last executing test programs:

4.302315189s ago: executing program 0 (id=648):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0xfffffffffffffffe, 0xff62)

4.252409386s ago: executing program 0 (id=649):
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000000844060f8040000102030109026e0003017f40c1080b01000120300c0904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

3.002205117s ago: executing program 0 (id=663):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

3.00104102s ago: executing program 0 (id=664):
r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

998.619703ms ago: executing program 2 (id=677):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00')
preadv(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0)

890.257994ms ago: executing program 2 (id=680):
r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x2, 0x2000)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000200)={0x3, 0x2, 0x6, 0x16a, 'syz1\x00', 0x10})

832.453752ms ago: executing program 2 (id=681):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x8000, 0x0)
getdents64(r0, &(0x7f0000001f00)=""/4093, 0xffd)

832.112033ms ago: executing program 2 (id=682):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e20, 0x3, @empty, 0x8}}}, 0x90)

762.395538ms ago: executing program 2 (id=683):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@errors_remount}, {}, {@noquota}, {}, {@errors_continue}, {@grpquota}]}, 0x24, 0x628f, &(0x7f00000065c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

712.588765ms ago: executing program 0 (id=684):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x129103)
poll(&(0x7f0000002240)=[{r0, 0x4000}], 0x1, 0x7)

660.938744ms ago: executing program 1 (id=685):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000440)={0x60, 0x2, &(0x7f0000c09000/0x4000)=nil, &(0x7f0000cca000/0x1000)=nil, 0x100, 0x0, 0x0, 0x80100000, 0x2, 0x46, 0x30, 0x12})

660.648967ms ago: executing program 0 (id=686):
r0 = socket(0x2b, 0x1, 0x1)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0)
timer_create(0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000002c0)=0x30)

660.312952ms ago: executing program 1 (id=687):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1dde)

524.529131ms ago: executing program 1 (id=688):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$pppl2tp(r0, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xce22, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x2, 0x3, 0x1, 0x2}}, 0x2e)

471.79794ms ago: executing program 1 (id=689):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

336.896933ms ago: executing program 1 (id=690):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)

721.257µs ago: executing program 1 (id=691):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x371, &(0x7f0000002980)="$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")
unshare(0x2c020400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$F_GET_RW_HINT(r0, 0x40f, &(0x7f0000000140))

