last executing test programs:

15.688815451s ago: executing program 2 (id=2072):
unshare(0x8040480)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x38)

5.045881151s ago: executing program 2 (id=2073):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x10f)
preadv2(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0xc00}], 0x1, 0x0, 0x0, 0x0)

4.673075905s ago: executing program 2 (id=2169):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001300)='./file2\x00', 0x0, &(0x7f0000000680)={[{@prjquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@sysvgroups}, {@lazytime}, {@errors_continue}, {@grpjquota}]}, 0x1, 0x46a, &(0x7f0000000980)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412)

4.086594667s ago: executing program 2 (id=2176):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

3.355395282s ago: executing program 1 (id=2185):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7d)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e)

3.186153697s ago: executing program 1 (id=2187):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcf, 0xc5, 0xb6, 0x10, 0x456, 0xf000, 0xf37f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x25, 0xea}}]}}]}}, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)

2.976323227s ago: executing program 3 (id=2188):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f00000004c0), 0x3, 0x460, &(0x7f0000000540)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000480)=@v2={0x2, @adiantum, 0x2, '\x00', @d})

2.566206863s ago: executing program 3 (id=2192):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x22}}]}}]}, 0x8c}}, 0x0)

2.471773031s ago: executing program 4 (id=2194):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000006580)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',resize,nodiscard,usrquota,errors=remount-ro,discard,resize=0x0000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=macgaelic,uid=', @ANYRESOCT=0x0, @ANYBLOB=',noquota,grpquota,nointegrity,uid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfstransmute=noquota,uid=', @ANYRESDEC=0x0, @ANYBLOB=',permit_directio,id=\x00\x00', @ANYRES64, @ANYBLOB="2c6f626a5f757365723df326265b275d242c412c00", @ANYRES8=0x0], 0x1, 0x61ac, &(0x7f00000003c0)="$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")
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f00000002c0)='./file1\x00', 0x0)
unlink(&(0x7f0000000580)='./file1\x00')

2.391478819s ago: executing program 3 (id=2195):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}, r1}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @empty}, r1}}, 0x48)

2.300090558s ago: executing program 2 (id=2197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x8}}]}, 0x38}}, 0x10000)

2.224770824s ago: executing program 3 (id=2198):
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

2.180601408s ago: executing program 0 (id=2199):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000007240)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xdfd, 0x80000000}, 0x10)

2.087352137s ago: executing program 0 (id=2200):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0})

1.496446329s ago: executing program 2 (id=2201):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
msgget(0x2, 0x20)

1.495474409s ago: executing program 0 (id=2211):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
gettid()
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x20, r1, 0x1, 0x0, 'syz0\x00', &(0x7f0000000080)=['']})

1.24666571s ago: executing program 0 (id=2203):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x5, 0x0, 0x0, {{0x60}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

1.24537231s ago: executing program 1 (id=2204):
unshare(0xc060400)
r0 = fanotify_init(0x0, 0x0)
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0xd, 0x8000029, r1, 0x0)

1.24500637s ago: executing program 3 (id=2205):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
gettid()

1.174418677s ago: executing program 4 (id=2206):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.max.burst\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x8)

1.094371824s ago: executing program 0 (id=2207):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x480a)

1.007041131s ago: executing program 1 (id=2208):
r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x15c, 0x10, 0x0, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x2b}, @in6=@remote}, [@algo_auth_trunc={0x69, 0x14, {{'cmac(aes)\x00'}, 0xe8, 0x0, "e3630dde215f3da533f861c33b10bf7dcb03d1e0dc304addd2f5580dc9"}}]}, 0x15c}}, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0])

886.511151ms ago: executing program 4 (id=2209):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="92", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

800.937619ms ago: executing program 1 (id=2210):
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x80000000)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x6000000)

710.280427ms ago: executing program 0 (id=2212):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
msync(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1)

484.584667ms ago: executing program 1 (id=2213):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0xbb}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(r0)

369.629017ms ago: executing program 4 (id=2214):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
readlink(&(0x7f0000003000)='./file0/../file0\x00', &(0x7f0000003040)=""/95, 0x5f)

64.632274ms ago: executing program 3 (id=2215):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)=@v2={0x2, @adiantum, 0xc, '\x00', @b})

757.119µs ago: executing program 4 (id=2216):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x5dc, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x56)

0s ago: executing program 4 (id=2217):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde)

kernel console output (not intermixed with test programs):

