), 0xffffffff, r1}, 0x38)
socket$inet6_tcp(0xa, 0x1, 0x0)

3.539569834s ago: executing program 2 (id=2852):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noauto_da_alloc}, {@errors_remount}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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")
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000540)={[{@noauto_da_alloc}, {@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@init_itable_val}, {@data_ordered}, {@nomblk_io_submit}, {@test_dummy_encryption}, {@nodiscard}]}, 0x1, 0x24f, &(0x7f0000000600)="$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")
mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b8, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0)

2.513203537s ago: executing program 1 (id=2856):
syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0)

2.454754651s ago: executing program 2 (id=2857):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4)

2.362897709s ago: executing program 1 (id=2858):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000980)=[{&(0x7f0000000200)='L', 0x1}, {&(0x7f0000000540)="86f2233994742e0537a448c47027cb9732ec3bb25a4690bfd570baba56c0e9f1265a466ffcf31d04d65d560488537bdfa0065f8f762e82fde3455e0c19b6fb320513f9ffe63c2c62d5337bbbd4875031f3cfa5f8e2b860f61012cbe808032c61d3894c1a006dae90addffbf1418c39a3", 0x70}, {&(0x7f0000000380)="7cdfe2285555b9e812d1a9a3fb33b0ed", 0x10}], 0x3)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
open(&(0x7f0000000080)='./file2\x00', 0x10b342, 0x0)

1.958971101s ago: executing program 1 (id=2859):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="23010200002a17006000000002000020"])

1.714021321s ago: executing program 1 (id=2860):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)

1.553798874s ago: executing program 2 (id=2861):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000002600)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c, 0x0}}], 0x2, 0x0)

1.454118483s ago: executing program 1 (id=2862):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000004c0)={[{}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@data_writeback}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5ef, &(0x7f0000000600)="$eJzs3c9vVFUbAOD3TqelpXxfCzEqLmQSYyBRWlrANMYFbA1p8EfcuLHSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhQleGhKhhaeKYmd5bOu2dlg5tL3KfJxl67zlz55zL9O0598w5dwIorVrjn0rE3oiYSSIGkoWlvGqkmbXF593966NTjUcS9fprfySRpGnZ85P0Z396cG9E/PhDEnu6Vpc7O3/53MT09NSldH947vzM8Oz85YNnz0+cmTozdWH0hdGxahwdGznU0XldyUk7ce3d9wc+GX/zm6/+Tka+/WU8iWPxcvrE5eexWWpRa/6fJKuz+sc2u7CCdKW/J8vf4qRaYIXYkOz9646IJ2IguuLemzcQH79SaOWALVVPIupASSXiH0oq6wdk1/Yrr4MrhfRKgO1w5/jiAMDq+K8ujg1Gb3NsYOfdJJYP6yQR0dnIXKtdEXHr5vi10zfHr8UWjcMB+RauRsSTefGfNON/MHpjsBn/lZb4b/QLTqY/G+mvdlj+yqFi8Q/bZzH+e9eM/2gT/28ti/+3Oyy/dm/znb6W+O/r9JQAAAAAAACgtG4cj4jn8z7/ryzN/4mc+T/9EXFsE8qvrdhf/fl/5fYmFAPkuHM84qXc+b+VbPbvYFe69b/mfIDu5PTZ6alDEfH/iDgQ3Tsa+yNrlHHw0z1ftsurpfP/skej/FvpXMC0HrerO1qPmZyYm3jQ8wYi7lyNeCp3/m+y1P4nOe1/4+/BzH2WsefZ6yfb5a0f/8BWqX8dsT+3/b9314qk3f05jh45OjZyaLjZHxjOegWrPf3hZ9+1K7/T+HeLCXhwjfZ/59rxP5gsv1/P7MbLODxfrbfL67T/35O83rzlTE+a9sHE3NylkYie5ERXI7UlfXTjdYZHURYPWbw04v/AM2uP/+X1//siYmHFayd/tq4pzjz+T/9v7eqj/w/FacT/5Iba/41vjF4f/D57sWMrboZ3f+3/kWZbfyBNMf4Hi77I4qmnNT0nHKt5WdtdXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FFQiYlcklaGl7UplaCiiPyIei52V6Yuzc8+dvvjehclGXvP7/yvZN/0OLO4n2ff/Dy7bH12xfzgidkfE5119zf2hUxenJ4s+eQAAAAAAAAAAAAAAAAAAAHhI9K9e//9rf5r3e1fBlQO2XrXoCgCFyYn/n4qoB7D9tP9QXuIfykv8Q3mJfygv8Q/lJf6hvMQ/lJf4BwAAAACAR8rufTd+TiJi4cW+5qOhJ83rLrRmwFarFF0BoDBu8QPlZeoPlJdrfCBZJ7+37UHrHbmWmVMPcDAAAAAAAAAAAAAAlM7+vdb/Q1lZ/w/lZf0/lFe2/n9fwfUAtp9rfCDWWcmfu/5/3aMAAAAAAAAAAAAAgM00O3/53MT09NQlG28UWnolIjbjdWobeXK9Xr/S+C14WN6C//hGNhX+YanPio1srd/9HVXc3yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDVvwEAAP//BJwjLw==")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = timerfd_create(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setreuid(0xee01, 0xffffffffffffffff)
getresuid(0x0, 0x0, 0x0)
setreuid(0xee00, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
syz_genetlink_get_family_id$smc(0x0, r3)
sendmmsg$inet(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x4c5}], 0x1}}], 0x1, 0x0)
sendto$inet(r3, &(0x7f0000000700)="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", 0x131, 0x40040, 0x0, 0x0)

1.23392565s ago: executing program 2 (id=2863):
r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg1\x00', <r4=>0x0})
sendmsg$inet(r2, &(0x7f00000017c0)={&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @dev}}}], 0x20}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000640)={'tunl0\x00', r4, 0x20, 0x40, 0xbb76, 0x9, {{0x17, 0x4, 0x0, 0x32, 0x5c, 0x64, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @empty, {[@timestamp_addr={0x44, 0x1c, 0x94, 0x1, 0xa, [{@local, 0x23}, {@broadcast, 0x4}, {@multicast2, 0x8001}]}, @generic={0x83, 0x6, "4e3fbc40"}, @ssrr={0x89, 0x13, 0x8a, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @ssrr={0x89, 0xf, 0xf1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r7, &(0x7f0000000100)}, 0x20)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000600)=ANY=[@ANYBLOB="62870000", @ANYRES16=r7, @ANYBLOB="00c62bbd7000fddbdf257a000000080003002bb8afbd0de9", @ANYRES32=0x0, @ANYBLOB="0cf5528b08630df6940099003b92000031000000"], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r8=>r2, {0x8000}}, './bus\x00'})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r10, 0x4243000364fd8f25}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r10, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xaa}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}]}, 0x3c}}, 0x20000004)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000280)=@buf="b1e911a7288a14b57b38ba06297846ccf203e2c76ebb7f30c95622e14648377d5573f8167069a1a25977cbe2e5b8c0b74e93889f1d6c821b68b0c591a0df1c861d809c821ef4ef85065783ddaae206394167cc80bfe1a4e5498d7d573a", 0xe55a45c175ef7809}, 0x20)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYBLOB="13f6ae154dc57d3ae24473a2a48020b58e598c11858ce8630852de7addd38973e8574fc468234400aca55c5858d240f44143b60ad5c882e00efd5946a53ab9c1ce485cfa348de991a99334ec6b60d8ff945ef2be2ca006750c65f73c0c387751e0dd135f473660f90f021975fdbf1ca23d317eb78e7014fb941e3fb8d16bfae7e0ec7e1f0100000000c8508291bb92344ed78573265cd27e55c0f81096e7786ae5be228a9629f5dcddd22e3a7b7768bbd22076ccb1dff4ff270c3faf57aa3f60919e89b05412ac92de0e145227f881ea35f831dc69fa8cc66b9246d169d49be3f511d12937", @ANYRES64=r11], 0x98}}, 0x2)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getnetconf={0x14, 0x52, 0x0, 0x2, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000)
ioctl$sock_netdev_private(r5, 0x89f4, &(0x7f0000000180)="4a308f688a9b5833886998083aed56f80d8293239df673bdc0ed1f70b4cf01a295433617676462d9de762039167e9d0d3a5305b96f4edabe664d503b3ff993a6de2659cef11029b26bf8bd37186ce8b0ba1ec2b2dc2f6f9eaaa9fab17e469d094e4d4badcd19f75cbec6f45874ce666ea1d8d2d87752ddfeb3d2b4b56372")
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x84, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfff7}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x84}}, 0x4000080)

823.305813ms ago: executing program 3 (id=2864):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000800)=""/152, 0x3a, 0x98, 0x1}, 0x20)

484.017971ms ago: executing program 3 (id=2865):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/53, 0x328000, 0x800}, 0x20)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0}, 0x20)

263.210259ms ago: executing program 2 (id=2866):
syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0)

142.773438ms ago: executing program 1 (id=2867):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xd0)
pipe2(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000880)='net/dev\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = getpgid(0x0)
process_vm_readv(r4, &(0x7f00000004c0)=[{0xffffffffffffffff}], 0x1, &(0x7f0000000340)=[{0x0}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c8c6, 0x0, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00')
lseek(r8, 0x80, 0x0)
sendto$inet(r7, 0x0, 0x2, 0x0, 0x0, 0x0)

99.903822ms ago: executing program 3 (id=2868):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20)

0s ago: executing program 2 (id=2869):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000000)=""/157}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10)
r2 = dup(r1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r2, 0x58, &(0x7f0000000200)}, 0x10)

kernel console output (not intermixed with test programs):

