last executing test programs:

6.373016915s ago: executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
lseek(r0, 0x6, 0x0)
getdents64(r0, 0xffffffffffffffff, 0x43)

6.300394297s ago: executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x12, 0xa10, &(0x7f00000001c0)="$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")
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.731774423s ago: executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)={0x0, 0x0, 0x4, "da156ca3"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})

5.020559412s ago: executing program 3:
socket$kcm(0x10, 0x2, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f00000002c0)="d2", 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x20000000}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r0, &(0x7f0000000780), &(0x7f00000007c0)=""/48}, 0x20)

4.891366742s ago: executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7fffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

3.967315293s ago: executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff5f9ab86a0800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5100000007000042009ce6f83a"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})

3.912088052s ago: executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
r1 = creat(0x0, 0x43)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000000380)})
r3 = socket(0x2, 0x3, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x24004000, &(0x7f0000000140)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f00000031c0)={0xa, 0x4f22, 0xffffff01, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}, 0x1c)
setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x10, &(0x7f00000000c0)={0x0, [0x10002]}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003180)={'wlan1\x00'})
bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000005800)={'batadv_slave_1\x00'})
bind$inet6(r0, &(0x7f0000005a40)={0xa, 0x4e24, 0x80000000, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
getsockname$packet(r1, &(0x7f0000005a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005ac0)=0x14)
sendmmsg$inet6(r3, &(0x7f0000005d40)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x397}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000580)="164249f473736e35b3be5c0751918a242d2afc92b6ac5c175525231dd9a43765edc1cbb2666f9766d47a08b5e5683c0213c884fc21bb22efe41183bd1aad01d223796ab8994d9b1d54f12b0c5e4c6fd951273fdd7c0de2d3ff50cd7d7a01af5f20c6f42485880b8203f841ee4464688357b688156ad0f02c653765a5e3e492a850cc685437b7eb8bc47072599f8f898a88b9b612f9fb976d", 0x98}, {&(0x7f0000000640)="48d771178c38096ebefb7d4986d84c1a34147747cce8f2949cf4e09d1517bc4023789754d03322f7052eb2f094421a7ff32f40", 0x33}, {&(0x7f00000006c0)="975d3af315cacedde653a4fcde449cceb9bb1c07a28db71bcd2b16567cbbf036551d5eec703785cba78d22cfbacbafe59809e0a8e2e62f8f5a2e9421f608", 0x3e}], 0x3, &(0x7f0000000980)=[@rthdr={{0x28, 0x29, 0x39, {0x89, 0x2, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x14}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x6, 0x10, 0x0, 0x1f, 0x0, [@local, @empty, @empty, @local, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x3b, 0x14, 0x1, 0xeb, 0x0, [@local, @loopback, @empty, @mcast2, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x2d}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @dev={0xfe, 0x80, '\x00', 0x38}]}}}], 0x190}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x7ff, @private0, 0x3}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000780)="64314ffb2167ed7aab65c2ca7ac8b238d06fb197fa539b02c3c5", 0x1a}, {&(0x7f0000000b40)="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", 0xfe}, {&(0x7f0000000c40)}, {&(0x7f0000001140)}, {&(0x7f0000000cc0)="55d8b61b948f9dc7de3ca3a150e521bb56e91c17810e5fd45f6c20991e01b343bd0ceca9d9504858292aa48c3bf76069b842a0bb5128", 0x36}], 0x5, &(0x7f0000000ec0)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x24, 0xa, '\x00', [@hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x30, {0x0, 0xa, 0x8b, 0x400, [0x3, 0xffffffffffffffff, 0x1, 0x2, 0x0]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x81}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x31}}, @tclass={{0x14, 0x29, 0x43, 0x73}}, @rthdrdstopts={{0x18}}], 0xb8}}, {{&(0x7f0000000d40)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000003140)=[{&(0x7f0000003740)}, {&(0x7f0000004740)="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", 0xffe}, {&(0x7f0000005740)="eb2aae2e19e741239f860a4362310c8013c03fe8d2c79ee4b6ebf73c9f32da71dc71bd10fa72c3cede889c16262f1fb35d63970756793c3eb72782a378c15693605300db6f2519480fd9d19d54ea0c04c421129f0e58966a631654054361abd474c29115345644581cf0ff30cf6a1dea5051b8670d457076df52bf4b33a7fa50910f384ec9252a5d43cb5c5e4d21e0a3fe5771f5c33aa745de19e2c1236be5b4bde25fceae463d36dd5244ec59de2fe64cde733c", 0xb4}], 0x3, &(0x7f0000005840)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @hopopts={{0x20, 0x29, 0x36, {0x32, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@pad1, @jumbo, @pad1]}}}, @rthdr={{0x18, 0x29, 0x39, {0x29, 0x0, 0x2, 0x6}}}], 0x90}}], 0x3, 0x4000)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)
syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

3.298437436s ago: executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/sco\x00')
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000080))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$snddsp(r5, &(0x7f00000000c0)="8e", 0x1)
copy_file_range(r5, &(0x7f00000001c0), r4, 0x0, 0xffffffffa003e45c, 0x700000000000000)
lseek(r0, 0x10004e9, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

1.909193448s ago: executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000130700000000000000007f00000100000000000000000000000000003321acbec07e3d3b00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}}, 0x0)

1.856882246s ago: executing program 1:
socket$kcm(0x10, 0x2, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f00000002c0)="d2", 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x20000000}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r0, &(0x7f0000000780), &(0x7f00000007c0)=""/48}, 0x20)

1.791721356s ago: executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff5f9ab86a0800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5100000007000042009ce6f83a"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})

1.70180474s ago: executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x14, r1, 0x1}, 0x14}}, 0x0)

1.680519433s ago: executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r0, 0x0)
shutdown(r0, 0x0)

1.644320979s ago: executing program 1:
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0)
ftruncate(r0, 0x7fff)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)

1.552592723s ago: executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000002880)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x18)

1.411649774s ago: executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}, @TCA_STAB={0x4}]}, 0x4c}}, 0x0)

1.37478162s ago: executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}}, 0x0)

513.680562ms ago: executing program 2:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

505.975383ms ago: executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bbf8c07", "e0e0ffffff000024"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38)
close(r0)

501.490263ms ago: executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@multicast2}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

488.135856ms ago: executing program 4:
r0 = socket$l2tp(0x2, 0x2, 0x73)
connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80)

462.6041ms ago: executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
lseek(r0, 0x6, 0x0)
getdents64(r0, 0xffffffffffffffff, 0x43)

459.03032ms ago: executing program 1:
syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x90, &(0x7f0000000280), 0xfb, 0x1117, &(0x7f00000024c0)="$eJzs2cFq1FAUBuD/JqPtbiTug6ALF1JaxgewC4XZutWNSEGwqw4Iiq/hG/gWvoJ25b50r4uCSyESM3GqDKh0KgjfB8k9OcnJyV3emwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvknwqyfUqacZclaQkbXs8P03Sjvlr7+sqJQ8P5ov7R7MHiyT198fLo6T0VX1Zmr2b282smTV7zd17+7c+LF6+ev7k8PDgaPmakjYnZxudRRlP9flc2WgPAAAA+G91FzbNmxd/0unqJfUHAAAAfmfT+wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6ubruJmDKokJWnb4/lpknZN3ZV/9H0AAADAxZVUeTxdlx+2AVbu5OO0/Mj345fSx7t5u6YeAAAAWHn27qfLbmsZnP+//rUb9Ovu25kM6/Lt4d6NTLKzM8TLIZ/3kzrJ7i+9Ts5ePx2P0tXJ1uXMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//YwzhLg==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfea7)
ftruncate(r0, 0x1001)

381.737392ms ago: executing program 4:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r0, 0x0)
shutdown(r0, 0x0)

332.982749ms ago: executing program 0:
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)=ANY=[@ANYBLOB="626172726965722c6e6f646973636172642c6e6f7265636f766572790000726465723d7374726963742c6e6f626172726965722c6f726465723d73ef726963742c6e6f646973636172642c6f726465723d72656c617865642c2c"], 0x3, 0xebd, &(0x7f0000004540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0185879, &(0x7f0000000b00)={0x1, 0x300, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

287.473726ms ago: executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000002880)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x18)

180.893842ms ago: executing program 4:
io_setup(0x0, 0xffffffffffffffff)

39.917284ms ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}, @TCA_STAB={0x4}]}, 0x4c}}, 0x0)

5.904159ms ago: executing program 0:
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x6b)
getrlimit(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0)
close(r2)

0s ago: executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/sco\x00')
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000080))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$snddsp(r5, &(0x7f00000000c0)="8e", 0x1)
copy_file_range(r5, &(0x7f00000001c0), r4, 0x0, 0xffffffffa003e45c, 0x700000000000000)
lseek(r0, 0x10004e9, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

kernel console output (not intermixed with test programs):

