last executing test programs:

13.863348533s ago: executing program 2 (id=226):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
pipe2(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@remote, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x20c200a2, r5})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)

13.193701958s ago: executing program 2 (id=230):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
pipe2(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@remote, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x20c200a2, r4})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800", 0x30}], 0x1)

12.160520084s ago: executing program 2 (id=234):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)

11.981403698s ago: executing program 2 (id=237):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x8000}}, {@dax_never}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd6f0})

11.540245719s ago: executing program 2 (id=239):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x37, 0x7fffffff}]})
epoll_create1(0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

9.921148369s ago: executing program 2 (id=247):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010052, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f0000000b80)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)

8.935677363s ago: executing program 32 (id=247):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010052, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f0000000b80)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)

8.874280754s ago: executing program 1 (id=251):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x111, 0x9}}, 0x20)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x3a4a4e8, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES64=r0, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c02054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705877c121d9f296b890142ad867843dde403806a64154dd1eb9b7337b28fe400e150f44f310b1a79f20f876e4a12f2255716c7c4541a", @ANYBLOB="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", @ANYRES8, @ANYRESHEX, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd23724e0390b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e72bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8fbe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8cf1dd7611269d62c8281203042123f35babcf62c455469f335690808b2a38c3", @ANYRES16=0x0, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000))

8.335694287s ago: executing program 0 (id=260):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xdea, @local, 0x8}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r2}, &(0x7f0000000340)=0x8)

7.446223629s ago: executing program 0 (id=262):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x40, 0x15, 0x3, "b4ebd9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.038134529s ago: executing program 1 (id=264):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)=0x8)
read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f)
read$dsp(r0, &(0x7f00000001c0)=""/62, 0x3e)

6.068921722s ago: executing program 4 (id=268):
openat(0xffffffffffffff9c, 0x0, 0x183b41, 0x12b)
llistxattr(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
openat(0xffffffffffffff9c, 0x0, 0x42, 0xe)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x511000)

5.891097127s ago: executing program 1 (id=269):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000180), 0x4)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000140)='{', 0x1}], 0x1}, 0x20048843)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000060)

5.845980258s ago: executing program 4 (id=270):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x22, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

5.35802913s ago: executing program 1 (id=273):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42)
r2 = dup3(r1, r0, 0x80000)
fcntl$setstatus(r2, 0x4, 0x800)

5.113458876s ago: executing program 0 (id=275):
mount(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc14000000478803", 0xd, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

4.715650865s ago: executing program 0 (id=276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0xa5}, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x9, 0x8, 0x6, 0xd, 0xe, 0xa]}}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

4.172529149s ago: executing program 1 (id=277):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@nobarrier}]}, 0x3, 0x566, &(0x7f00000015c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x10})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

3.607125413s ago: executing program 1 (id=278):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
unshare(0x64000600)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket(0x10, 0x803, 0x0)
connect$unix(r0, &(0x7f0000000380)=@file={0x1, './file1\x00'}, 0x6e)

3.493011225s ago: executing program 4 (id=279):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="89cca9ad7f624c06000085087509000000000800", 0x14}], 0x2)

2.591983817s ago: executing program 0 (id=282):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e22, 0x1000002, @empty, 0x19}}, 0x7, 0x8000}, 0x90)

2.48601039s ago: executing program 0 (id=283):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)

2.368869462s ago: executing program 4 (id=284):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000020}, 0x4040)

2.295601594s ago: executing program 3 (id=285):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r3 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
symlinkat(&(0x7f00000000c0)='./file2\x00', r3, &(0x7f0000000100)='./file2\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000280), &(0x7f0000000300)=0x4)

2.04517849s ago: executing program 4 (id=286):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x100000, 0x0, 0x1}, {0x0, 0xffffffff, 0xf, 0xfe, 0x0, 0xfe, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf7}, {0x1000, 0xffff1000, 0xf, 0x0, 0xf6, 0x0, 0x0, 0xfc}, {0x0, 0xffff1000, 0xc, 0x9, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x8000000, 0x100, 0x8, 0x0, 0x3000, [0x0, 0x0, 0x2]})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x8000000, 0xdddd0000, 0x2, 0x1, 0x50})

1.348674747s ago: executing program 3 (id=287):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000540)={@empty, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x3, 0x1b, 0x68, 0x0, 0xba, 0x21, 0x0, @empty, @multicast2}, {{0x4e20, 0x4e22, 0x4, 0x1, 0xd, 0x0, 0x0, 0x0, 0x1, "f0ff00", 0xcc, "0000e4"}}}}}}, 0x0)

1.106981633s ago: executing program 4 (id=288):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000200), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x1f)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080))

1.041131265s ago: executing program 3 (id=289):
socket(0xa, 0x3, 0xff)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', <r2=>r1, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0x0, 0xff, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}})

752.567213ms ago: executing program 3 (id=290):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x4})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x17b}]})
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xa980000000000000, 0x40000, 0xe7, 0xa, 0x12})

389.072241ms ago: executing program 3 (id=291):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 3 (id=292):
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x67}}, {@dioread_nolock}, {@orlov}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$eJzs3E1oXNUeAPD/nSRN+vU6r6+v77VWTa1isJi0abVdCFJRcKEgVlCXIR8ldtpIk4ItVaYgdSkF9+LSrQu36qaIK8FtXQpSKNJNW0EcuTN3PjuTNMkkY8zvB5M5536dc+655+bcc2YmgE1rOP2TVMI3I2JXRORaNxiuvN27c2Xy/p0rk1EslU7/lpR3u5vGM9lhYnsWGclF5D5O6isazF+6fHaiUJi+kMXHFs69PzZ/6fKzs0PZkpMnjx87euL58eeWX6g26aXlurv/o7kD+1599/rrk/3V5dXUGsvRLcMx3C4rZU91O7Ee29kQTvp7mBGWJb3+0+oaKLf/XdEXi1VecR1zBqy1UqlUGuy8ulhqdfWBJcCGlUSvcwD0RvUfffr8W3216whsWZvuR8/dPlV5AErLfS97RTxeXlgdBxloeb7tpuGIeKf4++fpK9ZoHAIAoNG3p2rDP839v3xlZuSPizdeTN//lc2h5CPi3xGxOyL+ExF7IuK/EbE3Iv4XEf9vOX5fRJQWSX+4JV5LvzYJlbvVhWJ2lPb/Xsjmtur9v6YM5Puy2M6Iaod5+kh2TkZiYHBmtjB9dJE0vnv5p087rWvs/6WvNP1qXzDLx63+lgG6qYmFiRUXuMXtqxH7+1vLn/RHJLWZgCQi9kXE/mUcN98Qnn3mywO1yEDzdkuXv6zUdh6tC/NMpS8inq7UfzGa6r+eYtI0P3lu4sz0menz47X5ybGhKEwfGZvpmJsffrz2Rqd1S5b/619ad3nlxDens5a1emn9b2u4/qM6f1svfz6JSGrztfPLT+Paz590fKZZ6fW/JXmrHK4+l34wsbBw4WjEluS1B5eP1/etxtP3KFbKP3Koffvfne2TnolHIiK9iB+NiMei8oSY5v1gRDwREYcWKf/3Lz353srLv7bS8k+13P8qNd9U//X5+k6BJJsbbLOq7+zBm/c73Dwerv6Pl0Mj2ZL297+k6RbRKafVcY90yZ+rPnsAAACwMeQiYkfDWNKOyOVGRytjQHtiW64wN79weGbu4vmpdF1EPgZyM7OF8vhnZTx4IKmOf+Yb4uMt8WPZuPFnfVvL8dHJucJUT0sObC+3+SQ3GvF2X0P7T/3anSFm4O/M97Vg81qs/aed+L3X1zEzwLp6+P//Nz5c04wA666h/Xf6hn9xBZ/7AjYAz/9A3dI/9OOeARtfSVuGTW1Z7f+wHwGEf5L+eLMWzvU0J8B60/+HTWnJ7/WvKlAabL9qKB7cOIYWP2BfrCwbW9uk1ZNA2rPqSepbV7JX9dcUOm4TueUdcDC6U6czqzwbxQvzZ/Z2/eIvZZ+V73YNfrUu7bRdoCe3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK77KwAA//8KhtfB")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x41)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}})