 keep mac addresses unique to avoid problems!
[  579.406469][T10696] batman_adv: batadv0: Interface activated: batadv_slave_1
[  579.509849][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  579.539066][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  579.563711][T10696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  579.592721][T10696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  579.611052][T10696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  579.634414][T10696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.886280][T10680] device veth0_macvtap entered promiscuous mode
[  579.944570][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  579.953302][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  580.000135][T10680] device veth1_macvtap entered promiscuous mode
[  580.027126][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  580.046194][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  580.116540][T11003] loop4: detected capacity change from 0 to 512
[  580.172323][T11003] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.2033: inline data xattr refers to an external xattr inode
[  580.202916][T11003] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2033: couldn't read orphan inode 12 (err -117)
[  580.258728][T11003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  580.267841][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.278974][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.290681][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.301462][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.311703][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.323057][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.333199][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.346238][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.357387][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.368594][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.380525][T10680] batman_adv: batadv0: Interface activated: batadv_slave_0
[  580.423995][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  580.434149][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  580.453608][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.476349][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.493972][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.512425][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.522653][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.534126][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.545573][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.562558][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.573093][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.584956][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.598099][T10680] batman_adv: batadv0: Interface activated: batadv_slave_1
[  580.598519][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  580.618475][ T4803] device hsr_slave_0 left promiscuous mode
[  580.641616][ T4803] device hsr_slave_1 left promiscuous mode
[  580.649208][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  580.656894][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_0
[  580.696010][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.727116][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.746708][ T4803] device bridge_slave_1 left promiscuous mode
[  580.753055][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.766176][ T4803] device bridge_slave_0 left promiscuous mode
[  580.772786][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.823331][ T4803] device veth1_macvtap left promiscuous mode
[  580.831198][ T4803] device veth0_macvtap left promiscuous mode
[  580.842887][ T4803] device veth1_vlan left promiscuous mode
[  580.849186][ T4803] device veth0_vlan left promiscuous mode
[  581.722802][ T4803] team0 (unregistering): Port device team_slave_1 removed
[  581.912367][ T4803] team0 (unregistering): Port device team_slave_0 removed
[  582.077370][ T4803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  582.203374][ T4803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  582.251796][ T9298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  582.281994][ T9298] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  582.299088][ T9298] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  582.308971][ T9298] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  582.324421][ T9298] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  582.332146][ T9298] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  582.969640][ T4803] bond0 (unregistering): Released all slaves
[  583.056451][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  583.065442][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  583.077801][T10680] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.089873][T10680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.101018][T10680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  583.110057][T10680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.166320][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.205254][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.263072][ T3838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.286482][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  583.325961][ T3838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.381275][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  583.439000][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.459036][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.524421][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  583.637453][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.663351][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.723787][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  583.857771][T11021] chnl_net:caif_netlink_parms(): no params data found
[  583.877755][T11038] loop3: detected capacity change from 0 to 512
[  583.975277][T11038] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.2044: inline data xattr refers to an external xattr inode
[  584.074778][T11038] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2044: couldn't read orphan inode 12 (err -117)
[  584.148345][T11038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  584.390090][T10696] EXT4-fs (loop3): unmounting filesystem.
[  584.397052][T11021] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.404178][T11021] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.446352][ T9298] Bluetooth: hci5: command tx timeout
[  584.467274][T11021] device bridge_slave_0 entered promiscuous mode
[  584.498648][T11021] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.544180][T11021] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.548126][T11036] loop4: detected capacity change from 0 to 32768
[  584.567242][T11036] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2042 (11036)
[  584.601586][T11021] device bridge_slave_1 entered promiscuous mode
[  584.603051][T11036] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  584.694238][T11036] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  584.733066][T11021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.745507][T11036] BTRFS info (device loop4): using free space tree
[  584.807505][T11071] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2049'.
[  584.827252][T11021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.962732][T11036] BTRFS info (device loop4): enabling ssd optimizations
[  585.135619][T11021] team0: Port device team_slave_0 added
[  585.182333][T11021] team0: Port device team_slave_1 added
[  585.306008][T11021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  585.312993][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.365599][ T9666] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  585.417887][T11021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.503424][T11021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.555413][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.704452][T11021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.856808][T11021] device hsr_slave_0 entered promiscuous mode
[  585.874204][T11021] device hsr_slave_1 entered promiscuous mode
[  585.901472][T11021] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  585.929715][T11021] Cannot create hsr debugfs directory
[  586.034463][ T3602] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  586.333273][T11021] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.351721][ T3602] usb 4-1: Using ep0 maxpacket: 16
[  586.467973][T11124] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2068'.
[  586.522289][ T3602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  586.534514][ T9298] Bluetooth: hci5: command tx timeout
[  586.589771][T11021] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.782134][ T3602] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  586.815091][ T3602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.823181][ T3602] usb 4-1: Product: syz
[  586.833918][ T3602] usb 4-1: Manufacturer: syz
[  586.839667][ T3602] usb 4-1: SerialNumber: syz
[  586.868264][ T3602] usb 4-1: config 0 descriptor??
[  586.880563][T11021] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.933078][ T3602] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  587.114024][ T3598] usb 4-1: USB disconnect, device number 13
[  587.124630][ T4440] usb 4-1: Failed to submit usb control message: -71
[  587.132389][ T4440] usb 4-1: unable to send the bmi data to the device: -71
[  587.140555][ T4440] usb 4-1: unable to get target info from device
[  587.151950][ T4440] usb 4-1: could not get target info (-71)
[  587.153357][T11021] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.158886][ T4440] usb 4-1: could not probe fw (-71)
[  587.565021][ T3602] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  587.589874][T11021] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  587.623647][T11021] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  587.642081][T11021] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  587.676928][T11021] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  587.855289][ T3602] usb 1-1: Using ep0 maxpacket: 8
[  587.925432][T11021] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.950917][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  587.965694][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  587.997281][T11021] 8021q: adding VLAN 0 to HW filter on device team0
[  588.015367][ T3602] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  588.034771][ T3602] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  588.055060][ T3602] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  588.065103][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  588.082365][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  588.102036][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.109206][ T4669] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.155086][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  588.163228][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  588.172574][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  588.179581][ T3602] usb 1-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00
[  588.181975][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.196809][ T3602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  588.196861][ T4669] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.213949][ T3602] usb 1-1: SerialNumber: syz
[  588.229803][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  588.258992][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  588.275408][T11150] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  588.275620][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  588.295529][ T3602] hub 1-1:1.0: bad descriptor, ignoring hub
[  588.302945][ T3602] hub: probe of 1-1:1.0 failed with error -5
[  588.310418][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  588.350663][T11021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  588.415280][T11021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  588.543010][T11150] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  588.615331][ T9298] Bluetooth: hci5: command tx timeout
[  588.621192][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  588.629572][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  588.645091][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  588.655590][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  588.666012][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  588.677518][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  588.688057][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  589.163292][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  589.477904][ T3602] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[  589.634228][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  589.650535][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  589.698594][T11021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  589.811302][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  589.820018][ T3998] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  589.901260][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  590.144588][ T3998] usb 5-1: Using ep0 maxpacket: 16
[  590.275698][ T3998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  590.428612][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  590.447737][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  590.500166][T11021] device veth0_vlan entered promiscuous mode
[  590.530166][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  590.562888][ T3598] usb 1-1: USB disconnect, device number 27
[  590.577794][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  590.582702][ T3598] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  590.625019][ T3998] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  590.654636][ T3998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.684294][T11021] device veth1_vlan entered promiscuous mode
[  590.689100][ T9298] Bluetooth: hci5: command tx timeout
[  590.694274][ T3998] usb 5-1: Product: syz
[  590.724967][ T3998] usb 5-1: Manufacturer: syz
[  590.729637][ T3998] usb 5-1: SerialNumber: syz
[  590.799746][T11021] device veth0_macvtap entered promiscuous mode
[  590.822926][ T3998] usb 5-1: config 0 descriptor??
[  590.880142][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  590.896777][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  590.919878][ T3998] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  590.953587][T11021] device veth1_macvtap entered promiscuous mode
[  590.966216][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  590.978791][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  591.012622][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.038377][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.056624][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.076196][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.112078][ T6466] usb 5-1: USB disconnect, device number 16
[  591.114522][ T4440] usb 5-1: Failed to submit usb control message: -71
[  591.120256][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.138392][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.151240][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.154531][ T4440] usb 5-1: unable to send the bmi data to the device: -71
[  591.169612][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.186012][ T4440] usb 5-1: unable to get target info from device
[  591.192986][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.229550][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.264165][T11021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  591.296326][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  591.312573][ T4440] usb 5-1: could not get target info (-71)
[  591.333495][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  591.355707][ T4440] usb 5-1: could not probe fw (-71)
[  591.391550][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.409180][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.550267][T11237] loop3: detected capacity change from 0 to 256
[  591.565881][T11237] FAT-fs (loop3): Unrecognized mount option "shortname=l0¦-Kø" or missing value
[  592.018208][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  592.414438][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.489568][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  592.576804][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.577004][T11242] loop4: detected capacity change from 0 to 764
[  592.602714][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  592.643602][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.663932][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  592.676101][T11242] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  592.693686][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.030066][T11021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.304025][T11021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.408279][T11021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.524669][T10449] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  593.570593][T11021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.603488][T11021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.775752][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  593.808551][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  594.094649][ T3570] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  594.270958][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.351996][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.354518][ T3570] usb 5-1: Using ep0 maxpacket: 32