er this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.422708][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.441928][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.449322][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.501233][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.541776][ T5034] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  144.555497][ T5034] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  144.636545][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  144.761713][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  144.783448][ T5179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.871308][ T5179] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.933176][ T3585] Bluetooth: hci2: command tx timeout
[  144.961402][ T5107] device hsr_slave_0 entered promiscuous mode
[  144.980374][ T5107] device hsr_slave_1 entered promiscuous mode
[  144.993610][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.001892][ T5107] Cannot create hsr debugfs directory
[  145.049932][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  145.052973][  T153] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  145.089879][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  145.274783][ T4955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.412968][ T3581] Bluetooth: hci3: command tx timeout
[  145.493609][ T5034] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.595146][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  145.610640][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.623348][  T153] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  145.636650][ T5034] 8021q: adding VLAN 0 to HW filter on device team0
[  145.642662][  T153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.652005][  T153] usb 3-1: Product: syz
[  145.676849][  T153] usb 3-1: Manufacturer: syz
[  145.681497][  T153] usb 3-1: SerialNumber: syz
[  145.697476][  T153] usb 3-1: config 0 descriptor??
[  145.732345][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  145.753819][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.780140][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.787368][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.805386][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  145.820137][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  145.858711][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.865903][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.950377][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  145.969851][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  145.976134][  T153] usb 3-1: USB disconnect, device number 2
[  145.993741][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  146.028004][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  146.055940][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  146.075373][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  146.092334][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  146.101983][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  146.114171][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  146.125396][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  146.134767][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  146.143983][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  146.195432][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  146.263646][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  146.279316][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  146.370569][ T4955] device veth0_vlan entered promiscuous mode
[  146.389161][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  146.414503][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  146.437305][ T4955] device veth1_vlan entered promiscuous mode
[  146.458567][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  146.476162][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  146.494663][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  146.649971][ T5241] loop1: detected capacity change from 0 to 256
[  146.703682][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  146.712116][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  146.767479][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  146.869886][ T5034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.893635][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  146.902321][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  146.946805][ T4955] device veth0_macvtap entered promiscuous mode
[  146.972250][ T5248] loop2: detected capacity change from 0 to 512
[  146.980603][ T5248] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  147.013006][ T3581] Bluetooth: hci2: command tx timeout
[  147.014649][ T5149] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  147.031435][ T5149] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  147.031570][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  147.047521][ T5149] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  147.069720][ T4955] device veth1_macvtap entered promiscuous mode
[  147.082290][ T5248] EXT4-fs (loop2): failed to initialize system zone (-117)
[  147.127483][ T5248] EXT4-fs (loop2): mount failed
[  147.140059][   T11] device hsr_slave_0 left promiscuous mode
[  147.156288][   T11] device hsr_slave_1 left promiscuous mode
[  147.180734][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.212389][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.399492][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.407748][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.417429][   T11] device bridge_slave_1 left promiscuous mode
[  147.424189][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.434411][   T11] device bridge_slave_0 left promiscuous mode
[  147.440656][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.564253][ T3585] Bluetooth: hci3: command tx timeout
[  147.578335][   T11] device hsr_slave_0 left promiscuous mode
[  147.639645][   T11] device hsr_slave_1 left promiscuous mode
[  147.761517][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.012927][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.040589][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.060779][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.079535][   T11] device bridge_slave_1 left promiscuous mode
[  148.089542][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.108714][   T11] device bridge_slave_0 left promiscuous mode
[  148.119422][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.142070][   T11] device hsr_slave_0 left promiscuous mode
[  148.157308][   T11] device hsr_slave_1 left promiscuous mode
[  148.168397][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.176672][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.186924][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.194982][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.205342][   T11] device bridge_slave_1 left promiscuous mode
[  148.212105][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.221753][   T11] device bridge_slave_0 left promiscuous mode
[  148.228408][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.247634][   T11] device veth1_macvtap left promiscuous mode
[  148.253886][   T11] device veth0_macvtap left promiscuous mode
[  148.260147][   T11] device veth1_vlan left promiscuous mode
[  148.266514][   T11] device veth0_vlan left promiscuous mode
[  148.275009][   T11] device veth1_macvtap left promiscuous mode
[  148.281530][   T11] device veth0_macvtap left promiscuous mode
[  148.288261][   T11] device veth1_vlan left promiscuous mode
[  148.294297][   T11] device veth0_vlan left promiscuous mode
[  148.304560][   T11] device veth1_macvtap left promiscuous mode
[  148.310780][   T11] device veth0_macvtap left promiscuous mode
[  148.315120][ T5260] loop1: detected capacity change from 0 to 32768
[  148.318650][   T11] device veth1_vlan left promiscuous mode
[  148.330810][ T5260] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5260)
[  148.343966][   T11] device veth0_vlan left promiscuous mode
[  148.364395][ T5260] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.404069][ T5260] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  148.432993][ T5260] BTRFS info (device loop1): using free space tree
[  148.637850][ T5260] BTRFS info (device loop1): enabling ssd optimizations
[  148.714228][ T4606] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  149.023972][   T11] team0 (unregistering): Port device team_slave_1 removed
[  149.083358][   T11] team0 (unregistering): Port device team_slave_0 removed
[  149.099091][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.115182][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.225760][ T5283] syz-executor.1 (pid 5283) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  149.573031][ T3585] Bluetooth: hci3: command tx timeout
[  149.920659][   T11] bond0 (unregistering): Released all slaves
[  150.096048][   T11] team0 (unregistering): Port device team_slave_1 removed
[  150.110648][   T11] team0 (unregistering): Port device team_slave_0 removed
[  150.124186][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.141759][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.200338][   T11] bond0 (unregistering): Released all slaves
[  150.312424][   T11] team0 (unregistering): Port device team_slave_1 removed
[  150.327352][   T11] team0 (unregistering): Port device team_slave_0 removed
[  150.341536][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.356447][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.419242][   T11] bond0 (unregistering): Released all slaves
[  150.458835][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.469916][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.481454][ T4955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.510556][ T5258] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  150.521728][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.533050][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.543361][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.556089][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.571887][ T4955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.612153][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  150.624612][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  150.633939][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  150.647866][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.666840][ T5107] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  150.727825][ T4955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.740469][ T4955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.759536][ T4955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.770926][ T4955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.789479][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  150.801497][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.821039][ T5107] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  150.873537][ T5107] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  150.901503][ T5107] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  150.943521][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  150.952076][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  151.041725][ T5034] device veth0_vlan entered promiscuous mode
[  151.055281][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  151.074338][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  151.088761][ T5303] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  151.115234][ T5303] team0: Port device netdevsim0 added
[  151.171475][ T5308] IPVS: length: 190 != 8
[  151.187149][ T5034] device veth1_vlan entered promiscuous mode
[  151.302251][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.325546][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.404807][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  151.419404][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  151.443900][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  151.464243][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  151.479826][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  151.685514][  T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.686457][ T5034] device veth0_macvtap entered promiscuous mode
[  151.696251][  T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.704256][ T5034] device veth1_macvtap entered promiscuous mode
[  152.553141][   T26] audit: type=1804 audit(2000000081.920:13): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2678514202/syzkaller.Gj7uZh/49/bus" dev="sda1" ino=1947 res=1 errno=0
[  152.585278][   T26] audit: type=1804 audit(2000000081.940:14): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2678514202/syzkaller.Gj7uZh/49/bus" dev="sda1" ino=1947 res=1 errno=0
[  152.625621][   T26] audit: type=1804 audit(2000000081.950:15): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2678514202/syzkaller.Gj7uZh/49/bus" dev="sda1" ino=1947 res=1 errno=0
[  152.633775][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  152.793615][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  152.805694][ T5332] loop2: detected capacity change from 0 to 1024
[  152.838637][ T5332] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869)
[  152.849574][ T5332] EXT4-fs (loop2): invalid journal inode
[  152.875605][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  152.884636][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  152.892518][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  152.973645][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.013244][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.060906][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.074306][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.085945][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.136690][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.232970][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  153.241749][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  153.588595][ T5347] loop4: detected capacity change from 0 to 512
[  153.988007][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.007413][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.018503][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.029024][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.038863][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.049479][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.087959][ T5347] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz-executor.4: Parent and EA inode have the same ino 15
[  154.107773][ T5347] EXT4-fs (loop4): Remounting filesystem read-only
[  154.122870][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.145259][ T5348] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  154.154324][ T5347] EXT4-fs (loop4): 1 orphan inode deleted
[  154.176340][ T5347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  154.189622][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  154.233758][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  154.297578][ T5107] 8021q: adding VLAN 0 to HW filter on device team0
[  154.323861][ T5034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.333672][ T5034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.340317][ T5359] loop1: detected capacity change from 0 to 128