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   44.763441][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.773796][ T3851] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
syzkaller login: [   86.899111][ T1108] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts.
[  134.627443][ T4196] cgroup: Unknown subsys name 'net'
[  134.753442][ T4196] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  136.319072][ T4196] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[  138.213104][ T4209] chnl_net:caif_netlink_parms(): no params data found
[  138.316010][ T4208] chnl_net:caif_netlink_parms(): no params data found
[  138.385191][ T4216] chnl_net:caif_netlink_parms(): no params data found
[  138.396609][ T4217] chnl_net:caif_netlink_parms(): no params data found
[  138.407410][ T4215] chnl_net:caif_netlink_parms(): no params data found
[  138.449036][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.456994][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.465133][ T4209] device bridge_slave_0 entered promiscuous mode
[  138.501056][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.509303][ T4209] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.518101][ T4209] device bridge_slave_1 entered promiscuous mode
[  138.585589][ T4209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.609524][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.617228][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.625591][ T4208] device bridge_slave_0 entered promiscuous mode
[  138.635091][ T4209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.664772][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.672186][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.680379][ T4208] device bridge_slave_1 entered promiscuous mode
[  138.707154][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.714443][ T4216] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.722768][ T4216] device bridge_slave_0 entered promiscuous mode
[  138.760288][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.767606][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.775518][ T4217] device bridge_slave_0 entered promiscuous mode
[  138.783390][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.790623][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.798807][ T4216] device bridge_slave_1 entered promiscuous mode
[  138.821438][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.828945][ T4215] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.837444][ T4215] device bridge_slave_0 entered promiscuous mode
[  138.847789][ T4209] team0: Port device team_slave_0 added
[  138.853876][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.861036][ T4215] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.870114][ T4215] device bridge_slave_1 entered promiscuous mode
[  138.877977][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.885061][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.893643][ T4217] device bridge_slave_1 entered promiscuous mode
[  138.902954][ T4208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.920817][ T4209] team0: Port device team_slave_1 added
[  138.941491][ T4208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.952990][ T4216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.984045][ T4215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.003526][ T4216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.021535][ T4215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.032558][ T4217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.058786][ T4208] team0: Port device team_slave_0 added
[  139.065500][ T4209] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.072877][ T4209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.099195][ T4209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.120294][ T4217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.137692][ T4208] team0: Port device team_slave_1 added
[  139.145557][ T4216] team0: Port device team_slave_0 added
[  139.152441][ T4209] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.160444][ T4209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.186443][ T4209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.232253][ T4216] team0: Port device team_slave_1 added
[  139.241017][ T4215] team0: Port device team_slave_0 added
[  139.272526][ T4217] team0: Port device team_slave_0 added
[  139.280400][ T4215] team0: Port device team_slave_1 added
[  139.301573][ T4208] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.308788][ T4208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.335228][ T4208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.355237][ T4217] team0: Port device team_slave_1 added
[  139.375490][ T4215] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.383052][ T4215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.410514][ T4215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.422914][ T4208] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.430689][ T4208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.457604][ T4208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.469742][ T4216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.477317][ T4216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.503829][ T4216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.525808][ T4209] device hsr_slave_0 entered promiscuous mode
[  139.533008][ T4209] device hsr_slave_1 entered promiscuous mode
[  139.541819][ T4215] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.549112][ T4215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.575760][ T4215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.592490][ T4216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.600338][ T4216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.627299][ T4216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.646064][ T4217] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.653374][ T4217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.679467][ T4217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.708740][ T4217] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.715742][ T4217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.742093][ T4217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.817906][ T4217] device hsr_slave_0 entered promiscuous mode
[  139.825074][ T4217] device hsr_slave_1 entered promiscuous mode
[  139.832255][ T4217] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.840646][ T4217] Cannot create hsr debugfs directory
[  139.857547][ T1111] Bluetooth: hci1: command 0x0409 tx timeout
[  139.877656][ T4216] device hsr_slave_0 entered promiscuous mode
[  139.884508][ T4216] device hsr_slave_1 entered promiscuous mode
[  139.891818][ T4216] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.900030][ T4216] Cannot create hsr debugfs directory
[  139.921691][ T4208] device hsr_slave_0 entered promiscuous mode
[  139.928920][ T4208] device hsr_slave_1 entered promiscuous mode
[  139.936051][ T4208] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.938175][ T1111] Bluetooth: hci3: command 0x0409 tx timeout
[  139.944607][   T23] Bluetooth: hci2: command 0x0409 tx timeout
[  139.950980][ T1111] Bluetooth: hci4: command 0x0409 tx timeout
[  139.962806][ T1111] Bluetooth: hci0: command 0x0409 tx timeout
[  139.969210][ T4208] Cannot create hsr debugfs directory
[  139.983549][ T4215] device hsr_slave_0 entered promiscuous mode
[  139.990942][ T4215] device hsr_slave_1 entered promiscuous mode
[  139.998014][ T4215] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.005629][ T4215] Cannot create hsr debugfs directory
[  140.344882][ T4217] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  140.366965][ T4217] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  140.376858][ T4217] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  140.388059][ T4217] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  140.434800][ T4208] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  140.454328][ T4208] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  140.465144][ T4208] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  140.483513][ T4208] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  140.567987][ T4215] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  140.593452][ T4215] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  140.605734][ T4215] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  140.633443][ T4215] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  140.658224][ T4217] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.699193][ T4208] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.729290][ T4209] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  140.743911][ T4209] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  140.754480][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  140.764624][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  140.777980][ T4208] 8021q: adding VLAN 0 to HW filter on device team0
[  140.796633][ T4209] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  140.810113][ T4209] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  140.821176][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  140.830658][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  140.849406][ T4217] 8021q: adding VLAN 0 to HW filter on device team0
[  140.885393][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  140.897756][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.907915][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.915248][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.924768][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  140.935120][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.944077][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.951234][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.959549][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  140.968457][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  140.981043][ T4216] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  140.990781][ T4216] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  141.003985][ T4216] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  141.013457][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.022802][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.033058][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.040263][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.054348][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.075947][ T4216] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  141.089534][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.101190][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.110108][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.117270][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.125244][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.136824][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.179260][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.191872][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.201854][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.212074][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.245540][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.257140][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.268214][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.277975][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.288938][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.300795][ T4215] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.310335][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.321399][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.338707][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  141.348730][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.384659][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  141.395805][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.404870][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  141.415925][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.424505][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  141.433194][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.446546][ T4209] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.454417][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  141.468059][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  141.485300][  T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  141.495697][  T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.511060][ T4215] 8021q: adding VLAN 0 to HW filter on device team0
[  141.524156][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  141.533467][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.587435][ T4209] 8021q: adding VLAN 0 to HW filter on device team0