[  246.384937][ T8604] hfs: request for non-existent node 16777216 in B*Tree
[  246.445705][  T946] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  246.710931][  T946] usb 1-1: Using ep0 maxpacket: 16
[  246.860833][  T946] usb 1-1: config 0 has no interfaces?
[  246.912068][ T8461] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  246.922500][ T8461] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  246.928000][ T8461] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  246.937194][ T8461] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  247.041980][  T946] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  247.057063][  T946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.084704][  T946] usb 1-1: Product: syz
[  247.088898][  T946] usb 1-1: Manufacturer: syz
[  247.108455][  T946] usb 1-1: SerialNumber: syz
[  247.121613][ T8461] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.126569][  T946] usb 1-1: config 0 descriptor??
[  247.168417][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  247.198500][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  247.226843][ T8461] 8021q: adding VLAN 0 to HW filter on device team0
[  247.248902][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  247.269442][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  247.285483][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.292655][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.308994][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  247.323847][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  247.341304][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  247.361209][ T3816] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.368308][ T3816] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.398244][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  247.430831][ T3687] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  247.438640][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'.
[  247.448384][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  247.466481][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  247.498578][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  247.519452][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  247.539758][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  247.559688][ T3960] usb 1-1: USB disconnect, device number 18
[  247.559877][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  247.592618][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  247.626078][ T8461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  247.657681][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  247.679030][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  247.692187][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  247.711086][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  247.720741][ T3687] usb 3-1: Using ep0 maxpacket: 32
[  247.861019][ T3687] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  247.880280][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.902729][ T3687] usb 3-1: config 0 descriptor??
[  247.952617][ T3687] gspca_main: sq930x-2.14.0 probing 041e:403c
[  248.124572][ T8461] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.174500][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  248.194715][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  248.210960][ T3652] Bluetooth: hci2: command tx timeout
[  248.255161][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  248.271372][ T4528] bio_check_eod: 121740 callbacks suppressed
[  248.271388][ T4528] syz.4.282: attempt to access beyond end of device
[  248.271388][ T4528] loop4: rw=3, sector=24332694579608, nr_sectors = 8388600 limit=2048
[  248.275756][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  248.277514][ T4528] syz.4.282: attempt to access beyond end of device
[  248.277514][ T4528] loop4: rw=3, sector=24332702968208, nr_sectors = 8388600 limit=2048
[  248.334746][ T4528] syz.4.282: attempt to access beyond end of device
[  248.334746][ T4528] loop4: rw=3, sector=24332711356808, nr_sectors = 8388600 limit=2048
[  248.349737][ T4528] syz.4.282: attempt to access beyond end of device
[  248.349737][ T4528] loop4: rw=3, sector=24332719745408, nr_sectors = 8388600 limit=2048
[  248.372643][ T4528] syz.4.282: attempt to access beyond end of device
[  248.372643][ T4528] loop4: rw=3, sector=24332728134008, nr_sectors = 8388600 limit=2048
[  248.379055][ T8461] device veth0_vlan entered promiscuous mode
[  248.398635][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  248.409520][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  248.452813][ T8461] device veth1_vlan entered promiscuous mode
[  248.461701][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  248.463475][ T4528] syz.4.282: attempt to access beyond end of device
[  248.463475][ T4528] loop4: rw=3, sector=24332736522608, nr_sectors = 8388600 limit=2048
[  248.483762][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  248.484340][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  248.556078][ T4528] syz.4.282: attempt to access beyond end of device
[  248.556078][ T4528] loop4: rw=3, sector=24332744911208, nr_sectors = 8388600 limit=2048
[  248.565311][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  248.588411][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  248.607985][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  248.631910][ T8461] device veth0_macvtap entered promiscuous mode
[  248.643045][ T4528] syz.4.282: attempt to access beyond end of device
[  248.643045][ T4528] loop4: rw=3, sector=24332753299808, nr_sectors = 8388600 limit=2048
[  248.651688][ T8461] device veth1_macvtap entered promiscuous mode
[  248.698795][ T4528] syz.4.282: attempt to access beyond end of device
[  248.698795][ T4528] loop4: rw=3, sector=24332761688408, nr_sectors = 8388600 limit=2048
[  248.704308][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.742948][ T8654] loop0: detected capacity change from 0 to 2048
[  248.743713][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.752881][ T4528] syz.4.282: attempt to access beyond end of device
[  248.752881][ T4528] loop4: rw=3, sector=24332770077008, nr_sectors = 8388600 limit=2048
[  248.774043][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.785491][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.795640][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.807989][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.826847][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.839863][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.858747][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.869765][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.870109][ T8659] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  248.886514][ T3687] gspca_sq930x: reg_w 0105 bf00 failed -71
[  248.899310][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.925239][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.956104][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.971196][ T3687] sq930x: probe of 3-1:0.0 failed with error -71
[  248.996472][ T3687] usb 3-1: USB disconnect, device number 15
[  249.005930][ T8659] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  249.027924][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  249.035716][ T8659] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  249.051856][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  249.074689][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  249.087797][ T8659] Remounting filesystem read-only
[  249.109753][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  249.110333][ T5655] NILFS (loop0): discard dirty page: offset=0, ino=5
[  249.135510][ T5655] NILFS (loop0): discard dirty block: blocknr=41, size=1024
[  249.144731][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.163634][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.171328][ T5655] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  249.180623][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.201138][ T5655] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  249.207648][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.230704][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.231107][ T5655] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  249.251144][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.261964][ T5655] NILFS (loop0): discard dirty page: offset=0, ino=4
[  249.268693][ T5655] NILFS (loop0): discard dirty block: blocknr=40, size=1024
[  249.270637][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.287762][ T5655] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  249.306759][ T5655] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  249.310637][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.320067][ T5655] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  249.350660][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.380776][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.396056][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.416971][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.438481][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.666941][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  249.690374][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  249.716681][ T8461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.740750][ T8461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.779902][ T8461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.800125][ T8461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.106732][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.132041][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.169287][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  250.223201][ T3816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.225439][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.246975][ T3816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.260469][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.268301][ T8692] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.305112][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  250.508707][ T8700] loop1: detected capacity change from 0 to 2048
[  250.529034][ T8700] NILFS (loop1): invalid segment: Checksum error in segment payload
[  250.558827][ T8700] NILFS (loop1): trying rollback from an earlier position
[  250.575820][ T8700] NILFS (loop1): recovery complete
[  250.596495][ T8703] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  250.624362][ T8700] NILFS error (device loop1): nilfs_readdir: zero-length directory entry
[  250.649392][ T8700] Remounting filesystem read-only
[  250.963600][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'.
[  251.092220][ T4730] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  251.141595][ T8716] device syz_tun entered promiscuous mode
[  251.153067][ T8696] loop3: detected capacity change from 0 to 32768
[  251.173309][ T8716] device syz_tun left promiscuous mode
[  251.273121][ T8702] loop2: detected capacity change from 0 to 32768
[  251.291162][ T8702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1704 (8702)
[  251.314382][ T8702] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  251.351183][ T8702] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  251.360456][ T8702] BTRFS info (device loop2): using free space tree
[  251.497336][ T8702] BTRFS info (device loop2): enabling ssd optimizations
[  251.611024][ T4730] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  251.630319][ T4730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240
[  251.643922][ T4730] usb 2-1: Product: syz
[  251.653137][ T4730] usb 2-1: Manufacturer: syz
[  251.657785][ T4730] usb 2-1: SerialNumber: syz
[  251.677610][ T4730] usb 2-1: config 0 descriptor??
[  251.691068][ T8203] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  251.732909][ T4730] ch341 2-1:0.0: ch341-uart converter detected
[  252.029100][ T8718] loop0: detected capacity change from 0 to 40427
[  252.080191][ T8718] F2FS-fs (loop0): Found nat_bits in checkpoint
[  252.129910][ T8751] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1717'.
[  252.148056][ T8751] netlink: 89 bytes leftover after parsing attributes in process `syz.2.1717'.
[  252.229616][ T8718] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  252.450729][ T3652] Bluetooth: hci3: command 0x0c1a tx timeout
[  252.620697][ T4730] usb 2-1: failed to send control message: -71
[  252.626909][ T4730] ch341-uart: probe of ttyUSB0 failed with error -71
[  252.651986][ T4730] usb 2-1: USB disconnect, device number 18
[  252.658577][ T4730] ch341 2-1:0.0: device disconnected
[  253.051234][ T3684] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  253.280742][ T4528] bio_check_eod: 80865 callbacks suppressed
[  253.280760][ T4528] syz.4.282: attempt to access beyond end of device
[  253.280760][ T4528] loop4: rw=3, sector=25011114216008, nr_sectors = 8388600 limit=2048
[  253.321187][ T4528] syz.4.282: attempt to access beyond end of device
[  253.321187][ T4528] loop4: rw=3, sector=25011122604608, nr_sectors = 8388600 limit=2048
[  253.351734][ T4528] syz.4.282: attempt to access beyond end of device
[  253.351734][ T4528] loop4: rw=3, sector=25011130993208, nr_sectors = 8388600 limit=2048
[  253.387030][ T4528] syz.4.282: attempt to access beyond end of device
[  253.387030][ T4528] loop4: rw=3, sector=25011139381808, nr_sectors = 8388600 limit=2048
[  253.407224][ T4528] syz.4.282: attempt to access beyond end of device
[  253.407224][ T4528] loop4: rw=3, sector=25011147770408, nr_sectors = 8388600 limit=2048
[  253.427882][ T3684] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  253.437716][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.441095][ T4528] syz.4.282: attempt to access beyond end of device
[  253.441095][ T4528] loop4: rw=3, sector=25011156159008, nr_sectors = 8388600 limit=2048
[  253.447348][ T3684] usb 4-1: config 0 descriptor??
[  253.475607][ T4528] syz.4.282: attempt to access beyond end of device
[  253.475607][ T4528] loop4: rw=3, sector=25011164547608, nr_sectors = 8388600 limit=2048
[  253.505510][ T4528] syz.4.282: attempt to access beyond end of device
[  253.505510][ T4528] loop4: rw=3, sector=25011172936208, nr_sectors = 8388600 limit=2048
[  253.510038][ T8782] loop2: detected capacity change from 0 to 8192
[  253.522793][ T3684] gspca_main: spca508-2.14.0 probing 8086:0110
[  253.543415][ T4528] syz.4.282: attempt to access beyond end of device
[  253.543415][ T4528] loop4: rw=3, sector=25011181324808, nr_sectors = 8388600 limit=2048
[  253.558477][ T4528] syz.4.282: attempt to access beyond end of device
[  253.558477][ T4528] loop4: rw=3, sector=25011189713408, nr_sectors = 8388600 limit=2048
[  253.575163][ T8782] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  253.579631][ T8785] loop0: detected capacity change from 0 to 256
[  253.588235][ T8782] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  253.588702][ T8782] REISERFS (device loop2): using ordered data mode
[  253.604221][ T8785] exfat: Deprecated parameter 'utf8'
[  253.616944][ T8782] reiserfs: using flush barriers
[  253.630913][ T4537] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  253.657018][ T8785] exfat: Deprecated parameter 'namecase'
[  253.673454][ T8785] exfat: Deprecated parameter 'namecase'
[  253.707914][ T8785] exfat: Deprecated parameter 'utf8'
[  253.730867][ T3684] gspca_spca508: reg_read err -32
[  253.752248][ T8785] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  253.770986][ T3684] gspca_spca508: reg_read err -32
[  253.845805][ T8782] REISERFS warning (device loop2): sh-458 journal_init_dev: cannot init journal device unknown-block(2,0): -6
[  253.864979][ T8782] REISERFS warning (device loop2): sh-462 journal_init: unable to initialize journal device
[  253.886808][ T8782] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  254.001001][ T4537] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.024274][ T4537] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  254.033497][ T3684] gspca_spca508: reg_read err -71
[  254.051310][ T3684] gspca_spca508: reg_read err -71
[  254.071135][ T3684] gspca_spca508: reg write: error -71
[  254.076625][ T3684] spca508: probe of 4-1:0.0 failed with error -71
[  254.101180][ T3684] usb 4-1: USB disconnect, device number 16
[  254.161196][ T4537] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  254.183402][ T4537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  254.201674][ T4537] usb 2-1: SerialNumber: syz
[  254.394560][ T8802] sg_write: process 103 (syz.2.1737) changed security contexts after opening file descriptor, this is not allowed.
[  254.493307][ T4537] usb 2-1: 0:2 : does not exist
[  254.552906][ T4537] usb 2-1: USB disconnect, device number 19
[  254.606675][ T8806] loop2: detected capacity change from 0 to 2048
[  254.640408][ T8806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  254.720511][ T8203] EXT4-fs (loop2): unmounting filesystem.