[  154.362746][ T5034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.406987][ T5034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.445552][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.461178][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.056770][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.101946][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.162489][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.169698][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.185911][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.202336][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.211717][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.218859][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.228016][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.256087][ T1491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.264607][ T4955] EXT4-fs (loop4): unmounting filesystem.
[  155.404429][ T1491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.424408][ T1491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.459812][ T1491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.512111][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.531486][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.552403][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.575578][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.611527][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.651597][ T5381] loop2: detected capacity change from 0 to 512
[  155.674806][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.702545][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.720126][ T5381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  155.729232][ T5381] ext4 filesystem being mounted at /root/syzkaller-testdir2678514202/syzkaller.Gj7uZh/57/bus supports timestamps until 2038 (0x7fffffff)
[  156.739253][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.779170][ T4530] EXT4-fs (loop2): unmounting filesystem.
[  156.815194][  T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.851311][  T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.897757][ T5038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.935263][ T5038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.966694][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  157.000424][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  157.370514][ T5401] loop3: detected capacity change from 0 to 256
[  157.636377][ T5374] loop4: detected capacity change from 0 to 32768
[  157.862259][ T5374] XFS (loop4): Mounting V5 Filesystem
[  157.893566][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  157.901110][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  157.967974][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.013889][ T5374] XFS (loop4): Ending clean mount
[  158.151798][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  158.203594][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  158.232206][ T5374] syz-executor.4 (5374) used greatest stack depth: 19240 bytes left
[  158.265004][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  158.273822][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  158.291907][ T4955] XFS (loop4): Unmounting Filesystem
[  158.304486][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  158.331134][   T26] audit: type=1326 audit(2000000088.380:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96c7cf29 code=0x7ffc0000
[  158.379514][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  158.406615][ T5107] device veth0_vlan entered promiscuous mode
[  158.453495][ T5107] device veth1_vlan entered promiscuous mode
[  158.458605][   T26] audit: type=1326 audit(2000000088.380:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96c7cf29 code=0x7ffc0000
[  158.518997][   T26] audit: type=1326 audit(2000000088.380:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb96c7cf29 code=0x7ffc0000
[  158.583049][ T5150] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  158.621784][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  158.630809][   T26] audit: type=1326 audit(2000000088.380:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96c7cf29 code=0x7ffc0000
[  158.641749][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  158.688843][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  158.718030][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  158.747922][   T26] audit: type=1326 audit(2000000088.380:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb96c7cf29 code=0x7ffc0000
[  158.774344][ T5107] device veth0_macvtap entered promiscuous mode
[  158.852166][ T5107] device veth1_macvtap entered promiscuous mode
[  158.893218][ T5150] usb 3-1: Using ep0 maxpacket: 32
[  158.912177][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  158.923808][   T26] audit: type=1326 audit(2000000088.420:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96c7cf29 code=0x7ffc0000
[  158.924968][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  159.051760][   T26] audit: type=1326 audit(2000000088.420:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb96c7a6a7 code=0x7ffc0000
[  159.081967][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.092947][ T5150] usb 3-1: New USB device found, idVendor=06e1, idProduct=0009, bcdDevice=8b.dc
[  159.147352][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.152817][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.179713][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.191360][   T26] audit: type=1326 audit(2000000088.420:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb96c40379 code=0x7ffc0000
[  159.213780][ T5150] usb 3-1: config 0 descriptor??
[  159.258937][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.294720][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.311699][   T26] audit: type=1326 audit(2000000088.420:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7ffb96c7cf29 code=0x7ffc0000
[  159.346201][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.384710][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.420730][   T26] audit: type=1326 audit(2000000088.420:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb96c7a6a7 code=0x7ffc0000
[  159.449300][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  159.461852][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  159.491621][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.514503][ T5150] kaweth 3-1:0.0: Firmware present in device.
[  159.572351][ T5150] kaweth 3-1:0.0: Error reading configuration (-71), no net device created
[  159.592901][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.601711][ T5150] kaweth: probe of 3-1:0.0 failed with error -5
[  159.602734][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.657731][ T5150] usb 3-1: USB disconnect, device number 3
[  159.679307][ T5454] tmpfs: Bad value for 'mpol'
[  159.687655][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.716811][ T5457] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  159.735514][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.800142][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.839200][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.851388][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.868541][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.883542][ T5457] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  159.923008][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  159.937127][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  159.964402][ T5107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.026383][ T5107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.076959][ T5107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.110108][ T5107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.263005][ T3650] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  161.212024][ T5038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.244873][ T3650] usb 4-1: Using ep0 maxpacket: 8
[  161.266807][ T5038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.318828][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.336317][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  161.347123][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.372140][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  161.383114][ T3650] usb 4-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=af.02
[  161.434281][ T3650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.483704][ T3650] usb 4-1: config 0 descriptor??
[  161.496679][ T5490] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  161.547197][ T5490] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  161.762241][ T3650] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  161.776278][ T5498] loop2: detected capacity change from 0 to 4096
[  161.846466][ T5498] ntfs: volume version 3.1.
[  162.060901][ T5495] loop4: detected capacity change from 0 to 32768
[  162.068148][ T3650] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  162.084065][ T3650] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  162.122694][ T3622] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  162.149521][ T3650] asix: probe of 4-1:0.0 failed with error -71
[  162.160264][ T3650] usb 4-1: USB disconnect, device number 2
[  162.176598][ T5495] XFS (loop4): Mounting V5 Filesystem
[  162.951094][ T5495] XFS (loop4): Ending clean mount
[  162.963162][ T3622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.988100][ T3622] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  163.002462][ T3622] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  163.012195][ T3622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.040597][ T5495] XFS (loop4): Quotacheck needed: Please wait.
[  163.064957][ T3622] usb 1-1: config 0 descriptor??
[  163.111200][ T5495] XFS (loop4): Quotacheck: Done.
[  163.269536][ T4955] XFS (loop4): Unmounting Filesystem
[  163.345372][   T26] kauditd_printk_skb: 23 callbacks suppressed
[  163.345388][   T26] audit: type=1326 audit(2000000093.400:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa01e7a6a7 code=0x7ffc0000
[  163.444458][   T26] audit: type=1326 audit(2000000093.400:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa01e40379 code=0x7ffc0000
[  163.521694][   T26] audit: type=1326 audit(2000000093.400:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa01e7a6a7 code=0x7ffc0000
[  163.571589][   T26] audit: type=1326 audit(2000000093.400:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa01e40379 code=0x7ffc0000
[  163.618890][   T26] audit: type=1326 audit(2000000093.400:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa01e7a6a7 code=0x7ffc0000
[  163.643894][ T3622] usbhid 1-1:0.0: can't add hid device: -71
[  163.650011][ T3622] usbhid: probe of 1-1:0.0 failed with error -71
[  163.660023][ T3622] usb 1-1: USB disconnect, device number 3
[  163.669123][   T26] audit: type=1326 audit(2000000093.400:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa01e40379 code=0x7ffc0000
[  163.697210][   T26] audit: type=1326 audit(2000000093.420:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7ffa01e7cf29 code=0x7ffc0000
[  163.731562][   T26] audit: type=1326 audit(2000000093.420:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa01e7a6a7 code=0x7ffc0000
[  163.782906][   T26] audit: type=1326 audit(2000000093.420:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa01e40379 code=0x7ffc0000
[  163.800128][ T5549] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'.
[  163.822056][ T5549] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'.
[  163.826123][   T26] audit: type=1326 audit(2000000093.420:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa01e7a6a7 code=0x7ffc0000
[  163.969533][ T5545] loop2: detected capacity change from 0 to 32768
[  164.063891][ T5545] XFS (loop2): Mounting V5 Filesystem
[  164.073929][ T5565] ebt_limit: overflow, try lower: 570423552/2483027968
[  164.160556][ T5575] loop3: detected capacity change from 0 to 512
[  164.171256][ T5545] XFS (loop2): Ending clean mount
[  164.207721][ T5579] loop4: detected capacity change from 0 to 256
[  164.226309][ T5575] EXT4-fs (loop3): 1 truncate cleaned up
[  164.233503][ T5575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  164.265736][ T4530] XFS (loop2): Unmounting Filesystem
[  164.266788][ T5583] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  164.309383][ T5583] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  164.350015][ T5575] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz-executor.3: bg 0: bad block bitmap checksum
[  164.383535][ T5575] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Filesystem failed CRC
[  164.421439][ T5575] EXT4-fs error (device loop3): ext4_free_branches:1043: inode #13: block 234881024: comm syz-executor.3: Read failure
[  164.540727][ T5034] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[  164.579188][ T5591] loop0: detected capacity change from 0 to 4096
[  164.603253][ T5034] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor.3: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  164.632662][ T5034] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor.3: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  164.662609][ T5591] ntfs: volume version 3.1.
[  164.731764][ T5601] ebt_limit: overflow, try lower: 570423552/2483027968
[  164.847801][ T5604] loop2: detected capacity change from 0 to 4096
[  164.863221][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  164.883013][ T4509] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  164.891922][ T5604] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  164.974381][ T5034] EXT4-fs (loop3): unmounting filesystem.
[  165.028932][ T5038] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.058043][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  165.088795][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  165.122938][ T4509] usb 5-1: Using ep0 maxpacket: 8
[  165.137499][ T5038] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.161939][ T5614] device bond0 entered promiscuous mode
[  165.170215][ T5614] device bond_slave_0 entered promiscuous mode
[  165.200980][ T5614] device bond_slave_1 entered promiscuous mode
[  165.214039][ T5614] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  165.221865][ T5614] device bond0 left promiscuous mode
[  165.233163][ T5614] device bond_slave_0 left promiscuous mode
[  165.243064][ T4509] usb 5-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=af.02
[  165.250249][ T5614] device bond_slave_1 left promiscuous mode
[  165.263278][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.269937][ T4509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.279235][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  165.300919][    T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  165.305784][ T4509] usb 5-1: config 0 descriptor??
[  165.310207][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.344956][    T7] usb 2-1: config 0 descriptor??
[  165.354875][ T5619] loop0: detected capacity change from 0 to 512
[  165.370931][ T5038] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.434971][ T5038] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.493974][ T3581] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.505540][ T3581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.515140][ T3584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.528092][ T3584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.535962][ T3584] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  165.543535][ T3584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.583066][ T4509] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  165.620598][ T5626] loop2: detected capacity change from 0 to 4096
[  165.671198][ T5626] ntfs: volume version 3.1.