[  594.384926][ T4444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.423228][ T4444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.499213][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  594.514882][ T3570] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  594.525635][ T3570] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  594.542128][ T3570] usb 5-1: config 1 has no interface number 1
[  594.602093][ T3570] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  594.654971][ T3570] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  594.720494][ T5659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  594.854140][T11277] loop3: detected capacity change from 0 to 128
[  594.874716][ T3570] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  594.904398][ T3570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.913176][T11277] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  594.943797][ T3570] usb 5-1: Product: syz
[  594.958540][ T3570] usb 5-1: Manufacturer: syz
[  594.963276][ T3570] usb 5-1: SerialNumber: syz
[  595.137655][T11288] loop2: detected capacity change from 0 to 128
[  595.254659][ T5659] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  595.384571][ T3570] usb 5-1: failed to enable PITCH for EP 0x82
[  595.504450][ T5659] usb 1-1: Using ep0 maxpacket: 16
[  595.577961][ T3570] usb 5-1: USB disconnect, device number 17
[  596.523323][ T5659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  596.765767][ T5659] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  596.781081][ T5659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.794513][ T5659] usb 1-1: Product: syz
[  596.803493][ T5659] usb 1-1: Manufacturer: syz
[  596.809320][ T5659] usb 1-1: SerialNumber: syz
[  596.817900][ T5659] usb 1-1: config 0 descriptor??
[  596.885474][T10897] udevd[10897]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  596.913051][ T5659] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  597.093047][ T3996] usb 1-1: USB disconnect, device number 28
[  597.099298][ T4444] usb 1-1: Failed to submit usb control message: -71
[  597.112977][ T4444] usb 1-1: unable to send the bmi data to the device: -71
[  597.147533][ T4444] usb 1-1: unable to get target info from device
[  597.214355][ T4444] usb 1-1: could not get target info (-71)
[  597.220446][ T4444] usb 1-1: could not probe fw (-71)
[  597.721717][T11321] loop2: detected capacity change from 0 to 256
[  597.811572][T11321] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  599.309384][T11342] loop2: detected capacity change from 0 to 512
[  599.432074][T11342] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  599.512323][T11342] EXT4-fs (loop2): 1 truncate cleaned up
[  599.538838][T11342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  599.720045][T11336] loop4: detected capacity change from 0 to 32768
[  599.745797][T11336] XFS: attr2 mount option is deprecated.
[  599.847031][T11021] EXT4-fs (loop2): unmounting filesystem.
[  599.897137][T11336] XFS (loop4): Mounting V5 Filesystem
[  600.069717][T11336] XFS (loop4): Ending clean mount
[  600.077209][T11336] XFS (loop4): Quotacheck needed: Please wait.
[  600.233396][T11336] XFS (loop4): Quotacheck: Done.
[  600.271002][T11364] loop2: detected capacity change from 0 to 256
[  600.339810][   T26] audit: type=1804 audit(1721926282.470:124): pid=11336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2130" name="/newroot/104/bus/bus" dev="loop4" ino=9290 res=1 errno=0
[  600.376312][T11364] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  600.431211][ T9666] XFS (loop4): Unmounting Filesystem
[  600.847823][ T9298] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  600.857427][ T9298] Bluetooth: hci5: Injecting HCI hardware error event
[  600.866920][ T3554] Bluetooth: hci5: hardware error 0x00
[  600.974463][ T6466] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  601.246049][ T6466] usb 3-1: Using ep0 maxpacket: 32
[  601.376145][ T6466] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  601.393416][T11381] loop4: detected capacity change from 0 to 512
[  601.404573][ T6466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.417045][T11381] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  601.455847][ T6466] usb 3-1: config 0 descriptor??
[  601.463428][T11381] EXT4-fs (loop4): 1 truncate cleaned up
[  601.469367][T11381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  601.506067][ T6466] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  601.579834][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  601.886750][ T1028] block nbd2: Possible stuck request ffff88801ffb8000: control (read@0,4096B). Runtime 30 seconds
[  602.364757][ T6466] gspca_vc032x: reg_w err -71
[  602.369529][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.419685][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.436061][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.439631][T11411] loop4: detected capacity change from 0 to 512
[  602.441450][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.441465][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.441475][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.441487][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.441498][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.481695][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.487497][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.492843][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.496606][T11411] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  602.499289][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.511954][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.518320][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.528862][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.534544][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.539990][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.542632][T11411] EXT4-fs (loop4): 1 truncate cleaned up
[  602.545898][ T6466] gspca_vc032x: I2c Bus Busy Wait 00
[  602.558249][ T6466] gspca_vc032x: Unknown sensor...
[  602.560369][T11411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  602.563391][ T6466] vc032x: probe of 3-1:0.0 failed with error -22
[  602.599582][ T6466] usb 3-1: USB disconnect, device number 28
[  602.678514][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  602.886807][T11422] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2161'.
[  602.924902][ T3554] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  604.298138][T11440] misc userio: Can't change port type on an already running userio instance
[  604.399915][T11446] loop4: detected capacity change from 0 to 256
[  605.290410][T11455] loop4: detected capacity change from 0 to 512
[  605.308129][T11455] journal_path: Lookup failure for './file1'
[  605.314284][T11455] EXT4-fs: error: could not find journal device path
[  605.559148][ T5659] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  605.619179][T11455] loop4: detected capacity change from 0 to 1024
[  606.474743][ T5659] usb 1-1: Using ep0 maxpacket: 32
[  606.498670][T11455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  606.532901][ T9298] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  606.543528][ T9298] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  606.554519][ T9298] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  606.563705][ T9298] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  606.574120][ T9298] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  606.584403][ T9298] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  606.594639][ T5659] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  606.603906][ T5659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.676405][ T5659] usb 1-1: config 0 descriptor??
[  606.736497][T11455] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2740: inode #2: comm syz.4.2173: corrupted in-inode xattr
[  606.757704][ T5659] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  606.835326][T11455] EXT4-fs (loop4): Remounting filesystem read-only
[  606.835457][T11455] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2810: Unable to expand inode 2. Delete some EAs or run e2fsck.
[  606.840316][T11477] EXT4-fs error (device loop4): ext4_xattr_ibody_list:748: inode #2: comm syz.4.2173: corrupted in-inode xattr
[  606.880306][   T26] audit: type=1326 audit(1721926289.010:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7340375f19 code=0x0
[  607.060337][T11462] chnl_net:caif_netlink_parms(): no params data found
[  607.139660][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  607.269315][T11462] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.276791][T11462] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.300531][T11462] device bridge_slave_0 entered promiscuous mode
[  607.325122][T11462] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.332301][T11462] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.349247][T11462] device bridge_slave_1 entered promiscuous mode
[  607.425306][T11462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  607.460883][T11462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  607.533230][T11462] team0: Port device team_slave_0 added
[  607.546978][T11462] team0: Port device team_slave_1 added
[  607.621289][T11462] batman_adv: batadv0: Adding interface: batadv_slave_0
[  607.634640][ T5659] gspca_vc032x: reg_w err -71
[  607.639366][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.654455][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  607.686812][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.692144][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.703997][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.710990][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.728117][T11462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  607.731770][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.753382][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.759930][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.770907][T11462] batman_adv: batadv0: Adding interface: batadv_slave_1
[  607.792450][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.792467][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.792478][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.792488][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.792500][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.792511][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.792521][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.792531][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.792542][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.792552][ T5659] gspca_vc032x: I2c Bus Busy Wait 00
[  607.792562][ T5659] gspca_vc032x: Unknown sensor...
[  607.792615][ T5659] vc032x: probe of 1-1:0.0 failed with error -22
[  607.798486][ T5659] usb 1-1: USB disconnect, device number 29
[  607.803400][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  607.803431][T11462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  607.836514][T11506] loop2: detected capacity change from 0 to 64
[  607.940177][T11507] loop4: detected capacity change from 0 to 128
[  607.950752][T11507] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  607.956845][T11462] device hsr_slave_0 entered promiscuous mode
[  608.229969][T11506] overlayfs: upper fs needs to support d_type.
[  608.249226][T11506] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  608.249306][T11506] overlayfs: failed to set xattr on upper
[  608.249317][T11506] overlayfs: ...falling back to index=off,metacopy=off.
[  608.363597][T11021] Bad inode number on dev loop2: 4160749571 is out of range
[  608.379606][T11021] Bad inode number on dev loop2: 4160749571 is out of range
[  608.546290][T11462] device hsr_slave_1 entered promiscuous mode
[  608.547144][T11462] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  608.547290][T11462] Cannot create hsr debugfs directory
[  608.684643][ T9298] Bluetooth: hci6: command tx timeout
[  608.915570][T11507] loop4: detected capacity change from 0 to 2048
[  609.163879][ T4470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.305841][ T4470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.619335][T11462] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.743593][ T4470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.948055][T11462] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.068057][ T4470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.108622][ T3557] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  610.120357][ T3557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  610.130077][ T3557] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  610.144024][ T3557] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  610.153582][ T3557] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  610.161491][ T3557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  610.390265][T11462] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.577434][T11462] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.785216][ T3554] Bluetooth: hci6: command tx timeout
[  610.800385][  T936] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  610.928880][T11541] loop4: detected capacity change from 0 to 256
[  611.006433][ T9298] Bluetooth: hci0: command 0x0406 tx timeout
[  611.054880][  T936] usb 2-1: Using ep0 maxpacket: 32
[  611.478391][  T936] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  611.755039][  T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.786746][  T936] usb 2-1: config 0 descriptor??
[  611.836776][  T936] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  612.213435][ T3554] Bluetooth: hci5: command tx timeout
[  612.340687][T11528] chnl_net:caif_netlink_parms(): no params data found
[  612.353878][T11462] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  612.373349][T11462] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  612.436500][T11462] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  612.458989][T11462] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  612.544079][T11567] loop4: detected capacity change from 0 to 1024
[  612.724523][  T936] gspca_vc032x: reg_w err -71
[  612.729259][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.743408][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.765632][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.775048][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.798013][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.808930][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.828974][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.851903][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.857497][ T3554] Bluetooth: hci6: command tx timeout
[  612.874688][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.880031][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.894856][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.901237][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.907247][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.912595][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.918055][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.923363][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.929420][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.934809][  T936] gspca_vc032x: I2c Bus Busy Wait 00
[  612.940117][  T936] gspca_vc032x: Unknown sensor...
[  612.945401][  T936] vc032x: probe of 2-1:0.0 failed with error -22
[  612.953408][  T936] usb 2-1: USB disconnect, device number 27
[  613.151026][T11580] loop4: detected capacity change from 0 to 128
[  613.163434][T11580] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  613.191769][T11528] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.208944][T11528] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.229405][T11528] device bridge_slave_0 entered promiscuous mode
[  613.315139][T11528] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.335548][T11528] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.354693][T11528] device bridge_slave_1 entered promiscuous mode
[  613.388583][T11580] loop4: detected capacity change from 0 to 2048
[  613.619616][T11462] 8021q: adding VLAN 0 to HW filter on device bond0
[  613.644180][T11528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  613.848641][T11528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  613.985963][ T4470] device hsr_slave_0 left promiscuous mode
[  613.996024][ T4470] device hsr_slave_1 left promiscuous mode
[  614.035178][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  614.059131][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_0
[  614.082767][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  614.127234][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_1
[  614.175069][ T4470] device bridge_slave_1 left promiscuous mode
[  614.202356][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.236993][ T4470] device bridge_slave_0 left promiscuous mode
[  614.243404][T11593] netlink: 'syz.1.2216': attribute type 1 has an invalid length.
[  614.247874][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.286020][ T3554] Bluetooth: hci5: command tx timeout
[  614.460518][ T4470] device veth1_macvtap left promiscuous mode
[  614.478493][ T4470] device veth0_macvtap left promiscuous mode
[  614.503155][ T4470] device veth1_vlan left promiscuous mode
[  614.513838][ T4470] device veth0_vlan left promiscuous mode
[  614.924719][ T3554] Bluetooth: hci6: command tx timeout
[  615.149009][T11610] loop4: detected capacity change from 0 to 1024