[  254.849506][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'.
[  255.164274][ T8825] netlink: 'syz.3.1747': attribute type 1 has an invalid length.
[  255.195845][ T8825] netlink: 'syz.3.1747': attribute type 2 has an invalid length.
[  255.492911][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  255.499270][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  255.577170][ T8840] user requested TSC rate below hardware speed
[  255.687538][ T8846] loop2: detected capacity change from 0 to 1024
[  255.727163][ T8846] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  256.043363][ T8203] EXT4-fs (loop2): unmounting filesystem.
[  256.185441][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1764'.
[  256.332461][ T8870] loop1: detected capacity change from 0 to 128
[  256.353697][ T8870] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  256.399530][ T8870] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038 (0x7fffffff)
[  256.566727][ T8870] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  256.584972][ T8874] loop0: detected capacity change from 0 to 256
[  256.744019][ T8461] EXT4-fs (loop1): unmounting filesystem.
[  256.844624][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'.
[  256.869897][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'.
[  256.897738][ T8882] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1769'.
[  257.716960][ T8888] loop3: detected capacity change from 0 to 32768
[  258.272228][ T8914] loop1: detected capacity change from 0 to 512
[  258.305698][ T4528] bio_check_eod: 81148 callbacks suppressed
[  258.305716][ T4528] syz.4.282: attempt to access beyond end of device
[  258.305716][ T4528] loop4: rw=3, sector=25691916214808, nr_sectors = 8388600 limit=2048
[  258.309815][ T8914] EXT4-fs: Ignoring removed orlov option
[  258.391388][ T4528] syz.4.282: attempt to access beyond end of device
[  258.391388][ T4528] loop4: rw=3, sector=25691924603408, nr_sectors = 8388600 limit=2048
[  258.403725][ T8914] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  258.460569][ T8914] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  258.475652][ T4528] syz.4.282: attempt to access beyond end of device
[  258.475652][ T4528] loop4: rw=3, sector=25691932992008, nr_sectors = 8388600 limit=2048
[  258.476914][ T8914] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1785: invalid indirect mapped block 2683928664 (level 1)
[  258.514351][ T8914] EXT4-fs (loop1): 1 truncate cleaned up
[  258.520020][ T8914] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  258.609033][ T8924] loop2: detected capacity change from 0 to 8192
[  258.616009][ T8914] EXT4-fs: user quota file already specified
[  258.655495][ T4528] syz.4.282: attempt to access beyond end of device
[  258.655495][ T4528] loop4: rw=3, sector=25691941380608, nr_sectors = 8388600 limit=2048
[  258.704413][ T4528] syz.4.282: attempt to access beyond end of device
[  258.704413][ T4528] loop4: rw=3, sector=25691949769208, nr_sectors = 8388600 limit=2048
[  258.731267][ T8461] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  258.774278][ T4528] syz.4.282: attempt to access beyond end of device
[  258.774278][ T4528] loop4: rw=3, sector=25691958157808, nr_sectors = 8388600 limit=2048
[  258.796632][ T8461] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz-executor: Invalid block bitmap block 3 in block_group 0
[  258.860786][ T8461] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem
[  258.892141][ T4528] syz.4.282: attempt to access beyond end of device
[  258.892141][ T4528] loop4: rw=3, sector=25691966546408, nr_sectors = 8388600 limit=2048
[  258.909915][ T8461] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr
[  258.933900][ T8461] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr
[  258.964119][ T4528] syz.4.282: attempt to access beyond end of device
[  258.964119][ T4528] loop4: rw=3, sector=25691974935008, nr_sectors = 8388600 limit=2048
[  258.975157][ T8935] bridge0: port 3(bond0) entered blocking state
[  259.006989][ T8935] bridge0: port 3(bond0) entered disabled state
[  259.029912][ T8935] device bond0 entered promiscuous mode
[  259.039793][ T8935] device bond_slave_0 entered promiscuous mode
[  259.048253][ T8935] device bond_slave_1 entered promiscuous mode
[  259.087925][ T4528] syz.4.282: attempt to access beyond end of device
[  259.087925][ T4528] loop4: rw=3, sector=25691983323608, nr_sectors = 8388600 limit=2048
[  259.097128][ T8935] bridge0: port 3(bond0) entered blocking state
[  259.109211][ T8935] bridge0: port 3(bond0) entered forwarding state
[  259.133428][ T4528] syz.4.282: attempt to access beyond end of device
[  259.133428][ T4528] loop4: rw=3, sector=25691991712208, nr_sectors = 8388600 limit=2048
[  259.342231][ T8943] loop3: detected capacity change from 0 to 64
[  259.357392][ T8461] EXT4-fs (loop1): unmounting filesystem.
[  259.444338][   T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.626607][   T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.743089][   T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.886096][   T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.130735][ T3652] Bluetooth: hci0: command tx timeout
[  260.285707][ T8958] device syz_tun entered promiscuous mode
[  260.315923][ T3647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  260.328661][ T3647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  260.337269][ T3647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  260.345970][ T3647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  260.356864][ T3647] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  260.364703][ T3647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  260.391328][ T8958] device syz_tun left promiscuous mode
[  260.907197][ T8953] loop3: detected capacity change from 0 to 32768
[  260.996760][ T8959] chnl_net:caif_netlink_parms(): no params data found
[  261.047986][ T8953] XFS (loop3): Mounting V5 Filesystem
[  261.124796][ T8987] loop2: detected capacity change from 0 to 512
[  261.137112][ T8992] misc userio: Can't change port type on an already running userio instance
[  261.198992][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'.
[  261.203354][ T8953] XFS (loop3): Ending clean mount
[  261.214862][ T8953] XFS (loop3): Quotacheck needed: Please wait.
[  261.215986][ T8987] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1816: inode #1: comm syz.2.1816: iget: illegal inode #
[  261.250693][ T8994] tipc: Cannot configure node identity twice
[  261.266676][ T8953] XFS (loop3): Quotacheck: Done.
[  261.328475][ T8987] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1816: error while reading EA inode 1 err=-117
[  261.358630][ T8987] EXT4-fs (loop2): 1 orphan inode deleted
[  261.370893][ T8987] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  261.389848][ T6755] XFS (loop3): Unmounting Filesystem
[  261.440457][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.459300][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.475671][ T8959] device bridge_slave_0 entered promiscuous mode
[  261.487381][ T9003] device syz_tun entered promiscuous mode
[  261.506693][ T9003] device syz_tun left promiscuous mode
[  261.637700][ T8203] EXT4-fs (loop2): unmounting filesystem.
[  261.651544][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.678335][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.712088][ T8959] device bridge_slave_1 entered promiscuous mode
[  261.966264][ T8959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.013925][ T8959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.046612][ T9008] tun0: tun_chr_ioctl cmd 1074025677
[  262.059190][ T9008] tun0: linktype set to 823
[  262.273434][   T37] device hsr_slave_0 left promiscuous mode
[  262.288235][   T37] device hsr_slave_1 left promiscuous mode
[  262.295912][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.328803][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.347669][ T9024] loop3: detected capacity change from 0 to 128
[  262.359114][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.366969][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.384842][ T9024] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  262.411388][   T37] device bridge_slave_1 left promiscuous mode
[  262.417629][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.422840][ T9024] UDF-fs: error (device loop3): udf_read_inode: (ino 86) failed unknown file type=13
[  262.450832][ T3652] Bluetooth: hci2: command tx timeout
[  262.459034][   T37] device bridge_slave_0 left promiscuous mode
[  262.480864][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.514098][   T37] device veth1_macvtap left promiscuous mode
[  262.521355][   T37] device veth0_macvtap left promiscuous mode
[  262.549954][   T37] device veth1_vlan left promiscuous mode
[  262.556158][   T37] device veth0_vlan left promiscuous mode
[  262.826957][ T3684] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  263.080914][ T3684] usb 5-1: Using ep0 maxpacket: 16
[  263.200756][ T3684] usb 5-1: config 0 has no interfaces?
[  263.311356][ T4528] bio_check_eod: 83316 callbacks suppressed
[  263.311374][ T4528] syz.4.282: attempt to access beyond end of device
[  263.311374][ T4528] loop4: rw=3, sector=26390904698408, nr_sectors = 8388600 limit=2048
[  263.332879][ T4528] syz.4.282: attempt to access beyond end of device
[  263.332879][ T4528] loop4: rw=3, sector=26390913087008, nr_sectors = 8388600 limit=2048
[  263.348631][ T4528] syz.4.282: attempt to access beyond end of device
[  263.348631][ T4528] loop4: rw=3, sector=26390921475608, nr_sectors = 8388600 limit=2048
[  263.364025][ T4528] syz.4.282: attempt to access beyond end of device
[  263.364025][ T4528] loop4: rw=3, sector=26390929864208, nr_sectors = 8388600 limit=2048
[  263.387799][ T3684] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  263.397574][ T4528] syz.4.282: attempt to access beyond end of device
[  263.397574][ T4528] loop4: rw=3, sector=26390938252808, nr_sectors = 8388600 limit=2048
[  263.412577][ T3684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.421099][ T3684] usb 5-1: Product: syz
[  263.425401][ T3684] usb 5-1: Manufacturer: syz
[  263.430002][ T3684] usb 5-1: SerialNumber: syz
[  263.434737][ T4528] syz.4.282: attempt to access beyond end of device
[  263.434737][ T4528] loop4: rw=3, sector=26390946641408, nr_sectors = 8388600 limit=2048
[  263.452444][ T3684] usb 5-1: config 0 descriptor??
[  263.472004][ T4528] syz.4.282: attempt to access beyond end of device
[  263.472004][ T4528] loop4: rw=3, sector=26390955030008, nr_sectors = 8388600 limit=2048
[  263.497038][ T4528] syz.4.282: attempt to access beyond end of device
[  263.497038][ T4528] loop4: rw=3, sector=26390963418608, nr_sectors = 8388600 limit=2048
[  263.523417][ T4528] syz.4.282: attempt to access beyond end of device
[  263.523417][ T4528] loop4: rw=3, sector=26390971807208, nr_sectors = 8388600 limit=2048
[  263.547671][ T4528] syz.4.282: attempt to access beyond end of device
[  263.547671][ T4528] loop4: rw=3, sector=26390980195808, nr_sectors = 8388600 limit=2048
[  263.776040][   T37] team0 (unregistering): Port device team_slave_1 removed
[  263.837000][   T37] team0 (unregistering): Port device team_slave_0 removed
[  263.894459][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.948251][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  264.531318][ T3647] Bluetooth: hci2: command tx timeout
[  264.718691][   T37] bond0 (unregistering): Released all slaves
[  264.849784][ T8959] team0: Port device team_slave_0 added
[  265.088162][ T8959] team0: Port device team_slave_1 added
[  265.162615][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.178634][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.210068][ T8959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.257246][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.277184][ T9051] loop2: detected capacity change from 0 to 512
[  265.290026][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.318047][ T9051] EXT4-fs: Ignoring removed orlov option
[  265.324370][ T9051] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  265.335959][ T8959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.354439][ T9051] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  265.364780][ T9051] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1843: invalid indirect mapped block 2683928664 (level 1)
[  265.381511][ T9051] EXT4-fs (loop2): 1 truncate cleaned up
[  265.387311][ T9051] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  265.431164][ T9051] EXT4-fs: user quota file already specified
[  265.503390][ T8959] device hsr_slave_0 entered promiscuous mode
[  265.526862][ T8959] device hsr_slave_1 entered promiscuous mode
[  265.555058][ T8959] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  265.568295][ T8203] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  265.582218][ T8959] Cannot create hsr debugfs directory
[  265.603189][ T8203] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz-executor: Invalid block bitmap block 3 in block_group 0
[  265.638432][ T8203] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem
[  265.692739][ T8203] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr
[  265.717917][ T8203] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr
[  265.730413][ T9056] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  266.076783][ T8203] EXT4-fs (loop2): unmounting filesystem.
[  266.150019][ T9066] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1849'.
[  266.178155][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'.
[  266.304737][   T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.431191][   T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.552883][   T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.611680][ T3647] Bluetooth: hci2: command tx timeout
[  266.703324][ T9073] loop3: detected capacity change from 0 to 512
[  266.726980][   T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.766316][ T9073] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  266.848224][ T9073] EXT4-fs (loop3): 1 truncate cleaned up
[  266.854340][ T9073] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  266.889888][ T3652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  266.899519][ T3652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  266.907722][ T3652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  266.921377][ T3652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  266.929876][ T3652] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  266.937737][ T3652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  266.959466][ T8959] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  267.035328][ T8959] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  267.200030][ T8959] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  267.285584][  T946] usb 5-1: USB disconnect, device number 16
[  267.285820][ T6755] EXT4-fs (loop3): unmounting filesystem.
[  267.300461][ T8959] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  267.494237][ T9086] netlink: 'syz.3.1858': attribute type 21 has an invalid length.
[  267.782600][ T9077] chnl_net:caif_netlink_parms(): no params data found
[  267.889393][ T9075] loop0: detected capacity change from 0 to 40427
[  267.936494][ T9075] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  267.951503][ T9075] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  267.999029][ T9075] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3ffff
[  268.060651][ T9075] F2FS-fs (loop0): invalid crc value
[  268.143678][ T8959] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.171897][ T9075] F2FS-fs (loop0): Found nat_bits in checkpoint
[  268.232112][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.239216][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.258290][ T9077] device bridge_slave_0 entered promiscuous mode
[  268.286441][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  268.304239][ T9075] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  268.311669][ T9075] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  268.331367][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  268.339486][ T4528] bio_check_eod: 139098 callbacks suppressed
[  268.339499][ T4528] syz.4.282: attempt to access beyond end of device
[  268.339499][ T4528] loop4: rw=3, sector=27557826067208, nr_sectors = 8388600 limit=2048
[  268.437818][ T4528] syz.4.282: attempt to access beyond end of device
[  268.437818][ T4528] loop4: rw=3, sector=27557834455808, nr_sectors = 8388600 limit=2048
[  268.464816][ T5655] syz-executor: attempt to access beyond end of device
[  268.464816][ T5655] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  268.480761][ T4528] syz.4.282: attempt to access beyond end of device
[  268.480761][ T4528] loop4: rw=3, sector=27557842844408, nr_sectors = 8388600 limit=2048
[  268.536028][ T4528] syz.4.282: attempt to access beyond end of device