[  165.862972][ T4509] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  165.893526][ T4509] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  166.761887][ T4509] asix: probe of 5-1:0.0 failed with error -71
[  166.917303][ T4509] usb 5-1: USB disconnect, device number 2
[  166.973478][ T5640] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  166.998834][ T5640] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  167.021615][ T5621] chnl_net:caif_netlink_parms(): no params data found
[  167.049334][    T7] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  167.130365][    T7] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  167.220551][ T5652] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  167.289285][ T5652] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.390942][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.410627][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.430803][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  167.449578][ T5621] device bridge_slave_0 entered promiscuous mode
[  167.477532][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.491595][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.500061][ T5621] device bridge_slave_1 entered promiscuous mode
[  167.541701][ T5665] loop2: detected capacity change from 0 to 512
[  167.572973][ T3584] Bluetooth: hci2: command tx timeout
[  167.590956][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.652191][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.662109][ T5658] loop4: detected capacity change from 0 to 128
[  167.789357][ T5621] team0: Port device team_slave_0 added
[  167.855248][ T5621] team0: Port device team_slave_1 added
[  167.932026][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.015526][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.094640][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.977947][   T26] kauditd_printk_skb: 119 callbacks suppressed
[  168.977966][   T26] audit: type=1804 audit(2000000098.160:151): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2678514202/syzkaller.Gj7uZh/80/bus" dev="sda1" ino=1951 res=1 errno=0
[  169.033676][   T26] audit: type=1804 audit(2000000098.170:152): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2678514202/syzkaller.Gj7uZh/80/bus" dev="sda1" ino=1951 res=1 errno=0
[  169.054540][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.076058][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.092676][   T26] audit: type=1804 audit(2000000098.170:153): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2678514202/syzkaller.Gj7uZh/80/bus" dev="sda1" ino=1951 res=1 errno=0
[  169.120656][  T153] usb 2-1: USB disconnect, device number 3
[  169.177527][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.211603][ T5679] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  169.228772][ T5679] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  169.351868][ T5621] device hsr_slave_0 entered promiscuous mode
[  169.367465][ T5687] loop1: detected capacity change from 0 to 512
[  169.381900][ T5621] device hsr_slave_1 entered promiscuous mode
[  169.389428][ T5687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  169.403919][ T5621] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.416946][ T5621] Cannot create hsr debugfs directory
[  169.452987][ T5150] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  169.487048][ T5687] EXT4-fs error (device loop1): ext4_xattr_block_list:719: inode #15: comm syz-executor.1: corrupted xattr block 33
[  169.555231][ T5038] device hsr_slave_0 left promiscuous mode
[  169.568247][ T4606] EXT4-fs (loop1): unmounting filesystem.
[  169.586747][ T5038] device hsr_slave_1 left promiscuous mode
[  169.610490][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.628552][ T5038] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.640929][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.653045][ T3584] Bluetooth: hci2: command tx timeout
[  169.659430][ T5038] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.689658][ T5038] device bridge_slave_1 left promiscuous mode
[  169.698262][ T5700] loop1: detected capacity change from 0 to 512
[  169.709295][ T5038] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.712864][ T5150] usb 3-1: Using ep0 maxpacket: 8
[  169.747065][ T5038] device bridge_slave_0 left promiscuous mode
[  169.772973][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.793730][ T5038] device veth1_macvtap left promiscuous mode
[  169.799841][ T5038] device veth0_macvtap left promiscuous mode
[  169.806344][ T5038] device veth1_vlan left promiscuous mode
[  169.812186][ T5038] device veth0_vlan left promiscuous mode
[  169.863143][ T5150] usb 3-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=af.02
[  169.872249][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.901828][ T5150] usb 3-1: config 0 descriptor??
[  170.046301][ T5708] mmap: syz-executor.1 (5708) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  170.276488][ T5710] loop1: detected capacity change from 0 to 2048
[  170.293920][ T5150] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  170.322500][ T5710] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2)
[  170.417332][ T5708] fuse: Bad value for 'group_id'
[  170.522999][ T5150] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  170.543481][ T5150] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  170.554005][ T5150] asix: probe of 3-1:0.0 failed with error -71
[  170.566518][ T5150] usb 3-1: USB disconnect, device number 4
[  170.589325][ T5038] team0 (unregistering): Port device team_slave_1 removed
[  170.619245][ T5038] team0 (unregistering): Port device team_slave_0 removed
[  170.634589][ T5038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.650359][ T5038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.729082][ T5038] bond0 (unregistering): Released all slaves
[  170.822446][ T5719] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  170.835305][ T5719] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  171.149829][ T5728] loop1: detected capacity change from 0 to 128
[  172.173569][ T3584] Bluetooth: hci2: command tx timeout
[  172.521080][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  172.530247][ T5725] loop0: detected capacity change from 0 to 32768
[  172.542296][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  172.549532][ T5725] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5725)
[  172.569258][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  172.581900][ T5725] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  172.602939][ T4511] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  172.616567][ T5725] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  172.626382][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  172.641542][ T5725] BTRFS info (device loop0): force zlib compression, level 3
[  172.653354][ T5725] BTRFS info (device loop0): use zlib compression, level 3
[  172.657574][ T5748] IPv6: Can't replace route, no match found
[  172.660572][ T5725] BTRFS info (device loop0): enabling ssd optimizations
[  172.660596][ T5725] BTRFS info (device loop0): using free space tree
[  172.842883][ T4511] usb 3-1: Using ep0 maxpacket: 32
[  172.849169][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.869970][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.879247][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.891072][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[  172.908747][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.926540][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.940513][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.947654][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.963094][ T4511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  172.968690][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  172.984686][ T5725] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  172.987792][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.995032][ T4511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  173.009820][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  173.028252][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.035437][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.045854][ T4511] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  173.048690][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  173.062943][ T4511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.073057][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  173.077235][ T4511] usb 3-1: config 0 descriptor??
[  173.097739][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  173.108796][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  173.117665][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  173.127796][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  173.133610][ T5744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  173.136494][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  173.157367][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  173.177217][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  173.178252][ T4511] hub 3-1:0.0: USB hub found
[  173.200964][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  173.211645][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  173.226438][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  173.240469][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  173.277019][ T3622] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  173.383125][ T4511] hub 3-1:0.0: 2 ports detected
[  173.521091][ T5781] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  173.533028][ T3622] usb 2-1: Using ep0 maxpacket: 8
[  173.610421][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  173.632015][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  173.650463][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.664126][ T3622] usb 2-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=af.02
[  173.683014][ T3622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.713795][ T3622] usb 2-1: config 0 descriptor??
[  173.723068][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  173.731837][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  173.737188][ T5791] loop0: detected capacity change from 0 to 256
[  173.772612][ T5791] FAT-fs (loop0): Directory bread(block 64) failed
[  173.773899][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  173.787146][ T5791] FAT-fs (loop0): Directory bread(block 65) failed
[  173.798038][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  173.806538][ T5791] FAT-fs (loop0): Directory bread(block 66) failed
[  173.818990][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  173.827842][ T5791] FAT-fs (loop0): Directory bread(block 67) failed
[  173.833544][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  173.837784][ T5791] FAT-fs (loop0): Directory bread(block 68) failed
[  173.850474][ T5791] FAT-fs (loop0): Directory bread(block 69) failed
[  173.862250][ T5621] device veth0_vlan entered promiscuous mode
[  173.877569][ T5791] FAT-fs (loop0): Directory bread(block 70) failed
[  173.883098][ T5781] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  173.890871][ T5621] device veth1_vlan entered promiscuous mode
[  173.899382][ T5791] FAT-fs (loop0): Directory bread(block 71) failed
[  173.902602][ T5781] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  173.922448][ T5791] FAT-fs (loop0): Directory bread(block 72) failed
[  173.922951][ T5781] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  173.950396][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  173.952964][ T5781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  173.963475][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  173.982924][ T5781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  173.983103][ T5791] FAT-fs (loop0): Directory bread(block 73) failed
[  173.993098][ T3622] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  174.004247][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  174.030910][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  174.058926][ T5621] device veth0_macvtap entered promiscuous mode
[  174.076020][ T5621] device veth1_macvtap entered promiscuous mode
[  174.101818][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.119948][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.129841][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.151268][ T5793] loop0: detected capacity change from 0 to 128
[  174.159099][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.172020][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.184915][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.196646][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.208442][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.213212][ T3622] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  174.223311][ T3584] Bluetooth: hci2: command tx timeout
[  174.229132][ T3622] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  174.238289][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.252993][ T3622] asix: probe of 2-1:0.0 failed with error -71
[  174.259512][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.271962][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.282312][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.295273][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.298810][ T3622] usb 2-1: USB disconnect, device number 4
[  174.312847][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.323325][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.334505][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.341876][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  174.351202][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  174.365513][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  174.380306][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.402735][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  174.411272][ T5781] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  174.426776][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.437723][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  174.450354][ T5781] usb 5-1: Product: Д
[  174.455829][ T5781] usb 5-1: Manufacturer: ц
[  174.470314][ T5621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.474543][ T5781] usb 5-1: config 0 descriptor??
[  174.489473][ T5621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.509381][ T5621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.519645][ T5621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.533722][ T5781] hub 5-1:0.0: bad descriptor, ignoring hub
[  174.544410][ T5781] hub: probe of 5-1:0.0 failed with error -5
[  174.565758][ T5781] input: ц Д as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5
[  174.665897][ T3723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.680874][ T3723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.702641][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  174.729546][ T3723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.745615][ T3723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.760747][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  174.926073][ T5806] loop3: detected capacity change from 0 to 512
[  174.946924][ T5805] loop0: detected capacity change from 0 to 512
[  174.957821][ T5806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  174.977633][ T5806] EXT4-fs error (device loop3): ext4_xattr_block_list:719: inode #15: comm syz-executor.3: corrupted xattr block 33
[  175.052396][ T5621] EXT4-fs (loop3): unmounting filesystem.
[  175.260328][ T5808] loop1: detected capacity change from 0 to 32768
[  175.272528][ T4511] hub 3-1:0.0: hub_ext_port_status failed (err = 0)