0s ago: executing program 2 (id=692):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@broadcast, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x33}, {0xfffffffffffffffd, 0x0, 0x6, 0x8, 0x5, 0x2, 0x5}, {0x8000, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1ffffe}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x4}}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50646' (ED25519) to the list of known hosts.
syzkaller login: [   64.281492][ T5805] cgroup: Unknown subsys name 'net'
[   64.408053][ T5805] cgroup: Unknown subsys name 'cpuset'
[   64.411862][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.113109][ T5805] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   75.448353][ T5830] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.728868][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   76.731518][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   80.140804][ T5198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.145834][ T5198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.150962][ T5198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.156650][ T5198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.160234][ T5198] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.214296][ T5198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.226137][ T5198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.230036][ T5198] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.235513][ T5198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.239253][ T5198] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.255378][ T5914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.261940][ T5914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.265931][ T5914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.275528][ T5914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.278391][ T5914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.427813][ T5908] chnl_net:caif_netlink_parms(): no params data found
[   80.628428][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.631532][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.637859][ T5908] bridge_slave_0: entered allmulticast mode
[   80.641235][ T5908] bridge_slave_0: entered promiscuous mode
[   80.656192][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.658900][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.661071][ T5908] bridge_slave_1: entered allmulticast mode
[   80.664268][ T5908] bridge_slave_1: entered promiscuous mode
[   80.704838][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.725278][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.764520][ T5908] team0: Port device team_slave_0 added
[   80.778186][ T5908] team0: Port device team_slave_1 added
[   80.803343][ T5915] chnl_net:caif_netlink_parms(): no params data found
[   80.811282][ T5912] chnl_net:caif_netlink_parms(): no params data found
[   80.868587][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.870775][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.879850][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.896502][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.898769][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.906734][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.977857][ T5908] hsr_slave_0: entered promiscuous mode
[   80.980069][ T5908] hsr_slave_1: entered promiscuous mode
[   80.995634][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.998185][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.000692][ T5915] bridge_slave_0: entered allmulticast mode
[   81.003983][ T5915] bridge_slave_0: entered promiscuous mode
[   81.023923][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.027538][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.029941][ T5915] bridge_slave_1: entered allmulticast mode
[   81.033221][ T5915] bridge_slave_1: entered promiscuous mode
[   81.081966][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.084567][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.088218][ T5912] bridge_slave_0: entered allmulticast mode
[   81.091313][ T5912] bridge_slave_0: entered promiscuous mode
[   81.109423][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.125676][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.128313][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.130950][ T5912] bridge_slave_1: entered allmulticast mode
[   81.134594][ T5912] bridge_slave_1: entered promiscuous mode
[   81.140528][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.199677][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.209497][ T5915] team0: Port device team_slave_0 added
[   81.212584][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.224012][ T5915] team0: Port device team_slave_1 added
[   81.276013][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.278468][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.287365][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.300828][ T5912] team0: Port device team_slave_0 added
[   81.303308][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.306108][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.314830][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.322203][ T5912] team0: Port device team_slave_1 added
[   81.371003][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.373421][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.381426][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.400598][ T5915] hsr_slave_0: entered promiscuous mode
[   81.403312][ T5915] hsr_slave_1: entered promiscuous mode
[   81.405908][ T5915] debugfs: 'hsr0' already exists in 'hsr'
[   81.407620][ T5915] Cannot create hsr debugfs directory
[   81.409908][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.412347][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.421981][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.504665][ T5912] hsr_slave_0: entered promiscuous mode
[   81.507876][ T5912] hsr_slave_1: entered promiscuous mode
[   81.510926][ T5912] debugfs: 'hsr0' already exists in 'hsr'
[   81.513077][ T5912] Cannot create hsr debugfs directory
[   81.565314][ T5908] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.584079][ T5908] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.601685][ T5908] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.614235][ T5908] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.756631][ T5915] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.766973][ T5915] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.773941][ T5915] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.780584][ T5915] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.854353][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.864375][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.873344][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.882034][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.903471][ T5908] 8021q: adding VLAN 0 to HW filter on device team0
[   81.907033][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.922101][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.924958][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.956068][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.958569][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.052256][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.100224][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[   82.123723][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.132531][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.134996][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.156115][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.158722][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.183253][ T5912] 8021q: adding VLAN 0 to HW filter on device team0
[   82.209735][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.212532][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.240740][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.243565][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.247880][ T5198] Bluetooth: hci0: command tx timeout