[  268.536028][ T4528] loop4: rw=3, sector=27557851233008, nr_sectors = 8388600 limit=2048
[  268.555151][ T8959] 8021q: adding VLAN 0 to HW filter on device team0
[  268.581720][ T9110] loop3: detected capacity change from 0 to 64
[  268.590012][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.598374][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.598461][ T4528] syz.4.282: attempt to access beyond end of device
[  268.598461][ T4528] loop4: rw=3, sector=27557859621608, nr_sectors = 8388600 limit=2048
[  268.629767][ T9077] device bridge_slave_1 entered promiscuous mode
[  268.662834][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  268.690905][ T3647] Bluetooth: hci2: command tx timeout
[  268.697107][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  268.721790][ T4528] syz.4.282: attempt to access beyond end of device
[  268.721790][ T4528] loop4: rw=3, sector=27557868010208, nr_sectors = 8388600 limit=2048
[  268.738412][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.745544][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.801387][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  268.827549][ T4528] syz.4.282: attempt to access beyond end of device
[  268.827549][ T4528] loop4: rw=3, sector=27557876398808, nr_sectors = 8388600 limit=2048
[  268.848999][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  268.866499][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  268.906375][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.913549][ T2497] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.932060][ T4528] syz.4.282: attempt to access beyond end of device
[  268.932060][ T4528] loop4: rw=3, sector=27557884787408, nr_sectors = 8388600 limit=2048
[  268.971885][ T4528] syz.4.282: attempt to access beyond end of device
[  268.971885][ T4528] loop4: rw=3, sector=27557893176008, nr_sectors = 8388600 limit=2048
[  268.985652][ T9114] loop0: detected capacity change from 0 to 4096
[  269.015274][ T3647] Bluetooth: hci6: command tx timeout
[  269.047278][ T9114] ntfs: volume version 3.1.
[  269.068602][ T9077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.085041][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  269.135015][ T9077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.179942][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  269.201626][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  269.222549][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  269.241230][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  269.260279][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  269.286718][   T37] device hsr_slave_0 left promiscuous mode
[  269.304121][   T37] device hsr_slave_1 left promiscuous mode
[  269.355948][ T9118] loop3: detected capacity change from 0 to 4096
[  269.363116][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.377748][ T9118] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  269.387124][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.396342][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.423790][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.459777][   T37] device bridge_slave_1 left promiscuous mode
[  269.470912][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.489691][   T37] device bridge_slave_0 left promiscuous mode
[  269.530907][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.601206][   T37] device veth1_macvtap left promiscuous mode
[  269.607288][   T37] device veth0_macvtap left promiscuous mode
[  269.631376][   T37] device veth1_vlan left promiscuous mode
[  269.638770][   T37] device veth0_vlan left promiscuous mode
[  269.709448][ T9127] loop0: detected capacity change from 0 to 4096
[  269.725846][ T9127] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker.
[  269.757686][ T9127] ntfs: volume version 3.1.
[  270.379412][ T9146] mmap: syz.3.1882 (9146) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  270.762162][ T9149] loop0: detected capacity change from 0 to 2048
[  270.821357][ T9149] Alternate GPT is invalid, using primary GPT.
[  270.827911][ T9149]  loop0: p1 p2 p3
[  271.017316][   T37] team0 (unregistering): Port device team_slave_1 removed
[  271.091459][ T3647] Bluetooth: hci6: command tx timeout
[  271.097170][ T9154] loop3: detected capacity change from 0 to 512
[  271.177823][ T9154] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1885: inode #1: comm syz.3.1885: iget: illegal inode #
[  271.194734][   T37] team0 (unregistering): Port device team_slave_0 removed
[  271.294260][ T9154] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1885: error while reading EA inode 1 err=-117
[  271.352975][ T9154] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1885: inode #1: comm syz.3.1885: iget: illegal inode #
[  271.387611][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.411060][ T9154] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1885: error while reading EA inode 1 err=-117
[  271.446338][ T9154] EXT4-fs (loop3): 1 orphan inode deleted
[  271.460831][ T9154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  271.504783][ T9154] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.1885: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  271.530192][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.632468][ T6755] EXT4-fs (loop3): unmounting filesystem.
[  272.056477][ T9163] loop0: detected capacity change from 0 to 32768
[  272.078794][ T9163] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1888 (9163)
[  272.127915][ T9163] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  272.138979][ T9163] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  272.148735][ T9163] BTRFS info (device loop0): using free space tree
[  272.252840][ T9163] BTRFS info (device loop0): enabling ssd optimizations
[  272.480408][   T11] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  272.551781][ T5655] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  272.919552][   T37] bond0 (unregistering): Released all slaves
[  273.059650][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  273.072515][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  273.087399][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  273.125939][ T8959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  273.170823][ T3647] Bluetooth: hci6: command tx timeout
[  273.177450][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  273.218848][ T9077] team0: Port device team_slave_0 added
[  273.228702][ T9077] team0: Port device team_slave_1 added
[  273.259975][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  273.291279][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  273.351184][ T4528] bio_check_eod: 140506 callbacks suppressed
[  273.351199][ T4528] syz.4.282: attempt to access beyond end of device
[  273.351199][ T4528] loop4: rw=3, sector=28736550196208, nr_sectors = 8388600 limit=2048
[  273.391852][ T9077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.402256][ T9077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.445989][ T4528] syz.4.282: attempt to access beyond end of device
[  273.445989][ T4528] loop4: rw=3, sector=28736558584808, nr_sectors = 8388600 limit=2048
[  273.468886][ T9077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.480989][ T4528] syz.4.282: attempt to access beyond end of device
[  273.480989][ T4528] loop4: rw=3, sector=28736566973408, nr_sectors = 8388600 limit=2048
[  273.516467][ T9077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.538665][ T9077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.581761][ T4528] syz.4.282: attempt to access beyond end of device
[  273.581761][ T4528] loop4: rw=3, sector=28736575362008, nr_sectors = 8388600 limit=2048
[  273.625751][ T9077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.640440][ T9201] loop3: detected capacity change from 0 to 256
[  273.648742][ T4528] syz.4.282: attempt to access beyond end of device
[  273.648742][ T4528] loop4: rw=3, sector=28736583750608, nr_sectors = 8388600 limit=2048
[  273.667767][ T9201] exfat: Deprecated parameter 'namecase'
[  273.695500][ T9201] exfat: Deprecated parameter 'utf8'
[  273.715364][ T4528] syz.4.282: attempt to access beyond end of device
[  273.715364][ T4528] loop4: rw=3, sector=28736592139208, nr_sectors = 8388600 limit=2048
[  273.732894][ T4528] syz.4.282: attempt to access beyond end of device
[  273.732894][ T4528] loop4: rw=3, sector=28736600527808, nr_sectors = 8388600 limit=2048
[  273.749027][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'.
[  273.761724][ T9201] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000e8a4, chksum : 0xe00de75b, utbl_chksum : 0xe619d30d)
[  273.779959][ T9077] device hsr_slave_0 entered promiscuous mode
[  273.809722][ T9077] device hsr_slave_1 entered promiscuous mode
[  273.820926][ T4528] syz.4.282: attempt to access beyond end of device
[  273.820926][ T4528] loop4: rw=3, sector=28736608916408, nr_sectors = 8388600 limit=2048
[  273.856254][ T4528] syz.4.282: attempt to access beyond end of device
[  273.856254][ T4528] loop4: rw=3, sector=28736617305008, nr_sectors = 8388600 limit=2048
[  273.872955][ T9077] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.880528][ T9077] Cannot create hsr debugfs directory
[  273.910748][ T4528] syz.4.282: attempt to access beyond end of device
[  273.910748][ T4528] loop4: rw=3, sector=28736625693608, nr_sectors = 8388600 limit=2048
[  273.993673][ T8959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.025083][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  274.040936][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  274.178920][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  274.191614][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  274.219564][ T9213] netem: incorrect ge model size
[  274.250682][ T9213] netem: change failed
[  274.324105][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  274.352136][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  274.372849][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  274.400966][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  274.422634][ T8959] device veth0_vlan entered promiscuous mode
[  274.497595][ T8959] device veth1_vlan entered promiscuous mode
[  274.554455][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  274.576037][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  274.588622][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  274.607330][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  274.637685][ T8959] device veth0_macvtap entered promiscuous mode
[  274.655056][ T8959] device veth1_macvtap entered promiscuous mode
[  274.678793][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.709796][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.730212][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.759053][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.777478][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.798589][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.820635][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.840646][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.851006][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.861968][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.882068][ T8959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.902881][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  274.919328][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  274.961490][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  274.999323][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  275.045383][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.061067][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.088355][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.120252][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.142547][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.166592][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.185109][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.202701][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.227928][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.251306][ T3647] Bluetooth: hci6: command tx timeout
[  275.292977][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.331096][ T8959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.342703][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  275.358526][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  275.431746][ T9239] sch_tbf: burst 0 is lower than device veth1_macvtap mtu (1514) !
[  275.456811][ T8959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.466299][ T8959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.470986][ T3957] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  275.479569][ T8959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.492060][ T8959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.661233][ T6839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.669355][ T6839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.703145][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  275.724934][ T9077] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  275.737463][ T2554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.737979][ T9077] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  275.752439][ T3957] usb 1-1: Using ep0 maxpacket: 16
[  275.763938][ T9077] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  275.770858][ T2554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.793827][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  275.817454][ T9077] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  275.891493][ T3957] usb 1-1: config 0 has no interfaces?
[  275.897007][ T3957] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  275.917446][ T3957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.940371][ T9248] netlink: 'syz.3.1924': attribute type 25 has an invalid length.
[  275.948159][ T3957] usb 1-1: config 0 descriptor??
[  275.953837][ T9248] netlink: 'syz.3.1924': attribute type 8 has an invalid length.
[  276.030058][ T9077] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.127798][ T9077] 8021q: adding VLAN 0 to HW filter on device team0
[  276.149360][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  276.153928][ T9249] loop1: detected capacity change from 0 to 8192
[  276.172345][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  276.184862][ T9249] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  276.213627][ T9249] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  276.247113][ T3964] usb 1-1: USB disconnect, device number 19
[  276.277210][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  276.296535][ T9249] REISERFS (device loop1): using ordered data mode
[  276.306552][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  276.324363][ T9249] reiserfs: using flush barriers
[  276.337698][ T2554] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.344840][ T2554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.383166][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  276.416665][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  276.428220][ T2554] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.435391][ T2554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.479470][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  276.488575][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  276.514858][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  276.545958][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  276.560155][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  276.568330][ T9249] REISERFS warning (device loop1): sh-458 journal_init_dev: cannot init journal device unknown-block(2,0): -6
[  276.590350][ T9249] REISERFS warning (device loop1): sh-462 journal_init: unable to initialize journal device
[  276.610255][ T9249] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  276.633736][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  276.668311][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  276.692126][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  276.711684][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  276.733026][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  276.757748][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  276.786689][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  276.931827][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'.
[  276.960936][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'.
[  277.109501][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'.
[  277.355280][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  277.409911][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  277.444747][ T9077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.512874][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  277.543374][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  277.596152][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  277.638806][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  277.658526][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  277.671367][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  277.699336][ T9077] device veth0_vlan entered promiscuous mode