[  175.284195][ T5808] XFS: ikeep mount option is deprecated.
[  175.295464][ T5808] XFS: ikeep mount option is deprecated.
[  175.334353][ T5808] XFS (loop1): Mounting V5 Filesystem
[  175.348985][ T5781] usb 5-1: USB disconnect, device number 3
[  175.363383][ T5830] loop0: detected capacity change from 0 to 256
[  175.442458][ T5830] FAT-fs (loop0): Directory bread(block 64) failed
[  175.454544][ T5808] XFS (loop1): Ending clean mount
[  175.460270][ T5830] FAT-fs (loop0): Directory bread(block 65) failed
[  175.475018][ T5808] XFS (loop1): Quotacheck needed: Please wait.
[  175.481543][ T5830] FAT-fs (loop0): Directory bread(block 66) failed
[  175.511925][ T5830] FAT-fs (loop0): Directory bread(block 67) failed
[  175.548333][ T5808] XFS (loop1): Quotacheck: Done.
[  175.560252][ T5830] FAT-fs (loop0): Directory bread(block 68) failed
[  175.569105][ T5830] FAT-fs (loop0): Directory bread(block 69) failed
[  175.580452][ T4511] usb 3-1: reset high-speed USB device number 5 using dummy_hcd
[  175.584939][ T5830] FAT-fs (loop0): Directory bread(block 70) failed
[  175.610100][ T5830] FAT-fs (loop0): Directory bread(block 71) failed
[  175.619649][ T5830] FAT-fs (loop0): Directory bread(block 72) failed
[  175.629307][  T153] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  175.640297][ T5830] FAT-fs (loop0): Directory bread(block 73) failed
[  176.704253][   T26] audit: type=1804 audit(2000000105.780:154): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4201107083/syzkaller.samPkA/31/bus" dev="sda1" ino=1958 res=1 errno=0
[  176.787417][ T4606] XFS (loop1): Unmounting Filesystem
[  176.813098][   T26] audit: type=1804 audit(2000000105.800:155): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4201107083/syzkaller.samPkA/31/bus" dev="sda1" ino=1958 res=1 errno=0
[  176.884593][   T26] audit: type=1804 audit(2000000105.810:156): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4201107083/syzkaller.samPkA/31/bus" dev="sda1" ino=1958 res=1 errno=0
[  177.105785][ T5844] loop2: detected capacity change from 0 to 128
[  177.211865][ T5844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  177.248034][ T5844] ext4 filesystem being mounted at /root/syzkaller-testdir2678514202/syzkaller.Gj7uZh/85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  177.393107][  T153] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=68.24
[  177.434735][  T153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.449298][  T153] usb 4-1: Product: syz
[  177.453671][  T153] usb 4-1: Manufacturer: syz
[  177.458273][  T153] usb 4-1: SerialNumber: syz
[  177.609792][ T5776] usb 3-1: USB disconnect, device number 5
[  177.623266][ T4511] hub 3-1:0.0: set hub depth failed
[  178.139064][  T153] usb 4-1: config 0 descriptor??
[  178.312260][ T4530] EXT4-fs (loop2): unmounting filesystem.
[  178.518303][ T5875] loop2: detected capacity change from 0 to 256
[  178.622002][ T5875] FAT-fs (loop2): Directory bread(block 64) failed
[  178.649498][ T5875] FAT-fs (loop2): Directory bread(block 65) failed
[  178.671995][ T5875] FAT-fs (loop2): Directory bread(block 66) failed
[  178.691303][ T5875] FAT-fs (loop2): Directory bread(block 67) failed
[  178.711360][ T5875] FAT-fs (loop2): Directory bread(block 68) failed
[  178.736420][ T5875] FAT-fs (loop2): Directory bread(block 69) failed
[  178.766789][ T5875] FAT-fs (loop2): Directory bread(block 70) failed
[  178.786171][ T5875] FAT-fs (loop2): Directory bread(block 71) failed
[  178.808296][ T5875] FAT-fs (loop2): Directory bread(block 72) failed
[  178.831319][ T5875] FAT-fs (loop2): Directory bread(block 73) failed
[  178.853837][ T3584] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  178.868490][  T153] usb 4-1: can't set config #0, error -71
[  178.874808][ T3584] Bluetooth: hci4: Injecting HCI hardware error event
[  178.883861][  T153] usb 4-1: USB disconnect, device number 3
[  178.884432][ T3584] Bluetooth: hci4: hardware error 0x00
[  180.450437][ T5913] tmpfs: Bad value for 'nr_blocks'
[  180.735430][ T4509] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  180.912961][ T5776] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  180.933242][ T3584] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  180.992929][ T4509] usb 2-1: Using ep0 maxpacket: 8
[  181.122974][ T4509] usb 2-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config
[  181.234993][ T4509] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  181.256395][ T4509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  181.271717][ T4509] usb 2-1: SerialNumber: syz
[  181.289128][ T4509] usb 2-1: config 0 descriptor??
[  181.313488][ T5919] loop4: detected capacity change from 0 to 32768
[  181.339832][ T5919] XFS: ikeep mount option is deprecated.
[  181.345778][ T5919] XFS: ikeep mount option is deprecated.
[  181.370460][ T5919] XFS (loop4): Mounting V5 Filesystem
[  181.483919][ T5776] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=68.24
[  181.515969][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.542416][ T5776] usb 4-1: Product: syz
[  181.560485][ T5776] usb 4-1: Manufacturer: syz
[  181.571429][ T5776] usb 4-1: SerialNumber: syz
[  181.606695][ T5776] usb 4-1: config 0 descriptor??
[  181.729488][ T4509] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  181.735413][ T5953] tmpfs: Bad value for 'nr_blocks'
[  181.737994][ T5776] ipw 4-1:0.0: IPWireless converter converter detected
[  181.754233][ T4509] usb 2-1: No valid video chain found.
[  181.765770][ T4509] usb 2-1: USB disconnect, device number 5
[  181.775302][ T5919] XFS (loop4): Ending clean mount
[  181.805890][ T5919] XFS (loop4): Quotacheck needed: Please wait.
[  182.673400][ T5919] XFS (loop4): Quotacheck: Done.
[  182.808585][ T4955] XFS (loop4): Unmounting Filesystem
[  183.327854][ T5974] loop4: detected capacity change from 0 to 256
[  183.407446][ T5912] loop3: detected capacity change from 0 to 32768
[  183.462644][ T3616] usb 4-1: USB disconnect, device number 4
[  183.471365][ T5974] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  183.476968][ T3616] ipw 4-1:0.0: device disconnected
[  183.517053][ T5974] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  184.673019][ T5150] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  184.753328][ T5994] netlink: 'syz-executor.1': attribute type 49 has an invalid length.
[  184.792122][ T5994] netlink: 'syz-executor.1': attribute type 49 has an invalid length.
[  184.855815][ T5998] device bridge0 entered promiscuous mode
[  184.871384][ T5998] device bridge0 left promiscuous mode
[  184.922845][ T5150] usb 1-1: Using ep0 maxpacket: 8
[  185.040996][ T6006] loop1: detected capacity change from 0 to 256
[  185.043033][ T5150] usb 1-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config
[  185.070709][ T6006] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  185.112837][ T6006] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  185.153099][ T5150] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  185.173531][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  185.208223][ T5150] usb 1-1: SerialNumber: syz
[  185.219094][ T5150] usb 1-1: config 0 descriptor??
[  185.287154][ T5992] loop4: detected capacity change from 0 to 32768
[  185.295012][ T5992] XFS: ikeep mount option is deprecated.
[  185.300689][ T5992] XFS: ikeep mount option is deprecated.
[  185.317049][ T5992] XFS (loop4): Mounting V5 Filesystem
[  185.377752][ T5996] loop2: detected capacity change from 0 to 32768
[  185.393557][ T5992] XFS (loop4): Ending clean mount
[  185.403318][ T5992] XFS (loop4): Quotacheck needed: Please wait.
[  185.417679][ T5996] XFS (loop2): Mounting V5 Filesystem
[  185.449797][ T5992] XFS (loop4): Quotacheck: Done.
[  185.461719][ T5996] XFS (loop2): Ending clean mount
[  185.474844][ T5996] XFS (loop2): Quotacheck needed: Please wait.
[  185.515074][ T5996] XFS (loop2): Quotacheck: Done.
[  185.522934][ T4955] XFS (loop4): Unmounting Filesystem
[  185.552970][ T5150] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  185.562132][ T5150] usb 1-1: No valid video chain found.
[  185.563688][ T4530] XFS (loop2): Unmounting Filesystem
[  185.569380][ T5150] usb 1-1: USB disconnect, device number 4
[  185.884153][ T6036] loop2: detected capacity change from 0 to 1024
[  185.914675][ T4509] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  186.866623][ T6046] device bridge0 entered promiscuous mode
[  186.877472][ T6046] device bridge0 left promiscuous mode
[  186.919126][ T6051] tmpfs: Bad value for 'nr_blocks'
[  186.932320][ T6054] loop3: detected capacity change from 0 to 256
[  186.960163][ T6054] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0x702b3b70, utbl_chksum : 0xe619d30d)
[  186.979185][   T26] audit: type=1800 audit(2000000117.030:157): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1947 res=0 errno=0
[  187.009012][ T6054] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x20ffffff)
[  187.033222][ T4509] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  187.044110][ T6054] exFAT-fs (loop3): failed to initialize root inode
[  187.044873][ T4509] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  187.064728][ T4509] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  187.078355][ T4509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  187.092131][ T4509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  187.194971][ T6069] loop3: detected capacity change from 0 to 64
[  187.319696][ T6082] loop2: detected capacity change from 0 to 256
[  187.329954][ T6082] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  187.350307][ T6084] device bridge0 entered promiscuous mode
[  187.355546][ T6082] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  187.369939][ T6084] device bridge0 left promiscuous mode
[  187.420918][   T26] audit: type=1800 audit(2000000117.470:158): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1956 res=0 errno=0
[  187.463276][ T5150] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  187.512980][ T4509] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  187.522346][ T4509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.530445][ T4509] usb 2-1: Product: Д
[  187.534704][ T4509] usb 2-1: Manufacturer: ц
[  187.540368][ T4509] usb 2-1: config 0 descriptor??
[  187.583463][ T4509] hub 2-1:0.0: bad descriptor, ignoring hub
[  187.591509][ T4509] hub: probe of 2-1:0.0 failed with error -5
[  187.602241][ T4509] input: ц Д as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6
[  187.609825][ T6091] loop3: detected capacity change from 0 to 256
[  187.641231][ T6091] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0x702b3b70, utbl_chksum : 0xe619d30d)
[  187.655464][ T6091] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x20ffffff)
[  187.671697][ T6091] exFAT-fs (loop3): failed to initialize root inode
[  187.712878][ T5150] usb 1-1: Using ep0 maxpacket: 8
[  187.835301][ T5150] usb 1-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config
[  187.946344][ T5150] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  187.956971][ T6099] loop4: detected capacity change from 0 to 64
[  187.973005][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  188.002965][ T5150] usb 1-1: SerialNumber: syz
[  188.011537][ T5150] usb 1-1: config 0 descriptor??
[  188.083571][ T3585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.094720][ T3585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.103353][ T3585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.112306][ T3585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.122136][ T3585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  188.129527][ T3585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.321946][   T26] audit: type=1800 audit(2000000118.370:159): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1956 res=0 errno=0
[  188.348862][ T3724] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.357036][  T153] usb 2-1: USB disconnect, device number 6
[  188.366870][ T5150] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  188.379180][ T5150] usb 1-1: No valid video chain found.
[  188.388039][ T5150] usb 1-1: USB disconnect, device number 5
[  188.410063][ T6102] chnl_net:caif_netlink_parms(): no params data found
[  188.489721][ T6124] loop4: detected capacity change from 0 to 164
[  188.524720][ T6124] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82
[  188.597491][ T3724] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.628282][   T26] audit: type=1326 audit(2000000118.680:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe65a7cf29 code=0x0
[  188.673064][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.682504][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.698088][ T6102] device bridge_slave_0 entered promiscuous mode
[  188.717840][ T3724] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.740377][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.751566][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.767348][ T6102] device bridge_slave_1 entered promiscuous mode
[  188.779213][ T6129] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
[  188.820208][ T3724] team0: Port device netdevsim0 removed
[  188.829853][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  188.835561][ T3724] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.916245][ T6102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.932310][ T6102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.044522][ T6102] team0: Port device team_slave_0 added
[  189.092252][ T6102] team0: Port device team_slave_1 added
[  189.257304][ T6142] loop0: detected capacity change from 0 to 2048
[  189.281026][ T6142] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2)
[  189.435564][ T6140] fuse: Bad value for 'group_id'
[  189.539916][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.560728][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.606823][ T6102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.673391][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.680557][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.713899][ T6102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.871414][ T6156] loop3: detected capacity change from 0 to 4096
[  189.962522][ T6102] device hsr_slave_0 entered promiscuous mode
[  189.979299][ T6102] device hsr_slave_1 entered promiscuous mode
[  189.990756][ T6102] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.012855][ T6102] Cannot create hsr debugfs directory
[  190.053568][ T6156] ntfs3: loop3: failed to convert "0080" to euc-jp
[  190.080888][ T6156] ntfs3: loop3: failed to convert name for inode 1e.
[  190.109220][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  190.213181][ T3584] Bluetooth: hci1: command tx timeout
[  190.213933][ T6165] loop1: detected capacity change from 0 to 1024
[  190.273084][ T5776] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  190.534230][ T5776] usb 1-1: Using ep0 maxpacket: 8
[  191.053410][ T5776] usb 1-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config
[  191.102253][ T6179] loop1: detected capacity change from 0 to 1024
[  191.163300][ T5776] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  191.178540][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  191.197483][ T5776] usb 1-1: SerialNumber: syz
[  191.243725][ T5776] usb 1-1: config 0 descriptor??
[  191.296248][ T4217] hfsplus: b-tree write err: -5, ino 4
[  191.702137][ T6190] loop4: detected capacity change from 0 to 2048
[  191.734034][ T6190] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2)
[  191.786754][ T3724] device hsr_slave_0 left promiscuous mode
[  191.825890][ T6190] fuse: Bad value for 'group_id'