[  141.599746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  141.615330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  141.624756][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.632047][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.648627][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.664330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.674736][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.681922][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.698593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.745504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  141.754618][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  141.764653][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  141.777830][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.784950][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.794386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.803885][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.813715][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.823732][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.830917][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.840319][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.849947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.859893][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.869470][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.881885][ T4216] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.910552][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  141.928600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.938129][   T21] Bluetooth: hci1: command 0x041b tx timeout
[  141.945766][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.960938][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.974041][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.988193][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  142.003162][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  142.011952][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  142.021718][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  142.033046][ T4250] Bluetooth: hci0: command 0x041b tx timeout
[  142.039759][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  142.047937][ T4250] Bluetooth: hci2: command 0x041b tx timeout
[  142.054958][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  142.063390][ T4250] Bluetooth: hci4: command 0x041b tx timeout
[  142.070860][ T4250] Bluetooth: hci3: command 0x041b tx timeout
[  142.095398][ T4209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  142.107401][ T4209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.128269][ T4215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.139984][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  142.150678][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  142.161869][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  142.170596][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  142.179795][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  142.191120][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.198809][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.206626][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  142.215589][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  142.224374][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  142.232784][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  142.241510][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  142.252739][ T4208] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.264435][ T4216] 8021q: adding VLAN 0 to HW filter on device team0
[  142.303981][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  142.314944][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  142.328150][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.335293][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.345125][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.353030][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.379297][ T4217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.411468][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  142.421751][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  142.431966][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  142.443001][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.450173][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.460384][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  142.470052][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  142.480092][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  142.493716][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  142.535117][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  142.545450][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  142.560940][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  142.570790][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  142.589296][ T4208] device veth0_vlan entered promiscuous mode
[  142.619533][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  142.628397][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  142.640098][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  142.651740][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  142.661443][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  142.671328][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  142.681185][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  142.697067][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  142.710939][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  142.737533][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  142.745544][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.774105][ T4208] device veth1_vlan entered promiscuous mode
[  142.784549][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  142.793570][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  142.802874][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  142.817018][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  142.867022][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  142.875326][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  142.887318][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.908193][ T4217] device veth0_vlan entered promiscuous mode
[  142.920960][ T4208] device veth0_macvtap entered promiscuous mode
[  142.937621][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.945176][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.957149][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.964822][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.973475][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  142.982961][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.991880][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  143.014810][ T4215] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.026922][ T4209] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.035264][ T4217] device veth1_vlan entered promiscuous mode
[  143.049301][ T4208] device veth1_macvtap entered promiscuous mode
[  143.117351][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  143.128263][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  143.136715][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  143.148717][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  143.164774][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  143.186999][ T4217] device veth0_macvtap entered promiscuous mode
[  143.200006][ T4208] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.221786][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  143.240699][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  143.249967][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.265803][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.275381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  143.288299][ T4217] device veth1_macvtap entered promiscuous mode
[  143.310243][ T4208] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.331241][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  143.341253][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  143.351533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  143.361536][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  143.370228][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  143.380139][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  143.388846][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  143.418970][ T4208] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.428277][ T4208] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.448805][ T4208] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.468215][ T4208] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.493277][ T4217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.505419][ T4217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.517474][ T4217] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.533797][ T4209] device veth0_vlan entered promiscuous mode
[  143.551896][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.563847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.572997][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  143.583853][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  143.594974][ T4217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.605871][ T4217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.618793][ T4217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.634081][ T4209] device veth1_vlan entered promiscuous mode
[  143.655238][ T4216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.664396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  143.675754][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  143.688280][ T4217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.699838][ T4217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.708731][ T4217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.717540][ T4217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.795899][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  143.806639][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  143.846804][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  143.855673][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  143.869936][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  143.880592][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  143.899279][ T4209] device veth0_macvtap entered promiscuous mode
[  143.925721][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  143.934880][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  143.944366][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  143.964679][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.973574][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.981094][ T4209] device veth1_macvtap entered promiscuous mode
[  143.997525][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  144.008554][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  144.017787][ T4252] Bluetooth: hci1: command 0x040f tx timeout
[  144.018752][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  144.032113][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.041696][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  144.050828][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  144.059568][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  144.067716][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  144.085850][ T4216] device veth0_vlan entered promiscuous mode
[  144.106622][ T4252] Bluetooth: hci3: command 0x040f tx timeout
[  144.112915][ T4252] Bluetooth: hci4: command 0x040f tx timeout
[  144.119817][ T4252] Bluetooth: hci2: command 0x040f tx timeout
[  144.132041][ T4216] device veth1_vlan entered promiscuous mode
[  144.137003][ T4252] Bluetooth: hci0: command 0x040f tx timeout
[  144.152927][ T4215] device veth0_vlan entered promiscuous mode
[  144.169826][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.182444][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.192675][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.203926][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.215468][ T4209] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.241521][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.253494][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.265541][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.277674][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.289815][ T4209] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.298712][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  144.308193][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  144.318173][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  144.327918][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  144.337275][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  144.357851][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.370876][ T4215] device veth1_vlan entered promiscuous mode
[  144.379953][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.396088][ T4209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.407739][ T4209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.417852][ T4209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.427897][ T4209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.452958][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.461371][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.471280][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.480028][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.504320][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.515191][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.552242][ T4216] device veth0_macvtap entered promiscuous mode
[  144.570243][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.583753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  144.597208][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  144.622396][ T4215] device veth0_macvtap entered promiscuous mode
[  144.634345][ T4215] device veth1_macvtap entered promiscuous mode
[  144.645285][ T4216] device veth1_macvtap entered promiscuous mode