[   82.280928][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.326758][ T5198] Bluetooth: hci2: command tx timeout
[   82.328708][ T5914] Bluetooth: hci1: command tx timeout
[   82.420563][ T5908] veth0_vlan: entered promiscuous mode
[   82.441880][ T5908] veth1_vlan: entered promiscuous mode
[   82.490418][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.531664][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.539366][ T5908] veth0_macvtap: entered promiscuous mode
[   82.558492][ T5908] veth1_macvtap: entered promiscuous mode
[   82.594496][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.613689][ T5915] veth0_vlan: entered promiscuous mode
[   82.617937][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.631307][ T5912] veth0_vlan: entered promiscuous mode
[   82.642827][ T5915] veth1_vlan: entered promiscuous mode
[   82.652735][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.666600][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.671165][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.675512][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.681463][ T5912] veth1_vlan: entered promiscuous mode
[   82.739866][ T5915] veth0_macvtap: entered promiscuous mode
[   82.748762][ T5915] veth1_macvtap: entered promiscuous mode
[   82.780561][ T5912] veth0_macvtap: entered promiscuous mode
[   82.801624][ T5912] veth1_macvtap: entered promiscuous mode
[   82.810210][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.813277][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.817064][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.839836][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.854162][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.869785][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.871583][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.872656][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.881005][ T5920] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.888576][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.900520][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.910091][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.921520][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.924983][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.949138][ T5908] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.963345][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.976703][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.102252][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.105999][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.170442][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.173361][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.190740][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.193588][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.247553][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.260872][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.442390][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.86'.
[   83.454954][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'.
[   83.457102][ T5990] loop2: detected capacity change from 0 to 2048
[   83.519874][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.531432][ T5990] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #12: block 2: comm syz.2.85: lblock 0 mapped to illegal pblock 2 (length 1)
[   83.563088][ T5908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.137058][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'.
[   84.240481][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'.
[   84.326760][ T5198] Bluetooth: hci0: command tx timeout
[   84.377683][ T6038] loop0: detected capacity change from 0 to 2048
[   84.405539][ T5198] Bluetooth: hci2: command tx timeout
[   84.427146][ T6038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.431763][ T6038] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.479749][ T6048] warning: `syz.1.112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.502978][ T5912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.804370][ T6062] loop0: detected capacity change from 0 to 164
[   84.846453][ T6062] iso9660: Corrupted directory entry in block 2 of inode 1920
[   84.916355][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'.
[   85.038879][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   85.195181][   T24] usb 2-1: Using ep0 maxpacket: 8
[   85.204937][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.223967][   T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   85.241167][   T24] usb 2-1: config 1 has no interface number 1
[   85.249860][   T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   85.275706][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   85.283444][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.289340][   T24] usb 2-1: Product: syz
[   85.291193][   T24] usb 2-1: Manufacturer: syz
[   85.293156][   T24] usb 2-1: SerialNumber: syz
[   85.600355][   T24] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[   85.603713][   T24] usb 2-1: 2:1 : format type 33 is not supported yet
[   85.821512][   T24] usb 2-1: USB disconnect, device number 2
[   86.285778][ T6087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.130'.
[   86.405946][ T5198] Bluetooth: hci0: command tx timeout
[   86.493409][ T5198] Bluetooth: hci2: command tx timeout
[   86.691146][ T6098] netlink: 'syz.1.134': attribute type 7 has an invalid length.
[   86.694238][ T6098] netlink: 'syz.1.134': attribute type 8 has an invalid length.
[   86.745137][   T10] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   86.906625][   T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[   86.908971][   T10] usb 1-1: config 0 has no interface number 0
[   86.910925][   T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   86.914290][   T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[   86.925757][   T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   86.929869][   T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   86.943614][   T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   86.953743][   T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   86.961065][   T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   86.965222][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.981618][   T10] usb 1-1: config 0 descriptor??
[   86.989991][  T784] cfg80211: failed to load regulatory.db
[   86.998944][ T6092] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   87.079706][   T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   87.127166][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.135243][  T784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.211972][   T10] usb 1-1: USB disconnect, device number 2
[   87.219723][   T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[   87.626121][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.629138][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.005894][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.009351][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.131538][  T784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.171039][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.248764][ T5198] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   88.252874][ T5198] Bluetooth: hci1: Injecting HCI hardware error event
[   88.256805][ T5198] Bluetooth: hci1: hardware error 0x00
[   88.262770][ T6122] sctp: [Deprecated]: syz.1.144 (pid 6122) Use of int in max_burst socket option.
[   88.262770][ T6122] Use struct sctp_assoc_value instead
[   88.469390][ T6134] loop1: detected capacity change from 0 to 64
[   88.485422][ T5914] Bluetooth: hci0: command tx timeout
[   88.496642][   T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   88.565443][ T5914] Bluetooth: hci2: command tx timeout