[  615.188503][T11610] EXT4-fs: Ignoring removed mblk_io_submit option
[  615.258495][T11610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  615.426216][T11610] EXT4-fs error (device loop4): ext4_get_inode_usage:852: inode #12: comm syz.4.2220: corrupted xattr block 255
[  615.510690][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  615.649665][T11614] loop4: detected capacity change from 0 to 1024
[  615.721753][ T4470] team0 (unregistering): Port device team_slave_1 removed
[  615.862924][ T4470] team0 (unregistering): Port device team_slave_0 removed
[  616.013560][ T4470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  616.026587][T11622] netlink: 'syz.0.2225': attribute type 1 has an invalid length.
[  616.249384][ T4470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  616.376272][ T9298] Bluetooth: hci5: command tx timeout
[  617.581692][ T4470] bond0 (unregistering): Released all slaves
[  617.707383][T11528] team0: Port device team_slave_0 added
[  617.840022][T11528] team0: Port device team_slave_1 added
[  617.885290][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  617.902292][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  617.925187][T11462] 8021q: adding VLAN 0 to HW filter on device team0
[  618.005368][T11528] batman_adv: batadv0: Adding interface: batadv_slave_0
[  618.013310][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  618.041567][T11528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  618.089787][T11528] batman_adv: batadv0: Adding interface: batadv_slave_1
[  618.115224][T11646] loop4: detected capacity change from 0 to 512
[  618.117649][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  618.145979][T11646] journal_path: Lookup failure for './file1'
[  618.183138][T11646] EXT4-fs: error: could not find journal device path
[  618.210095][T11528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  618.250190][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  618.276569][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  618.305005][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.312150][ T6466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  618.330246][T11646] loop4: detected capacity change from 0 to 1024
[  618.334998][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  618.355192][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  618.367894][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.375081][ T6466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  618.385031][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  618.397998][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  618.414167][T11646] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  618.442267][T11650] netlink: 'syz.1.2235': attribute type 21 has an invalid length.
[  618.445172][ T9298] Bluetooth: hci5: command tx timeout
[  618.451032][T11650] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2235'.
[  618.532269][T11646] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2740: inode #2: comm syz.4.2233: corrupted in-inode xattr
[  618.556545][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  618.581125][T11528] device hsr_slave_0 entered promiscuous mode
[  618.597244][T11646] EXT4-fs (loop4): Remounting filesystem read-only
[  618.603844][T11656] EXT4-fs error (device loop4): ext4_xattr_ibody_list:748: inode #2: comm syz.4.2233: corrupted in-inode xattr
[  618.617591][T11528] device hsr_slave_1 entered promiscuous mode
[  618.635827][T11528] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  618.653102][T11528] Cannot create hsr debugfs directory
[  618.661536][   T26] audit: type=1326 audit(1721926300.790:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.4.2233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7340375f19 code=0x0
[  618.715746][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  618.746620][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  618.796789][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  618.815585][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  618.855148][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  618.895173][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  618.918275][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'.
[  618.925568][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  618.966392][T11462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  618.997313][T11462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  619.012478][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  619.025905][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  619.036520][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  619.472263][T11676] loop4: detected capacity change from 0 to 1024
[  619.514122][T11676] EXT4-fs: Ignoring removed mblk_io_submit option
[  619.563766][T11676] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  619.642904][T11676] EXT4-fs error (device loop4): ext4_get_inode_usage:852: inode #12: comm syz.4.2240: corrupted xattr block 255
[  619.806082][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  619.813658][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  619.910858][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  620.019075][T11462] 8021q: adding VLAN 0 to HW filter on device batadv0
[  620.175602][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  620.186313][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  620.246491][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  620.275059][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  620.357407][T11462] device veth0_vlan entered promiscuous mode
[  620.373099][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  620.384235][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  620.413359][T11462] device veth1_vlan entered promiscuous mode
[  620.511604][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  620.525259][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  620.533466][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  620.603802][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  620.642128][T11694] loop4: detected capacity change from 0 to 128
[  620.661376][T11462] device veth0_macvtap entered promiscuous mode
[  620.688439][T11528] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  620.704637][T11694] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  620.707858][T11528] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  620.789972][T11313] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  620.853212][T11462] device veth1_macvtap entered promiscuous mode
[  620.888932][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  620.918189][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  620.964571][T11528] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  621.000525][T11528] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  621.039050][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.071581][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.113209][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.152501][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.191104][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.236127][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.244919][ T9298] Bluetooth: hci3: command 0x0406 tx timeout
[  621.303576][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.329069][T11694] loop4: detected capacity change from 0 to 2048
[  621.344331][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.378591][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.390127][   T26] audit: type=1326 audit(1721926303.520:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11701 comm="syz.1.2247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16ac175f19 code=0x0
[  621.437333][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.496821][T11462] batman_adv: batadv0: Interface activated: batadv_slave_0
[  621.542677][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  621.558370][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  621.595200][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.623731][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.654129][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.708017][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.749552][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.791370][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.836269][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.869424][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.914404][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.984015][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.051971][T11462] batman_adv: batadv0: Interface activated: batadv_slave_1
[  622.102958][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  622.119464][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  622.160609][T11462] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  622.181354][T11462] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  622.198340][T11462] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  622.242506][T11462] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  622.541721][ T4151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.568344][ T4151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.601812][T11528] 8021q: adding VLAN 0 to HW filter on device bond0
[  622.660648][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  622.751849][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  622.767553][ T4803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.770463][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  622.809309][ T4803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.847773][T11528] 8021q: adding VLAN 0 to HW filter on device team0
[  622.886047][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  622.913864][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  622.945159][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  622.953815][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.960970][ T6466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  623.104237][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  623.135854][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  623.166014][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  623.203686][ T3998] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.210882][ T3998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  623.226431][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'.
[  623.263561][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  623.291746][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  623.362207][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  623.408763][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  623.425907][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  623.444126][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  623.464994][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  623.505790][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  623.551437][T11528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  623.600172][T11528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  623.647031][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  623.715860][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  624.296882][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  624.303821][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
[  624.577051][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  625.275703][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  625.283477][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  625.298203][T11783] loop4: detected capacity change from 0 to 512
[  625.308412][T11528] 8021q: adding VLAN 0 to HW filter on device batadv0
[  625.396352][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  625.427535][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  625.515578][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  625.530789][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  625.567776][T11528] device veth0_vlan entered promiscuous mode
[  625.589090][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  625.605190][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  625.630652][T11528] device veth1_vlan entered promiscuous mode
[  625.745222][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  625.770546][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  625.798564][T11528] device veth0_macvtap entered promiscuous mode
[  625.841879][T11528] device veth1_macvtap entered promiscuous mode
[  625.902466][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  625.954208][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.017818][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.045752][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.091550][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.125794][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.146543][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.174789][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.204573][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.240754][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.268818][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.304335][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.347488][T11528] batman_adv: batadv0: Interface activated: batadv_slave_0
[  626.375897][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  626.398026][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  626.435288][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  626.475577][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  626.502672][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  626.545426][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.580206][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  626.623652][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.729388][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  626.801778][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.839886][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  626.926426][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.000109][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  627.029529][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.074069][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  627.106555][T11827] cannot load conntrack support for proto=3
[  627.107779][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.155473][T11528] batman_adv: batadv0: Interface activated: batadv_slave_1
[  627.209326][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  627.231181][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  627.283791][T11528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  627.301060][T11528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  627.312400][T11528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  627.349312][T11528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  627.587681][T11801] loop4: detected capacity change from 0 to 40427
[  627.616880][T11801] F2FS-fs (loop4): Invalid segment count (0)
[  627.637779][T11801] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  627.661800][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  627.686920][T11801] F2FS-fs (loop4): invalid crc value
[  627.694005][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  627.741189][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  627.755505][T11801] F2FS-fs (loop4): Found nat_bits in checkpoint
[  627.793471][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  627.843124][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  627.901026][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  628.010266][T11801] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  628.033695][T11801] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  628.167057][ T9666] syz-executor: attempt to access beyond end of device
[  628.167057][ T9666] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  629.397977][T11880] loop2: detected capacity change from 0 to 256
[  631.558454][T11879] loop4: detected capacity change from 0 to 32768
[  632.478923][ T1028] block nbd2: Possible stuck request ffff88801ffb8000: control (read@0,4096B). Runtime 60 seconds
[  632.769923][T11301] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  633.088374][T11887] loop2: detected capacity change from 0 to 40427
[  633.145530][T11887] F2FS-fs (loop2): Invalid segment count (0)
[  633.172067][T11887] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  633.228477][T11887] F2FS-fs (loop2): invalid crc value
[  633.308978][T11887] F2FS-fs (loop2): Found nat_bits in checkpoint
[  633.767588][T11939] loop4: detected capacity change from 0 to 40427
[  633.802112][T11939] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  633.810652][T11939] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  633.843055][T11939] F2FS-fs (loop4): Found nat_bits in checkpoint
[  633.887629][T11939] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  633.895264][T11939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  633.985441][T11944] cannot load conntrack support for proto=3
[  636.253840][T11949] loop2: detected capacity change from 0 to 32768
[  636.669649][T11949] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.2309 (11949)
[  636.854982][T11949] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  636.893965][T11949] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  636.923315][T11949] BTRFS info (device loop2): using free space tree
[  636.965910][T11978] hub 6-0:1.0: USB hub found
[  636.967413][T11975] loop4: detected capacity change from 0 to 4096