[  144.656157][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  144.664526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  144.674966][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  144.684913][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  144.694078][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  144.708270][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  144.753097][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.768038][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.779018][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.791626][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.801634][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.812948][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.826833][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.850068][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.870818][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.882067][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.900675][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.914468][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.931698][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.945376][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.958876][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.971102][ T4216] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.980286][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  144.990428][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  145.001269][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  145.010609][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  145.031419][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.053431][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.105651][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.126147][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.144294][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.155329][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.177560][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.199030][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.243521][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.254720][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.272774][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.282997][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.309708][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.327390][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.344092][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.363872][ T4216] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.380234][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.388299][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  145.390083][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  145.411771][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.427707][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  145.448022][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  145.457368][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  145.479379][ T4215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.503361][ T4215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.526912][ T4215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.535693][ T4215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.556040][ T4216] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.566041][ T4216] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.581511][ T4216] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.590866][ T4216] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.677147][ T4290] loop2: detected capacity change from 0 to 32768
[  145.750818][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.804012][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.850934][   T26] audit: type=1800 audit(1785866213.136:2): pid=4290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="bus" dev="loop2" ino=7 res=0 errno=0
[  145.891814][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  145.937817][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.945714][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.007450][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  146.041621][ T4302] loop1: detected capacity change from 0 to 4096
[  146.103883][ T4302] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  146.111877][   T21] Bluetooth: hci1: command 0x0419 tx timeout
[  146.125925][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.146048][  T799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.173596][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.188387][  T799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.200444][ T4250] Bluetooth: hci0: command 0x0419 tx timeout
[  146.218134][ T4250] Bluetooth: hci2: command 0x0419 tx timeout
[  146.243597][  T799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  146.264263][  T799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  146.275778][ T4250] Bluetooth: hci4: command 0x0419 tx timeout
[  146.298219][ T4250] Bluetooth: hci3: command 0x0419 tx timeout
[  146.335450][  T799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.356356][  T799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.363972][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  147.531272][ T4316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[  147.663887][ T4316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12'.
[  148.255726][ T4323] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13'.
[  148.286784][ T4323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13'.
[  148.332924][ T4323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'.
[  148.381064][ T4327] loop2: detected capacity change from 0 to 64
[  148.471749][ T4332] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  149.813847][ T4349] loop1: detected capacity change from 0 to 512
[  149.951006][ T4349] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  149.979924][ T4349] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  149.993511][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.002131][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.056080][ T4349] EXT4-fs (loop1): 1 truncate cleaned up
[  150.065436][ T4349] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,barrier,,errors=continue. Quota mode: none.
[  150.305646][ T4354] loop1: detected capacity change from 0 to 8192
[  150.577291][ T4358] program syz.1.20 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.149015][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.205420][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.705297][ T4316] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.715389][ T4316] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.724374][ T4316] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.733318][ T4316] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.878742][ T4316] syz.0.12 (4316) used greatest stack depth: 20944 bytes left
[  152.090835][ T4366] sctp: [Deprecated]: syz.0.22 (pid 4366) Use of int in max_burst socket option deprecated.
[  152.090835][ T4366] Use struct sctp_assoc_value instead
[  152.108281][ T4358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'.
[  152.306560][ T4369] netlink: 204 bytes leftover after parsing attributes in process `syz.0.22'.
[  153.074961][ T1108] Bluetooth: hci4: command 0x0405 tx timeout
[  153.386298][ T4259] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  154.046139][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.056140][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.066134][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.076133][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.086133][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.096132][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.106136][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.116141][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.126134][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.136134][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.566727][ T4259] usb 4-1: unable to get BOS descriptor or descriptor too short
[  154.708303][ T4259] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  154.780526][ T4385] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  154.838550][ T4388] loop1: detected capacity change from 0 to 128
[  154.851728][ T4389] loop0: detected capacity change from 0 to 1024
[  154.893300][ T4388] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  154.910566][ T4388] FAT-fs (loop1): bogus number of reserved sectors
[  154.921583][ T4388] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  154.933628][ T4388] FAT-fs (loop1): Can't find a valid FAT filesystem
[  154.968233][ T4259] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  154.984405][ T4259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.005717][ T4259] usb 4-1: Product: syz
[  155.011468][ T4259] usb 4-1: Manufacturer: syz
[  155.020980][ T4297] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  155.036295][ T4259] usb 4-1: SerialNumber: syz
[  155.080621][ T4259] usb 4-1: can't set config #1, error -71
[  155.108606][ T4259] usb 4-1: USB disconnect, device number 2
[  155.157434][  T144] hfsplus: b-tree write err: -5, ino 25
[  155.175250][ T4394] loop3: detected capacity change from 0 to 512
[  155.182905][  T144] hfsplus: b-tree write err: -5, ino 4
[  155.197095][  T144] hfsplus: b-tree write err: -5, ino 2
[  155.263590][ T4394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[  155.276352][ T4297] usb 5-1: Using ep0 maxpacket: 16
[  155.296960][ T4249] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  155.307133][ T4394] System zones: 1-12
[  155.335306][ T4394] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.33: Directory hole found for htree index block 0
[  155.359124][ T4394] EXT4-fs (loop3): Remounting filesystem read-only
[  155.383812][ T4394] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  155.396563][ T4394] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.33: Directory hole found for htree index block 0
[  155.410161][ T4297] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  155.873849][ T4249] usb 3-1: Using ep0 maxpacket: 16
[  155.925781][ T4394] EXT4-fs (loop3): Remounting filesystem read-only
[  156.066284][ T4394] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  156.142416][ T4249] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  156.255676][ T4394] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback.
[  156.406596][ T4297] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  156.419170][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.432075][ T4394] EXT4-fs (loop3): shut down requested (2)
[  156.467568][ T4409] loop0: detected capacity change from 0 to 16
[  156.492561][ T4297] usb 5-1: Product: syz
[  156.518729][ T4409] =======================================================
[  156.518729][ T4409] WARNING: The mand mount option has been deprecated and
[  156.518729][ T4409]          and is ignored by this kernel. Remove the mand
[  156.518729][ T4409]          option from the mount to silence this warning.
[  156.518729][ T4409] =======================================================
[  156.536833][ T4297] usb 5-1: Manufacturer: syz
[  156.561654][ T4409] erofs: (device loop0): mounted with root inode @ nid 36.
[  156.570371][ T4249] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  156.584635][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.610053][ T4297] usb 5-1: SerialNumber: syz
[  156.632515][ T4249] usb 3-1: Product: syz
[  156.658455][ T4249] usb 3-1: Manufacturer: syz
[  156.663275][ T4249] usb 3-1: SerialNumber: syz
[  156.668447][ T4297] r8152-cfgselector 5-1: config 0 descriptor??
[  156.717114][ T4249] r8152-cfgselector 3-1: config 0 descriptor??
[  156.835368][ T4418] ieee802154 phy0 wpan0: encryption failed: -22
[  156.928598][ T4297] r8152-cfgselector 5-1: Unknown version 0x0000
[  156.980826][ T4297] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  156.996317][ T4249] r8152-cfgselector 3-1: Unknown version 0x0000
[  157.145717][ T4433] loop1: detected capacity change from 0 to 1024
[  157.202912][ T4297] usb 5-1: USB disconnect, device number 2
[  157.244712][ T4433] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,mb_optimize_scan=0x0000000000000000,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x000000000000001f,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,errors=continue. Quota mode: none.
[  157.277857][ T4249] r8152-cfgselector 3-1: Unknown version 0x0000
[  157.309842][ T4249] r8152-cfgselector 3-1: USB disconnect, device number 2
[  157.475801][ T4433] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.48: bg 0: block 153: padding at end of block bitmap is not set
[  157.510050][ T4422] loop3: detected capacity change from 0 to 32768
[  157.637901][ T4422] XFS (loop3): Mounting V5 Filesystem
[  157.862744][ T4454] loop1: detected capacity change from 0 to 2048
[  157.875736][ T4259] hid-generic 0005:16C0:05DF.0001: item fetching failed at offset 0/2
[  157.901708][ T4422] XFS (loop3): Ending clean mount
[  157.914205][ T4259] hid-generic: probe of 0005:16C0:05DF.0001 failed with error -22
[  158.000235][ T4461] loop0: detected capacity change from 0 to 4096
[  158.022191][ T4454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  158.038359][ T4463] loop2: detected capacity change from 0 to 1024
[  158.128388][ T4216] XFS (loop3): Unmounting Filesystem
[  158.160231][ T4467] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.386165][ T4461] syz.0.54 (4461) used greatest stack depth: 20144 bytes left
[  158.691345][ T4297] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  158.743639][ T4487] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  158.956359][ T4297] usb 5-1: Using ep0 maxpacket: 8