[  277.753782][ T9077] device veth1_vlan entered promiscuous mode
[  277.760740][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  277.853328][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  277.872350][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  277.905298][ T9077] device veth0_macvtap entered promiscuous mode
[  277.973316][ T9077] device veth1_macvtap entered promiscuous mode
[  278.031246][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.079030][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.110944][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.158202][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.168425][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.186305][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.198613][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.221663][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.256918][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.268687][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.294869][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.326675][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.368815][ T9077] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.376611][ T4528] bio_check_eod: 64782 callbacks suppressed
[  278.376625][ T4528] syz.4.282: attempt to access beyond end of device
[  278.376625][ T4528] loop4: rw=3, sector=29280064367408, nr_sectors = 8388600 limit=2048
[  278.407343][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  278.421039][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  278.432118][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  278.451544][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  278.463013][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.480945][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.499566][ T4528] syz.4.282: attempt to access beyond end of device
[  278.499566][ T4528] loop4: rw=3, sector=29280072756008, nr_sectors = 8388600 limit=2048
[  278.521906][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.555048][ T4528] syz.4.282: attempt to access beyond end of device
[  278.555048][ T4528] loop4: rw=3, sector=29280081144608, nr_sectors = 8388600 limit=2048
[  278.556752][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.607932][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.619760][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.627487][ T4528] syz.4.282: attempt to access beyond end of device
[  278.627487][ T4528] loop4: rw=3, sector=29280089533208, nr_sectors = 8388600 limit=2048
[  278.636420][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.670185][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.686897][ T4528] syz.4.282: attempt to access beyond end of device
[  278.686897][ T4528] loop4: rw=3, sector=29280097921808, nr_sectors = 8388600 limit=2048
[  278.687678][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.721514][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.731645][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.742380][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.750968][ T4528] syz.4.282: attempt to access beyond end of device
[  278.750968][ T4528] loop4: rw=3, sector=29280106310408, nr_sectors = 8388600 limit=2048
[  278.753922][ T9077] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.793596][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  278.821784][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  278.845073][ T9077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.880692][ T9077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.896974][ T9077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.917142][ T4528] syz.4.282: attempt to access beyond end of device
[  278.917142][ T4528] loop4: rw=3, sector=29280114699008, nr_sectors = 8388600 limit=2048
[  278.922296][ T9077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.022185][ T4528] syz.4.282: attempt to access beyond end of device
[  279.022185][ T4528] loop4: rw=3, sector=29280123087608, nr_sectors = 8388600 limit=2048
[  279.087169][ T4528] syz.4.282: attempt to access beyond end of device
[  279.087169][ T4528] loop4: rw=3, sector=29280131476208, nr_sectors = 8388600 limit=2048
[  279.100405][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.131241][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.159695][ T6839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.165233][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  279.168352][ T6839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.193028][ T4528] syz.4.282: attempt to access beyond end of device
[  279.193028][ T4528] loop4: rw=3, sector=29280139864808, nr_sectors = 8388600 limit=2048
[  279.216175][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  279.620338][ T9342] loop2: detected capacity change from 0 to 128
[  279.632559][ T9341] loop3: detected capacity change from 0 to 512
[  279.675661][ T9341] EXT4-fs: Ignoring removed orlov option
[  279.723623][ T9347] loop1: detected capacity change from 0 to 128
[  279.750390][ T9341] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  279.783526][ T9347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  279.793656][ T9341] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  279.808686][ T9347] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff)
[  279.856168][ T9341] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.1953: Failed to acquire dquot type 0
[  279.883933][ T9349] loop0: detected capacity change from 0 to 2048
[  279.919707][ T9341] EXT4-fs (loop3): Remounting filesystem read-only
[  279.962558][ T9341] EXT4-fs (loop3): 1 orphan inode deleted
[  279.982819][ T9349] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  280.011407][ T9341] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  280.020505][ T9341] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038 (0x7fffffff)
[  280.242349][ T5655] EXT4-fs (loop0): unmounting filesystem.
[  280.256459][ T9359] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  280.269628][ T8959] EXT4-fs (loop1): unmounting filesystem.
[  280.300507][ T9359] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  280.340726][ T9359] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.1953: Failed to acquire dquot type 0
[  280.342969][ T9361] loop2: detected capacity change from 0 to 512
[  280.385829][ T9361] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  280.393435][ T9359] EXT4-fs (loop3): Remounting filesystem read-only
[  280.406040][ T9363] rose0: tun_chr_ioctl cmd 2147767519
[  280.425646][ T9361] EXT4-fs (loop2): 1 truncate cleaned up
[  280.435691][ T9361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  280.515716][ T6755] EXT4-fs (loop3): unmounting filesystem.
[  280.759034][ T9077] EXT4-fs (loop2): unmounting filesystem.
[  280.841188][ T4538] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  280.852616][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'.
[  281.098139][   T27] audit: type=1326 audit(1725935233.261:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355db7def9 code=0x7ffc0000
[  281.124748][   T27] audit: type=1326 audit(1725935233.271:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355db7def9 code=0x7ffc0000
[  281.190564][   T27] audit: type=1326 audit(1725935233.301:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f355db7def9 code=0x7ffc0000
[  281.211313][ T4538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  281.243619][   T27] audit: type=1326 audit(1725935233.301:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355db7def9 code=0x7ffc0000
[  281.258169][ T4538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.316983][ T4538] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  281.317230][   T27] audit: type=1326 audit(1725935233.301:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355db7def9 code=0x7ffc0000
[  281.347466][ T4538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.392816][ T4538] usb 2-1: config 0 descriptor??
[  281.411133][   T27] audit: type=1326 audit(1725935233.341:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f355db7def9 code=0x7ffc0000
[  281.451592][ T4538] hub 2-1:0.0: USB hub found
[  281.750875][ T4538] hub 2-1:0.0: config failed, can't read hub descriptor (err -90)
[  281.912610][ T9386] loop2: detected capacity change from 0 to 32768
[  281.934051][ T9411] loop3: detected capacity change from 0 to 512
[  281.952086][ T9386] XFS: ikeep mount option is deprecated.
[  281.957752][ T9386] XFS: noikeep mount option is deprecated.
[  282.002698][ T9411] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1982: inode #1: comm syz.3.1982: iget: illegal inode #
[  282.024477][ T9386] XFS (loop2): Mounting V5 Filesystem
[  282.041545][ T4538] usbhid 2-1:0.0: can't add hid device: -71
[  282.047539][ T4538] usbhid: probe of 2-1:0.0 failed with error -71
[  282.082322][ T9411] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1982: error while reading EA inode 1 err=-117
[  282.124084][ T4538] usb 2-1: USB disconnect, device number 20
[  282.140824][ T9411] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1982: inode #1: comm syz.3.1982: iget: illegal inode #
[  282.155104][ T9411] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1982: error while reading EA inode 1 err=-117
[  282.168530][ T9411] EXT4-fs (loop3): 1 orphan inode deleted
[  282.174639][ T9411] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  282.220177][ T9386] XFS (loop2): Ending clean mount
[  282.240029][ T9386] XFS (loop2): Quotacheck needed: Please wait.
[  282.283412][ T6755] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  282.316383][ T9386] XFS (loop2): Quotacheck: Done.
[  282.368973][ T6755] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15
[  282.402480][ T6755] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15
[  282.453649][ T9077] XFS (loop2): Unmounting Filesystem
[  282.865766][ T6755] EXT4-fs (loop3): unmounting filesystem.
[  283.056228][ T2554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.280580][ T2554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.380705][ T4528] bio_check_eod: 73344 callbacks suppressed
[  283.380721][ T4528] syz.4.282: attempt to access beyond end of device
[  283.380721][ T4528] loop4: rw=3, sector=29895401731808, nr_sectors = 8388600 limit=2048
[  283.452730][ T4528] syz.4.282: attempt to access beyond end of device
[  283.452730][ T4528] loop4: rw=3, sector=29895410120408, nr_sectors = 8388600 limit=2048
[  283.522473][ T2554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.577978][ T4528] syz.4.282: attempt to access beyond end of device
[  283.577978][ T4528] loop4: rw=3, sector=29895418509008, nr_sectors = 8388600 limit=2048
[  283.676380][ T4528] syz.4.282: attempt to access beyond end of device
[  283.676380][ T4528] loop4: rw=3, sector=29895426897608, nr_sectors = 8388600 limit=2048
[  283.709555][ T2554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.787846][ T4528] syz.4.282: attempt to access beyond end of device
[  283.787846][ T4528] loop4: rw=3, sector=29895435286208, nr_sectors = 8388600 limit=2048
[  283.833194][ T4528] syz.4.282: attempt to access beyond end of device
[  283.833194][ T4528] loop4: rw=3, sector=29895443674808, nr_sectors = 8388600 limit=2048
[  283.893742][ T3652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  283.903318][ T3652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  283.911377][ T3653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  283.919427][ T3653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  283.928621][ T3653] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  283.936571][ T3653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  283.972374][ T4528] syz.4.282: attempt to access beyond end of device
[  283.972374][ T4528] loop4: rw=3, sector=29895452063408, nr_sectors = 8388600 limit=2048
[  283.987687][ T4528] syz.4.282: attempt to access beyond end of device
[  283.987687][ T4528] loop4: rw=3, sector=29895460452008, nr_sectors = 8388600 limit=2048
[  284.004935][ T4528] syz.4.282: attempt to access beyond end of device
[  284.004935][ T4528] loop4: rw=3, sector=29895468840608, nr_sectors = 8388600 limit=2048
[  284.071291][ T4528] syz.4.282: attempt to access beyond end of device
[  284.071291][ T4528] loop4: rw=3, sector=29895477229208, nr_sectors = 8388600 limit=2048
[  284.398883][ T9432] loop0: detected capacity change from 0 to 40427
[  284.472713][ T9432] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  284.480472][ T9432] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  284.575351][ T9432] F2FS-fs (loop0): Found nat_bits in checkpoint
[  284.604601][ T9436] chnl_net:caif_netlink_parms(): no params data found
[  284.756307][ T9432] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  284.770423][ T9432] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  285.125280][ T9436] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.159352][ T9439] loop1: detected capacity change from 0 to 40427
[  285.169666][ T9436] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.199332][ T9436] device bridge_slave_0 entered promiscuous mode
[  285.216326][ T9439] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  285.236679][ T9439] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  285.246974][ T9439] F2FS-fs (loop1): invalid crc value
[  285.278296][ T9439] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  285.288953][ T9436] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.300771][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.316397][ T9436] device bridge_slave_1 entered promiscuous mode
[  285.424091][ T9439] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  285.442982][ T9439] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  285.454154][ T9436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.480700][ T3684] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  285.554850][ T9436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.606150][ T9477] loop0: detected capacity change from 0 to 2048
[  285.667682][ T9436] team0: Port device team_slave_0 added
[  285.683049][ T9436] team0: Port device team_slave_1 added
[  285.693133][ T9477] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  285.720741][ T9477] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038 (0x7fffffff)
[  285.850854][ T3684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.871170][ T3684] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  285.872433][ T9477] fs-verity (loop0, inode 13): Unknown hash algorithm number: 0
[  285.889239][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.918266][ T3684] usb 3-1: config 0 descriptor??
[  285.945400][ T9483] loop1: detected capacity change from 0 to 512
[  285.970939][ T3647] Bluetooth: hci1: command tx timeout
[  285.999936][ T9483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2004: inode #1: comm syz.1.2004: iget: illegal inode #
[  286.002573][ T5655] EXT4-fs (loop0): unmounting filesystem.
[  286.030235][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.037656][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.044004][ T9483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2004: error while reading EA inode 1 err=-117
[  286.063985][ T9436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.092159][ T9483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2004: inode #1: comm syz.1.2004: iget: illegal inode #
[  286.108206][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.115489][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.142463][ T9483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2004: error while reading EA inode 1 err=-117
[  286.157866][ T9483] EXT4-fs (loop1): 1 orphan inode deleted
[  286.166293][ T9483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  286.180970][ T9436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.201840][ T3684] usb 3-1: string descriptor 0 read error: -71
[  286.208086][ T3684] usb 3-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  286.230897][ T3684] usb 3-1: No valid video chain found.
[  286.259586][ T3684] usb 3-1: USB disconnect, device number 16
[  286.343991][ T8959] EXT4-fs (loop1): unmounting filesystem.
[  286.556035][ T9436] device hsr_slave_0 entered promiscuous mode
[  286.579954][ T9436] device hsr_slave_1 entered promiscuous mode
[  286.590372][ T9436] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  286.608169][ T9436] Cannot create hsr debugfs directory
[  286.715922][ T2554] device hsr_slave_0 left promiscuous mode
[  286.745913][ T2554] device hsr_slave_1 left promiscuous mode
[  286.758762][ T9493] loop0: detected capacity change from 0 to 4096