[  636.991380][T11978] hub 6-0:1.0: 1 port detected
[  637.011817][T11975] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  637.131919][T11975] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  637.215669][T11975] ntfs3: loop4: failed to convert "c46c" to ascii
[  637.374012][T11949] BTRFS info (device loop2): enabling ssd optimizations
[  637.938783][T12011] overlayfs: bad mount option "redirect_dir=./file1"
[  638.667516][T11528] BTRFS info (device loop2): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  639.089783][T12017] hub 6-0:1.0: USB hub found
[  639.120547][T12017] hub 6-0:1.0: 1 port detected
[  639.530407][T12007] loop4: detected capacity change from 0 to 40427
[  639.557481][T12027] sch_tbf: peakrate 8 is lower than or equals to rate 4294967294 !
[  639.563908][T12007] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288)
[  639.613884][T12007] F2FS-fs (loop4): invalid crc value
[  639.621446][T12007] F2FS-fs (loop4): Found nat_bits in checkpoint
[  639.839543][T12007] F2FS-fs (loop4): recover fsync data on readonly fs
[  639.882086][T12007] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  640.195302][T12007] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0
[  640.204422][T12007] F2FS-fs (loop4): switch extent_cache option is not allowed
[  640.309723][T12046] overlayfs: bad mount option "redirect_dir=./file1"
[  641.426807][T12054] sch_tbf: peakrate 8 is lower than or equals to rate 4294967294 !
[  641.493942][T12038] loop2: detected capacity change from 0 to 32768
[  641.526694][T12038] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.2340 (12038)
[  641.604212][T12038] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  641.658011][T12038] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  641.705625][T12038] BTRFS info (device loop2): using free space tree
[  641.733350][T12062] loop4: detected capacity change from 0 to 512
[  641.772916][T12062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  641.867279][T12062] EXT4-fs (loop4): 1 truncate cleaned up
[  641.874616][T12062] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  641.904569][T12038] BTRFS info (device loop2): enabling ssd optimizations
[  642.604578][T12096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2354'.
[  642.857995][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  642.868425][T11528] BTRFS info (device loop2): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  643.220126][T12108] loop4: detected capacity change from 0 to 128
[  643.280042][T12108] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  643.296040][T12108] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038 (0x7fffffff)
[  643.492868][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  644.895621][T12145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2373'.
[  644.940107][T12145] device geneve0 entered promiscuous mode
[  644.957278][T12145] bridge0: port 3(macvlan2) entered blocking state
[  644.964023][T12145] bridge0: port 3(macvlan2) entered disabled state
[  644.980958][T12145] device macvlan2 entered promiscuous mode
[  644.992504][T12145] bridge0: port 3(macvlan2) entered blocking state
[  644.999315][T12145] bridge0: port 3(macvlan2) entered forwarding state
[  645.197692][T12148] bridge0: port 3(macvlan2) entered disabled state
[  645.258849][T12148] device macvlan2 left promiscuous mode
[  645.281242][T12148] bridge0: port 3(macvlan2) entered disabled state
[  645.678987][T12138] loop2: detected capacity change from 0 to 40427
[  645.717321][T12138] F2FS-fs (loop2): Invalid segment count (0)
[  645.745341][T12138] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  645.772064][T12138] F2FS-fs (loop2): invalid crc value
[  645.834983][ T3999] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  645.860491][T12138] F2FS-fs (loop2): Found nat_bits in checkpoint
[  646.010144][T12138] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  646.022608][T12138] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  646.235351][ T3999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.269948][ T3999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  646.305171][ T3999] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  646.325788][ T3999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.345286][ T3999] usb 1-1: config 0 descriptor??
[  646.353085][T11528] syz-executor: attempt to access beyond end of device
[  646.353085][T11528] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  646.505840][T12195] loop4: detected capacity change from 0 to 1024
[  646.862101][T12205] netlink: 'syz.1.2399': attribute type 13 has an invalid length.
[  646.886269][T12205] netlink: 'syz.1.2399': attribute type 12 has an invalid length.
[  646.932774][T12207] loop4: detected capacity change from 0 to 512
[  647.005814][T12207] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.2400: iget: bad extended attribute block 117440512
[  647.023850][T12207] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2400: couldn't read orphan inode 15 (err -117)
[  647.039013][T12207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  647.069663][T12207] netlink: 'syz.4.2400': attribute type 4 has an invalid length.
[  647.078807][T12207] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2400'.
[  647.090579][T12207] syz.4.2400 (pid 12207) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  647.194994][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  647.226562][T12215] tipc: Started in network mode
[  647.231483][T12215] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711
[  647.319895][T12215] tipc: Enabled bearer <udp:syz0>, priority 10
[  648.054816][ T3999] uclogic 0003:256C:006D.0011: failed retrieving Huion firmware version: -71
[  648.093206][ T3999] uclogic 0003:256C:006D.0011: failed probing parameters: -71
[  648.121968][ T3999] uclogic: probe of 0003:256C:006D.0011 failed with error -71
[  648.201450][ T3999] usb 1-1: USB disconnect, device number 30
[  648.953708][ T4669] tipc: Node number set to 4269801490
[  649.419024][T12225] loop2: detected capacity change from 0 to 32768
[  649.562493][T12249] tipc: Started in network mode
[  649.571394][T12249] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711
[  649.622394][T12249] tipc: Enabled bearer <udp:syz0>, priority 10
[  649.679626][T12225] XFS (loop2): Mounting V5 Filesystem
[  649.823470][T12225] XFS (loop2): Ending clean mount
[  649.896757][T12225] xt_CT: You must specify a L4 protocol and not use inversions on it
[  650.124794][T11528] XFS (loop2): Unmounting Filesystem
[  650.734780][ T3598] tipc: Node number set to 4269801490
[  651.061728][T12279] loop4: detected capacity change from 0 to 512
[  651.211019][T12279] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.2425: iget: bad extended attribute block 117440512
[  651.234832][T12279] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2425: couldn't read orphan inode 15 (err -117)
[  651.397301][T12279] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  651.546652][T12279] netlink: 'syz.4.2425': attribute type 4 has an invalid length.
[  651.616159][T12279] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2425'.
[  651.860098][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  652.515342][T12310] loop2: detected capacity change from 0 to 128
[  653.388950][T12310] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  654.153341][T12324] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2439'.
[  655.077616][T12330] loop4: detected capacity change from 0 to 512
[  655.164760][T12330] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.2441: iget: bad extended attribute block 117440512
[  655.261995][T12330] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2441: couldn't read orphan inode 15 (err -117)
[  655.349782][T12330] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  655.451144][T12330] netlink: 'syz.4.2441': attribute type 4 has an invalid length.
[  655.516122][T12330] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2441'.
[  655.686778][T12310] loop2: detected capacity change from 0 to 2048
[  655.695066][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  659.578167][T12380] nbd1: detected capacity change from 0 to 6
[  659.726927][T12382] block nbd1: shutting down sockets
[  659.826860][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  659.835998][    C0] buffer_io_error: 60 callbacks suppressed
[  659.836009][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  659.854156][ T1028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  659.863359][ T1028] Buffer I/O error on dev nbd1, logical block 0, async page read
[  659.871990][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  659.881112][   T52] Buffer I/O error on dev nbd1, logical block 0, async page read
[  659.889169][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  659.898280][   T52] Buffer I/O error on dev nbd1, logical block 0, async page read
[  659.907072][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  659.916200][   T52] Buffer I/O error on dev nbd1, logical block 0, async page read
[  659.924013][T11301] ldm_validate_partition_table(): Disk read failed.
[  659.993473][ T1028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  660.003627][ T1028] Buffer I/O error on dev nbd1, logical block 0, async page read
[  660.013403][ T1028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  660.022595][ T1028] Buffer I/O error on dev nbd1, logical block 0, async page read
[  660.066746][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  660.075935][   T52] Buffer I/O error on dev nbd1, logical block 0, async page read
[  660.083890][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  660.093043][   T52] Buffer I/O error on dev nbd1, logical block 0, async page read
[  660.101584][T11301] Dev nbd1: unable to read RDB block 0
[  660.108115][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  660.117240][   T52] Buffer I/O error on dev nbd1, logical block 0, async page read
[  660.126822][T11301]  nbd1: unable to read partition table
[  660.182951][T11301] nbd1: partition table beyond EOD, truncated
[  660.214096][T12381] ldm_validate_partition_table(): Disk read failed.
[  660.231849][T12381] Dev nbd1: unable to read RDB block 0
[  660.260230][T12381]  nbd1: unable to read partition table
[  660.285590][T12381] nbd1: partition table beyond EOD, truncated
[  660.315874][T11301] ldm_validate_partition_table(): Disk read failed.
[  660.325689][T11301] Dev nbd1: unable to read RDB block 0
[  660.344998][T11301]  nbd1: unable to read partition table
[  660.361016][T11301] nbd1: partition table beyond EOD, truncated
[  660.904433][ T3999] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  661.000200][T12378] xt_CT: You must specify a L4 protocol and not use inversions on it
[  661.179639][ T3999] usb 2-1: Using ep0 maxpacket: 8
[  661.301134][T12410] loop4: detected capacity change from 0 to 1024
[  661.315478][ T3999] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14
[  661.344962][ T3999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.399320][ T3999] usb 2-1: config 0 descriptor??
[  661.418779][T12410] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.2468: Invalid block bitmap block 0 in block_group 0
[  661.448203][T12410] Quota error (device loop4): write_blk: dquota write failed
[  661.456640][T12410] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  661.467163][T12410] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.2468: Failed to acquire dquot type 0
[  661.481290][T12410] EXT4-fs error (device loop4): ext4_free_blocks:6213: comm syz.4.2468: Freeing blocks not in datazone - block = 0, count = 4096
[  661.496181][T12410] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2468: Invalid inode bitmap blk 0 in block_group 0
[  661.499723][ T3999] usb 2-1: selecting invalid altsetting 1
[  661.521559][T12410] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  661.531871][ T3999] comedi comedi0: could not switch to alternate setting 1
[  661.544992][T12410] EXT4-fs (loop4): 1 orphan inode deleted
[  661.550775][T12410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  661.570162][ T3999] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  661.630215][ T3838] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8
[  661.661455][ T3838] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:9: Failed to release dquot type 0
[  661.723028][T12404] loop2: detected capacity change from 0 to 32768
[  661.736144][ T4669] usb 2-1: USB disconnect, device number 28
[  661.781196][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  661.788068][T12404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2467 (12404)
[  661.844546][T12404] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  661.877399][T12404] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  661.899659][T12404] BTRFS info (device loop2): using free space tree
[  662.206028][T12404] BTRFS info (device loop2): enabling ssd optimizations
[  662.314191][   T26] audit: type=1800 audit(1721926344.440:128): pid=12404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2467" name="bus" dev="loop2" ino=263 res=0 errno=0
[  662.699173][ T1028] block nbd2: Possible stuck request ffff88801ffb8000: control (read@0,4096B). Runtime 90 seconds
[  662.987939][T11528] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  663.356037][T12479] device syz_tun entered promiscuous mode
[  663.423891][T12478] device syz_tun left promiscuous mode
[  663.635268][ T6461] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  664.046294][ T6461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  664.069644][T12506] device syz_tun entered promiscuous mode
[  664.080540][T12505] device syz_tun left promiscuous mode
[  664.084582][ T6461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  664.101216][ T6461] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  664.117743][T12509] loop2: detected capacity change from 0 to 128
[  664.125727][ T6461] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  664.135075][ T3999] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  664.145022][ T6461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.155362][ T6461] usb 5-1: config 0 descriptor??
[  664.199484][   T26] audit: type=1800 audit(1721926346.330:129): pid=12509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2500" name="bus" dev="loop2" ino=1048754 res=0 errno=0
[  664.536108][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2506'.
[  664.545400][ T3999] usb 1-1: Using ep0 maxpacket: 16
[  664.625141][T12523] bridge0: port 3(macvlan2) entered blocking state
[  664.808189][T12523] bridge0: port 3(macvlan2) entered disabled state
[  665.182524][T12523] device macvlan2 entered promiscuous mode
[  665.198977][T12523] device veth3 entered promiscuous mode
[  665.220340][T12519] device veth3 left promiscuous mode
[  665.251502][T12519] bridge0: port 3(macvlan2) entered disabled state
[  665.305885][T12519] device macvlan2 left promiscuous mode
[  665.311828][T12519] bridge0: port 3(macvlan2) entered disabled state
[  665.366508][ T6461] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  665.374981][ T6461] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  665.385522][ T6461] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  665.405394][ T6461] usb 5-1: USB disconnect, device number 18
[  665.484738][ T9298] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  665.493745][ T9298] Bluetooth: hci6: Injecting HCI hardware error event
[  665.506378][ T3554] Bluetooth: hci6: hardware error 0x00
[  665.586807][ T3999] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  665.596821][ T3999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.606386][ T3999] usb 1-1: Product: syz
[  665.610591][ T3999] usb 1-1: Manufacturer: syz
[  665.615671][ T3999] usb 1-1: SerialNumber: syz
[  665.622177][ T3999] usb 1-1: config 0 descriptor??
[  665.667228][ T3999] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  665.684243][T12534] loop2: detected capacity change from 0 to 512
[  665.746221][T12534] EXT4-fs (loop2): Test dummy encryption mode enabled
[  665.778398][T12538] device syz_tun entered promiscuous mode
[  665.788693][T12537] device syz_tun left promiscuous mode
[  665.864196][T12534] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.2511: inline data xattr refers to an external xattr inode
[  665.961153][T12534] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.2511: couldn't read orphan inode 12 (err -117)
[  666.025593][T12534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  666.066575][T12547] input: syz0 as /devices/virtual/input/input23
[  667.359816][T11528] EXT4-fs (loop2): unmounting filesystem.
[  667.564969][ T3554] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  667.859632][ T3554] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  667.869507][ T3554] Bluetooth: hci5: Injecting HCI hardware error event
[  667.880077][ T9298] Bluetooth: hci5: hardware error 0x00
[  667.880171][ T3999] gp8psk: usb in 128 operation failed.
[  668.782267][ T3999] gp8psk: usb in 137 operation failed.
[  668.787803][ T3999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  668.820554][ T3999] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  668.831636][ T3999] usb 1-1: media controller created
[  668.861446][ T3999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  668.894242][ T3999] gp8psk_fe: Frontend revision 1 attached
[  668.900710][ T3999] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  668.914848][ T3999] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  669.015884][ T3999] gp8psk: usb in 138 operation failed.