[  159.018609][ T4493] loop0: detected capacity change from 0 to 1764
[  159.138442][ T4495] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  159.159031][ T4495] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  159.236470][ T4297] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03
[  159.264583][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.273316][ T4297] usb 5-1: Product: syz
[  159.277657][ T4297] usb 5-1: Manufacturer: syz
[  159.282298][ T4297] usb 5-1: SerialNumber: syz
[  159.289484][ T4297] usb 5-1: config 0 descriptor??
[  159.349342][ T4297] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[  159.393161][ T4297] dvb-usb: bulk message failed: -22 (2/0)
[  159.424080][ T4297] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  159.515510][ T4297] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[  159.563689][ T4503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.580474][ T4297] usb 5-1: media controller created
[  159.590996][ T4505] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  159.683598][ T4480] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  159.750524][ T4297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.842518][ T4297] dvb-usb: bulk message failed: -22 (1/0)
[  159.867335][ T4297] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[  159.959108][ T4499] set_capacity_and_notify: 4 callbacks suppressed
[  159.959122][ T4499] loop0: detected capacity change from 0 to 32768
[  159.996566][ T4297] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[  160.082578][ T4208] ocfs2: Unmounting device (7,1) on (node local)
[  160.121211][ T4297] dvb-usb: schedule remote query interval to 50 msecs.
[  160.160099][ T4297] dvb-usb: bulk message failed: -22 (2/0)
[  160.165921][ T4297] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[  160.220333][ T4512] loop3: detected capacity change from 0 to 1024
[  160.755129][ T4297] usb 5-1: USB disconnect, device number 3
[  161.050839][ T4519] loop1: detected capacity change from 0 to 4096
[  161.064196][ T4499] XFS (loop0): Mounting V5 Filesystem
[  161.161654][ T4520] loop4: detected capacity change from 0 to 8192
[  161.173439][ T4519] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  161.344728][ T4533] loop2: detected capacity change from 0 to 1024
[  161.359199][ T4297] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[  161.436980][ T4499] XFS (loop0): Ending clean mount
[  161.684249][ T4538] program syz.4.75 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.707231][ T4538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.75'.
[  161.729415][ T4519] ntfs3: loop1: failed to convert "c46c" to cp865
[  161.897024][ T4209] XFS (loop0): Unmounting Filesystem
[  162.135433][ T4540] loop3: detected capacity change from 0 to 256
[  162.253187][ T4540] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.348679][ T4547] netlink: 5 bytes leftover after parsing attributes in process `syz.1.85'.
[  162.709477][ T4249] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  163.006923][ T4248] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  163.127014][ T4249] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  163.172158][ T4249] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.315243][ T4249] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  163.380967][ T4249] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.452924][ T4248] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  163.482118][ T4248] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.617174][ T4249] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  163.664283][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  163.706388][ T4248] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  163.783687][ T4249] usb 3-1: Product: syz
[  163.829290][ T4248] usb 4-1: config 1 has no interface number 0
[  163.855636][ T4249] usb 3-1: Manufacturer: syz
[  163.925435][ T4248] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  164.016122][    C0] sched: RT throttling activated
[  164.040991][ T4248] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  164.066427][ T4249] cdc_wdm 3-1:1.0: skipping garbage
[  164.076533][ T4249] cdc_wdm 3-1:1.0: skipping garbage
[  164.101904][ T4566] loop4: detected capacity change from 0 to 1024
[  164.244636][ T4249] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  164.383121][ T4249] cdc_wdm 3-1:1.0: Unknown control protocol
[  164.411929][ T4249] usb 3-1: USB disconnect, device number 3
[  164.536679][ T4248] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  164.556749][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.600797][ T4248] usb 4-1: Product: syz
[  164.605054][ T4248] usb 4-1: Manufacturer: syz
[  164.643726][ T4248] usb 4-1: SerialNumber: syz
[  164.698133][ T4248] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  164.706492][ T4248] cdc_ncm 4-1:1.1: bind() failure
[  164.920880][ T4568] loop0: detected capacity change from 0 to 32768
[  164.929350][ T4249] usb 4-1: USB disconnect, device number 3
[  164.940982][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  165.270246][ T4574] loop4: detected capacity change from 0 to 32768
[  165.326894][ T1111] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  165.344881][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.362499][ T1111] usb 2-1: config 0 descriptor??
[  165.378834][ T4574] XFS (loop4): Mounting V5 Filesystem
[  165.408598][ T1111] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  165.434088][ T4592] loop0: detected capacity change from 0 to 2048
[  165.446248][ T4248] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  165.518212][ T4574] XFS (loop4): Ending clean mount
[  165.557671][ T4592] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.624892][ T4215] XFS (loop4): Unmounting Filesystem
[  165.636704][   T26] audit: type=1800 audit(1785866232.926:3): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.99" name="file1" dev="loop0" ino=1367 res=0 errno=0
[  165.771995][   T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  165.836360][ T1111] gspca_stv06xx: I2C: Read error writing address: -71
[  165.901451][ T1111] usb 2-1: USB disconnect, device number 2
[  166.056339][   T13] usb 4-1: too many configurations: 25, using maximum allowed: 8
[  166.746576][   T13] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[  166.768024][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.832718][ T4248] usb 3-1: config 0 has an invalid descriptor of length 19, skipping remainder of the config
[  166.846400][ T4248] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping
[  166.850037][   T13] usb 4-1: config 0 descriptor??
[  166.857150][ T4248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  166.857179][ T4248] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.952286][ T4609] loop0: detected capacity change from 0 to 512
[  166.960369][   T13] pwc: Creative Labs Webcam Pro Ex detected.
[  166.975773][   T13] pwc: Warning: more than 1 configuration available.
[  167.017947][ T4609] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  167.076402][ T4248] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  167.086639][ T4259] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  167.102813][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.115549][ T4248] usb 3-1: Product: syz
[  167.120162][ T4248] usb 3-1: Manufacturer: syz
[  167.124962][ T4248] usb 3-1: SerialNumber: syz
[  167.132190][ T4248] usb 3-1: config 0 descriptor??
[  167.139842][ T4609] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  167.156710][ T4579] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  167.188241][ T4248] ati_remote_probe: Unexpected desc.bNumEndpoints
[  167.207063][ T4609] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.266664][ T4619] loop1: detected capacity change from 0 to 256
[  167.317731][ T4619] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  167.432644][ T4248] usb 3-1: USB disconnect, device number 4
[  167.456698][ T4259] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  167.464872][ T4259] usb 5-1: config 0 has no interface number 0
[  167.476317][   T13] pwc: send_video_command error -71
[  167.481592][   T13] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  167.492149][   T13] Philips webcam: probe of 4-1:0.0 failed with error -71
[  167.501291][ T4259] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  167.522614][   T13] usb 4-1: USB disconnect, device number 4
[  167.529729][ T4259] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.966374][ T4248] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  168.256507][ T4248] usb 3-1: Using ep0 maxpacket: 8
[  168.399851][ T4259] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  168.414319][ T4259] usb 5-1: config 0 interface 1 has no altsetting 0
[  168.421106][ T4259] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  168.430511][ T4259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.471755][ T4259] usb 5-1: config 0 descriptor??
[  168.517612][ T4248] usb 3-1: config 0 has an invalid descriptor of length 19, skipping remainder of the config
[  168.542121][ T4248] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping
[  169.518963][ T4248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  169.549934][ T4248] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  169.779952][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[  169.790687][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[  169.799931][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[  169.809603][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[  169.818745][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[  170.386253][ T4248] usb 3-1: string descriptor 0 read error: -71
[  170.392758][ T4248] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  170.407925][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.427622][ T4248] usb 3-1: config 0 descriptor??
[  170.446379][ T4248] usb 3-1: can't set config #0, error -71
[  170.454985][ T4248] usb 3-1: USB disconnect, device number 5
[  170.826228][ T1111] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  171.139932][ T4637] loop0: detected capacity change from 0 to 32768
[  171.196412][ T4259] uclogic 0003:145F:0212.0002: failed retrieving string descriptor #100: -71
[  171.196768][ T4654] loop2: detected capacity change from 0 to 32768
[  171.208085][ T1111] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  171.232463][ T4259] uclogic 0003:145F:0212.0002: failed retrieving pen parameters: -71
[  171.251655][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.261509][ T4657] loop1: detected capacity change from 0 to 32768
[  171.268289][ T4259] uclogic 0003:145F:0212.0002: pen probing failed: -71
[  171.278096][ T4259] uclogic 0003:145F:0212.0002: failed probing parameters: -71
[  171.288996][ T1111] usb 4-1: config 0 descriptor??
[  171.294173][ T4259] uclogic: probe of 0003:145F:0212.0002 failed with error -71
[  171.310144][ T4654] (syz.2.117,4654,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  171.333568][ T4654] (syz.2.117,4654,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  171.361054][ T4657] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.118 (4657)
[  171.391741][ T4259] usb 5-1: USB disconnect, device number 4
[  171.398399][ T1111] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  171.421357][ T4654] JBD2: Ignoring recovery information on journal
[  171.457747][ T4654] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  171.550222][ T4637] XFS (loop0): Mounting V5 Filesystem
[  171.635772][ T4217] ocfs2: Unmounting device (7,2) on (node local)
[  171.642878][ T4657] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  171.665087][ T4657] BTRFS info (device loop1): force clearing of disk cache
[  171.667366][ T4637] XFS (loop0): Ending clean mount
[  171.674859][ T4657] BTRFS info (device loop1): enabling auto defrag
[  171.684535][ T4657] BTRFS info (device loop1): enabling disk space caching
[  171.691926][ T4657] BTRFS info (device loop1): disk space caching is enabled
[  171.699924][ T4657] BTRFS info (device loop1): has skinny extents
[  171.993457][ T4209] XFS (loop0): Unmounting Filesystem
[  172.080159][ T4657] BTRFS info (device loop1): enabling ssd optimizations
[  172.105651][ T4657] BTRFS info (device loop1): clearing free space tree
[  172.143026][ T4657] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  172.181607][ T4657] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  173.212194][ T1111] gspca_stv06xx: I2C: Read error writing address: -71
[  173.257769][ T4702] loop2: detected capacity change from 0 to 8
[  173.286878][ T4704] capability: warning: `syz.3.124' uses 32-bit capabilities (legacy support in use)
[  173.290017][ T1111] usb 4-1: USB disconnect, device number 5
[  173.419556][ T4704] program syz.3.124 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  175.216319][ T4723] Bluetooth: hci5: command 0x1003 tx timeout
[  175.223910][ T4214] Bluetooth: hci5: sending frame failed (-49)
[  175.778059][ T4712] loop3: detected capacity change from 0 to 32768
[  175.862635][ T4712] JBD2: Ignoring recovery information on journal
[  175.930963][ T4712] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  176.022488][ T4712] (syz.3.127,4712,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  176.074793][ T4712] (syz.3.127,4712,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422755854968174 failed -12
[  176.126290][ T4254] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  176.146199][ T4712] (syz.3.127,4712,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12
[  176.161927][ T4712] (syz.3.127,4712,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12