[  286.765813][ T2554] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.776161][ T2554] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.781144][ T9493] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  286.811578][ T2554] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.819003][ T2554] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.838992][ T9493] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  286.848774][ T2554] device bond0 left promiscuous mode
[  286.865166][ T2554] device bond_slave_0 left promiscuous mode
[  286.872253][ T2554] device bond_slave_1 left promiscuous mode
[  286.879134][ T2554] bridge0: port 3(bond0) entered disabled state
[  286.887242][ T2554] device bridge_slave_1 left promiscuous mode
[  286.902110][ T9501] loop1: detected capacity change from 0 to 128
[  286.909658][ T2554] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.929753][ T2554] device bridge_slave_0 left promiscuous mode
[  286.938060][ T2554] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.037726][ T2554] device veth1_macvtap left promiscuous mode
[  287.049563][ T2554] device veth0_macvtap left promiscuous mode
[  287.070938][ T2554] device veth1_vlan left promiscuous mode
[  287.090967][ T2554] device veth0_vlan left promiscuous mode
[  287.151239][ T5655] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  287.562933][ T9503] loop2: detected capacity change from 0 to 32768
[  287.583518][ T9503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2013 (9503)
[  287.639996][ T9503] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  287.668973][ T9503] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  287.688224][ T9503] BTRFS info (device loop2): using free space tree
[  287.827365][ T9503] BTRFS info (device loop2): enabling ssd optimizations
[  287.947042][ T9077] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  288.051263][ T3647] Bluetooth: hci1: command tx timeout
[  288.390844][ T4528] bio_check_eod: 102210 callbacks suppressed
[  288.390862][ T4528] syz.4.282: attempt to access beyond end of device
[  288.390862][ T4528] loop4: rw=3, sector=30752884423808, nr_sectors = 8388600 limit=2048
[  288.412002][ T4528] syz.4.282: attempt to access beyond end of device
[  288.412002][ T4528] loop4: rw=3, sector=30752892812408, nr_sectors = 8388600 limit=2048
[  288.427381][ T4528] syz.4.282: attempt to access beyond end of device
[  288.427381][ T4528] loop4: rw=3, sector=30752901201008, nr_sectors = 8388600 limit=2048
[  288.462115][ T9538] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2019'.
[  288.470690][ T4528] syz.4.282: attempt to access beyond end of device
[  288.470690][ T4528] loop4: rw=3, sector=30752909589608, nr_sectors = 8388600 limit=2048
[  288.496291][ T4528] syz.4.282: attempt to access beyond end of device
[  288.496291][ T4528] loop4: rw=3, sector=30752917978208, nr_sectors = 8388600 limit=2048
[  288.541852][ T4528] syz.4.282: attempt to access beyond end of device
[  288.541852][ T4528] loop4: rw=3, sector=30752926366808, nr_sectors = 8388600 limit=2048
[  288.557306][ T4528] syz.4.282: attempt to access beyond end of device
[  288.557306][ T4528] loop4: rw=3, sector=30752934755408, nr_sectors = 8388600 limit=2048
[  288.577700][ T2554] team0 (unregistering): Port device team_slave_1 removed
[  288.607798][ T4528] syz.4.282: attempt to access beyond end of device
[  288.607798][ T4528] loop4: rw=3, sector=30752943144008, nr_sectors = 8388600 limit=2048
[  288.644967][ T4528] syz.4.282: attempt to access beyond end of device
[  288.644967][ T4528] loop4: rw=3, sector=30752951532608, nr_sectors = 8388600 limit=2048
[  288.681633][ T2554] team0 (unregistering): Port device team_slave_0 removed
[  288.688895][ T4528] syz.4.282: attempt to access beyond end of device
[  288.688895][ T4528] loop4: rw=3, sector=30752959921208, nr_sectors = 8388600 limit=2048
[  288.784660][ T2554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.888686][ T2554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.345350][ T9546] loop2: detected capacity change from 0 to 32768
[  289.359626][ T9546] XFS (loop2): Mounting V5 Filesystem
[  289.423572][ T9546] XFS (loop2): Ending clean mount
[  289.543234][ T9077] XFS (loop2): Unmounting Filesystem
[  289.911236][ T2554] bond0 (unregistering): Released all slaves
[  290.034823][ T9558] loop2: detected capacity change from 0 to 512
[  290.057706][ T9558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  290.132262][ T3653] Bluetooth: hci1: command tx timeout
[  290.155713][ T9558] EXT4-fs (loop2): 1 truncate cleaned up
[  290.192611][ T9558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  290.234164][ T9566] loop0: detected capacity change from 0 to 64
[  290.294725][ T9558] fscrypt (loop2, inode 18): Unsupported encryption flags (0x08)
[  290.403424][ T9077] EXT4-fs (loop2): unmounting filesystem.
[  290.800955][ T9580] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  291.054160][ T9436] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  291.095474][ T9436] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  291.112937][ T9584] loop0: detected capacity change from 0 to 4096
[  291.131771][ T9436] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  291.171181][ T9436] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  291.186733][ T9584] ntfs: volume version 3.1.
[  291.322932][ T9436] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.354213][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  291.362863][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  291.385718][ T9436] 8021q: adding VLAN 0 to HW filter on device team0
[  291.418225][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  291.437182][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  291.470391][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.477530][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.497299][ T9575] loop1: detected capacity change from 0 to 32768
[  291.515527][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  291.545995][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  291.567969][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  291.587000][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.594136][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.641047][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  291.661191][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  291.694349][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  291.733615][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  291.753800][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  291.774760][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  291.797372][ T9436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  291.858104][ T9436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  291.902599][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  291.923343][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  291.966810][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  291.992230][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  292.009600][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  292.041985][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  292.063864][ T9605] IPv6: NLM_F_REPLACE set, but no existing node found!
[  292.199484][ T9611] loop0: detected capacity change from 0 to 64
[  292.210958][ T3653] Bluetooth: hci1: command tx timeout
[  292.622813][ T9617] loop1: detected capacity change from 0 to 4096
[  292.641852][ T9617] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  292.715869][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  292.739632][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  292.771493][ T9436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.828561][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  292.851841][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  292.928598][ T9436] device veth0_vlan entered promiscuous mode
[  292.942741][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  292.961327][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  293.001376][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  293.025619][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  293.055785][ T9436] device veth1_vlan entered promiscuous mode
[  293.134488][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  293.156319][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  293.178346][ T9640] loop0: detected capacity change from 0 to 512
[  293.184656][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  293.192069][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  293.201201][ T9640] EXT4-fs (loop0): filesystem is read-only
[  293.207411][ T9640] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  293.229954][ T9436] device veth0_macvtap entered promiscuous mode
[  293.256303][ T9640] EXT4-fs (loop0): filesystem is read-only
[  293.267594][ T9436] device veth1_macvtap entered promiscuous mode
[  293.276049][ T9645] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2062'.
[  293.298215][ T9640] EXT4-fs (loop0): orphan cleanup on readonly fs
[  293.310015][ T9640] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2061: bg 0: block 64: padding at end of block bitmap is not set
[  293.331043][ T3966] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  293.356725][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.378774][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.397636][ T9640] EXT4-fs (loop0): Remounting filesystem read-only
[  293.404175][ T4528] bio_check_eod: 113291 callbacks suppressed
[  293.404188][ T4528] syz.4.282: attempt to access beyond end of device
[  293.404188][ T4528] loop4: rw=3, sector=31703321192408, nr_sectors = 8388600 limit=2048
[  293.404226][ T4528] syz.4.282: attempt to access beyond end of device
[  293.404226][ T4528] loop4: rw=3, sector=31703329581008, nr_sectors = 8388600 limit=2048
[  293.404260][ T4528] syz.4.282: attempt to access beyond end of device
[  293.404260][ T4528] loop4: rw=3, sector=31703337969608, nr_sectors = 8388600 limit=2048
[  293.414401][ T9644] loop2: detected capacity change from 0 to 2048
[  293.426462][ T4528] syz.4.282: attempt to access beyond end of device
[  293.426462][ T4528] loop4: rw=3, sector=31703346358208, nr_sectors = 8388600 limit=2048
[  293.442402][ T9640] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6172: Corrupt filesystem
[  293.456860][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.468975][ T9640] EXT4-fs (loop0): 1 orphan inode deleted
[  293.476249][ T4528] syz.4.282: attempt to access beyond end of device
[  293.476249][ T4528] loop4: rw=3, sector=31703354746808, nr_sectors = 8388600 limit=2048
[  293.515910][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.521165][ T9640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  293.526186][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.534392][ T9646] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.552721][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.571659][ T3966] usb 2-1: Using ep0 maxpacket: 16
[  293.577515][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.588335][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.598770][ T4528] syz.4.282: attempt to access beyond end of device
[  293.598770][ T4528] loop4: rw=3, sector=31703363135408, nr_sectors = 8388600 limit=2048
[  293.618810][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.629514][ T4528] syz.4.282: attempt to access beyond end of device
[  293.629514][ T4528] loop4: rw=3, sector=31703371524008, nr_sectors = 8388600 limit=2048
[  293.636081][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.662612][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.666437][ T9077] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  293.674654][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.684090][ T4528] syz.4.282: attempt to access beyond end of device
[  293.684090][ T4528] loop4: rw=3, sector=31703379912608, nr_sectors = 8388600 limit=2048
[  293.708089][ T3966] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  293.717809][ T9436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.727000][ T4528] syz.4.282: attempt to access beyond end of device
[  293.727000][ T4528] loop4: rw=3, sector=31703388301208, nr_sectors = 8388600 limit=2048
[  293.730937][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.761015][ T9077] Remounting filesystem read-only
[  293.762321][ T4528] syz.4.282: attempt to access beyond end of device
[  293.762321][ T4528] loop4: rw=3, sector=31703396689808, nr_sectors = 8388600 limit=2048
[  293.783786][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.802834][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.818767][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.837600][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.860028][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.870199][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.883135][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.895342][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.906113][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.915966][ T3966] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  293.915995][ T3966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.925573][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.943968][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.960059][ T3966] usb 2-1: Product: syz
[  293.962286][ T9436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.983102][ T3966] usb 2-1: Manufacturer: syz
[  293.987721][ T3966] usb 2-1: SerialNumber: syz
[  293.989198][ T9640] sp0: Synchronizing with TNC
[  293.992467][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  294.021292][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  294.049094][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  294.049235][ T3966] usb 2-1: config 0 descriptor??
[  294.058230][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  294.081784][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  294.090406][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  294.105387][ T9436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.122256][ T3966] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  294.127284][ T9436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.139654][ T3966] usb 2-1: Detected FT232R
[  294.148994][ T9436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.169213][ T9436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.309842][ T5655] EXT4-fs (loop0): unmounting filesystem.
[  294.351046][ T3966] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  294.389723][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.410658][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.459405][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  294.475786][ T9077] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  294.503402][ T9077] NILFS (loop2): discard dirty page: offset=0, ino=2
[  294.528440][ T9077] NILFS (loop2): discard dirty block: blocknr=18, size=1024
[  294.541055][ T9077] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  294.550019][ T9077] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  294.567794][ T9077] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  294.581133][   T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.591155][ T9077] NILFS (loop2): discard dirty page: offset=0, ino=6
[  294.598432][ T9077] NILFS (loop2): discard dirty block: blocknr=35, size=1024
[  294.607597][ T9077] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  294.619536][ T9077] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  294.632005][ T3966] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  294.642238][ T2554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.647203][ T9077] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  294.665796][ T2554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.753113][   T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.805307][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  294.953405][   T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.981173][ T3966] usb 2-1: USB disconnect, device number 21
[  295.003560][ T3966] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  295.043944][ T3966] ftdi_sio 2-1:0.0: device disconnected
[  295.065990][ T9668] loop3: detected capacity change from 0 to 256
[  295.175367][   T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.509498][ T3647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  295.520503][ T3647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  295.528909][ T3647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  295.537570][ T3647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  295.546236][ T3647] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  295.557176][ T3647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  296.050834][ T3684] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  296.438431][ T3684] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  296.479110][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.510928][ T3684] usb 2-1: config 0 descriptor??