[  669.021444][ T3999] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  669.064444][ T3999] gp8psk: found Genpix USB device pID = 201 (hex)
[  669.118515][ T3999] usb 1-1: USB disconnect, device number 31
[  669.251994][T12586] loop4: detected capacity change from 0 to 512
[  669.301301][T12586] EXT4-fs (loop4): Test dummy encryption mode enabled
[  669.394059][T12586] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.2532: inline data xattr refers to an external xattr inode
[  669.449293][ T3999] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  669.602444][T12586] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2532: couldn't read orphan inode 12 (err -117)
[  669.972848][T12586] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  670.063619][T12588] loop2: detected capacity change from 0 to 1024
[  671.179950][ T9298] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  671.457808][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  672.203984][T12628] loop4: detected capacity change from 0 to 512
[  672.290089][T12628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  672.309804][T12628] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038 (0x7fffffff)
[  672.435753][   T26] audit: type=1326 audit(1721926354.570:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.1.2550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16ac175f19 code=0x0
[  672.462251][ T9666] EXT4-fs (loop4): unmounting filesystem.
[  673.395944][T12645] loop4: detected capacity change from 0 to 1024
[  673.718306][T12664] netlink: 'syz.0.2559': attribute type 11 has an invalid length.
[  673.773130][T12667] loop2: detected capacity change from 0 to 512
[  673.857669][T12667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  673.873136][T12667] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff)
[  674.076260][T11528] EXT4-fs (loop2): unmounting filesystem.
[  674.353816][T12686] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  674.820422][T12698] netlink: 'syz.1.2573': attribute type 11 has an invalid length.
[  674.928974][T12703] netlink: 'syz.3.2575': attribute type 39 has an invalid length.
[  674.967497][T12703] netlink: 'syz.3.2575': attribute type 4 has an invalid length.
[  674.981824][T12703] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2575'.
[  675.045791][T12703] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  675.200978][T12685] loop4: detected capacity change from 0 to 32768
[  675.298408][T12714] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  675.724178][T12685] XFS (loop4): Mounting V5 Filesystem
[  676.412389][T12685] XFS (loop4): Ending clean mount
[  676.471761][T12685] XFS (loop4): Quotacheck needed: Please wait.
[  676.602257][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2586'.
[  676.622192][T12685] XFS (loop4): Quotacheck: Done.
[  676.681429][T12738] device syz_tun entered promiscuous mode
[  676.720912][T12738] device macvtap1 entered promiscuous mode
[  676.738564][ T9666] XFS (loop4): Unmounting Filesystem
[  676.756936][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2586'.
[  676.859441][T12742] device syz_tun left promiscuous mode
[  676.897362][T12742] device macvtap1 left promiscuous mode
[  677.392042][T12755] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  677.424731][T12757] netlink: 'syz.0.2591': attribute type 39 has an invalid length.
[  677.446788][T12757] netlink: 'syz.0.2591': attribute type 4 has an invalid length.
[  677.479270][T12757] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2591'.
[  677.542160][T12757] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  677.594937][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2593'.
[  678.738718][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2600'.
[  678.804768][ T9298] Bluetooth: hci0: unexpected event 0x06 length: 17 > 3
[  678.806761][T12779] device syz_tun entered promiscuous mode
[  678.852832][T12779] device macvtap1 entered promiscuous mode
[  678.964197][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2600'.
[  679.035591][T12786] device syz_tun left promiscuous mode
[  679.041841][T12786] device macvtap1 left promiscuous mode
[  679.717496][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'.
[  679.760738][T12808] netlink: 'syz.0.2609': attribute type 39 has an invalid length.
[  679.800925][T12808] netlink: 'syz.0.2609': attribute type 4 has an invalid length.
[  679.834479][T12808] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2609'.
[  679.862019][T12808] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  680.058217][T12800] loop4: detected capacity change from 0 to 32768
[  680.093991][T12800] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2606 (12800)
[  680.150414][T12800] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  680.186699][T12800] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  680.223151][T12800] BTRFS info (device loop4): using free space tree
[  681.005371][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'.
[  681.314605][T12837] device syz_tun entered promiscuous mode
[  681.320595][T12837] device macvtap2 entered promiscuous mode
[  681.390197][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'.
[  681.449143][T12844] netlink: 'syz.0.2617': attribute type 2 has an invalid length.
[  681.453382][T12842] device syz_tun left promiscuous mode
[  681.463216][T12800] BTRFS info (device loop4): enabling ssd optimizations
[  681.496023][T12842] device macvtap2 left promiscuous mode
[  681.542530][T12800] BTRFS error (device loop4): balance: invalid convert metadata profile single
[  682.119983][ T9666] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  682.461216][T12849] loop2: detected capacity change from 0 to 4096
[  682.487969][T12857] netlink: 'syz.3.2621': attribute type 39 has an invalid length.
[  682.526021][T12849] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  682.600035][T12857] netlink: 'syz.3.2621': attribute type 4 has an invalid length.
[  682.608521][T12857] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2621'.
[  682.617799][T12857] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  682.848801][ T9298] Bluetooth: hci2: command 0x0406 tx timeout
[  683.116273][T12869] loop2: detected capacity change from 0 to 128
[  683.225899][T12869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  683.314037][T12869] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  683.415215][ T3554] Bluetooth: hci1: command 0x0406 tx timeout
[  683.796249][T11528] EXT4-fs (loop2): unmounting filesystem.
[  684.006215][T12882] loop2: detected capacity change from 0 to 64
[  684.145244][T12884] netlink: 'syz.4.2631': attribute type 2 has an invalid length.
[  685.775575][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  685.786125][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
[  688.632943][T12940] loop2: detected capacity change from 0 to 512
[  689.014163][T12940] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  689.025232][T12940] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  689.035339][T12940] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.2653: Failed to acquire dquot type 1
[  689.080004][T12940] EXT4-fs (loop2): 1 truncate cleaned up
[  689.087211][T12940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  689.096732][T12940] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff)
[  689.375833][T11528] EXT4-fs (loop2): unmounting filesystem.
[  689.514364][ T5659] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  689.804219][T12963] loop2: detected capacity change from 0 to 16
[  689.833295][T12963] erofs: (device loop2): mounted with root inode @ nid 36.
[  689.875681][ T5659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  689.917580][ T5659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  689.942916][ T5659] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  689.974373][ T5659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.999962][ T5659] usb 5-1: config 0 descriptor??
[  690.235816][T12972] loop2: detected capacity change from 0 to 4096
[  690.261243][T12972] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  690.305032][ T3595] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  690.431413][T12972] ntfs: volume version 3.1.
[  690.751374][T12946] binder: 12944:12946 ioctl c0306201 20000580 returned -14
[  691.503658][ T3595] usb 2-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9
[  691.533922][ T3595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.584099][ T3595] usb 2-1: config 0 descriptor??
[  691.654698][ T3595] gspca_main: sonixb-2.14.0 probing 0c45:60aa
[  692.065152][ T3595] sonixb 2-1:0.0: Error reading register 00: -71
[  692.078627][ T3595] usb 2-1: USB disconnect, device number 29
[  692.398940][ T5659] uclogic 0003:256C:006D.0013: failed retrieving Huion firmware version: -71
[  692.410515][ T5659] uclogic 0003:256C:006D.0013: failed probing parameters: -71
[  692.447831][ T5659] uclogic: probe of 0003:256C:006D.0013 failed with error -71
[  692.636548][ T5659] usb 5-1: USB disconnect, device number 19
[  693.154546][T11301] udevd[11301]: setting owner of /dev/bus/usb/005/019 to uid=0, gid=0 failed: No such file or directory
[  693.230956][ T1028] block nbd2: Possible stuck request ffff88801ffb8000: control (read@0,4096B). Runtime 120 seconds
[  693.905789][T13018] loop2: detected capacity change from 0 to 512
[  694.613380][T13018] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  694.624380][T13018] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  694.634836][T13018] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.2680: Failed to acquire dquot type 1
[  694.653991][T13018] EXT4-fs (loop2): 1 truncate cleaned up
[  694.660837][T13018] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  694.669958][T13018] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff)
[  694.979489][T11528] EXT4-fs (loop2): unmounting filesystem.
[  695.254431][ T3999] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  695.962972][ T3999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.991825][ T3999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  696.055104][ T3999] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  696.117487][ T3999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.167466][ T3999] usb 2-1: config 0 descriptor??
[  696.250801][T13036] loop4: detected capacity change from 0 to 32768
[  696.685025][T13035] binder: 13033:13035 ioctl c0306201 20000580 returned -14
[  696.844680][T13065] loop2: detected capacity change from 0 to 512
[  697.617033][T13065] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  697.627534][T13065] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  697.637588][T13065] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.2702: Failed to acquire dquot type 1
[  697.652882][T13065] EXT4-fs (loop2): 1 truncate cleaned up
[  697.659617][T13065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  697.669212][T13065] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038 (0x7fffffff)
[  697.899645][T11528] EXT4-fs (loop2): unmounting filesystem.
[  698.254983][ T3999] uclogic 0003:256C:006D.0014: failed retrieving Huion firmware version: -71
[  698.277858][ T3999] uclogic 0003:256C:006D.0014: failed probing parameters: -71
[  698.306910][ T3999] uclogic: probe of 0003:256C:006D.0014 failed with error -71
[  698.361212][ T3999] usb 2-1: USB disconnect, device number 30
[  699.244434][   T26] audit: type=1326 audit(1721926381.250:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000
[  699.266972][    C1] vkms_vblank_simulate: vblank timer overrun
[  699.951312][   T26] audit: type=1326 audit(1721926381.250:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec02d74950 code=0x7ffc0000
[  699.974740][   T26] audit: type=1326 audit(1721926381.250:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fec02d776a7 code=0x7ffc0000
[  700.003334][   T26] audit: type=1326 audit(1721926381.250:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000
[  700.103386][   T26] audit: type=1326 audit(1721926381.250:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fec02d776a7 code=0x7ffc0000
[  700.333294][   T26] audit: type=1326 audit(1721926381.260:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fec02d74c4a code=0x7ffc0000
[  700.505349][   T26] audit: type=1326 audit(1721926381.260:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000
[  700.675853][   T26] audit: type=1326 audit(1721926381.260:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000
[  700.698296][    C1] vkms_vblank_simulate: vblank timer overrun
[  700.774673][   T26] audit: type=1326 audit(1721926381.260:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000
[  700.797112][    C1] vkms_vblank_simulate: vblank timer overrun
[  700.903178][   T26] audit: type=1326 audit(1721926381.260:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000
[  700.937173][ T3554] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  700.950203][ T3554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  700.960481][ T3554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  700.974512][ T3554] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  700.984700][ T3554] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  700.994993][ T3554] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  701.073878][T13122] loop2: detected capacity change from 0 to 128
[  701.099974][T13122] befs: (loop2): No write support. Marking filesystem read-only
[  701.134700][   T26] audit: type=1326 audit(1721926381.270:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000
[  701.182375][ T4470] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.216781][T13122] befs: (loop2): invalid magic header
[  701.343277][ T4470] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.353935][T13128] loop2: detected capacity change from 0 to 128
[  701.361272][T13128] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  701.427504][ T5662] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  701.464669][ T5659] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  701.473863][ T4470] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.499564][T13128] syz.2.2725: attempt to access beyond end of device
[  701.499564][T13128] loop2: rw=2049, sector=144, nr_sectors = 1 limit=128
[  701.513284][T13128] buffer_io_error: 31 callbacks suppressed
[  701.513300][T13128] Buffer I/O error on dev loop2, logical block 144, lost async page write
[  701.551268][ T4444] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  701.620593][ T4470] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.704531][ T5659] usb 2-1: Using ep0 maxpacket: 32
[  701.753595][T13134] loop2: detected capacity change from 0 to 256
[  701.770157][T13116] chnl_net:caif_netlink_parms(): no params data found
[  701.812473][T13134] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  701.819046][ T5662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  701.835940][ T5659] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  701.854096][ T5659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.863094][ T5662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  701.893977][ T5659] usb 2-1: config 0 descriptor??
[  701.912796][ T5662] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  701.947579][ T5659] gspca_main: sunplus-2.14.0 probing 0458:7006
[  701.954051][ T5662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.994199][ T5662] usb 4-1: config 0 descriptor??
[  702.184006][T13116] bridge0: port 1(bridge_slave_0) entered blocking state
[  702.224448][T13116] bridge0: port 1(bridge_slave_0) entered disabled state
[  702.234188][T13116] device bridge_slave_0 entered promiscuous mode
[  702.271465][T13116] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.306855][T13116] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.354514][T13116] device bridge_slave_1 entered promiscuous mode
[  702.471792][T13124] binder: 13123:13124 ioctl c0306201 20000580 returned -14
[  702.556843][T13116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  702.585352][T13116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  702.831342][T13116] team0: Port device team_slave_0 added
[  702.840580][T13116] team0: Port device team_slave_1 added
[  702.919801][T13116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  702.927221][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.953136][    C1] vkms_vblank_simulate: vblank timer overrun
[  703.010743][T13116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  703.038501][T13116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  703.051250][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  703.094421][T13116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  703.131141][ T3557] Bluetooth: hci0: command tx timeout
[  703.322889][T13116] device hsr_slave_0 entered promiscuous mode
[  703.349726][T13116] device hsr_slave_1 entered promiscuous mode
[  703.366389][T13116] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  703.392117][T13116] Cannot create hsr debugfs directory
[  703.466162][T13166] overlayfs: failed to resolve './file0': -2
[  703.634531][ T5662] uclogic 0003:256C:006D.0015: failed retrieving Huion firmware version: -71
[  703.665134][ T5662] uclogic 0003:256C:006D.0015: failed probing parameters: -71
[  703.701477][ T5662] uclogic: probe of 0003:256C:006D.0015 failed with error -71
[  703.734992][ T5662] usb 4-1: USB disconnect, device number 14
[  703.785722][ T5659] usb 2-1: USB disconnect, device number 31
[  705.164603][ T3557] Bluetooth: hci0: command tx timeout
[  706.392821][ T4470] device hsr_slave_0 left promiscuous mode
[  706.420550][ T4470] device hsr_slave_1 left promiscuous mode
[  706.427527][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  706.443307][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_0