[   88.585445][   T33] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   88.697444][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.701311][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   88.710944][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.714955][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   88.729360][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[   88.735199][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.747787][   T10] usb 3-1: config 0 descriptor??
[   88.751022][   T33] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[   88.753649][   T33] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.765722][   T33] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   88.769245][   T33] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   88.772378][   T33] usb 1-1: Manufacturer: syz
[   88.779841][   T33] usb 1-1: config 0 descriptor??
[   88.931365][   T33] rc_core: IR keymap rc-hauppauge not found
[   88.950278][   T33] Registered IR keymap rc-empty
[   88.969634][   T33] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   88.986685][   T33] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4
[   89.026207][    C1] igorplugusb 1-1:0.0: Error: urb status = -32
[   89.055436][ T5974] usb 1-1: USB disconnect, device number 3
[   89.190357][   T10] lg-g15 0003:046D:C227.0001: unknown main item tag 0x0
[   89.193200][   T10] lg-g15 0003:046D:C227.0001: unknown main item tag 0x0
[   89.202430][   T10] lg-g15 0003:046D:C227.0001: unknown main item tag 0x0
[   89.205384][   T10] lg-g15 0003:046D:C227.0001: unknown main item tag 0x0
[   89.207254][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.211072][   T10] lg-g15 0003:046D:C227.0001: unknown main item tag 0x0
[   89.222791][   T10] lg-g15 0003:046D:C227.0001: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.2-1/input0
[   89.269116][ T6155] loop1: detected capacity change from 0 to 1024
[   89.282755][ T6155] =======================================================
[   89.282755][ T6155] WARNING: The mand mount option has been deprecated and
[   89.282755][ T6155]          and is ignored by this kernel. Remove the mand
[   89.282755][ T6155]          option from the mount to silence this warning.
[   89.282755][ T6155] =======================================================
[   89.332737][ T6155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.350627][ T6155] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.1.158: path /35/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0
[   89.386688][   T24] usb 3-1: USB disconnect, device number 2
[   89.411704][ T5915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.626029][ T6162] netlink: 'syz.0.160': attribute type 1 has an invalid length.
[   89.629314][ T6162] netlink: 'syz.0.160': attribute type 2 has an invalid length.
[   89.632196][ T6162] netlink: 'syz.0.160': attribute type 1 has an invalid length.
[   89.636702][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.160'.
[   89.688784][ T6164] netlink: 'syz.0.161': attribute type 1 has an invalid length.
[   89.696171][   T33] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   89.845341][   T33] usb 2-1: Using ep0 maxpacket: 32
[   89.849374][   T33] usb 2-1: unable to get BOS descriptor or descriptor too short
[   89.854769][   T33] usb 2-1: config 120 has an invalid interface number: 86 but max is 0
[   89.864745][   T33] usb 2-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config
[   89.868927][   T33] usb 2-1: config 120 has no interface number 0
[   89.874018][   T33] usb 2-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af
[   89.877884][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.880846][   T33] usb 2-1: Product: syz
[   89.885158][   T33] usb 2-1: Manufacturer: syz
[   89.886972][   T33] usb 2-1: SerialNumber: syz
[   90.055820][ T6183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.120168][   T33] huawei_cdc_ncm 2-1:120.86: CDC Union missing and no IAD found
[   90.123122][   T33] huawei_cdc_ncm 2-1:120.86: bind() failure
[   90.140155][   T33] usb 2-1: USB disconnect, device number 3
[   90.187191][ T6188] loop2: detected capacity change from 0 to 4096
[   90.302231][ T6192] loop2: detected capacity change from 0 to 128
[   90.325222][ T5198] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   90.343116][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'.
[   90.376678][ T6196] loop2: detected capacity change from 0 to 64
[   90.695221][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   90.869852][   T24] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 170, changing to 11
[   90.880411][   T24] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16
[   90.909276][   T24] usb 3-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   90.913688][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[   90.933735][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   90.939066][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.942287][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.179'.
[   90.947650][   T24] usb 3-1: Product: syz
[   90.949158][   T24] usb 3-1: Manufacturer: syz
[   90.951040][   T24] usb 3-1: SerialNumber: syz
[   90.971431][ T6198] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   90.973771][ T6198] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   91.191793][ T5198] Bluetooth: hci0: Unknown advertising packet type: 0x30
[   91.191854][ T5198] Bluetooth: hci0: Malformed LE Event: 0x0d
[   91.204173][   T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[   91.212199][   T24] usb 3-1: USB disconnect, device number 3
[   91.335608][   T33] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   91.396840][ T5971] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   91.485173][   T33] usb 1-1: Using ep0 maxpacket: 32
[   91.489294][   T33] usb 1-1: config 0 has an invalid interface number: 202 but max is 1
[   91.493098][   T33] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.497091][   T33] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[   91.500434][   T33] usb 1-1: config 0 has no interface number 0
[   91.502803][   T33] usb 1-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30
[   91.508995][   T33] usb 1-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64
[   91.513252][   T33] usb 1-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182
[   91.518552][   T33] usb 1-1: config 0 interface 202 has no altsetting 0
[   91.523603][   T33] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[   91.527394][   T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.530707][   T33] usb 1-1: Product: syz
[   91.532387][   T33] usb 1-1: Manufacturer: syz
[   91.534146][   T33] usb 1-1: SerialNumber: syz
[   91.538665][   T33] usb 1-1: config 0 descriptor??
[   91.545537][ T5971] usb 2-1: Using ep0 maxpacket: 32
[   91.552083][ T5971] usb 2-1: config 0 has an invalid interface number: 83 but max is 0
[   91.555748][ T5971] usb 2-1: config 0 has no interface number 0
[   91.561269][ T5971] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   91.565940][   T33] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   91.577255][ T5971] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[   91.580547][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.583663][ T5971] usb 2-1: Product: syz
[   91.590918][ T5971] usb 2-1: Manufacturer: syz
[   91.594599][ T5971] usb 2-1: SerialNumber: syz
[   91.606081][ T5971] usb 2-1: config 0 descriptor??
[   91.614031][ T5971] redrat3 2-1:0.83: Couldn't find all endpoints
[   91.754665][ T5971] usb 1-1: USB disconnect, device number 4
[   91.757133][   T13] usb 1-1: Failed to submit usb control message: -71
[   91.760078][   T13] usb 1-1: unable to send the bmi data to the device: -71
[   91.762838][   T13] usb 1-1: unable to get target info from device
[   91.768302][   T13] usb 1-1: could not get target info (-71)
[   91.770909][   T13] usb 1-1: could not probe fw (-71)
[   91.841398][  T784] usb 2-1: USB disconnect, device number 4
[   91.865248][ T6222] syz.2.186 uses obsolete (PF_INET,SOCK_PACKET)
[   92.325623][   T33] net_ratelimit: 3 callbacks suppressed
[   92.325642][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.375572][ T6228] syzkaller1: tun_chr_ioctl cmd 1076910120