[  296.772816][ T3684] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00
[  296.791632][ T3684] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  296.824836][ T9676] chnl_net:caif_netlink_parms(): no params data found
[  296.990756][ T3684] [drm:udl_init] *ERROR* Selecting channel failed
[  297.027270][ T3684] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  297.062946][ T3684] [drm] Initialized udl on minor 2
[  297.091057][ T3684] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  297.103294][ T3684] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  297.145190][ T3684] usb 2-1: USB disconnect, device number 22
[  297.159392][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.188304][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.218277][ T9676] device bridge_slave_0 entered promiscuous mode
[  297.223010][ T9703] loop0: detected capacity change from 0 to 164
[  297.265981][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.274485][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.292676][ T9676] device bridge_slave_1 entered promiscuous mode
[  297.426461][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2088'.
[  297.544384][ T9676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.651053][ T3647] Bluetooth: hci6: command tx timeout
[  297.679184][ T9719] loop1: detected capacity change from 0 to 256
[  297.700415][ T9719] exfat: Deprecated parameter 'namecase'
[  297.710719][ T9719] exfat: Deprecated parameter 'namecase'
[  297.726280][ T9676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.749148][ T9719] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d)
[  297.797462][ T9676] team0: Port device team_slave_0 added
[  297.834266][   T37] device hsr_slave_0 left promiscuous mode
[  297.855520][   T37] device hsr_slave_1 left promiscuous mode
[  297.862173][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.869577][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.886827][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.907871][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.921570][   T37] device bridge_slave_1 left promiscuous mode
[  297.929969][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.938728][ T9719] exFAT-fs (loop1): invalid start cluster (4278190088)
[  297.948939][   T37] device bridge_slave_0 left promiscuous mode
[  297.957379][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.990353][ T9729] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  298.045277][   T37] device veth1_macvtap left promiscuous mode
[  298.051946][ T3957] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  298.062919][   T37] device veth0_macvtap left promiscuous mode
[  298.069120][   T37] device veth1_vlan left promiscuous mode
[  298.091193][   T37] device veth0_vlan left promiscuous mode
[  298.290922][ T3957] usb 1-1: Using ep0 maxpacket: 8
[  298.413454][ T4528] bio_check_eod: 93986 callbacks suppressed
[  298.413472][ T4528] syz.4.282: attempt to access beyond end of device
[  298.413472][ T4528] loop4: rw=3, sector=32491816038008, nr_sectors = 8388600 limit=2048
[  298.441170][ T3957] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[  298.452496][ T3957] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  298.463673][ T3957] usb 1-1: config 135 has no interface number 0
[  298.470726][ T3957] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  298.485595][ T4528] syz.4.282: attempt to access beyond end of device
[  298.485595][ T4528] loop4: rw=3, sector=32491824426608, nr_sectors = 8388600 limit=2048
[  298.531408][ T4528] syz.4.282: attempt to access beyond end of device
[  298.531408][ T4528] loop4: rw=3, sector=32491832815208, nr_sectors = 8388600 limit=2048
[  298.554946][ T4528] syz.4.282: attempt to access beyond end of device
[  298.554946][ T4528] loop4: rw=3, sector=32491841203808, nr_sectors = 8388600 limit=2048
[  298.586805][ T4528] syz.4.282: attempt to access beyond end of device
[  298.586805][ T4528] loop4: rw=3, sector=32491849592408, nr_sectors = 8388600 limit=2048
[  298.609932][ T4528] syz.4.282: attempt to access beyond end of device
[  298.609932][ T4528] loop4: rw=3, sector=32491857981008, nr_sectors = 8388600 limit=2048
[  298.640409][ T4528] syz.4.282: attempt to access beyond end of device
[  298.640409][ T4528] loop4: rw=3, sector=32491866369608, nr_sectors = 8388600 limit=2048
[  298.662939][ T4528] syz.4.282: attempt to access beyond end of device
[  298.662939][ T4528] loop4: rw=3, sector=32491874758208, nr_sectors = 8388600 limit=2048
[  298.688357][ T4528] syz.4.282: attempt to access beyond end of device
[  298.688357][ T4528] loop4: rw=3, sector=32491883146808, nr_sectors = 8388600 limit=2048
[  298.692079][ T3957] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  298.713846][ T4528] syz.4.282: attempt to access beyond end of device
[  298.713846][ T4528] loop4: rw=3, sector=32491891535408, nr_sectors = 8388600 limit=2048
[  298.722089][ T3957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.743157][ T3957] usb 1-1: Product: syz
[  298.749624][ T3957] usb 1-1: Manufacturer: syz
[  298.756692][ T3957] usb 1-1: SerialNumber: syz
[  298.802807][ T3957] usb 1-1: Found UVC 0.00 device syz (18ec:3288)
[  298.809181][ T3957] usb 1-1: No valid video chain found.
[  299.085481][ T3952] usb 1-1: USB disconnect, device number 20
[  299.160285][   T37] team0 (unregistering): Port device team_slave_1 removed
[  299.216570][   T37] team0 (unregistering): Port device team_slave_0 removed
[  299.274961][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.358704][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.733058][ T3647] Bluetooth: hci6: command tx timeout
[  299.940708][ T3957] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  300.338665][ T3957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.350765][ T3957] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  300.361238][ T3957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.371400][ T3957] usb 1-1: config 0 descriptor??
[  300.442487][   T37] bond0 (unregistering): Released all slaves
[  300.545946][ T9676] team0: Port device team_slave_1 added
[  300.656847][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.678587][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.735676][ T9676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.765392][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.779574][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.832036][ T3957] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor
[  300.841345][ T9676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.856062][ T3957] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0028/input/input32
[  300.961092][ T9676] device hsr_slave_0 entered promiscuous mode
[  300.974995][ T9676] device hsr_slave_1 entered promiscuous mode
[  301.006008][ T3957] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  301.054476][ T9676] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  301.064653][ T9676] Cannot create hsr debugfs directory
[  301.810809][ T3647] Bluetooth: hci6: command tx timeout
[  301.837266][  T946] usb 1-1: USB disconnect, device number 21
[  301.884609][ T9676] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  301.925914][ T9676] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  301.952287][ T9676] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  301.977678][ T9676] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  302.121741][ T9676] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.143921][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  302.162012][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  302.189336][ T9676] 8021q: adding VLAN 0 to HW filter on device team0
[  302.219407][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  302.232887][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  302.259426][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.266579][ T2497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.285093][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  302.315244][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'.
[  302.346736][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  302.368567][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  302.392009][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.399216][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.463013][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  302.499805][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  302.527066][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  302.549438][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  302.569297][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  302.609700][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  302.630571][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  302.647037][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  302.679942][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  302.703847][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  302.729855][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  302.741650][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  303.199010][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  303.219121][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  303.252427][ T9676] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.301313][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  303.341727][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  303.388179][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  303.424768][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  303.433018][ T4528] bio_check_eod: 101083 callbacks suppressed
[  303.433032][ T4528] syz.4.282: attempt to access beyond end of device
[  303.433032][ T4528] loop4: rw=3, sector=33339844777808, nr_sectors = 8388600 limit=2048
[  303.470771][ T4528] syz.4.282: attempt to access beyond end of device
[  303.470771][ T4528] loop4: rw=3, sector=33339853166408, nr_sectors = 8388600 limit=2048
[  303.474386][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  303.528130][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  303.544433][ T4528] syz.4.282: attempt to access beyond end of device
[  303.544433][ T4528] loop4: rw=3, sector=33339861555008, nr_sectors = 8388600 limit=2048
[  303.546873][ T9676] device veth0_vlan entered promiscuous mode
[  303.563643][ T4528] syz.4.282: attempt to access beyond end of device
[  303.563643][ T4528] loop4: rw=3, sector=33339869943608, nr_sectors = 8388600 limit=2048
[  303.592337][ T4528] syz.4.282: attempt to access beyond end of device
[  303.592337][ T4528] loop4: rw=3, sector=33339878332208, nr_sectors = 8388600 limit=2048
[  303.613862][ T4528] syz.4.282: attempt to access beyond end of device
[  303.613862][ T4528] loop4: rw=3, sector=33339886720808, nr_sectors = 8388600 limit=2048
[  303.629227][ T9676] device veth1_vlan entered promiscuous mode
[  303.652838][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  303.672692][ T4528] syz.4.282: attempt to access beyond end of device
[  303.672692][ T4528] loop4: rw=3, sector=33339895109408, nr_sectors = 8388600 limit=2048
[  303.722095][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  303.739324][ T4528] syz.4.282: attempt to access beyond end of device
[  303.739324][ T4528] loop4: rw=3, sector=33339903498008, nr_sectors = 8388600 limit=2048
[  303.761354][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  303.777764][ T4528] syz.4.282: attempt to access beyond end of device
[  303.777764][ T4528] loop4: rw=3, sector=33339911886608, nr_sectors = 8388600 limit=2048
[  303.779494][ T9676] device veth0_macvtap entered promiscuous mode
[  303.803228][ T4528] syz.4.282: attempt to access beyond end of device
[  303.803228][ T4528] loop4: rw=3, sector=33339920275208, nr_sectors = 8388600 limit=2048
[  303.835666][ T9841] netlink: 'syz.3.2149': attribute type 1 has an invalid length.
[  303.856475][ T9676] device veth1_macvtap entered promiscuous mode
[  303.891047][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.891087][ T3647] Bluetooth: hci6: command tx timeout
[  303.912375][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.974843][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.001077][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.018552][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.029135][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.046174][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.060432][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.077778][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.102767][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.128386][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.167860][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.193619][ T9822] loop0: detected capacity change from 0 to 32768
[  304.219117][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.238146][ T9822] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  304.247781][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  304.265601][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  304.280916][ T9822] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  304.288592][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  304.300546][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  304.318478][ T9822] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  304.346955][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.362275][ T3966] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  304.369097][ T3966] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  304.397667][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.437727][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.463782][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.500677][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.519962][ T3966] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 150ms
[  304.529105][ T3966] gfs2: fsid=syz:syz.0: jid=0: Done
[  304.540633][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.550456][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.568022][ T9822] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  304.591695][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.614142][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.632883][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.647450][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.670994][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.694070][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.716566][ T9676] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.726424][ T9676] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.736768][ T9676] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.750459][ T9676] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.773237][ T9851] bridge0: port 2(bridge_slave_1) entered listening state
[  304.815941][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.852768][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  304.871485][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  304.983400][ T9859] loop1: detected capacity change from 0 to 512
[  304.998223][ T9859] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  305.059584][ T9859] EXT4-fs (loop1): 1 truncate cleaned up
[  305.065740][ T9859] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  305.067492][ T2554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.170847][ T2554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.211700][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  305.226295][ T6839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.236644][ T8959] EXT4-fs (loop1): unmounting filesystem.
[  305.250825][ T6839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.286889][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  305.480516][ T9871] loop2: detected capacity change from 0 to 128
[  305.502742][ T9871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  305.523886][ T9871] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  305.912898][ T9676] EXT4-fs (loop2): unmounting filesystem.
[  306.031045][ T9891] loop2: detected capacity change from 0 to 512
[  306.085940][ T9896] loop1: detected capacity change from 0 to 64
[  306.093372][ T9891] EXT4-fs (loop2): 1 truncate cleaned up
[  306.099040][ T9891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  306.188617][ T9891] EXT4-fs (loop2): Online resizing not supported with sparse_super2
[  306.191567][ T9900] overlayfs: failed to clone lowerpath
[  306.352453][ T9676] EXT4-fs (loop2): unmounting filesystem.
[  306.584991][ T9914] loop1: detected capacity change from 0 to 128
[  306.674035][ T9914] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  306.710960][ T9914] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  306.853998][ T9920] loop3: detected capacity change from 0 to 4096