[  706.475605][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  706.483225][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_1
[  706.505314][ T4470] device bridge_slave_1 left promiscuous mode
[  706.511594][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state
[  706.555923][ T4470] device bridge_slave_0 left promiscuous mode
[  706.564944][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.244361][ T3557] Bluetooth: hci0: command tx timeout
[  707.250812][ T4470] device veth1_macvtap left promiscuous mode
[  707.285084][ T4470] device veth0_macvtap left promiscuous mode
[  707.335396][ T4470] device veth1_vlan left promiscuous mode
[  707.341423][ T4470] device veth0_vlan left promiscuous mode
[  707.974489][T13254] loop3: detected capacity change from 128 to 0
[  708.179385][T13256] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  708.213512][T13256] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.2762' sets config #-1
[  709.336019][ T3557] Bluetooth: hci0: command tx timeout
[  709.976264][ T4470] team0 (unregistering): Port device team_slave_1 removed
[  710.068613][ T4470] team0 (unregistering): Port device team_slave_0 removed
[  710.152008][ T4470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  710.227277][ T4470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  710.357437][T13275] loop2: detected capacity change from 0 to 1024
[  710.405004][T13275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  710.595146][T11528] EXT4-fs (loop2): unmounting filesystem.
[  710.656016][T13281] loop2: detected capacity change from 0 to 256
[  710.663355][T13281] exfat: Deprecated parameter 'utf8'
[  710.669922][T13281] exfat: Deprecated parameter 'utf8'
[  710.714121][T13281] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  711.708369][ T4470] bond0 (unregistering): Released all slaves
[  712.188773][T13116] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  712.652662][T13116] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  712.988586][T13116] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  713.038797][T13116] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  713.219981][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2775'.
[  713.448675][T13116] 8021q: adding VLAN 0 to HW filter on device bond0
[  713.521746][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  713.546603][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  713.583166][T13116] 8021q: adding VLAN 0 to HW filter on device team0
[  713.608750][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  713.655280][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  713.685644][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.693089][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  713.776621][T13316] netlink: 'syz.3.2779': attribute type 1 has an invalid length.
[  713.825083][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  713.841970][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  713.888099][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  714.816222][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.823419][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  714.918918][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  717.292469][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  717.303600][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  717.355342][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  717.411874][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  717.462900][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  717.545939][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  717.567544][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  717.621480][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  717.677198][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  717.717342][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  717.737734][T13116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  717.948532][T13342] loop2: detected capacity change from 0 to 2048
[  718.173776][T13342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  718.647847][T11528] EXT4-fs (loop2): unmounting filesystem.
[  718.873973][ T9298] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  718.907858][ T9298] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  718.918446][ T9298] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  718.930413][ T9298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  718.937997][ T9298] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  718.947191][ T9298] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  719.045006][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  719.070600][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  719.138470][T13116] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.621598][T13357] chnl_net:caif_netlink_parms(): no params data found
[  721.015171][ T3557] Bluetooth: hci7: command tx timeout
[  721.107294][T13357] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.151913][T13357] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.248325][T13357] device bridge_slave_0 entered promiscuous mode
[  721.308635][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  721.331487][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  721.365542][T13357] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.382984][T13357] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.423830][T13357] device bridge_slave_1 entered promiscuous mode
[  721.605082][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  722.432251][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  722.446039][T13357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  722.457488][T13116] device veth0_vlan entered promiscuous mode
[  722.482540][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  722.500940][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  722.519429][T13419] netlink: 'syz.2.2803': attribute type 1 has an invalid length.
[  722.541771][T13357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  722.563590][T13116] device veth1_vlan entered promiscuous mode
[  722.703676][T13357] team0: Port device team_slave_0 added
[  722.743670][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  722.744390][ T3597] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  722.777154][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  722.824113][T13116] device veth0_macvtap entered promiscuous mode
[  722.848703][T13357] team0: Port device team_slave_1 added
[  722.863712][T13116] device veth1_macvtap entered promiscuous mode
[  722.866873][T13431] devpts: called with bogus options
[  722.960909][T13357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  722.983878][T13357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  723.029687][T13357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  723.072208][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.084614][ T3557] Bluetooth: hci7: command tx timeout
[  723.144608][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  723.155704][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.166254][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  723.176828][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.190686][ T3597] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  723.219818][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.237371][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.262421][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.274474][ T3597] usb 4-1: config 0 descriptor??
[  723.292189][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.302981][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.313981][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.339332][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.356980][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.367285][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.420378][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.452581][T13116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  723.472955][T13357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  723.486197][ T1028] block nbd2: Possible stuck request ffff88801ffb8000: control (read@0,4096B). Runtime 150 seconds
[  723.491894][T13357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  723.560495][T13357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  723.606354][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  723.618491][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  723.645186][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  723.657655][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  723.694984][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.735654][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.748575][T13425] binder: 13424:13425 ioctl c0306201 20000580 returned -14
[  723.765905][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.801035][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.812106][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.839517][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.882549][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.902118][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.912610][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.934334][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.950303][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.961863][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.997656][T13116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  724.053881][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  724.083438][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  724.125008][T13116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  724.154417][T13116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  724.171584][T13116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  724.194476][T13116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  724.278052][T13357] device hsr_slave_0 entered promiscuous mode
[  724.326400][T13357] device hsr_slave_1 entered promiscuous mode
[  724.365058][T13357] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  724.393098][T13357] Cannot create hsr debugfs directory
[  724.707073][ T4151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.762872][ T4151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.798085][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  724.799319][ T4485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.854328][ T4485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.887137][ T5659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  724.971500][ T3597] uclogic 0003:256C:006D.0016: failed retrieving Huion firmware version: -71
[  725.045254][ T3597] uclogic 0003:256C:006D.0016: failed probing parameters: -71
[  725.053244][ T3597] uclogic: probe of 0003:256C:006D.0016 failed with error -71
[  725.113847][ T3597] usb 4-1: USB disconnect, device number 15
[  725.164588][ T3557] Bluetooth: hci7: command tx timeout
[  725.187893][T13357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.418449][T13357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.817450][T13357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.189283][T13357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.297514][ T9298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  726.308641][ T9298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  726.317223][ T9298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  726.327298][ T9298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  726.335416][ T9298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  726.342673][ T9298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  726.351602][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2825'.
[  726.691922][   T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.855223][   T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.033126][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'.
[  727.117775][   T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.228787][T13357] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  727.244405][ T3557] Bluetooth: hci7: command tx timeout
[  727.341448][T13357] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  727.360774][T13357] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  727.496399][   T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.549817][T13357] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  727.573928][T13503] chnl_net:caif_netlink_parms(): no params data found
[  728.364461][ T3557] Bluetooth: hci0: command tx timeout
[  728.681689][T13503] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.725932][T13503] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.744920][T13503] device bridge_slave_0 entered promiscuous mode
[  728.763578][T13503] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.783814][T13503] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.826402][T13503] device bridge_slave_1 entered promiscuous mode
[  728.924387][T13503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  729.009198][T13503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  729.130480][T13357] 8021q: adding VLAN 0 to HW filter on device bond0
[  729.172537][T13503] team0: Port device team_slave_0 added
[  729.223773][T13578] loop2: detected capacity change from 0 to 4096
[  729.227248][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  729.255041][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  729.270465][T13357] 8021q: adding VLAN 0 to HW filter on device team0
[  729.281097][T13503] team0: Port device team_slave_1 added
[  729.318413][T13578] EXT4-fs (loop2): Test dummy encryption mode enabled
[  729.391848][T13578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  729.617260][T13578] EXT4-fs: Ignoring removed mblk_io_submit option
[  729.649300][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  729.668075][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  729.679093][T13578] EXT4-fs: Ignoring removed nomblk_io_submit option
[  729.704783][T13578] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  729.725571][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.725677][T13578] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  729.732706][ T7635] bridge0: port 1(bridge_slave_0) entered forwarding state
[  729.793637][T13503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  729.803669][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  729.864366][T13503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  729.996999][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  730.017171][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  730.079542][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  730.125218][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.132352][ T7510] bridge0: port 2(bridge_slave_1) entered forwarding state
[  730.173711][T13503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  730.189539][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  730.255836][T11528] EXT4-fs (loop2): unmounting filesystem.
[  730.301043][T13503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  730.450937][ T3557] Bluetooth: hci0: command tx timeout
[  730.620230][T13503] device hsr_slave_0 entered promiscuous mode
[  730.665356][T13503] device hsr_slave_1 entered promiscuous mode
[  730.697472][T13503] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  730.715205][T13503] Cannot create hsr debugfs directory
[  730.735047][T12865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  730.748991][T12865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  730.888954][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  730.903899][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  731.128685][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  731.156153][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  731.205782][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  731.544483][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  731.565305][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  731.623697][T13357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  731.648857][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  731.773355][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  731.810305][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  732.444641][   T28] INFO: task syz.2.2007:10835 blocked for more than 143 seconds.
[  732.452430][   T28]       Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0
[  732.475059][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  732.483792][   T28] task:syz.2.2007      state:D stack:27560 pid:10835 ppid:9863   flags:0x00004006
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  732.524350][ T3557] Bluetooth: hci0: command tx timeout
[  732.553502][   T28] Call Trace:
[  732.574943][   T28]  <TASK>
[  732.577976][   T28]  __schedule+0x143f/0x4570
[  732.582600][   T28]  ? __mutex_lock+0x6b4/0xd80
[  732.649379][   T28]  ? release_firmware_map_entry+0x186/0x186
[  732.669653][   T28]  ? __mutex_trylock_common+0x8d/0x2e0
[  732.792985][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  733.240048][   T28]  schedule+0xbf/0x180
[  733.434611][   T28]  schedule_preempt_disabled+0xf/0x20
[  733.440068][   T28]  __mutex_lock+0x6b9/0xd80
[  733.494417][   T28]  ? __mutex_lock+0x53c/0xd80
[  733.499250][   T28]  ? blkdev_put+0x100/0x750
[  733.503779][   T28]  ? mutex_lock_nested+0x10/0x10
[  733.584920][   T28]  ? __fsnotify_parent+0x50b/0x730
[  733.590273][   T28]  blkdev_put+0x100/0x750
[  733.629925][   T28]  blkdev_close+0x56/0x80