[   92.449114][ T6230] loop1: detected capacity change from 0 to 256
[   92.770535][ T6243] netlink: 68 bytes leftover after parsing attributes in process `syz.1.196'.
[   92.832550][ T6245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'.
[   92.889027][ T6247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.891907][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.896825][ T6247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.899490][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.902680][ T6247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.905415][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.911379][ T6247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.913967][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.916659][ T6247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.201872][ T6255] macsec1: entered promiscuous mode
[   93.203812][ T6255] macsec1: entered allmulticast mode
[   93.274670][ T6259] process 'syz.2.204' launched './file1' with NULL argv: empty string added
[   93.470438][ T6265] syz.0.198 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   93.478941][ T6265] ubi31: attaching mtd0
[   93.491173][ T6265] ubi31: scanning is finished
[   93.492765][ T6265] ubi31: empty MTD device detected
[   93.701694][ T6268] loop2: detected capacity change from 0 to 128
[   93.834698][ T6265] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   93.838174][ T6265] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   93.841002][ T6265] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   93.843633][ T6265] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   93.847396][ T6265] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   93.849953][ T6265] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   93.852961][ T6265] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1655001932
[   93.856720][ T6265] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   93.861163][ T6273] ubi31: background thread "ubi_bgt31d" started, PID 6273
[   94.105148][   T33] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   94.268122][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.272233][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.277382][   T33] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   94.280764][   T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.287122][   T33] usb 3-1: config 0 descriptor??
[   94.294390][ T6281] loop1: detected capacity change from 0 to 4096
[   94.319409][  T784] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   94.477614][  T784] usb 1-1: unable to get BOS descriptor or descriptor too short
[   94.484966][  T784] usb 1-1: not running at top speed; connect to a high speed hub
[   94.491448][  T784] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.500841][  T784] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   94.516832][  T784] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[   94.520178][  T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.525124][  T784] usb 1-1: Product: syz
[   94.529467][  T784] usb 1-1: Manufacturer: syz
[   94.531157][  T784] usb 1-1: SerialNumber: syz
[   94.714122][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   94.720709][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   94.725229][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   94.727515][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   94.729653][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   94.731775][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   94.733895][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   94.755453][   T33] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[   94.903506][   T33] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE
[   94.914921][  T784] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[   94.926098][  T784] usb 1-1: USB disconnect, device number 5
[   95.043182][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.312396][   T33] cp2112 0003:10C4:EA90.0002: error setting SMBus config
[   95.325501][   T33] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71
[   95.340021][   T33] usb 3-1: USB disconnect, device number 4
[   96.053255][ T6303] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.095325][ T6303] loop0: detected capacity change from 0 to 3
[   96.109806][ T6303] syz.0.221: attempt to access beyond end of device
[   96.109806][ T6303] loop0: rw=2048, sector=0, nr_sectors = 8 limit=3
[   96.114323][ T6303] SQUASHFS error: Failed to read block 0x0: -5
[   96.117032][ T6303] unable to read squashfs_super_block
[   96.605185][   T33] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   96.775767][   T33] usb 3-1: Using ep0 maxpacket: 32
[   96.780378][   T33] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.783413][   T33] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[   96.788686][   T33] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[   96.789777][ T6319] bond1: Removing last ns target with arp_interval on
[   96.791991][   T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.796276][   T33] usb 3-1: Product: syz
[   96.797507][   T33] usb 3-1: Manufacturer: syz
[   96.798903][   T33] usb 3-1: SerialNumber: syz
[   96.802040][   T33] usb 3-1: config 0 descriptor??
[   96.807464][   T33] go7007 3-1:0.0: probe with driver go7007 failed with error -12
[   97.013707][   T10] usb 3-1: USB disconnect, device number 5
[   97.448595][ T6345] loop1: detected capacity change from 0 to 32768
[   97.513630][ T6345] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   97.545383][ T5971] net_ratelimit: 2049 callbacks suppressed
[   97.545403][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.655134][ T6345] XFS (loop1): Ending clean mount
[   97.660554][ T6368] loop0: detected capacity change from 0 to 1024
[   97.673953][ T6345] XFS (loop1): Quotacheck needed: Please wait.
[   97.694432][ T6368] syz.0.246: attempt to access beyond end of device
[   97.694432][ T6368] loop0: rw=8390665, sector=262, nr_sectors = 65274 limit=1024
[   97.724950][ T6370] overlay: Bad value for 'workdir'
[   97.728077][ T6345] XFS (loop1): Quotacheck: Done.
[   97.782612][ T6372] loop0: detected capacity change from 0 to 8
[   97.797236][ T5915] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   97.816750][ T6372] SQUASHFS error: xz decompression failed, data probably corrupt
[   97.818976][ T6372] SQUASHFS error: Failed to read block 0x108: -5
[   97.820951][ T6372] SQUASHFS error: Unable to read metadata cache entry [106]
[   97.828613][ T6372] SQUASHFS error: Unable to read inode 0x11f
[   97.857280][ T6377] capability: warning: `syz.2.251' uses 32-bit capabilities (legacy support in use)
[   97.862347][ T6377] program syz.2.251 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   98.379248][ T6393] loop1: detected capacity change from 0 to 1024
[   98.390975][ T6393] EXT4-fs: Ignoring removed orlov option
[   98.418796][ T6393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.478014][ T5915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.512228][ T6402] loop2: detected capacity change from 0 to 7
[   98.526774][ T6402] Dev loop2: unable to read RDB block 7
[   98.529240][ T6402]  loop2: AHDI p1 p2 p3
[   98.530893][ T6402] loop2: partition table partially beyond EOD, truncated
[   98.536451][ T6402] loop2: p1 start 1818582900 is beyond EOD, truncated
[   98.539733][ T6402] loop2: p3 start 335544320 is beyond EOD, truncated
[   98.577017][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.660994][ T6410] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x13
[   98.785529][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.963733][ T6422] loop2: detected capacity change from 0 to 3
[   98.981314][ T6422] syz.2.263: attempt to access beyond end of device
[   98.981314][ T6422] loop2: rw=2048, sector=0, nr_sectors = 8 limit=3
[   98.985615][ T6422] SQUASHFS error: Failed to read block 0x0: -5
[   98.987642][ T6422] unable to read squashfs_super_block