[  191.876166][ T3724] device hsr_slave_1 left promiscuous mode
[  191.893749][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.903416][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.912930][ T5776] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  191.913438][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.919810][ T5776] usb 1-1: No valid video chain found.
[  191.934277][ T5776] usb 1-1: USB disconnect, device number 6
[  191.946838][ T6186] loop3: detected capacity change from 0 to 4096
[  191.953160][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.960555][ T6186] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  191.972206][ T3724] device bridge_slave_1 left promiscuous mode
[  191.982382][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.995230][ T3724] device bridge_slave_0 left promiscuous mode
[  192.002185][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.006682][ T6186] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  192.027820][ T3724] device veth1_macvtap left promiscuous mode
[  192.034230][ T3724] device veth0_macvtap left promiscuous mode
[  192.040487][ T3724] device veth1_vlan left promiscuous mode
[  192.046644][ T3724] device veth0_vlan left promiscuous mode
[  192.111297][ T5621] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  192.292892][ T3584] Bluetooth: hci1: command tx timeout
[  192.554905][ T6224] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  192.593499][ T6224] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  192.615769][ T6221] kvm: emulating exchange as write
[  192.697811][ T6203] loop3: detected capacity change from 0 to 764
[  192.712300][ T3724] team0 (unregistering): Port device team_slave_1 removed
[  192.739459][ T6203] rock: directory entry would overflow storage
[  192.760291][ T6203] rock: sig=0x4654, size=5, remaining=4
[  192.773051][ T3724] team0 (unregistering): Port device team_slave_0 removed
[  192.801778][ T3724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.831009][ T3724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.909868][ T3724] bond0 (unregistering): Released all slaves
[  193.151596][ T6102] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  193.167673][ T6102] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  193.199831][ T6242] device bridge0 entered promiscuous mode
[  193.215671][ T6242] device bridge0 left promiscuous mode
[  193.242707][ T6102] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  193.252749][ T6102] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  193.563247][ T6248] loop1: detected capacity change from 0 to 2048
[  193.584604][ T6248] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2)
[  193.752113][ T6245] fuse: Bad value for 'group_id'
[  193.933028][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.963596][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  193.977669][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  193.999800][ T6102] 8021q: adding VLAN 0 to HW filter on device team0
[  194.031477][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.045947][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.090790][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.097965][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.143369][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  194.154031][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  194.165230][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  194.174151][  T153] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.181265][  T153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.195039][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  194.215696][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  194.222009][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  194.256062][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.341986][ T6102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.372996][ T3585] Bluetooth: hci1: command tx timeout
[  194.453125][ T6102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.517005][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.556263][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.583710][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.624324][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.657701][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.676997][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.699728][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.723400][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.855299][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.880667][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  195.010282][ T3584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  195.020824][ T3584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  195.029679][ T3584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  195.038370][ T3584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  195.046772][ T3584] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  195.057556][ T3584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  196.472101][ T3581] Bluetooth: hci1: command tx timeout
[  196.487887][ T6275] chnl_net:caif_netlink_parms(): no params data found
[  196.685989][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.696834][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  196.712743][ T6102] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.844123][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.854273][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.886099][ T6275] device bridge_slave_0 entered promiscuous mode
[  196.923771][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.946830][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.961585][ T6275] device bridge_slave_1 entered promiscuous mode
[  196.982639][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  196.999196][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  197.077697][ T6102] device veth0_vlan entered promiscuous mode
[  197.090918][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  197.098856][ T3581] Bluetooth: hci4: command tx timeout
[  197.109262][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  197.120622][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.137184][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  197.147855][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  197.165868][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.177056][ T6102] device veth1_vlan entered promiscuous mode
[  197.253091][ T6275] team0: Port device team_slave_0 added
[  197.283531][ T5781] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  197.291791][ T5781] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  197.319707][ T5781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  197.330659][ T5781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  197.343085][ T6275] team0: Port device team_slave_1 added
[  197.351283][ T6102] device veth0_macvtap entered promiscuous mode
[  197.629198][ T6343] loop0: detected capacity change from 0 to 2048
[  197.699285][ T6343] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2)
[  197.727687][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  197.765299][ T6102] device veth1_macvtap entered promiscuous mode
[  197.775178][ T6340] fuse: Bad value for 'group_id'
[  197.805137][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.812213][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.846539][ T6275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.901050][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.913133][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.962152][ T6275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.977913][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.989402][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.001420][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.013735][ T6348] syz-executor.4 sent an empty control message without MSG_MORE.
[  198.024910][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.052611][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.081578][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.101350][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.123281][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  198.132218][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  198.179253][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.203645][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.244965][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.257294][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.268147][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.278780][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.295036][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.306634][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.323378][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.336329][ T6102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.345416][ T6102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.354828][ T6102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.363944][ T6102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.391352][ T6275] device hsr_slave_0 entered promiscuous mode
[  198.400038][ T6275] device hsr_slave_1 entered promiscuous mode
[  198.408980][ T6275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.417071][ T6275] Cannot create hsr debugfs directory
[  198.422710][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  198.449224][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  198.466548][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  198.496305][ T6352] team0: Port device bridge1 added
[  198.528928][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  198.697590][ T5038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.742871][ T5038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.773197][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.781363][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.823568][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  198.840726][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  198.990085][ T6275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.064643][ T6275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.183810][ T3581] Bluetooth: hci4: command tx timeout
[  199.226213][ T6275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.292992][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  199.325890][ T6275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.397002][ T6392] team0: Device ip6tnl0 is of different type
[  199.409323][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  199.732038][ T6275] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  199.767868][ T6275] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  199.852646][ T6408] input: syz1 as /devices/virtual/input/input7
[  199.872932][ T6275] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  199.904484][ T6275] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  200.024054][ T6412] loop4: detected capacity change from 0 to 2048
[  200.101773][ T6412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  200.219471][   T26] audit: type=1804 audit(2000000130.270:161): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4201107083/syzkaller.samPkA/88/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  200.383136][ T6275] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.435682][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.443904][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  200.455068][ T6275] 8021q: adding VLAN 0 to HW filter on device team0
[  200.492932][ T6404] loop2: detected capacity change from 0 to 32768
[  200.522153][ T6404] XFS (loop2): Mounting V5 Filesystem
[  200.527893][ T6418] loop3: detected capacity change from 0 to 764
[  200.535271][ T3724] device hsr_slave_0 left promiscuous mode
[  200.546957][ T6418] rock: directory entry would overflow storage
[  200.553388][ T6418] rock: sig=0x4654, size=5, remaining=4
[  200.559298][ T4955] EXT4-fs (loop4): unmounting filesystem.
[  200.571671][ T3724] device hsr_slave_1 left promiscuous mode
[  200.580380][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.588003][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.609263][ T3724] device bridge_slave_1 left promiscuous mode
[  200.621875][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.640710][ T3724] device bridge_slave_0 left promiscuous mode
[  200.647299][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.653059][ T6404] XFS (loop2): Ending clean mount
[  200.666008][ T6404] XFS (loop2): Quotacheck needed: Please wait.
[  200.672728][ T3724] device veth1_macvtap left promiscuous mode
[  200.685460][ T3724] device veth0_macvtap left promiscuous mode
[  200.691580][ T3724] device veth1_vlan left promiscuous mode
[  200.702718][ T6443] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #-1
[  200.720516][ T3724] device veth0_vlan left promiscuous mode
[  200.754096][ T6404] XFS (loop2): Quotacheck: Done.
[  200.848085][   T26] audit: type=1804 audit(2000000130.900:162): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1432798658/syzkaller.XRHv1l/4/file7/cgroup.controllers" dev="loop2" ino=4426 res=1 errno=0
[  200.935697][ T6102] XFS (loop2): Unmounting Filesystem
[  201.074586][ T3724] team0 (unregistering): Port device team_slave_1 removed
[  201.098460][ T3724] team0 (unregistering): Port device team_slave_0 removed
[  201.120818][ T3724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.138000][ T3724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.192753][ T3724] bond0 (unregistering): Released all slaves
[  201.246044][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  201.261303][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  201.263250][ T3581] Bluetooth: hci4: command tx timeout
[  201.270169][  T153] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.282028][  T153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.289990][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.298993][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.307590][  T153] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.314755][  T153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.324930][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  201.340582][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  201.350162][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  201.376617][ T6275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  201.402586][ T6275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.416808][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  201.428184][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  201.436716][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  201.446828][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  201.455528][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  201.464076][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  201.472495][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  201.481033][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  201.490833][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  201.499201][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  201.764786][ T6459] ALSA: seq fatal error: cannot create timer (-22)
[  202.023102][ T6465] loop4: detected capacity change from 0 to 2048
[  202.378668][ T6465] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2)
[  202.400547][ T6457] loop2: detected capacity change from 0 to 2048
[  202.717924][ T6461] fuse: Bad value for 'group_id'