[  176.189491][ T4712] (syz.3.127,4712,1):ocfs2_test_inode_bit:2896 ERROR: status = -12
[  176.235346][ T4712] (syz.3.127,4712,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  176.315307][ T4216] ocfs2: Unmounting device (7,3) on (node local)
[  176.366221][ T4254] usb 2-1: Using ep0 maxpacket: 32
[  176.423533][ T4747] loop2: detected capacity change from 0 to 40427
[  176.486283][ T4254] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  176.515194][ T4254] usb 2-1: config 0 has no interface number 0
[  176.529739][ T4747] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  176.549245][ T4747] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  176.602759][ T4747] F2FS-fs (loop2): invalid crc value
[  176.706395][ T4254] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  176.722488][ T4254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.731441][ T4254] usb 2-1: Product: syz
[  176.735687][ T4254] usb 2-1: Manufacturer: syz
[  176.760508][ T4747] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  176.814998][ T4254] usb 2-1: SerialNumber: syz
[  176.857052][ T4254] usb 2-1: config 0 descriptor??
[  176.898498][ T4254] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  176.933010][ T4254] usb 2-1: selecting invalid altsetting 1
[  176.975943][ T4254] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  177.220385][ T4254] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  177.222011][ T4254] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  177.222485][ T4254] usb 2-1: media controller created
[  177.491767][ T4254] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  177.596362][ T4254] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  177.596594][ T4254] zl10353_read_register: readreg error (reg=127, ret==-71)
[  177.625424][ T4254] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  177.663829][ T4722] Bluetooth: hci5: command 0x1001 tx timeout
[  177.694983][ T4214] Bluetooth: hci5: sending frame failed (-49)
[  177.806422][ T4254] usb 2-1: USB disconnect, device number 3
[  177.861752][ T4747] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  177.887120][ T4747] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  177.945321][ T4775] loop0: detected capacity change from 0 to 2048
[  177.974668][ T4774] loop3: detected capacity change from 0 to 2048
[  178.050789][ T4774] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  178.081288][ T4217] attempt to access beyond end of device
[  178.081288][ T4217] loop2: rw=2049, want=45104, limit=40427
[  178.099691][ T4776] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.144541][ T4774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.532323][ T4790] netlink: 'syz.0.148': attribute type 29 has an invalid length.
[  179.574626][ T4792] loop3: detected capacity change from 0 to 4096
[  179.582565][ T4790] netlink: 'syz.0.148': attribute type 29 has an invalid length.
[  179.591427][ T4793] netlink: 'syz.0.148': attribute type 29 has an invalid length.
[  179.600372][ T4790] netlink: 'syz.0.148': attribute type 29 has an invalid length.
[  179.608848][ T4790] netlink: 'syz.0.148': attribute type 29 has an invalid length.
[  179.786394][ T4723] Bluetooth: hci5: command 0x1009 tx timeout
[  179.846886][ T4801] loop1: detected capacity change from 0 to 1024
[  179.883994][ T4792] ntfs3: loop3: MFT: r=1b, expect seq=1 instead of 0!
[  179.917093][ T4722] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[  180.218818][ T4815] loop1: detected capacity change from 0 to 256
[  180.362427][ T4722] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  180.384514][ T4722] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  180.440406][ T4722] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  180.482010][ T4722] usb 1-1: config 0 interface 0 has no altsetting 0
[  180.499569][ T4722] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  180.525634][ T4722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.587412][ T4820] loop3: detected capacity change from 0 to 4096
[  180.616357][ T4722] usb 1-1: config 0 descriptor??
[  180.636661][ T4795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  180.672109][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'.
[  180.690165][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'.
[  180.717688][ T4820] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  180.766032][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'.
[  180.800679][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'.
[  180.835499][ T4820] ntfs: volume version 3.1.
[  180.873297][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'.
[  180.911441][ T4819] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1255.  You might want to try to use the mount option nls=utf8.
[  180.941347][ T4819] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  181.127638][ T4722] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  181.146154][ T4722] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  181.153373][ T4722] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  181.186190][ T4722] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  181.193460][ T4722] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  181.221491][ T4722] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  181.245076][ T4722] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  181.267077][ T4722] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  181.288940][ T4722] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  181.315504][ T4722] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  181.372750][ T4722] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.05 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0
[  181.435759][ T4722] usb 1-1: USB disconnect, device number 2
[  181.594984][ T4831] fido_id[4831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  181.634198][ T4827] loop1: detected capacity change from 0 to 32768
[  181.722036][ T4827] JBD2: Ignoring recovery information on journal
[  181.843584][ T4827] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  182.065295][ T4208] ocfs2: Unmounting device (7,1) on (node local)
[  182.414421][ T4841] syz.3.167 uses obsolete (PF_INET,SOCK_PACKET)
[  182.447717][ T4844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'.
[  182.495395][ T4848] loop4: detected capacity change from 0 to 256
[  182.633008][ T4835] loop0: detected capacity change from 0 to 32768
[  182.811413][ T4835] XFS (loop0): Mounting V5 Filesystem
[  182.862874][ T4862] loop4: detected capacity change from 0 to 256
[  182.963356][ T4862] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  183.015391][ T4835] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  183.026597][ T4862] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  183.047966][ T4862] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  183.122895][ T4835] XFS (loop0): Starting recovery (logdev: internal)
[  183.292406][ T4835] XFS (loop0): Ending recovery (logdev: internal)
[  183.455879][ T4869] loop1: detected capacity change from 0 to 4096
[  183.499637][ T4869] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  183.514807][ T4209] XFS (loop0): Unmounting Filesystem
[  183.541935][ T4866] loop3: detected capacity change from 0 to 8192
[  183.554743][ T4871] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  183.642200][ T4866] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  183.699831][ T4869] ntfs: volume version 3.1.
[  183.736454][ T4866] REISERFS (device loop3): using ordered data mode
[  183.743117][ T4866] reiserfs: using flush barriers
[  183.754077][ T4866] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  183.774228][ T4866] REISERFS (device loop3): checking transaction log (loop3)
[  183.788439][ T4866] REISERFS (device loop3): Using r5 hash to sort names
[  183.837153][ T4869] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1255.  You might want to try to use the mount option nls=utf8.
[  183.860165][ T4875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'.
[  183.880977][ T4869] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  183.890619][ T4866] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  184.171954][ T4877] loop4: detected capacity change from 0 to 2048
[  184.195515][ T4881] loop2: detected capacity change from 0 to 2048
[  184.250747][ T4881] EXT4-fs (loop2): Ignoring removed orlov option
[  184.277309][ T4877] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18881, location=18881
[  184.359108][ T4877] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.400034][ T4881] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,bsddf,orlov,,errors=continue. Quota mode: none.
[  184.419827][ T4890] loop0: detected capacity change from 0 to 256
[  184.436407][ T4881] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.063101][ T4890] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  185.707502][   T26] audit: type=1800 audit(1785866252.936:4): pid=4897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.176" name="file1" dev="loop0" ino=1048600 res=0 errno=0
[  186.158743][ T4899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'.
[  186.233369][ T4722] kernel read not supported for file /video9 (pid: 4722 comm: kworker/1:17)
[  187.293587][ T4916] loop0: detected capacity change from 0 to 8192
[  187.364592][ T4916] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  187.389738][ T4916] REISERFS (device loop0): using ordered data mode
[  187.396776][ T4916] reiserfs: using flush barriers
[  187.410571][ T4920] netlink: 'syz.4.191': attribute type 1 has an invalid length.
[  187.415091][ T4916] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  187.466724][ T4923] loop1: detected capacity change from 0 to 128
[  187.476017][ T4916] REISERFS (device loop0): checking transaction log (loop0)
[  187.485663][ T4916] REISERFS (device loop0): Using r5 hash to sort names
[  187.492980][ T4916] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  187.566606][ T4926] loop2: detected capacity change from 0 to 2048
[  187.702665][ T4926] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  188.879577][ T4928] bridge0: port 3(syz_tun) entered blocking state
[  188.926353][ T4928] bridge0: port 3(syz_tun) entered disabled state
[  189.095887][ T4928] device syz_tun entered promiscuous mode
[  189.154125][ T4928] bridge0: port 3(syz_tun) entered blocking state
[  189.161285][ T4928] bridge0: port 3(syz_tun) entered forwarding state
[  190.084628][ T4958] loop2: detected capacity change from 0 to 128
[  190.170368][ T4940] loop0: detected capacity change from 0 to 32768
[  190.276293][ T4940] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.199 (4940)
[  190.356668][ T4940] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  190.396256][ T4940] BTRFS info (device loop0): setting nodatacow, compression disabled
[  190.404548][ T4940] BTRFS info (device loop0): turning on flush-on-commit
[  190.413997][ T4958] attempt to access beyond end of device
[  190.413997][ T4958] loop2: rw=2049, want=250, limit=128
[  190.447123][ T4940] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  190.486285][ T4940] BTRFS info (device loop0): use lzo compression, level 0
[  190.493645][ T4940] BTRFS info (device loop0): setting nodatasum
[  190.514068][ T4940] BTRFS info (device loop0): use no compression
[  190.541461][ T4940] BTRFS info (device loop0): trying to use backup root at mount time
[  190.561753][ T4940] BTRFS info (device loop0): max_inline at 0
[  190.580429][ T4940] BTRFS info (device loop0): using free space tree
[  190.609859][ T4940] BTRFS info (device loop0): has skinny extents
[  190.803813][ T4955] loop1: detected capacity change from 0 to 32768
[  190.859111][  T154] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  190.933766][ T4940] BTRFS warning (device loop0): couldn't read tree root
[  190.963222][ T4645] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0xe06dfc66 level 0
[  190.963386][ T4940] BTRFS warning (device loop0): couldn't read tree root
[  190.964820][ T4940] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7
[  190.965308][ T4940] BTRFS warning (device loop0): couldn't read tree root
[  191.107528][ T4962] loop4: detected capacity change from 0 to 40427
[  191.131851][ T4962] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  191.131910][ T4962] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  191.150927][ T4962] F2FS-fs (loop4): invalid crc value
[  191.179867][ T4962] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  191.453112][ T4962] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  191.463473][ T4962] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  191.511219][   T26] audit: type=1800 audit(1785866258.796:5): pid=4962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.205" name="file1" dev="loop4" ino=10 res=0 errno=0
[  191.549462][ T4940] BTRFS error (device loop0): open_ctree failed: -22
[  191.571242][   T26] audit: type=1804 audit(1785866258.826:6): pid=4962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.205" name="/newroot/26/file1/file1" dev="loop4" ino=10 res=1 errno=0
[  191.664572][ T4215] attempt to access beyond end of device
[  191.664572][ T4215] loop4: rw=2049, want=45104, limit=40427
[  192.953322][ T5014] loop3: detected capacity change from 0 to 256
[  193.075285][ T5014] FAT-fs (loop3): Directory bread(block 64) failed
[  193.099813][ T5014] FAT-fs (loop3): Directory bread(block 65) failed
[  193.113719][ T5014] FAT-fs (loop3): Directory bread(block 66) failed
[  193.126401][ T5014] FAT-fs (loop3): Directory bread(block 67) failed
[  193.135119][ T5014] FAT-fs (loop3): Directory bread(block 68) failed