[  733.644357][   T28]  ? blkdev_open+0x2e0/0x2e0
[  733.649030][   T28]  __fput+0x3f6/0x8d0
[  733.653077][   T28]  task_work_run+0x246/0x300
[  733.672351][   T28]  ? task_work_cancel+0x2b0/0x2b0
[  733.683201][   T28]  ? stack_trace_snprint+0xe0/0xe0
[  733.693249][   T28]  get_signal+0x15fc/0x17d0
[  733.703633][   T28]  ? kasan_save_stack+0x4d/0x60
[  733.713084][   T28]  ? kasan_save_stack+0x3b/0x60
[  733.723959][   T28]  ? __kasan_record_aux_stack+0xb0/0xc0
[  733.744291][   T28]  ? task_work_add+0x87/0x3a0
[  733.749051][   T28]  ? fput+0xe2/0x1b0
[  733.752980][   T28]  ? do_syscall_64+0x3b/0xb0
[  733.764566][   T28]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  733.770711][   T28]  ? ptrace_notify+0x370/0x370
[  733.786412][   T28]  arch_do_signal_or_restart+0xb0/0x1a10
[  733.792145][   T28]  ? get_sigframe_size+0x10/0x10
[  733.812767][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  733.831538][   T28]  ? blkdev_ioctl+0x3a9/0x760
[  733.837486][   T28]  ? exit_to_user_mode_loop+0x39/0x100
[  733.843003][   T28]  exit_to_user_mode_loop+0x6a/0x100
[  733.858914][   T28]  exit_to_user_mode_prepare+0xb1/0x140
[  733.869589][   T28]  syscall_exit_to_user_mode+0x60/0x270
[  733.881254][   T28]  do_syscall_64+0x47/0xb0
[  733.892600][   T28]  ? clear_bhb_loop+0x45/0xa0
[  733.903360][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  733.909933][   T28] RIP: 0033:0x7f50e1175f19
[  733.920354][   T28] RSP: 002b:00007f50e1f67048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  733.929146][   T28] RAX: 0000000000000000 RBX: 00007f50e1305f60 RCX: 00007f50e1175f19
[  733.939055][   T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  733.947397][   T28] RBP: 00007f50e11e4e68 R08: 0000000000000000 R09: 0000000000000000
[  733.955972][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  733.963988][   T28] R13: 000000000000000b R14: 00007f50e1305f60 R15: 00007fffabf0f078
[  733.972594][   T28]  </TASK>
[  733.979751][   T28] INFO: task syz.2.2007:10836 blocked for more than 144 seconds.
[  734.044291][   T28]       Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0
[  734.051750][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  734.104033][   T28] task:syz.2.2007      state:D stack:27448 pid:10836 ppid:9863   flags:0x00004004
[  734.146908][   T28] Call Trace:
[  734.174098][   T28]  <TASK>
[  734.177451][   T28]  __schedule+0x143f/0x4570
[  734.182029][   T28]  ? __mutex_lock+0x6b4/0xd80
[  734.214291][   T28]  ? release_firmware_map_entry+0x186/0x186
[  734.220518][   T28]  ? __mutex_trylock_common+0x8d/0x2e0
[  734.255752][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  734.261035][   T28]  schedule+0xbf/0x180
[  734.284379][   T28]  schedule_preempt_disabled+0xf/0x20
[  734.289819][   T28]  __mutex_lock+0x6b9/0xd80
[  734.314378][   T28]  ? __mutex_lock+0x53c/0xd80
[  734.319157][   T28]  ? blkdev_get_by_dev+0x148/0xa10
[  734.354597][   T28]  ? mutex_lock_nested+0x10/0x10
[  734.359600][   T28]  ? _atomic_dec_and_lock+0x96/0x130
[  734.415447][   T28]  ? iput+0x401/0x980
[  734.419519][   T28]  ? ilookup+0x1c8/0x200
[  734.423810][   T28]  ? disk_block_events+0xa1/0x110
[  734.449698][   T28]  ? blkdev_get_by_dev+0xe7/0xa10
[  734.455623][   T28]  blkdev_get_by_dev+0x148/0xa10
[  734.460628][   T28]  blkdev_open+0x12e/0x2e0
[  734.465522][   T28]  ? blkdev_mmap+0x1b0/0x1b0
[  734.470138][   T28]  do_dentry_open+0x7f9/0x10f0
[  734.477202][   T28]  path_openat+0x2644/0x2e60
[  734.481842][   T28]  ? mark_lock+0x9a/0x340
[  734.487704][   T28]  ? do_filp_open+0x480/0x480
[  734.492463][   T28]  do_filp_open+0x230/0x480
[  734.497434][   T28]  ? vfs_tmpfile+0x4a0/0x4a0
[  734.502089][   T28]  ? _raw_spin_unlock+0x24/0x40
[  734.507047][   T28]  ? alloc_fd+0x5a0/0x640
[  734.511486][   T28]  do_sys_openat2+0x13b/0x4f0
[  734.516597][   T28]  ? do_sys_open+0x220/0x220
[  734.521242][   T28]  __x64_sys_openat+0x243/0x290
[  734.526289][   T28]  ? __ia32_sys_open+0x270/0x270
[  734.531258][   T28]  ? syscall_enter_from_user_mode+0x2e/0x230
[  734.537392][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  734.542660][   T28]  ? syscall_enter_from_user_mode+0x2e/0x230
[  734.549004][   T28]  do_syscall_64+0x3b/0xb0
[  734.553974][   T28]  ? clear_bhb_loop+0x45/0xa0
[  734.558851][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  734.564954][   T28] RIP: 0033:0x7f50e1174950
[  734.569392][   T28] RSP: 002b:00007f50e1f45b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  734.578535][   T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f50e1174950
[  734.587987][   T28] RDX: 0000000000000000 RSI: 00007f50e1f45c20 RDI: 00000000ffffff9c
[  734.596401][   T28] RBP: 00007f50e1f45c20 R08: 0000000000000000 R09: 002364626e2f7665
[  734.604844][   T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  734.605658][ T3557] Bluetooth: hci0: command tx timeout
[  734.613034][   T28] R13: 000000000000006e R14: 00007f50e1306038 R15: 00007fffabf0f078
[  734.634435][   T28]  </TASK>
[  734.664430][   T28] 
[  734.664430][   T28] Showing all locks held in the system:
[  734.672230][   T28] 1 lock held by rcu_tasks_kthre/12:
[  734.696050][   T28]  #0: ffffffff8d12af10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  734.713659][   T28] 1 lock held by rcu_tasks_trace/13:
[  734.719060][   T28]  #0: ffffffff8d12b710 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  734.730432][   T28] 1 lock held by khungtaskd/28:
[  734.735968][   T28]  #0: ffffffff8d12ad40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  734.746319][   T28] 4 locks held by kworker/u4:4/56:
[  734.751443][   T28]  #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  734.762937][   T28]  #1: ffffc90001577d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  734.776867][   T28]  #2: ffffffff8e28ead0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60
[  734.787579][   T28]  #3: ffffffff8d130338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930
[  734.799255][   T28] 1 lock held by dhcpcd/3217:
[  734.803969][   T28]  #0: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2a5/0x1b20
[  734.815330][   T28] 2 locks held by getty/3309:
[  734.820123][   T28]  #0: ffff88814b08a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  734.830559][   T28]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  734.841142][   T28] 3 locks held by kworker/0:3/3595:
[  734.847498][   T28]  #0: ffff888028613138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  734.860351][   T28]  #1: ffffc90003fdfd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  734.872760][   T28]  #2: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0
[  734.882542][   T28] 3 locks held by kworker/1:6/3597:
[  734.888097][   T28]  #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  734.898617][   T28]  #1: ffffc90003fffd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  734.909106][   T28]  #2: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[  734.918493][   T28] 3 locks held by kworker/1:15/5657:
[  734.923802][   T28]  #0: ffff888028613138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  734.936390][   T28]  #1: ffffc9000354fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  734.948990][   T28]  #2: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0
[  734.958514][   T28] 2 locks held by kworker/1:19/5662:
[  734.964390][   T28]  #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  734.975257][   T28]  #1: ffffc90003f1fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  734.987261][   T28] 1 lock held by udevd/10591:
[  734.991972][   T28]  #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10
[  735.002319][   T28] 1 lock held by syz.2.2007/10835:
[  735.008094][   T28]  #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750
[  735.017657][   T28] 1 lock held by syz.2.2007/10836:
[  735.022800][   T28]  #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10
[  735.033018][   T28] 1 lock held by syz.3.2114/11277:
[  735.038454][   T28]  #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1a5/0x320
[  735.049304][   T28] 1 lock held by syz.3.2114/11283:
[  735.054516][   T28]  #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1a5/0x320
[  735.064562][   T28] 1 lock held by syz-executor/11462:
[  735.069878][   T28]  #0: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0
[  735.079293][   T28] 3 locks held by syz.1.2257/11751:
[  735.084648][   T28]  #0: ffff8880583190b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500
[  735.095306][   T28]  #1: ffff888058318078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[  735.105372][   T28]  #2: ffffffff8d130338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930
[  735.116411][   T28] 2 locks held by kworker/u4:7/13019:
[  735.121821][   T28]  #0: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  735.131832][   T28]  #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a3/0x770
[  735.143614][   T28] 1 lock held by syz.0.2738/13181:
[  735.148822][   T28]  #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1a5/0x320
[  735.160007][   T28] 3 locks held by syz-executor/13357:
[  735.166510][   T28]  #0: ffff88805329d0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500
[  735.176618][   T28]  #1: ffff88805329c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[  735.186443][   T28]  #2: ffffffff8e3f1f88 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  735.197225][   T28] 7 locks held by syz-executor/13503:
[  735.202632][   T28]  #0: ffff88807e98c460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0
[  735.211600][   T28]  #1: ffff888059564888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0
[  735.221448][   T28]  #2: ffff8881437293a8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0
[  735.231821][   T28]  #3: ffffffff8dc0e168 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480
[  735.242228][   T28]  #4: ffff8880771ed0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880
[  735.252922][   T28]  #5: ffff8880771ee2f8 (&devlink->lock_key#33){+.+.}-{3:3}, at: nsim_drv_remove+0x54/0x160
[  735.263393][   T28]  #6: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3a/0x140
[  735.274395][   T28] 1 lock held by syz.2.2869/13643:
[  735.279538][   T28]  #0: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0
[  735.289061][   T28] 
[  735.294172][   T28] =============================================
[  735.294172][   T28] 
[  735.306229][   T28] NMI backtrace for cpu 0
[  735.310601][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0
[  735.320346][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  735.330431][   T28] Call Trace:
[  735.333735][   T28]  <TASK>
[  735.336687][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  735.341405][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  735.346928][   T28]  ? panic+0x764/0x764
[  735.351028][   T28]  ? vprintk_emit+0x622/0x740
[  735.355761][   T28]  ? printk_sprint+0x490/0x490
[  735.360565][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  735.365734][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  735.370738][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  735.376928][   T28]  ? _printk+0xd1/0x111
[  735.381199][   T28]  ? panic+0x764/0x764
[  735.385278][   T28]  ? __wake_up_klogd+0xcc/0x100
[  735.390132][   T28]  ? panic+0x764/0x764
[  735.394220][   T28]  ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0
[  735.400322][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  735.406403][   T28]  nmi_trigger_cpumask_backtrace+0x1b0/0x3f0
[  735.412402][   T28]  watchdog+0xf88/0xfd0
[  735.416605][   T28]  ? watchdog+0x1f8/0xfd0
[  735.420951][   T28]  kthread+0x28d/0x320
[  735.425092][   T28]  ? hungtask_pm_notify+0x50/0x50
[  735.430123][   T28]  ? kthread_blkcg+0xd0/0xd0
[  735.434749][   T28]  ret_from_fork+0x1f/0x30
[  735.439193][   T28]  </TASK>
[  735.444001][   T28] Sending NMI from CPU 0 to CPUs 1:
[  735.449993][    C1] NMI backtrace for cpu 1
[  735.450005][    C1] CPU: 1 PID: 11882 Comm: kworker/u4:0 Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0
[  735.450043][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  735.450055][    C1] Workqueue: bat_events batadv_nc_worker
[  735.450085][    C1] RIP: 0010:validate_chain+0x189/0x5950
[  735.450115][    C1] Code: c1 e8 03 48 89 44 24 58 42 80 3c 20 00 74 08 48 89 df e8 ea fc 76 00 48 89 5c 24 28 48 8b 1b 48 85 db 74 48 48 83 c3 f8 74 42 <4c> 8d 7b 18 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8
[  735.450131][    C1] RSP: 0018:ffffc90005237640 EFLAGS: 00000097
[  735.450145][    C1] RAX: 1ffffffff2088f68 RBX: ffffffff9051cf60 RCX: ffffffff816b2632
[  735.450160][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9049d2f0
[  735.450172][    C1] RBP: ffffc900052378f0 R08: dffffc0000000000 R09: fffffbfff2093a5f
[  735.450186][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  735.450199][    C1] R13: ffff888051118b50 R14: c909e5e2ecd0dc9e R15: 1ffff1100a22316a
[  735.450213][    C1] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  735.450229][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  735.450242][    C1] CR2: 00007ffe05028448 CR3: 00000000297a9000 CR4: 00000000003506e0
[  735.450258][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  735.450268][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  735.450280][    C1] Call Trace:
[  735.450286][    C1]  <NMI>
[  735.450292][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  735.450320][    C1]  ? read_lock_is_recursive+0x10/0x10
[  735.450349][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  735.450386][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  735.450414][    C1]  ? nmi_handle+0x12e/0x440
[  735.450441][    C1]  ? nmi_handle+0x25/0x440
[  735.450468][    C1]  ? validate_chain+0x189/0x5950
[  735.450495][    C1]  ? default_do_nmi+0x62/0x150
[  735.450513][    C1]  ? exc_nmi+0xa8/0x100
[  735.450530][    C1]  ? end_repeat_nmi+0x16/0x31
[  735.450560][    C1]  ? validate_chain+0x112/0x5950
[  735.450588][    C1]  ? validate_chain+0x189/0x5950
[  735.450615][    C1]  ? validate_chain+0x189/0x5950
[  735.450643][    C1]  ? validate_chain+0x189/0x5950
[  735.450671][    C1]  </NMI>
[  735.450676][    C1]  <TASK>
[  735.450683][    C1]  ? validate_chain+0x112/0x5950
[  735.450709][    C1]  ? deref_stack_reg+0x17c/0x210
[  735.450734][    C1]  ? __lock_acquire+0x125b/0x1f80
[  735.450768][    C1]  ? reacquire_held_locks+0x660/0x660
[  735.450797][    C1]  ? reacquire_held_locks+0x660/0x660
[  735.450828][    C1]  ? reacquire_held_locks+0x660/0x660
[  735.450856][    C1]  ? reacquire_held_locks+0x660/0x660
[  735.450889][    C1]  ? reacquire_held_locks+0x660/0x660
[  735.450919][    C1]  ? mark_lock+0x9a/0x340
[  735.450946][    C1]  __lock_acquire+0x125b/0x1f80
[  735.450980][    C1]  lock_acquire+0x1f8/0x5a0
[  735.451005][    C1]  ? batadv_nc_purge_paths+0xe8/0x3b0
[  735.451035][    C1]  ? read_lock_is_recursive+0x10/0x10
[  735.451062][    C1]  ? __local_bh_disable_ip+0x183/0x210
[  735.451090][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  735.451109][    C1]  ? batadv_nc_purge_paths+0xe8/0x3b0
[  735.451135][    C1]  ? __bpf_trace_softirq+0x10/0x10
[  735.451160][    C1]  ? __local_bh_enable_ip+0x164/0x1f0
[  735.451187][    C1]  ? batadv_nc_purge_paths+0x30e/0x3b0
[  735.451213][    C1]  ? _local_bh_enable+0xa0/0xa0
[  735.451241][    C1]  ? batadv_nc_purge_paths+0xe8/0x3b0
[  735.451268][    C1]  _raw_spin_lock_bh+0x31/0x40
[  735.451290][    C1]  ? batadv_nc_purge_paths+0xe8/0x3b0
[  735.451314][    C1]  ? batadv_nc_purge_paths+0x3b0/0x3b0
[  735.451340][    C1]  batadv_nc_purge_paths+0xe8/0x3b0
[  735.451372][    C1]  batadv_nc_worker+0x324/0x610
[  735.451396][    C1]  ? batadv_nc_worker+0xc7/0x610
[  735.451422][    C1]  ? process_one_work+0x7a9/0x11d0
[  735.451443][    C1]  process_one_work+0x8a9/0x11d0
[  735.451470][    C1]  ? worker_detach_from_pool+0x260/0x260
[  735.451493][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  735.451515][    C1]  ? kthread_data+0x4e/0xc0
[  735.451543][    C1]  ? wq_worker_running+0x97/0x190
[  735.451572][    C1]  worker_thread+0xa47/0x1200
[  735.451598][    C1]  ? _raw_spin_unlock+0x40/0x40
[  735.451625][    C1]  kthread+0x28d/0x320
[  735.451640][    C1]  ? worker_clr_flags+0x190/0x190
[  735.451660][    C1]  ? kthread_blkcg+0xd0/0xd0
[  735.451677][    C1]  ret_from_fork+0x1f/0x30
[  735.451708][    C1]  </TASK>
[  735.509692][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  735.509711][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0
[  735.509737][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  735.509756][   T28] Call Trace:
[  735.509763][   T28]  <TASK>
[  735.509774][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  735.509836][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  735.509873][   T28]  ? panic+0x764/0x764
[  735.509907][   T28]  ? vscnprintf+0x59/0x80
[  735.509937][   T28]  panic+0x318/0x764
[  735.509964][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  735.510003][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  735.510035][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  735.510071][   T28]  ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0
[  735.510110][   T28]  ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0
[  735.510150][   T28]  watchdog+0xfc7/0xfd0
[  735.510187][   T28]  ? watchdog+0x1f8/0xfd0
[  735.510234][   T28]  kthread+0x28d/0x320
[  735.510254][   T28]  ? hungtask_pm_notify+0x50/0x50
[  735.510281][   T28]  ? kthread_blkcg+0xd0/0xd0
[  735.510303][   T28]  ret_from_fork+0x1f/0x30
[  735.510349][   T28]  </TASK>
[  735.516173][   T28] Kernel Offset: disabled
[  735.998695][   T28] Rebooting in 86400 seconds..