[  202.793434][ T6457] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  202.849973][ T6457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.903945][ T6457] UBIFS error (pid: 6457): cannot open "uid=ignore,umask=00000000000000000000777,gid=0000000000000000000ubifs", error -22
[  203.100982][ T6477] loop4: detected capacity change from 0 to 2048
[  203.139506][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  203.153673][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  203.164409][ T6477] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  203.171012][ T6479] loop2: detected capacity change from 0 to 2048
[  203.193942][ T6275] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.234883][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  203.251571][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  203.261043][ T6479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  203.291458][ T6275] device veth0_vlan entered promiscuous mode
[  203.300786][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  203.310035][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  203.325142][ T6275] device veth1_vlan entered promiscuous mode
[  203.333324][ T3581] Bluetooth: hci4: command tx timeout
[  203.337087][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  203.347407][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  203.355408][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  203.389268][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  203.403791][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  203.406712][   T26] audit: type=1804 audit(2000000133.460:163): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1432798658/syzkaller.XRHv1l/6/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  203.417930][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  203.464447][ T6275] device veth0_macvtap entered promiscuous mode
[  203.529073][ T6275] device veth1_macvtap entered promiscuous mode
[  203.586449][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.633311][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.644913][ T6469] loop0: detected capacity change from 0 to 32768
[  203.655182][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.682946][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.702867][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.733231][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.752870][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.772923][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.794374][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.804696][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  203.821160][ T6102] EXT4-fs (loop2): unmounting filesystem.
[  203.833894][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  203.842047][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  203.913654][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  203.924459][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.962916][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.976241][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.007873][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.038916][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.072862][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.082716][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.140186][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.177538][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.240174][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  204.249964][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  204.261452][ T6275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.362958][ T5781] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  204.537075][ T6275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.673054][ T5781] usb 3-1: Using ep0 maxpacket: 32
[  204.690931][ T6275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.823507][ T5781] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.962284][ T6275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.045295][ T5781] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  205.058752][ T5781] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1
[  205.069962][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.079633][ T5781] usb 3-1: config 0 descriptor??
[  205.091054][ T6503] loop3: detected capacity change from 0 to 2048
[  205.103593][ T6503] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  205.129099][ T6503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  205.141533][ T5781] usb 3-1: bad CDC descriptors
[  205.155111][ T5781] usb 3-1: bad CDC descriptors
[  205.181197][ T6503] UBIFS error (pid: 6503): cannot open "uid=ignore,umask=00000000000000000000777,gid=0000000000000000000ubifs", error -22
[  205.472905][ T6512] loop4: detected capacity change from 0 to 2048
[  205.510186][ T5781] usb 3-1: USB disconnect, device number 6
[  205.523534][ T6512] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2)
[  205.668763][ T3926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.673410][ T3678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.678617][ T3926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.693330][ T6509] fuse: Bad value for 'group_id'
[  205.710005][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  205.727697][ T3678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.777929][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  207.227757][ T6548] loop3: detected capacity change from 0 to 2048
[  207.328831][ T6563] tun0: tun_chr_ioctl cmd 2147767521
[  207.339261][ T6548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  207.476289][   T26] audit: type=1804 audit(2000000137.530:164): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1991646825/syzkaller.5Q21eJ/55/file0/bus" dev="loop3" ino=18 res=1 errno=0
[  207.505505][ T6567] loop0: detected capacity change from 0 to 256
[  207.583663][ T6561] loop2: detected capacity change from 0 to 8192
[  207.603831][ T6567] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  207.621081][ T6561] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  207.631804][  T153] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  207.760684][ T6572] loop0: detected capacity change from 0 to 1024
[  207.869942][ T5621] EXT4-fs (loop3): unmounting filesystem.
[  207.883025][  T153] usb 5-1: Using ep0 maxpacket: 32
[  208.127957][ T6583] loop0: detected capacity change from 0 to 1024
[  208.136065][  T153] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.146915][  T153] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  208.159969][  T153] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1
[  208.171169][  T153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.181998][  T153] usb 5-1: config 0 descriptor??
[  209.512829][    C1] sched: RT throttling activated
[  209.670466][  T153] usb 5-1: bad CDC descriptors
[  209.679098][  T153] usb 5-1: bad CDC descriptors
[  209.689819][ T6583] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor.0: Invalid inode table block 0 in block_group 0
[  209.707379][  T153] usb 5-1: USB disconnect, device number 4
[  209.729761][ T6583] EXT4-fs (loop0): Remounting filesystem read-only
[  209.740396][ T6583] EXT4-fs (loop0): get root inode failed
[  209.753006][ T6583] EXT4-fs (loop0): mount failed
[  209.882240][ T6583] loop0: detected capacity change from 0 to 1024
[  209.936347][ T6599] loop2: detected capacity change from 0 to 2048
[  209.966023][ T6599] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  209.988659][ T6599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.005093][ T6599] UBIFS error (pid: 6599): cannot open "uid=ignore,umask=00000000000000000000777,gid=0000000000000000000ubifs", error -22
[  210.157934][   T26] audit: type=1326 audit(2000000140.150:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd41a7cf29 code=0x7ffc0000
[  210.884344][   T26] audit: type=1326 audit(2000000140.150:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd41a7cf29 code=0x7ffc0000
[  210.920132][ T6614] tun0: tun_chr_ioctl cmd 2147767521
[  210.988443][   T26] audit: type=1326 audit(2000000140.160:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fdd41a7cf29 code=0x7ffc0000
[  211.013201][   T26] audit: type=1326 audit(2000000140.160:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd41a7cf29 code=0x7ffc0000
[  211.036353][   T26] audit: type=1326 audit(2000000140.160:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd41a7cf29 code=0x7ffc0000
[  211.059344][   T26] audit: type=1326 audit(2000000140.160:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdd41a7cf29 code=0x7ffc0000
[  211.063782][ T6620] loop3: detected capacity change from 0 to 1764
[  211.082198][   T26] audit: type=1326 audit(2000000140.160:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd41a7cf29 code=0x7ffc0000
[  211.128356][   T26] audit: type=1326 audit(2000000140.160:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd41a7cf29 code=0x7ffc0000
[  211.151923][   T26] audit: type=1326 audit(2000000140.160:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd41a7cf29 code=0x7ffc0000
[  211.795376][ T6629] loop4: detected capacity change from 0 to 2048
[  211.855417][ T6635] loop1: detected capacity change from 0 to 1024
[  211.869951][ T6629] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  211.886790][ T6635] EXT4-fs error (device loop1): __ext4_get_inode_loc:4495: comm syz-executor.1: Invalid inode table block 0 in block_group 0
[  211.906387][ T6635] EXT4-fs (loop1): Remounting filesystem read-only
[  211.947173][ T6635] EXT4-fs (loop1): get root inode failed
[  211.973104][ T6635] EXT4-fs (loop1): mount failed
[  211.979188][ T6620] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer.
[  212.096796][ T6635] loop1: detected capacity change from 0 to 1024
[  212.236927][ T5781] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  212.331041][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  212.936497][ T6663] loop1: detected capacity change from 0 to 2048
[  213.035442][ T6663] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2)
[  213.130194][ T6660] fuse: Bad value for 'group_id'
[  213.182981][ T5781] usb 5-1: Using ep0 maxpacket: 32
[  213.448406][ T5781] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.468967][ T5781] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  213.493996][ T5781] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1
[  213.508947][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.586231][ T5781] usb 5-1: config 0 descriptor??
[  213.760408][ T5781] usb 5-1: bad CDC descriptors
[  213.779684][ T5781] usb 5-1: bad CDC descriptors
[  213.912472][ T5781] usb 5-1: USB disconnect, device number 5
[  214.370227][   T26] kauditd_printk_skb: 32 callbacks suppressed
[  214.370242][   T26] audit: type=1800 audit(2000000144.420:206): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1958 res=0 errno=0
[  214.415226][ T6651] loop2: detected capacity change from 0 to 32768
[  214.430827][ T6651] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6651)
[  214.481655][ T6651] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.512892][ T6651] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  214.526386][ T6651] BTRFS info (device loop2): using free space tree
[  214.553055][ T6686] loop1: detected capacity change from 0 to 1764
[  214.560441][ T6691] 9pnet_fd: Insufficient options for proto=fd
[  214.649654][ T6686] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer.
[  214.806176][   T26] audit: type=1326 audit(2000000144.780:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd679c7cf29 code=0x7ffc0000
[  214.806225][   T26] audit: type=1326 audit(2000000144.780:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd679c7cf29 code=0x7ffc0000
[  214.806253][   T26] audit: type=1326 audit(2000000144.780:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fd679c7cf29 code=0x7ffc0000
[  214.806282][   T26] audit: type=1326 audit(2000000144.780:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd679c7cf29 code=0x7ffc0000
[  214.806308][   T26] audit: type=1326 audit(2000000144.780:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd679c7cf29 code=0x7ffc0000
[  214.806338][   T26] audit: type=1326 audit(2000000144.780:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd679c7cf29 code=0x7ffc0000
[  214.806367][   T26] audit: type=1326 audit(2000000144.780:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd679c7cf29 code=0x7ffc0000
[  214.806396][   T26] audit: type=1326 audit(2000000144.780:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd679c7cf29 code=0x7ffc0000
[  214.806425][   T26] audit: type=1326 audit(2000000144.790:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd679c7cf29 code=0x7ffc0000
[  215.691833][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  215.730003][ T6651] BTRFS error (device loop2): open_ctree failed
[  216.003666][ T6733] loop3: detected capacity change from 0 to 2048
[  216.024333][ T6733] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2)
[  216.286663][ T6730] fuse: Bad value for 'group_id'
[  216.734754][ T6759] nft_compat: unsupported protocol 5
[  216.795994][ T6761] loop4: detected capacity change from 0 to 1024
[  216.827523][ T6761] hfsplus: extend alloc file! (8192,512,16777719)
[  216.892875][ T6721] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  216.902357][ T6749] syz-executor.0 (6749) used greatest stack depth: 19192 bytes left
[  216.914470][ T6763] xt_CONNSECMARK: invalid mode: 0
[  217.133789][ T6721] usb 4-1: Using ep0 maxpacket: 32
[  217.137784][ T6770] loop0: detected capacity change from 0 to 1764
[  217.202948][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  217.254742][ T6721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.272879][ T6721] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  217.302696][ T6721] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1
[  217.312645][ T6721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.328440][ T6721] usb 4-1: config 0 descriptor??
[  217.340761][ T6769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer.
[  217.358055][    C0] vkms_vblank_simulate: vblank timer overrun
[  217.377658][ T6721] usb 4-1: bad CDC descriptors
[  217.388939][ T6721] usb 4-1: bad CDC descriptors
[  217.477994][ T6780] 9pnet: p9_errstr2errno: server reported unknown error œæø:
[  217.566839][ T6787] nft_compat: unsupported protocol 5
[  217.587001][ T6721] usb 4-1: USB disconnect, device number 5
[  217.599770][ T6788] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it!
[  217.894913][ T5781] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  217.959008][ T6785] loop2: detected capacity change from 0 to 32768
[  217.991257][ T6785] XFS (loop2): Mounting V5 Filesystem
[  218.063695][ T6785] XFS (loop2): Ending clean mount
[  218.072579][ T6785] XFS (loop2): Quotacheck needed: Please wait.
[  218.128266][ T6785] XFS (loop2): Quotacheck: Done.
[  218.142890][ T5781] usb 1-1: Using ep0 maxpacket: 32
[  218.186857][ T6819] 9pnet: p9_errstr2errno: server reported unknown error œæø:
[  218.187134][ T6102] XFS (loop2): Unmounting Filesystem
[  218.283217][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  218.312048][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  218.312060][ T6822] nft_compat: unsupported protocol 5
[  218.359351][ T5781] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  218.390224][ T5781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.425071][ T5781] usb 1-1: config 0 descriptor??
[  218.453477][ T6790] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  218.483902][ T5781] hub 1-1:0.0: USB hub found