[  193.149159][ T5014] FAT-fs (loop3): Directory bread(block 69) failed
[  193.160921][ T5014] FAT-fs (loop3): Directory bread(block 70) failed
[  193.176383][ T5014] FAT-fs (loop3): Directory bread(block 71) failed
[  193.183139][ T5014] FAT-fs (loop3): Directory bread(block 72) failed
[  193.236569][ T5014] FAT-fs (loop3): Directory bread(block 73) failed
[  194.418801][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.425287][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.682697][ T5040] device syzkaller1 entered promiscuous mode
[  194.698207][ T5037] loop3: detected capacity change from 0 to 512
[  195.078782][ T5037] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  195.114110][ T5037] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  195.291501][ T5037] Quota error (device loop3): do_check_range: Getting dqdh_next_free 2741 out of range 0-6
[  195.312650][ T5037] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  195.322657][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[  195.331962][ T1111] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  195.350496][ T5037] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.224: Failed to acquire dquot type 0
[  195.394649][ T5057] loop1: detected capacity change from 0 to 256
[  195.559747][ T5057] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  195.681772][ T5057] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  195.965787][ T5057] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  196.436578][ T4259] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  196.498673][ T5068] loop2: detected capacity change from 0 to 1024
[  196.516618][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.575276][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.606830][ T1111] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  196.631301][ T5068] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000008000,dax=never,min_batch_time=0x0000000000000003,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  196.673204][ T1111] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  196.692843][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.701185][ T4259] usb 1-1: Using ep0 maxpacket: 32
[  196.729142][ T1111] usb 5-1: config 0 descriptor??
[  196.826500][ T4259] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  196.834767][ T4259] usb 1-1: config 0 has no interface number 0
[  196.944945][ T4217] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  196.983695][ T4217] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  197.014583][ T4217] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  197.049353][ T4217] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  197.089357][ T4217] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  197.120681][ T4217] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  197.155251][ T4217] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  197.180467][ T5080] loop3: detected capacity change from 0 to 32768
[  197.190965][ T4217] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  197.217215][ T4217] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  197.248751][ T4217] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  197.270408][ T1111] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd
[  197.290364][ T1111] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  197.316405][ T4259] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  197.336971][ T1111] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  197.347271][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.355431][ T4259] usb 1-1: Product: syz
[  197.362116][ T1111] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  197.406260][ T4259] usb 1-1: Manufacturer: syz
[  197.418602][ T4259] usb 1-1: SerialNumber: syz
[  197.434035][ T5080] XFS (loop3): Mounting V5 Filesystem
[  197.449436][ T1111] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  197.464707][ T4259] usb 1-1: config 0 descriptor??
[  197.501596][ T5080] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  197.519029][ T5080] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30
[  197.532547][ T4259] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  197.583950][ T4990] usb 5-1: USB disconnect, device number 5
[  197.606936][ T5080] XFS (loop3): Ending clean mount
[  197.711522][ T5080] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x1803 dinode
[  197.723054][ T5080] XFS (loop3): Unmount and run xfs_repair
[  197.729523][ T5080] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  197.737125][ T5080] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  197.746189][ T5080] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  197.755089][ T5080] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  197.764071][ T5080] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  197.773235][ T5080] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  197.782534][ T5080] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  197.791514][ T5080] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  197.801326][ T5080] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  197.846757][ T4216] XFS (loop3): Unmounting Filesystem
[  197.858928][ T4259] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  197.903035][ T4259] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  197.939311][ T5089] fido_id[5089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  198.305586][ T4990] usb 1-1: USB disconnect, device number 3
[  198.316172][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  198.338711][ T4990] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  198.402545][ T4990] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  198.445282][ T4990] quatech2 1-1:0.51: device disconnected
[  198.563706][ T4645] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.455028][ T4645] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.605765][ T5124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'.
[  199.644325][ T4645] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.786418][ T4645] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.038420][ T4723] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  200.435017][ T5121] loop1: detected capacity change from 0 to 32768
[  200.463684][ T5121] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.251 (5121)
[  200.476536][ T4723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  200.494108][ T4723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  200.534526][ T4723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  200.578516][ T5121] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  200.606272][ T5121] BTRFS info (device loop1): setting nodatasum
[  200.612671][ T5121] BTRFS info (device loop1): force zlib compression, level 3
[  200.679911][ T5121] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  200.727094][ T5121] BTRFS info (device loop1): use lzo compression, level 0
[  200.736686][ T4723] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  200.753804][ T4723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.781538][ T5121] BTRFS info (device loop1): turning on flush-on-commit
[  200.805116][ T4723] usb 5-1: Product: syz
[  200.809680][ T5121] BTRFS info (device loop1): enabling auto defrag
[  200.821672][ T5121] BTRFS info (device loop1): max_inline at 4096
[  200.828458][ T5121] BTRFS info (device loop1): using free space tree
[  200.831998][ T4723] usb 5-1: Manufacturer: syz
[  200.835387][ T5121] BTRFS info (device loop1): has skinny extents
[  200.865322][ T4723] usb 5-1: SerialNumber: syz
[  200.935615][ T4723] usb 5-1: config 0 descriptor??
[  201.036361][ T5121] BTRFS info (device loop1): enabling ssd optimizations
[  201.162462][ T5139] chnl_net:caif_netlink_parms(): no params data found
[  201.267525][ T4723] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  201.316265][ T1111] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  201.489000][   T13] usb 5-1: USB disconnect, device number 6
[  201.741644][ T1111] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  201.751172][ T1111] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  201.761870][ T1111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  201.771305][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  201.783012][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  201.907719][ T1111] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  201.923704][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  201.943906][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.952420][ T1111] usb 1-1: Product: syz
[  201.962561][ T1111] usb 1-1: Manufacturer: syz
[  201.966501][ T5139] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.975999][ T5139] device bridge_slave_0 entered promiscuous mode
[  202.008200][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.015402][ T5139] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.027294][ T1111] cdc_wdm 1-1:1.0: skipping garbage
[  202.032573][ T1111] cdc_wdm 1-1:1.0: skipping garbage
[  202.039113][ T5139] device bridge_slave_1 entered promiscuous mode
[  202.075969][ T1111] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  202.102651][ T1111] cdc_wdm 1-1:1.0: Unknown control protocol
[  202.266303][ T4990] Bluetooth: hci4: command 0x0409 tx timeout
[  202.350751][ T5139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.380060][ T5139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.435186][ T5225] loop4: detected capacity change from 0 to 512
[  202.473262][ T5139] team0: Port device team_slave_0 added
[  202.524713][ T5225] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  202.546359][ T5225] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.565890][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'.
[  202.642674][ T5222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.678649][ T5139] team0: Port device team_slave_1 added
[  202.687467][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'.
[  202.714749][ T5222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.756645][ T5222] Zero length message leads to an empty skb
[  202.766691][ T5202] usb 1-1: USB disconnect, device number 4
[  202.946432][ T4990] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  202.991561][ T5139] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.011370][ T5139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.075902][ T5139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.150650][ T1108] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  203.194715][ T5139] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.222776][ T1108] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  203.232448][ T5139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.232484][ T5139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.359552][ T4990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.371909][ T4990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.416301][ T4990] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  203.455966][ T4990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.497834][ T4990] usb 5-1: config 0 descriptor??
[  203.554038][ T5139] device hsr_slave_0 entered promiscuous mode
[  203.573787][ T5139] device hsr_slave_1 entered promiscuous mode
[  203.596584][ T5139] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.625829][ T5139] Cannot create hsr debugfs directory
[  203.719926][ T4645] device hsr_slave_0 left promiscuous mode
[  203.744027][ T4645] device hsr_slave_1 left promiscuous mode
[  203.774897][ T4645] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.786381][ T4645] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.810191][ T4645] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.824711][ T4645] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.853307][ T4645] device bridge_slave_1 left promiscuous mode
[  203.865514][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.935243][ T4645] device bridge_slave_0 left promiscuous mode
[  203.955474][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.001415][ T4990] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[  204.064997][ T4990] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0006/input/input6
[  204.125516][ T4645] device veth1_macvtap left promiscuous mode
[  204.133948][ T5247] loop3: detected capacity change from 0 to 32768
[  204.137371][ T4645] device veth0_macvtap left promiscuous mode
[  204.163231][ T4645] device veth1_vlan left promiscuous mode
[  204.193068][ T4645] device veth0_vlan left promiscuous mode
[  204.212156][ T5247] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.274 (5247)
[  204.281801][ T5247] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  204.291466][ T4990] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  204.319871][ T5247] BTRFS info (device loop3): setting nodatasum
[  204.336230][ T5203] Bluetooth: hci4: command 0x041b tx timeout
[  204.355658][ T4990] usb 5-1: USB disconnect, device number 7
[  204.362926][ T5247] BTRFS info (device loop3): force zlib compression, level 3
[  204.395512][ T5247] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  204.435650][ T5247] BTRFS info (device loop3): use lzo compression, level 0
[  204.449013][ T5271] loop1: detected capacity change from 0 to 1024
[  204.490947][ T5247] BTRFS info (device loop3): turning on flush-on-commit
[  204.498889][ T5271] EXT4-fs (loop1): Ignoring removed oldalloc option
[  204.525745][ T5271] EXT4-fs (loop1): Ignoring removed oldalloc option
[  204.534038][ T5247] BTRFS info (device loop3): enabling auto defrag
[  204.559278][ T5271] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  204.575921][ T5247] BTRFS info (device loop3): max_inline at 4096