[   99.185602][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.367769][ T6432] loop0: detected capacity change from 0 to 128
[   99.388568][ T6432] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   99.396802][ T6432] hpfs: filesystem error: improperly stopped
[   99.398906][ T6432] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   99.403575][ T6432] hpfs: You really don't want any checks? You are crazy...
[   99.408913][ T6432] hpfs: hpfs_map_sector(): read error
[   99.411138][ T6432] hpfs: code page support is disabled
[   99.423446][ T6432] hpfs: hpfs_map_4sectors(): unaligned read
[   99.427133][ T6432] hpfs: hpfs_map_4sectors(): unaligned read
[   99.429402][ T6432] hpfs: filesystem error: unable to find root dir
[   99.610379][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.693776][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.822666][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'.
[  100.084976][ T6462] loop2: detected capacity change from 0 to 16
[  100.097190][ T6462] erofs (device loop2): mounted with root inode @ nid 36.
[  100.195874][ T5275] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  100.358108][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.362111][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.367241][ T5275] usb 2-1: New USB device found, idVendor=5e0a, idProduct=a055, bcdDevice= 0.00
[  100.370644][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.379521][ T5275] usb 2-1: config 0 descriptor??
[  100.646096][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  100.684358][ T6473] loop0: detected capacity change from 0 to 512
[  100.704006][ T6473] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.720087][ T6473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  100.750269][ T6473] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0102]
[  100.754345][ T6473] System zones: 0-2, 18-18, 34-34
[  100.763826][ T6473] EXT4-fs error (device loop0): ext4_quota_enable:7192: inode #4: comm syz.0.291: iget: immutable or append flags not allowed on symlinks
[  100.770014][ T6473] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  100.773022][ T6473] EXT4-fs error (device loop0): ext4_quota_enable:7195: comm syz.0.291: Bad quota inode: 4, type: 1
[  100.776587][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  100.776636][    C1] EXT4-fs (loop0): initial error at time 1774161818: ext4_quota_enable:7192: inode 4
[  100.776659][    C1] EXT4-fs (loop0): last error at time 1774161818: ext4_quota_enable:7192: inode 4
[  100.793480][ T6473] loop0: lost filesystem error report for type 5 error -117
[  100.794525][ T6473] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  100.808380][ T6473] EXT4-fs (loop0): mount failed
[  100.831378][ T5275] hid-generic 0003:5E0A:A055.0003: unbalanced collection at end of report description
[  100.836361][ T5275] hid-generic 0003:5E0A:A055.0003: probe with driver hid-generic failed with error -22
[  101.064373][ T5275] usb 2-1: USB disconnect, device number 5
[  101.687311][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.848061][ T6498] Bluetooth: MGMT ver 1.23
[  101.851354][ T6498] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  102.000560][ T5275] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  102.047662][ T5920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.112766][ T5920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.165306][ T5275] usb 3-1: Using ep0 maxpacket: 16
[  102.170573][ T5275] usb 3-1: too many configurations: 97, using maximum allowed: 8
[  102.217420][ T5275] usb 3-1: string descriptor 0 read error: -71
[  102.219867][ T5275] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  102.224257][ T5920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.237899][ T5275] usb 3-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[  102.245407][ T5275] usb 3-1: rejected 8 configurations due to insufficient available bus power
[  102.248912][ T5275] usb 3-1: no configuration chosen from 8 choices
[  102.263344][ T5275] usb 3-1: USB disconnect, device number 6
[  102.293083][ T5920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.360141][ T5914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.368602][ T5914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.372520][ T5914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.378613][ T5914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.384765][ T5914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.531836][ T5920] bridge_slave_1: left allmulticast mode
[  102.534257][ T5920] bridge_slave_1: left promiscuous mode
[  102.540714][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.551299][ T5920] bridge_slave_0: left allmulticast mode
[  102.553550][ T5920] bridge_slave_0: left promiscuous mode
[  102.560231][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.813293][ T5920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.823567][ T6524] loop0: detected capacity change from 0 to 512
[  102.827065][ T5920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.839825][ T5920] bond0 (unregistering): Released all slaves
[  102.841232][ T6524] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.316: inode has both inline data and extents flags
[  102.848903][ T6524] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  102.850213][ T6524] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.316: couldn't read orphan inode 15 (err -117)
[  102.858453][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  102.858477][    C1] EXT4-fs (loop0): initial error at time 1774161821: ext4_orphan_get:1391: inode 15
[  102.858502][    C1] EXT4-fs (loop0): last error at time 1774161821: ext4_orphan_get:1391: inode 15
[  102.858710][ T5920] bond1 (unregistering): Released all slaves
[  102.889575][ T6524] loop0: lost filesystem error report for type 5 error -117
[  102.891905][ T6524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.003861][ T5912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.576603][ T6510] chnl_net:caif_netlink_parms(): no params data found
[  103.910562][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'.
[  104.138319][ T5920] hsr_slave_0: left promiscuous mode
[  104.160372][ T5920] hsr_slave_1: left promiscuous mode
[  104.176024][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.186013][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.212337][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.216119][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.256587][ T5920] veth1_macvtap: left promiscuous mode
[  104.260136][ T5920] veth0_macvtap: left promiscuous mode
[  104.262344][ T5920] veth1_vlan: left promiscuous mode
[  104.264098][ T5920] veth0_vlan: left promiscuous mode
[  104.405301][ T5198] Bluetooth: hci2: command tx timeout
[  104.686613][ T5920] team0 (unregistering): Port device team_slave_1 removed
[  104.727176][ T5920] team0 (unregistering): Port device team_slave_0 removed
[  105.173828][ T6551] loop2: detected capacity change from 0 to 256
[  105.190339][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.193053][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.203554][ T6510] bridge_slave_0: entered allmulticast mode
[  105.223609][ T6510] bridge_slave_0: entered promiscuous mode
[  105.231526][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.255406][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.258442][ T6510] bridge_slave_1: entered allmulticast mode
[  105.267659][ T6510] bridge_slave_1: entered promiscuous mode
[  105.370943][ T6510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.380074][ T6510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.411681][ T6510] team0: Port device team_slave_0 added
[  105.418216][ T6510] team0: Port device team_slave_1 added
[  105.506925][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.514940][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.535566][ T6510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.779862][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.782849][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.791924][ T6510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.801048][ T6559] netlink: 'syz.0.325': attribute type 1 has an invalid length.