[  218.701704][ T5781] hub 1-1:0.0: 2 ports detected
[  218.796642][ T6834] loop1: detected capacity change from 0 to 8192
[  218.822122][ T6834] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  218.837904][ T6834] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  218.848120][ T6834] REISERFS (device loop1): using ordered data mode
[  218.855106][ T6834] reiserfs: using flush barriers
[  218.863731][ T6834] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  218.882143][ T6834] REISERFS (device loop1): checking transaction log (loop1)
[  218.904963][ T6834] REISERFS (device loop1): Using tea hash to sort names
[  218.927939][ T6834] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  219.220917][ T6841] loop2: detected capacity change from 0 to 32768
[  219.236297][ T6841] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6841)
[  219.256609][ T6841] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  219.267932][ T6841] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  219.276704][ T6841] BTRFS info (device loop2): using free space tree
[  219.324284][ T6848] 9pnet: p9_errstr2errno: server reported unknown error œæø:
[  219.396699][ T6729] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  219.415203][ T6841] BTRFS info (device loop2): enabling ssd optimizations
[  219.526784][ T6102] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  219.646078][ T6729] usb 5-1: Using ep0 maxpacket: 32
[  219.773123][ T6729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.796134][ T6729] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  219.796710][ T6873] nft_compat: unsupported protocol 5
[  219.824646][ T6729] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1
[  219.836985][ T6729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.848809][ T6729] usb 5-1: config 0 descriptor??
[  219.897526][ T6729] usb 5-1: bad CDC descriptors
[  219.904521][ T6729] usb 5-1: bad CDC descriptors
[  220.102626][   T26] kauditd_printk_skb: 19 callbacks suppressed
[  220.102660][   T26] audit: type=1326 audit(2000000150.110:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7d07cf29 code=0x7ffc0000
[  220.102853][   T26] audit: type=1326 audit(2000000150.110:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7d07cf29 code=0x7ffc0000
[  220.103378][   T26] audit: type=1326 audit(2000000150.120:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f4f7d07cf29 code=0x7ffc0000
[  220.103817][   T26] audit: type=1326 audit(2000000150.120:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7d07cf29 code=0x7ffc0000
[  220.104157][   T26] audit: type=1326 audit(2000000150.120:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7d07cf29 code=0x7ffc0000
[  220.105065][   T26] audit: type=1326 audit(2000000150.120:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4f7d07cf29 code=0x7ffc0000
[  220.106968][   T26] audit: type=1326 audit(2000000150.120:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7d07cf29 code=0x7ffc0000
[  220.107269][   T26] audit: type=1326 audit(2000000150.120:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7d07cf29 code=0x7ffc0000
[  220.107457][   T26] audit: type=1326 audit(2000000150.120:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f7d07cf29 code=0x7ffc0000
[  220.107747][   T26] audit: type=1326 audit(2000000150.130:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7d07cf29 code=0x7ffc0000
[  220.163319][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.210307][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.278945][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.324853][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.964395][ T3651] usb 5-1: USB disconnect, device number 6
[  221.306197][ T4509] hub 1-1:0.0: hub_ext_port_status failed (err = 0)
[  221.447603][ T6880] loop3: detected capacity change from 0 to 40427
[  221.471430][ T6880] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  221.489285][ T6880] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  221.508165][ T3651] usb 1-1: USB disconnect, device number 7
[  221.528191][ T6905] 9pnet: p9_errstr2errno: server reported unknown error œæø:
[  221.533885][ T6880] F2FS-fs (loop3): invalid crc value
[  221.582190][ T6880] F2FS-fs (loop3): Found nat_bits in checkpoint
[  221.661839][ T6880] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  221.669359][ T6880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  221.687994][ T6921] loop1: detected capacity change from 0 to 128
[  221.724658][ T6921] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  221.920984][ T6930] ALSA: seq fatal error: cannot create timer (-22)
[  221.921960][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  222.096551][ T6933] syz-executor.3: attempt to access beyond end of device
[  222.096551][ T6933] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  222.780163][ T5621] syz-executor.3: attempt to access beyond end of device
[  222.780163][ T5621] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  222.832292][ T6937] loop2: detected capacity change from 0 to 1024
[  222.857125][ T6943] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  222.883719][ T6937] EXT4-fs: Ignoring removed orlov option
[  222.890205][ T6937] EXT4-fs: Ignoring removed nomblk_io_submit option
[  223.003802][ T6937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  223.035843][ T6948] loop0: detected capacity change from 0 to 4096
[  223.058163][ T6942] loop1: detected capacity change from 0 to 8192
[  223.112225][ T6937] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.2: corrupt xattr in inline inode
[  223.137827][ T6942] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  223.151455][ T6942] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  223.153259][ T6937] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.2: corrupted in-inode xattr
[  223.174700][ T6954] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.175943][ T6942] REISERFS (device loop1): using ordered data mode
[  223.243031][ T6942] reiserfs: using flush barriers
[  223.265116][ T6942] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  223.295764][ T6942] REISERFS (device loop1): checking transaction log (loop1)
[  223.306823][ T6942] REISERFS (device loop1): Using r5 hash to sort names
[  223.313814][ T6942] REISERFS (device loop1): using 3.5.x disk format
[  223.323459][ T6102] ==================================================================
[  223.329668][ T6942] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  223.331610][ T6102] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0
[  223.348580][ T6102] Read of size 4 at addr ffff8880531c2000 by task syz-executor.2/6102
[  223.356803][ T6102] 
[  223.359117][ T6102] CPU: 0 PID: 6102 Comm: syz-executor.2 Not tainted 6.1.94-syzkaller #0
[  223.367422][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  223.377498][ T6102] Call Trace:
[  223.380776][ T6102]  <TASK>
[  223.383712][ T6102]  dump_stack_lvl+0x1e3/0x2cb
[  223.388406][ T6102]  ? nf_tcp_handle_invalid+0x642/0x642
[  223.393874][ T6102]  ? panic+0x764/0x764
[  223.397949][ T6102]  ? _printk+0xd1/0x111
[  223.402108][ T6102]  ? __virt_addr_valid+0x17f/0x520
[  223.407227][ T6102]  ? __virt_addr_valid+0x17f/0x520
2033/05/18 03:35:53 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  223.412344][ T6102]  print_report+0x15f/0x4f0
[  223.416854][ T6102]  ? __virt_addr_valid+0x17f/0x520
[  223.421982][ T6102]  ? __virt_addr_valid+0x17f/0x520
[  223.427096][ T6102]  ? __virt_addr_valid+0x44a/0x520
[  223.432212][ T6102]  ? __phys_addr+0xb6/0x170
[  223.436726][ T6102]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  223.442372][ T6102]  kasan_report+0x136/0x160
[  223.446885][ T6102]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  223.452536][ T6102]  ext4_xattr_delete_inode+0xcd0/0xce0
[  223.458017][ T6102]  ? ext4_blocks_for_truncate+0x270/0x270
[  223.463743][ T6102]  ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0
[  223.469825][ T6102]  ? rcu_read_lock_any_held+0xb3/0x160
[  223.475290][ T6102]  ? ext4_inode_is_fast_symlink+0x262/0x390
[  223.481190][ T6102]  ext4_evict_inode+0xc77/0x1150
[  223.486127][ T6102]  ? _raw_spin_unlock+0x24/0x40
[  223.490969][ T6102]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  223.496855][ T6102]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  223.502733][ T6102]  evict+0x2a4/0x620
[  223.506623][ T6102]  vfs_rmdir+0x381/0x4b0
[  223.510852][ T6102]  do_rmdir+0x3a2/0x590
[  223.515092][ T6102]  ? d_delete_notify+0x150/0x150
[  223.520034][ T6102]  ? syscall_enter_from_user_mode+0x2e/0x230
[  223.526008][ T6102]  __x64_sys_unlinkat+0xdc/0xf0
[  223.530852][ T6102]  do_syscall_64+0x3b/0xb0
[  223.535257][ T6102]  ? clear_bhb_loop+0x45/0xa0
[  223.539927][ T6102]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.545811][ T6102] RIP: 0033:0x7f4f7d07c707
[  223.550217][ T6102] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  223.569806][ T6102] RSP: 002b:00007ffec6a16278 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  223.578217][ T6102] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4f7d07c707
[  223.586170][ T6102] RDX: 0000000000000200 RSI: 00007ffec6a17420 RDI: 00000000ffffff9c
[  223.594123][ T6102] RBP: 00007f4f7d0d96c6 R08: 0000000000000000 R09: 0000000000000000
[  223.602074][ T6102] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffec6a17420
[  223.610028][ T6102] R13: 00007f4f7d0d96c6 R14: 0000000000036639 R15: 0000000000000008
[  223.617989][ T6102]  </TASK>
[  223.620987][ T6102] 
[  223.623288][ T6102] The buggy address belongs to the physical page:
[  223.629689][ T6102] page:ffffea00014c7080 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x531c2
[  223.639817][ T6102] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  223.646918][ T6102] raw: 00fff00000000000 ffffea0001d288c8 ffffea0001d29a88 0000000000000000
[  223.655481][ T6102] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[  223.664038][ T6102] page dumped because: kasan: bad access detected
[  223.670431][ T6102] page_owner tracks the page as freed
[  223.675773][ T6102] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 6880, tgid 6879 (syz-executor.3), ts 221200652175, free_ts 223218533485
[  223.693808][ T6102]  post_alloc_hook+0x18d/0x1b0
[  223.698558][ T6102]  get_page_from_freelist+0x31a1/0x3320
[  223.704091][ T6102]  __alloc_pages+0x28d/0x770
[  223.708662][ T6102]  __folio_alloc+0xf/0x30
[  223.712981][ T6102]  vma_alloc_folio+0x486/0x990
[  223.717736][ T6102]  shmem_alloc_and_acct_folio+0x5a8/0xd50
[  223.723436][ T6102]  shmem_get_folio_gfp+0x13f0/0x3470
[  223.728718][ T6102]  shmem_write_begin+0x16e/0x4e0
[  223.733638][ T6102]  generic_perform_write+0x2fc/0x5e0
[  223.738902][ T6102]  __generic_file_write_iter+0x176/0x400
[  223.744600][ T6102]  generic_file_write_iter+0xab/0x310
[  223.749950][ T6102]  vfs_write+0x7ae/0xba0
[  223.754171][ T6102]  ksys_write+0x19c/0x2c0
[  223.758480][ T6102]  do_syscall_64+0x3b/0xb0
[  223.762881][ T6102]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.768759][ T6102] page last free stack trace:
[  223.773409][ T6102]  free_unref_page_prepare+0xf63/0x1120
[  223.778935][ T6102]  free_unref_page_list+0x663/0x900
[  223.784374][ T6102]  release_pages+0x2836/0x2b40
[  223.789117][ T6102]  __pagevec_release+0x80/0xf0
[  223.793864][ T6102]  shmem_undo_range+0x865/0x2390
[  223.798789][ T6102]  shmem_evict_inode+0x265/0xa60
[  223.803706][ T6102]  evict+0x2a4/0x620
[  223.807590][ T6102]  __dentry_kill+0x436/0x650
[  223.812161][ T6102]  dentry_kill+0xbb/0x290
[  223.816474][ T6102]  dput+0xfb/0x1d0
[  223.820174][ T6102]  __fput+0x5e4/0x890
[  223.824139][ T6102]  task_work_run+0x246/0x300
[  223.828712][ T6102]  exit_to_user_mode_loop+0xde/0x100
[  223.833976][ T6102]  exit_to_user_mode_prepare+0xb1/0x140
[  223.839503][ T6102]  syscall_exit_to_user_mode+0x60/0x270
[  223.845032][ T6102]  do_syscall_64+0x47/0xb0
[  223.849437][ T6102] 
[  223.851740][ T6102] Memory state around the buggy address:
[  223.857347][ T6102]  ffff8880531c1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  223.865390][ T6102]  ffff8880531c1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  223.873431][ T6102] >ffff8880531c2000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  223.881468][ T6102]                    ^
[  223.885512][ T6102]  ffff8880531c2080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  223.893550][ T6102]  ffff8880531c2100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  223.901590][ T6102] ==================================================================
[  223.909636][    C0] vkms_vblank_simulate: vblank timer overrun
[  224.210387][ T6102] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  224.217616][ T6102] CPU: 0 PID: 6102 Comm: syz-executor.2 Not tainted 6.1.94-syzkaller #0
[  224.225942][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  224.235997][ T6102] Call Trace:
[  224.239273][ T6102]  <TASK>
[  224.242197][ T6102]  dump_stack_lvl+0x1e3/0x2cb
[  224.246884][ T6102]  ? nf_tcp_handle_invalid+0x642/0x642
[  224.252344][ T6102]  ? panic+0x764/0x764
[  224.256408][ T6102]  ? preempt_schedule_common+0xa6/0xd0
[  224.261872][ T6102]  ? vscnprintf+0x59/0x80
[  224.266203][ T6102]  panic+0x318/0x764
[  224.270083][ T6102]  ? check_panic_on_warn+0x1d/0xa0
[  224.275176][ T6102]  ? memcpy_page_flushcache+0xfc/0xfc
[  224.280534][ T6102]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  224.286512][ T6102]  ? _raw_spin_unlock+0x40/0x40
[  224.291359][ T6102]  ? print_report+0x4a3/0x4f0
[  224.296030][ T6102]  check_panic_on_warn+0x7e/0xa0
[  224.300960][ T6102]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  224.306589][ T6102]  end_report+0x66/0x110
[  224.310819][ T6102]  kasan_report+0x143/0x160
[  224.315313][ T6102]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  224.320938][ T6102]  ext4_xattr_delete_inode+0xcd0/0xce0
[  224.326388][ T6102]  ? ext4_blocks_for_truncate+0x270/0x270
[  224.332091][ T6102]  ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0
[  224.338143][ T6102]  ? rcu_read_lock_any_held+0xb3/0x160
[  224.343594][ T6102]  ? ext4_inode_is_fast_symlink+0x262/0x390
[  224.349468][ T6102]  ext4_evict_inode+0xc77/0x1150
[  224.354389][ T6102]  ? _raw_spin_unlock+0x24/0x40
[  224.359227][ T6102]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  224.365102][ T6102]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  224.370978][ T6102]  evict+0x2a4/0x620
[  224.374863][ T6102]  vfs_rmdir+0x381/0x4b0
[  224.379089][ T6102]  do_rmdir+0x3a2/0x590
[  224.383231][ T6102]  ? d_delete_notify+0x150/0x150
[  224.388156][ T6102]  ? syscall_enter_from_user_mode+0x2e/0x230
[  224.394120][ T6102]  __x64_sys_unlinkat+0xdc/0xf0
[  224.398954][ T6102]  do_syscall_64+0x3b/0xb0
[  224.403356][ T6102]  ? clear_bhb_loop+0x45/0xa0
[  224.408019][ T6102]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.413895][ T6102] RIP: 0033:0x7f4f7d07c707
[  224.418293][ T6102] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  224.437877][ T6102] RSP: 002b:00007ffec6a16278 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  224.446274][ T6102] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4f7d07c707
[  224.454226][ T6102] RDX: 0000000000000200 RSI: 00007ffec6a17420 RDI: 00000000ffffff9c
[  224.462180][ T6102] RBP: 00007f4f7d0d96c6 R08: 0000000000000000 R09: 0000000000000000
[  224.470136][ T6102] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffec6a17420
[  224.478109][ T6102] R13: 00007f4f7d0d96c6 R14: 0000000000036639 R15: 0000000000000008
[  224.486087][ T6102]  </TASK>
[  224.489322][ T6102] Kernel Offset: disabled
[  224.493718][ T6102] Rebooting in 86400 seconds..