[  306.863104][ T9920] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  306.884441][ T9920] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  306.913993][ T8959] EXT4-fs (loop1): unmounting filesystem.
[  307.311323][ T9928] input: syz0 as /devices/virtual/input/input33
[  307.513807][ T9908] loop2: detected capacity change from 0 to 40427
[  307.526873][ T9908] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  307.537200][ T9934] loop3: detected capacity change from 0 to 512
[  307.540644][ T9908] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  307.562543][ T9934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  307.566713][ T9908] F2FS-fs (loop2): invalid crc value
[  307.610666][   T26] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  307.622154][ T9934] EXT4-fs (loop3): 1 truncate cleaned up
[  307.630577][ T9908] F2FS-fs (loop2): Found nat_bits in checkpoint
[  307.653438][ T9934] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  307.816298][ T9908] F2FS-fs (loop2): Start checkpoint disabled!
[  307.850730][   T26] usb 2-1: Using ep0 maxpacket: 16
[  307.866610][ T9436] EXT4-fs (loop3): unmounting filesystem.
[  307.872899][ T9908] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  307.880863][ T9908] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  308.141013][   T26] usb 2-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f
[  308.170570][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.178797][   T26] usb 2-1: Product: syz
[  308.207485][   T26] usb 2-1: Manufacturer: syz
[  308.226250][   T26] usb 2-1: SerialNumber: syz
[  308.251553][   T26] usb 2-1: config 0 descriptor??
[  308.301974][   T26] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG
[  308.442868][ T4528] bio_check_eod: 72538 callbacks suppressed
[  308.442885][ T4528] syz.4.282: attempt to access beyond end of device
[  308.442885][ T4528] loop4: rw=3, sector=33948395764808, nr_sectors = 8388600 limit=2048
[  308.474324][ T4528] syz.4.282: attempt to access beyond end of device
[  308.474324][ T4528] loop4: rw=3, sector=33948404153408, nr_sectors = 8388600 limit=2048
[  308.496760][ T4528] syz.4.282: attempt to access beyond end of device
[  308.496760][ T4528] loop4: rw=3, sector=33948412542008, nr_sectors = 8388600 limit=2048
[  308.513596][ T4528] syz.4.282: attempt to access beyond end of device
[  308.513596][ T4528] loop4: rw=3, sector=33948420930608, nr_sectors = 8388600 limit=2048
[  308.523631][   T26] usb 2-1: USB disconnect, device number 23
[  308.528755][ T4528] syz.4.282: attempt to access beyond end of device
[  308.528755][ T4528] loop4: rw=3, sector=33948429319208, nr_sectors = 8388600 limit=2048
[  308.549562][ T4528] syz.4.282: attempt to access beyond end of device
[  308.549562][ T4528] loop4: rw=3, sector=33948437707808, nr_sectors = 8388600 limit=2048
[  308.565126][ T4528] syz.4.282: attempt to access beyond end of device
[  308.565126][ T4528] loop4: rw=3, sector=33948446096408, nr_sectors = 8388600 limit=2048
[  308.588740][ T4528] syz.4.282: attempt to access beyond end of device
[  308.588740][ T4528] loop4: rw=3, sector=33948454485008, nr_sectors = 8388600 limit=2048
[  308.616732][ T4528] syz.4.282: attempt to access beyond end of device
[  308.616732][ T4528] loop4: rw=3, sector=33948462873608, nr_sectors = 8388600 limit=2048
[  308.638687][ T4528] syz.4.282: attempt to access beyond end of device
[  308.638687][ T4528] loop4: rw=3, sector=33948471262208, nr_sectors = 8388600 limit=2048
[  308.717647][ T2554] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.832477][ T2554] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.964554][ T2554] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.117391][ T2554] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.426028][ T9974] loop0: detected capacity change from 0 to 512
[  309.510772][ T9974] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  309.520383][ T9976] program syz.1.2208 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  309.539892][ T9974] ext4 filesystem being mounted at /326/bus supports timestamps until 2038 (0x7fffffff)
[  309.734194][ T3647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  309.747988][ T3647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  309.759149][ T3647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  309.781778][ T3647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  309.789908][ T3647] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  309.797433][ T3647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  309.805627][ T5655] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /326/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  310.509060][ T9995] loop3: detected capacity change from 0 to 1024
[  310.530859][   T28] INFO: task segctord:4529 blocked for more than 143 seconds.
[  310.538367][   T28]       Not tainted 6.1.109-syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  310.561388][ T9995] EXT4-fs: Ignoring removed nomblk_io_submit option
[  310.568078][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  310.593972][   T28] task:segctord        state:D stack:28248 pid:4529  ppid:2      flags:0x00004000
[  310.640758][ T9995] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  310.675510][   T28] Call Trace:
[  310.678824][   T28]  <TASK>
[  310.690993][   T28]  __schedule+0x143f/0x4570
[  310.709894][   T28]  ? release_firmware_map_entry+0x186/0x186
[  310.721645][   T28]  ? print_irqtrace_events+0x210/0x210
[  310.727147][   T28]  ? _raw_spin_lock_irq+0xdb/0x110
[  310.750670][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  310.753842][ T9995] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  310.760936][   T28]  schedule+0xbf/0x180
[  310.771003][   T28]  rwsem_down_write_slowpath+0xea1/0x14b0
[  310.776751][   T28]  ? rwsem_down_write_slowpath+0x9e3/0x14b0
[  310.799062][   T28]  ? down_write_killable_nested+0x90/0x90
[  310.811493][   T28]  ? read_lock_is_recursive+0x10/0x10
[  310.816933][   T28]  ? rcu_is_watching+0x11/0xb0
[  310.827082][ T9995] EXT4-fs: failed to create workqueue
[  310.830662][   T28]  nilfs_transaction_lock+0x25c/0x4f0
[  310.837844][   T28]  nilfs_segctor_thread+0x547/0x11a0
[  310.839042][ T9995] EXT4-fs (loop3): mount failed
[  310.850745][   T28]  ? print_irqtrace_events+0x210/0x210
[  310.876184][   T28]  ? nilfs_iput_work_func+0x70/0x70
[  310.881467][   T28]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  310.887377][   T28]  ? release_firmware_map_entry+0x186/0x186
[  310.893404][   T28]  ? wake_bit_function+0x210/0x210
[  310.898530][   T28]  ? _raw_spin_unlock+0x40/0x40
[  310.903456][   T28]  ? __kthread_parkme+0x168/0x1c0
[  310.908504][   T28]  kthread+0x28d/0x320
[  310.912738][   T28]  ? nilfs_iput_work_func+0x70/0x70
[  310.917952][   T28]  ? kthread_blkcg+0xd0/0xd0
[  310.922611][   T28]  ret_from_fork+0x1f/0x30
[  310.927054][   T28]  </TASK>
[  310.948115][ T6723] EXT4-fs (loop0): unmounting filesystem.
[  310.980786][   T28] 
[  310.980786][   T28] Showing all locks held in the system:
[  310.989376][   T28] 1 lock held by rcu_tasks_kthre/12:
[  311.010787][   T28]  #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  311.061353][   T28] 1 lock held by rcu_tasks_trace/13:
[  311.066664][   T28]  #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  311.132711][   T28] 3 locks held by kworker/1:1/26:
[  311.137764][   T28] 1 lock held by khungtaskd/28:
[  311.171002][   T28]  #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  311.200735][   T28] 3 locks held by kworker/0:2/946:
[  311.205863][   T28]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  311.270659][   T28]  #1: ffffc9000484fd20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  311.280368][   T28]  #2: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  311.340684][   T28] 1 lock held by kworker/u4:5/2497:
[  311.345908][   T28]  #0: ffff8880b8f3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  311.375700][   T28] 5 locks held by kworker/u4:6/2554:
[  311.390375][   T28]  #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  311.402189][   T28]  #1: ffffc9000aae7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  311.412987][   T28]  #2: ffffffff8e4ecb90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60
[  311.422683][   T28]  #3: ffffffff8e4f8ee8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xc9/0x330
[  311.432603][   T28]  #4: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930
[  311.450744][   T28] 2 locks held by getty/3397:
[  311.455433][   T28]  #0: ffff88802e396098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  311.470690][   T28]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  311.511680][   T28] 2 locks held by kworker/0:7/3952:
[  311.516890][   T28]  #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  311.539869][   T28]  #1: ffffc90005227d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  311.558986][   T28] 2 locks held by kworker/0:15/3966:
[  311.564520][   T28]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  311.577069][   T28]  #1: ffffc900052f7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  311.589799][   T28] 3 locks held by syz.4.282/4528:
[  311.595121][   T28] 1 lock held by segctord/4529:
[  311.599983][   T28]  #0: ffff888058fe62a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0
[  311.611305][   T28] 3 locks held by syz.0.1016/6723:
[  311.616424][   T28]  #0: ffff88807e5dd0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500
[  311.627831][   T28]  #1: ffff88807e5dc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[  311.638208][   T28]  #2: ffffffff8e650288 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  311.648487][   T28] 1 lock held by syz-executor/9982:
[  311.654316][   T28]  #0: ffffffff8e4f8ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xadf/0x2050
[  311.663611][   T28] 3 locks held by syz.1.2213/10000:
[  311.668814][   T28]  #0: ffff888019add0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500
[  311.680168][   T28]  #1: ffff888019adc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[  311.697356][   T28]  #2: ffffffff8e650288 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  311.707696][   T28] 3 locks held by syz.3.2215/9995:
[  311.720296][   T28]  #0: ffff888058d110b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500
[  311.730543][   T28]  #1: ffff888058d10078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[  311.749414][   T28]  #2: ffffffff8e650288 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  311.767193][   T28] 3 locks held by syz.4.2217/9996:
[  311.772602][   T28]  #0: ffff8880730dd0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500
[  311.784757][   T28]  #1: ffff8880730dc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[  311.794739][   T28]  #2: ffffffff8e650288 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  311.806048][   T28] 
[  311.829302][   T28] =============================================
[  311.829302][   T28] 
[  311.853215][   T28] NMI backtrace for cpu 0
[  311.857552][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.109-syzkaller #0
[  311.865429][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  311.875473][   T28] Call Trace:
[  311.878745][   T28]  <TASK>
[  311.881667][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  311.886342][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  311.891795][   T28]  ? panic+0x764/0x764
[  311.895851][   T28]  ? vprintk_emit+0x622/0x740
[  311.900521][   T28]  ? printk_sprint+0x490/0x490
[  311.905278][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  311.910384][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  311.915317][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  311.921464][   T28]  ? _printk+0xd1/0x111
[  311.925609][   T28]  ? panic+0x764/0x764
[  311.929663][   T28]  ? __wake_up_klogd+0xcc/0x100
[  311.934503][   T28]  ? panic+0x764/0x764
[  311.938557][   T28]  ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0
[  311.944617][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  311.950677][   T28]  nmi_trigger_cpumask_backtrace+0x1ae/0x3f0
[  311.956649][   T28]  watchdog+0xf88/0xfd0
[  311.960798][   T28]  ? watchdog+0x1f8/0xfd0
[  311.965119][   T28]  kthread+0x28d/0x320
[  311.969172][   T28]  ? hungtask_pm_notify+0x50/0x50
[  311.974187][   T28]  ? kthread_blkcg+0xd0/0xd0
[  311.978762][   T28]  ret_from_fork+0x1f/0x30
[  311.983179][   T28]  </TASK>
[  311.986984][   T28] Sending NMI from CPU 0 to CPUs 1:
[  311.992385][    C1] NMI backtrace for cpu 1
[  311.992395][    C1] CPU: 1 PID: 3684 Comm: kworker/1:4 Not tainted 6.1.109-syzkaller #0
[  311.992409][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  311.992417][    C1] Workqueue: events pwq_unbound_release_workfn
[  311.992441][    C1] RIP: 0010:zap_class+0x103/0x830
[  311.992457][    C1] Code: d4 19 0d 00 0f 84 07 07 00 00 48 c7 c0 20 31 bb 90 49 29 c4 49 c1 fc 06 4c 0f af e5 48 83 04 24 10 31 c0 4c 89 64 24 08 eb 14 <48> 8b 44 24 10 48 ff c0 48 3d 00 00 08 00 0f 84 5b 04 00 00 48 89
[  311.992468][    C1] RSP: 0018:ffffc900040ffae8 EFLAGS: 00000046
[  311.992479][    C1] RAX: 1ffffffff21e7f5d RBX: ffffffff90f3fae8 RCX: 00000000000542ce
[  311.992488][    C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff97303be0
[  311.992497][    C1] RBP: ffffffff9021b6c4 R08: dffffc0000000000 R09: fffffbfff2e6077d
[  311.992507][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000eb9
[  311.992516][    C1] R13: 1ffffffff22831e4 R14: dffffc0000000000 R15: 0000000000000000
[  311.992525][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  311.992537][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  311.992547][    C1] CR2: 0000564365290220 CR3: 00000000740b7000 CR4: 00000000003506e0
[  311.992559][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  311.992567][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  311.992576][    C1] Call Trace:
[  311.992580][    C1]  <NMI>
[  311.992585][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  311.992604][    C1]  ? read_lock_is_recursive+0x10/0x10
[  311.992622][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  311.992647][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  311.992665][    C1]  ? nmi_handle+0x12e/0x440
[  311.992683][    C1]  ? nmi_handle+0x25/0x440
[  311.992700][    C1]  ? zap_class+0x103/0x830
[  311.992712][    C1]  ? default_do_nmi+0x62/0x150
[  311.992725][    C1]  ? exc_nmi+0xa8/0x100
[  311.992741][    C1]  ? end_repeat_nmi+0x16/0x31
[  311.992762][    C1]  ? zap_class+0x103/0x830
[  311.992774][    C1]  ? zap_class+0x103/0x830
[  311.992786][    C1]  ? zap_class+0x103/0x830
[  311.992798][    C1]  </NMI>
[  311.992802][    C1]  <TASK>
[  311.992809][    C1]  lockdep_unregister_key+0x3c8/0x5e0
[  311.992828][    C1]  ? lockdep_reset_lock+0x3c0/0x3c0
[  311.992845][    C1]  ? print_irqtrace_events+0x210/0x210
[  311.992861][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  311.992879][    C1]  pwq_unbound_release_workfn+0x23d/0x290
[  311.992895][    C1]  ? process_one_work+0x7a9/0x11d0
[  311.992909][    C1]  process_one_work+0x8a9/0x11d0
[  311.992929][    C1]  ? worker_detach_from_pool+0x260/0x260
[  311.992944][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  311.992959][    C1]  ? kthread_data+0x4e/0xc0
[  311.992977][    C1]  ? wq_worker_running+0x97/0x190
[  311.992997][    C1]  worker_thread+0xa47/0x1200
[  311.993014][    C1]  ? _raw_spin_unlock+0x40/0x40
[  311.993033][    C1]  kthread+0x28d/0x320
[  311.993044][    C1]  ? worker_clr_flags+0x190/0x190
[  311.993057][    C1]  ? kthread_blkcg+0xd0/0xd0
[  311.993069][    C1]  ret_from_fork+0x1f/0x30
[  311.993090][    C1]  </TASK>
[  312.001249][ T3653] Bluetooth: hci6: command tx timeout
[  312.012208][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  312.012219][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.109-syzkaller #0
[  312.012235][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  312.012244][   T28] Call Trace:
[  312.012250][   T28]  <TASK>
[  312.012256][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  312.012284][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  312.012307][   T28]  ? panic+0x764/0x764
[  312.012322][   T28]  ? llist_add_batch+0x160/0x1d0
[  312.012347][   T28]  ? vscnprintf+0x59/0x80
[  312.012366][   T28]  panic+0x318/0x764
[  312.012384][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  312.012408][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  312.012428][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  312.012450][   T28]  ? nmi_trigger_cpumask_backtrace+0x338/0x3f0
[  312.012475][   T28]  ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0
[  312.012500][   T28]  watchdog+0xfc7/0xfd0
[  312.012524][   T28]  ? watchdog+0x1f8/0xfd0
[  312.012546][   T28]  kthread+0x28d/0x320
[  312.012560][   T28]  ? hungtask_pm_notify+0x50/0x50
[  312.012577][   T28]  ? kthread_blkcg+0xd0/0xd0
[  312.012593][   T28]  ret_from_fork+0x1f/0x30
[  312.012623][   T28]  </TASK>
[  312.021343][   T28] Kernel Offset: disabled
[  312.425759][   T28] Rebooting in 86400 seconds..