[  105.894030][ T6510] hsr_slave_0: entered promiscuous mode
[  105.902543][ T6510] hsr_slave_1: entered promiscuous mode
[  105.906208][ T6510] debugfs: 'hsr0' already exists in 'hsr'
[  105.908562][ T6510] Cannot create hsr debugfs directory
[  106.116838][ T6572] Zero length message leads to an empty skb
[  106.495593][ T5198] Bluetooth: hci2: command tx timeout
[  107.182467][ T6510] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  107.189291][ T6510] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  107.194727][ T6510] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  107.201796][ T6510] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  107.299124][ T6510] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.318481][ T6510] 8021q: adding VLAN 0 to HW filter on device team0
[  107.323722][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.326266][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.336472][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.338693][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.381671][ T6510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.499999][ T6622] xt_hashlimit: size too large, truncated to 1048576
[  107.597651][ T6510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.642826][ T6629] loop2: detected capacity change from 0 to 2048
[  107.672234][ T6510] veth0_vlan: entered promiscuous mode
[  107.676235][ T6629] EXT4-fs error (device loop2): __ext4_fill_super:5563: inode #2: comm syz.2.336: inode has both inline data and extents flags
[  107.697354][ T6510] veth1_vlan: entered promiscuous mode
[  107.706131][ T6629] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  107.706645][ T6629] EXT4-fs (loop2): get root inode failed
[  107.713175][ T6629] EXT4-fs (loop2): mount failed
[  107.715274][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  107.717694][    C1] EXT4-fs (loop2): initial error at time 1774161825: __ext4_fill_super:5563: inode 2
[  107.720983][    C1] EXT4-fs (loop2): last error at time 1774161825: __ext4_fill_super:5563: inode 2
[  107.742138][ T6510] veth0_macvtap: entered promiscuous mode
[  107.760795][ T6510] veth1_macvtap: entered promiscuous mode
[  107.788462][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.803121][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.825733][ T5920] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.828509][ T5920] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.831380][ T5920] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.857496][ T5920] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.911342][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.913687][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.964517][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.968359][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.974795][ T6643] loop0: detected capacity change from 0 to 2048
[  108.051627][ T6647] loop0: detected capacity change from 0 to 16
[  108.061118][ T6647] erofs (device loop0): DAX unsupported by block device. Turning off DAX.
[  108.066972][ T6647] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  108.071950][ T6647] erofs (device loop0): mounted with root inode @ nid 36.
[  108.075553][   T33] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  108.225223][   T33] usb 3-1: Using ep0 maxpacket: 32
[  108.233390][   T33] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  108.242470][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  108.250164][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  108.254877][   T33] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  108.264205][   T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.275921][   T33] usb 3-1: config 0 descriptor??
[  108.278952][ T6635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  108.283687][   T33] hub 3-1:0.0: USB hub found
[  108.335591][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  108.455447][ T6667] loop1: detected capacity change from 0 to 4096
[  108.487760][   T34] audit: type=1800 audit(1774161826.709:2): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.347" name="file1" dev="loop1" ino=30 res=0 errno=0
[  108.501124][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.506780][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  108.508944][   T33] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  108.513135][   T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  108.525224][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  108.528613][   T10] usb 1-1: SerialNumber: syz
[  108.566030][ T5198] Bluetooth: hci2: command tx timeout
[  108.717371][   T33] usbhid 3-1:0.0: can't add hid device: -71
[  108.719619][   T33] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  108.743336][   T33] usb 3-1: USB disconnect, device number 7
[  108.752816][   T10] usb 1-1: 0:2 : does not exist
[  108.825377][   T10] usb 1-1: USB disconnect, device number 6
[  108.869797][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.072853][ T6684] ubi: mtd0 is already attached to ubi31
[  110.646007][ T5198] Bluetooth: hci2: command tx timeout
[  110.771470][ T6700] loop0: detected capacity change from 0 to 512
[  110.800233][ T6700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.807499][ T6700] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.821024][ T6700] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  110.827418][ T6700] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 64512
[  110.831181][ T6700] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.358: Failed to acquire dquot type 0
[  110.902476][ T5912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.010502][ T6709] loop2: detected capacity change from 0 to 8
[  111.020113][ T6708] loop0: detected capacity change from 0 to 1024
[  111.028325][ T6708] hfsplus: catalog name length corrupted
[  111.031800][ T6708] hfsplus: failed to load root directory
[  111.064281][ T6709] SQUASHFS error: Failed to read block 0x4e8: -5
[  111.385958][ T6721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'.
[  111.389495][ T6721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'.
[  111.529497][ T6727] loop0: detected capacity change from 0 to 1024
[  111.555432][ T6727] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  111.559226][ T6727] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  111.584997][ T6727] jbd2_journal_init_inode: Cannot locate journal superblock
[  111.587342][ T6727] EXT4-fs (loop0): Could not load journal inode
[  111.688381][ T6738] netlink: 64 bytes leftover after parsing attributes in process `syz.0.376'.
[  111.772771][ T6742] loop1: detected capacity change from 0 to 512
[  111.802649][ T6742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.948767][ T6510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.966924][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'.
[  111.987088][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'.
[  112.092560][ T6755] netlink: zone id is out of range
[  112.094642][ T6755] netlink: zone id is out of range
[  112.098049][ T6755] netlink: zone id is out of range
[  112.099931][ T6755] netlink: zone id is out of range
[  112.274467][ T6764] loop2: detected capacity change from 0 to 256
[  112.354262][ T6757] loop0: detected capacity change from 0 to 32768
[  112.363138][ T6757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.384 (6757)
[  112.396111][ T6766] loop2: detected capacity change from 0 to 512
[  112.406304][ T6757] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.410410][ T6757] BTRFS info (device loop0): using sha256 checksum algorithm
[  112.434302][ T6766] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.388: inode has both inline data and extents flags
[  112.439619][ T6766] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  112.439828][ T6766] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.388: couldn't read orphan inode 15 (err -117)