[  204.598626][ T5247] BTRFS info (device loop3): using free space tree
[  204.621775][ T5247] BTRFS info (device loop3): has skinny extents
[  204.680753][ T5272] fido_id[5272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  204.697855][ T5271] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,nobarrier,,errors=continue. Quota mode: none.
[  204.761032][   T26] audit: type=1804 audit(1785866272.046:7): pid=5271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.277" name="/newroot/72/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  205.010148][ T5247] BTRFS info (device loop3): enabling ssd optimizations
[  205.447260][ T4645] team0 (unregistering): Port device team_slave_1 removed
[  205.486449][ T4645] team0 (unregistering): Port device team_slave_0 removed
[  205.513636][ T4645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.544870][ T4645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.702641][ T4645] bond0 (unregistering): Released all slaves
[  206.634314][ T5139] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  206.996535][ T5139] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  207.087371][ T5139] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  207.090700][ T5202] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  207.102002][ T4254] Bluetooth: hci4: command 0x040f tx timeout
[  207.174466][ T5139] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  207.194747][ T5332] bridge0: port 3(syz_tun) entered blocking state
[  207.246987][ T5332] bridge0: port 3(syz_tun) entered disabled state
[  207.255176][ T5332] device syz_tun entered promiscuous mode
[  207.269555][ T5332] bridge0: port 3(syz_tun) entered blocking state
[  207.276409][ T5332] bridge0: port 3(syz_tun) entered forwarding state
[  207.336214][ T5202] usb 1-1: Using ep0 maxpacket: 8
[  207.466386][ T5202] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  207.489024][ T5202] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  207.541787][ T5202] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  207.571739][ T5202] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  207.600496][ T5337] loop4: detected capacity change from 0 to 8192
[  207.607310][ T5202] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.646175][ T5202] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  207.655545][ T5139] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.675694][ T5202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.713279][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  207.753858][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  207.763305][ T5337] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  207.785757][ T5139] 8021q: adding VLAN 0 to HW filter on device team0
[  207.805282][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  207.816761][ T5337] REISERFS (device loop4): using ordered data mode
[  207.823341][ T5337] reiserfs: using flush barriers
[  207.857885][ T5337] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  207.886550][ T5337] REISERFS (device loop4): checking transaction log (loop4)
[  207.907050][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  207.925000][ T5337] REISERFS (device loop4): Using r5 hash to sort names
[  207.944669][ T5337] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  207.966621][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.973819][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.989028][ T5202] usb 1-1: usb_control_msg returned -32
[  207.994673][ T5202] usbtmc 1-1:16.0: can't read capabilities
[  208.085101][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  208.133098][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  208.175255][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  208.208618][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.215791][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.260436][ T5352] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3081, free_space(entry_count) 2
[  208.284962][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  208.300948][ T5354] netlink: 'syz.3.291': attribute type 2 has an invalid length.
[  208.320612][ T5352] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 544. Fsck?
[  208.339190][ T5355] netlink: 'syz.3.291': attribute type 2 has an invalid length.
[  208.339531][ T5352] REISERFS (device loop4): Remounting filesystem read-only
[  208.357822][ T5352] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[  208.406256][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  208.423207][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  208.450742][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  208.459837][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  208.473771][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  208.488305][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  208.500312][ T5337] ------------[ cut here ]------------
[  208.507943][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  208.524204][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  208.532404][ T5337] WARNING: CPU: 1 PID: 5337 at fs/reiserfs/journal.c:3393 journal_end+0x1cc/0x290
[  208.552207][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  208.564243][ T5337] Modules linked in:
[  208.571226][ T5337] CPU: 1 PID: 5337 Comm: syz.4.288 Not tainted syzkaller #0
[  208.592214][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  208.609916][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  208.615931][ T5358] loop3: detected capacity change from 0 to 512
[  208.664577][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  208.712356][ T5337] RIP: 0010:journal_end+0x1cc/0x290
[  208.718710][ T5337] Code: 4c 89 f7 48 89 de e8 73 18 bd ff 43 0f b6 44 25 00 84 c0 0f 85 a6 00 00 00 48 8b 04 24 c7 00 00 00 00 00 eb 30 e8 44 f3 77 ff <0f> 0b b8 fb ff ff ff eb 24 e8 36 f3 77 ff 48 89 df 31 f6 48 83 c4
[  208.754806][ T5358] EXT4-fs (loop3): Ignoring removed orlov option
[  208.776258][ T5337] RSP: 0018:ffffc9000425f978 EFLAGS: 00010287
[  208.785874][ T5337] RAX: ffffffff8201096c RBX: ffffc9000425fa40 RCX: 0000000000080000
[  208.801013][ T5358] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  208.826994][ T5337] RDX: ffffc90006092000 RSI: 0000000000035d62 RDI: 0000000000035d63
[  208.856232][ T5361] usbtmc 1-1:16.0: usb_control_msg returned -32
[  208.885189][ T5337] RBP: 0000000000000000 R08: ffffc9000425fa77 R09: ffffc9000425fa48
[  208.906027][ T5337] R10: dffffc0000000000 R11: fffff5200084bf4f R12: ffffc9000425fa54
[  208.911283][ T5358] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.292: bg 0: block 5: invalid block bitmap
[  208.927146][ T5337] R13: 1ffff9200084bf4a R14: ffff8880273f4df8 R15: 1ffff11004e7e9bf
[  208.935282][ T5337] FS:  00007f5e86b446c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  208.979437][ T5337] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  208.986401][ T5358] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  208.995754][ T5337] CR2: 00007f8e4a898000 CR3: 000000005f4da000 CR4: 00000000003506e0
[  209.004332][ T5337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  209.012700][ T5358] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.292: invalid indirect mapped block 3 (level 2)
[  209.026985][ T5337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  209.035429][ T5358] EXT4-fs (loop3): 2 truncates cleaned up
[  209.041295][ T5358] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000067,dioread_nolock,orlov,,errors=continue. Quota mode: writeback.
[  209.060120][ T5337] Call Trace:
[  209.063509][ T5337]  <TASK>
[  209.068159][ T5203] usb 1-1: USB disconnect, device number 5
[  209.101117][ T5337]  reiserfs_truncate_file+0x67a/0xe40
[  209.136864][ T5202] Bluetooth: hci4: command 0x0419 tx timeout
[  209.146321][ T5337]  ? reiserfs_new_symlink+0x580/0x580
[  209.151795][ T5337]  reiserfs_setattr+0xac5/0x10d0
[  209.191828][ T5358] EXT4-fs (loop3): shut down requested (2)
[  209.202555][ T5337]  ? reiserfs_commit_write+0x630/0x630
[  209.235960][ T5337]  ? ktime_get_coarse_real_ts64+0x106/0x120
[  209.258630][ T5337]  ? current_time+0x1d8/0x2c0
[  209.279634][ T5337]  ? atime_needs_update+0x770/0x770
[  209.306790][ T5337]  ? bpf_lsm_inode_setattr+0x5/0x10
[  209.312093][ T5337]  ? try_break_deleg+0x79/0x120
[  209.330863][ T5337]  ? reiserfs_commit_write+0x630/0x630
[  209.337037][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  209.344675][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  209.358053][ T5337]  notify_change+0xbc6/0xee0
[  209.362746][ T5337]  do_truncate+0x1ac/0x240
[  209.419044][ T5139] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.432587][ T5337]  ? rcu_lock_release+0x20/0x20
[  209.442486][ T5337]  ? bpf_lsm_path_truncate+0x5/0x10
[  209.461215][ T5337]  vfs_truncate+0x262/0x2f0
[  209.470911][ T5337]  do_sys_truncate+0xf2/0x1c0
[  209.475721][ T5337]  ? lock_chain_count+0x20/0x20
[  209.513672][ T5337]  ? break_lease+0xd0/0xd0
[  209.533064][ T5337]  ? lockdep_hardirqs_on+0x94/0x140
[  209.550942][ T5337]  do_syscall_64+0x4c/0xa0
[  209.563651][ T5337]  ? clear_bhb_loop+0x30/0x80
[  209.580424][ T5337]  ? clear_bhb_loop+0x30/0x80
[  209.607437][ T5337]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  209.639630][ T5337] RIP: 0033:0x7f5e888ec019
[  209.659123][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.725344][ T5337] RSP: 002b:00007f5e86b44028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  209.765468][ T5337] RAX: ffffffffffffffda RBX: 00007f5e88b73fa0 RCX: 00007f5e888ec019
[  209.812887][ T5337] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900
[  209.843692][ T5337] RBP: 00007f5e8898300c R08: 0000000000000000 R09: 0000000000000000
[  209.882407][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.919848][ T5337] R13: 00007f5e88b74038 R14: 00007f5e88b73fa0 R15: 00007ffef13142a8
[  209.953175][ T5337]  </TASK>
[  209.965697][ T5337] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  209.973054][ T5337] CPU: 0 PID: 5337 Comm: syz.4.288 Not tainted syzkaller #0
[  209.980385][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  209.990487][ T5337] Call Trace:
[  209.993804][ T5337]  <TASK>
[  209.996796][ T5337]  dump_stack_lvl+0x188/0x250
[  210.001603][ T5337]  ? show_regs_print_info+0x20/0x20
[  210.006843][ T5337]  ? load_image+0x410/0x410
[  210.011413][ T5337]  panic+0x2f8/0x850
[  210.015370][ T5337]  ? bpf_jit_dump+0xd0/0xd0
[  210.019936][ T5337]  ? journal_end+0x1cc/0x290
[  210.024577][ T5337]  __warn+0x248/0x2b0
[  210.028601][ T5337]  ? journal_end+0x1cc/0x290
[  210.033246][ T5337]  report_bug+0x1b9/0x2e0
[  210.037622][ T5337]  handle_bug+0x3a/0x70
[  210.041819][ T5337]  exc_invalid_op+0x16/0x40
[  210.046367][ T5337]  asm_exc_invalid_op+0x16/0x20
[  210.051361][ T5337] RIP: 0010:journal_end+0x1cc/0x290
[  210.056602][ T5337] Code: 4c 89 f7 48 89 de e8 73 18 bd ff 43 0f b6 44 25 00 84 c0 0f 85 a6 00 00 00 48 8b 04 24 c7 00 00 00 00 00 eb 30 e8 44 f3 77 ff <0f> 0b b8 fb ff ff ff eb 24 e8 36 f3 77 ff 48 89 df 31 f6 48 83 c4
[  210.076731][ T5337] RSP: 0018:ffffc9000425f978 EFLAGS: 00010287
[  210.082959][ T5337] RAX: ffffffff8201096c RBX: ffffc9000425fa40 RCX: 0000000000080000
[  210.090977][ T5337] RDX: ffffc90006092000 RSI: 0000000000035d62 RDI: 0000000000035d63
[  210.099013][ T5337] RBP: 0000000000000000 R08: ffffc9000425fa77 R09: ffffc9000425fa48
[  210.107025][ T5337] R10: dffffc0000000000 R11: fffff5200084bf4f R12: ffffc9000425fa54
[  210.115087][ T5337] R13: 1ffff9200084bf4a R14: ffff8880273f4df8 R15: 1ffff11004e7e9bf
[  210.123118][ T5337]  ? journal_end+0x1cc/0x290
[  210.127767][ T5337]  ? journal_end+0x1cc/0x290
[  210.132416][ T5337]  reiserfs_truncate_file+0x67a/0xe40
[  210.137845][ T5337]  ? reiserfs_new_symlink+0x580/0x580
[  210.143275][ T5337]  reiserfs_setattr+0xac5/0x10d0
[  210.148255][ T5337]  ? reiserfs_commit_write+0x630/0x630
[  210.153764][ T5337]  ? ktime_get_coarse_real_ts64+0x106/0x120
[  210.159730][ T5337]  ? current_time+0x1d8/0x2c0
[  210.164469][ T5337]  ? atime_needs_update+0x770/0x770
[  210.169725][ T5337]  ? bpf_lsm_inode_setattr+0x5/0x10
[  210.174984][ T5337]  ? try_break_deleg+0x79/0x120
[  210.179889][ T5337]  ? reiserfs_commit_write+0x630/0x630
[  210.185392][ T5337]  notify_change+0xbc6/0xee0
[  210.190044][ T5337]  do_truncate+0x1ac/0x240
[  210.194513][ T5337]  ? rcu_lock_release+0x20/0x20
[  210.199429][ T5337]  ? bpf_lsm_path_truncate+0x5/0x10
[  210.204669][ T5337]  vfs_truncate+0x262/0x2f0
[  210.209216][ T5337]  do_sys_truncate+0xf2/0x1c0
[  210.213932][ T5337]  ? lock_chain_count+0x20/0x20
[  210.218914][ T5337]  ? break_lease+0xd0/0xd0
[  210.223462][ T5337]  ? lockdep_hardirqs_on+0x94/0x140
[  210.228708][ T5337]  do_syscall_64+0x4c/0xa0
[  210.233166][ T5337]  ? clear_bhb_loop+0x30/0x80
[  210.237885][ T5337]  ? clear_bhb_loop+0x30/0x80
[  210.242753][ T5337]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  210.248712][ T5337] RIP: 0033:0x7f5e888ec019
[  210.253170][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.272857][ T5337] RSP: 002b:00007f5e86b44028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  210.281855][ T5337] RAX: ffffffffffffffda RBX: 00007f5e88b73fa0 RCX: 00007f5e888ec019
[  210.289880][ T5337] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900
[  210.297893][ T5337] RBP: 00007f5e8898300c R08: 0000000000000000 R09: 0000000000000000
[  210.305984][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.313994][ T5337] R13: 00007f5e88b74038 R14: 00007f5e88b73fa0 R15: 00007ffef13142a8
[  210.322031][ T5337]  </TASK>
[  210.325445][ T5337] Kernel Offset: disabled
[  210.330081][ T5337] Rebooting in 86400 seconds..