[  112.446692][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  112.446710][    C0] EXT4-fs (loop2): initial error at time 1774161830: ext4_orphan_get:1391: inode 15
[  112.446727][    C0] EXT4-fs (loop2): last error at time 1774161830: ext4_orphan_get:1391: inode 15
[  112.456435][ T6766] loop2: lost filesystem error report for type 5 error -117
[  112.458853][ T6766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.610595][ T6757] BTRFS info (device loop0): enabling ssd optimizations
[  112.613394][ T6757] BTRFS info (device loop0): turning on async discard
[  112.616835][ T6757] BTRFS info (device loop0): enabling free space tree
[  112.682857][ T5912] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.178214][ T6796] netlink: 240 bytes leftover after parsing attributes in process `syz.1.391'.
[  113.338043][ T5908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.395202][ T5971] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  113.545649][ T5971] usb 1-1: Using ep0 maxpacket: 32
[  113.575115][ T5971] usb 1-1: unable to get BOS descriptor or descriptor too short
[  113.578573][ T5971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.582146][ T5971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.595643][ T5971] usb 1-1: config 1 has no interface number 0
[  113.598097][ T5971] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  113.608099][ T5971] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  113.622296][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.629224][ T5971] usb 1-1: Product: syz
[  113.630847][ T5971] usb 1-1: Manufacturer: syz
[  113.632994][ T5971] usb 1-1: SerialNumber: syz
[  113.928649][ T5971] usb 1-1: USB disconnect, device number 7
[  113.979986][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  113.997747][ T6824] loop2: detected capacity change from 0 to 64
[  114.138542][ T6831] loop1: detected capacity change from 0 to 1024
[  114.141475][ T6831] EXT4-fs: inline encryption not supported
[  114.154669][ T6831] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  114.189883][ T6831] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.409: lblock 2 mapped to illegal pblock 2 (length 1)
[  114.198174][ T6831] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  114.199509][ T6831] EXT4-fs (loop1): Remounting filesystem read-only
[  114.204545][ T6831] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  114.207480][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  114.207492][    C1] EXT4-fs (loop1): initial error at time 1774161832: ext4_map_blocks:776: inode 3: block 2
[  114.207508][    C1] EXT4-fs (loop1): last error at time 1774161832: ext4_map_blocks:776: inode 3: block 2
[  114.217855][ T6831] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  114.220788][ T6831] EXT4-fs (loop1): 1 orphan inode deleted
[  114.223288][ T6831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.239914][ T6831] EXT4-fs (loop1): shut down requested (2)
[  114.247751][ T6834] NILFS (loop2): mounting unchecked fs
[  114.255333][ T6834] NILFS (loop2): invalid segment: Sequence number mismatch
[  114.257837][ T6834] NILFS (loop2): trying rollback from an earlier position
[  114.277505][ T6510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.283293][ T6834] NILFS (loop2): recovery complete
[  114.305237][ T6835] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.395256][ T6839] EXT4-fs: inline encryption not supported
[  114.419268][ T6839] EXT4-fs (loop2): orphan cleanup on readonly fs
[  114.434428][ T6842] ieee802154 phy0 wpan0: encryption failed: -22
[  114.456955][ T6839] EXT4-fs (loop2): 1 truncate cleaned up
[  114.464679][ T6839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  114.512230][ T5908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.645788][ T6844] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.414 (6844)
[  114.660809][ T6844] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  114.664732][ T6844] BTRFS info (device loop0): using sha256 checksum algorithm
[  114.758103][ T6844] BTRFS info (device loop0): rebuilding free space tree
[  114.787064][ T6844] BTRFS info (device loop0): disabling free space tree
[  114.790027][ T6844] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  114.793798][ T6844] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  114.806080][ T6844] BTRFS info (device loop0): checking UUID tree
[  114.809632][ T6844] BTRFS info (device loop0): setting nodatasum
[  114.812156][ T6844] BTRFS info (device loop0): setting nodatacow
[  114.814584][ T6844] BTRFS info (device loop0): turning off barriers
[  114.817655][ T6844] BTRFS info (device loop0): force clearing of disk cache
[  114.945430][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  115.096845][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  115.098946][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  115.101720][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.110961][    T9] usb 3-1: config 0 descriptor??
[  115.333968][ T6866] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  115.355441][    T9]  (null): keene_cmd_main failed (-71)
[  115.363552][    T9] video4linux radio48: keene_cmd_main failed (-71)
[  115.366018][    T9] radio-keene 3-1:0.0: V4L2 device registered as radio48
[  115.370631][    T9] usb 3-1: USB disconnect, device number 8
[  115.569470][ T5912] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  115.914293][ T6876] set_capacity_and_notify: 3 callbacks suppressed
[  115.914314][ T6876] loop2: detected capacity change from 0 to 1024
[  115.976665][ T6876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.991619][ T6876] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 623: comm syz.2.418: Attempting to read directory block (623) that is past i_size (638464)
[  116.053349][ T5908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.365241][   T32] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  116.527718][   T32] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  116.530824][   T32] usb 3-1: config 0 has no interface number 0
[  116.533759][   T32] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  116.537411][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.555573][   T32] usb 3-1: config 0 descriptor??
[  116.560526][   T32] cp210x 3-1:0.1: cp210x converter detected
[  116.964091][   T32] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -32
[  117.179148][   T32] usb 3-1: cp210x converter now attached to ttyUSB0
[  117.299454][ T6906] loop0: detected capacity change from 0 to 512
[  117.303346][ T6906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  117.307638][ T6906] EXT4-fs warning (device loop0): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  117.381461][   T32] usb 3-1: USB disconnect, device number 9
[  117.395848][   T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  117.405556][   T32] cp210x 3-1:0.1: device disconnected
[  117.573025][ T6918] loop1: detected capacity change from 0 to 8
[  117.598153][ T6918] Page size > filesystem block size (512).  This is currently not supported!
[  117.937918][ T5198] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  117.941625][ T5198] Bluetooth: hci0: Injecting HCI hardware error event
[  117.947047][ T5198] Bluetooth: hci0: hardware error 0x00
[  117.969362][ T6928] loop0: detected capacity change from 0 to 32768
[  118.000075][ T6928] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.442 (6928)
[  118.020406][ T6928] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  118.024496][ T6928] BTRFS info (device loop0): using crc32c checksum algorithm
[  118.102139][ T6945] Illegal XDP return value 38 on prog  (id 15) dev N/A, expect packet loss!
[  118.151063][ T6928] BTRFS info (device loop0): enabling ssd optimizations
[  118.153985][ T6928] BTRFS info (device loop0): turning on flush-on-commit
[  118.159119][ T6928] BTRFS info (device loop0): enabling free space tree
[  118.161722][ T6928] BTRFS info (device loop0): enabling auto defrag
[  118.169294][ T6928] BTRFS info (device loop0): use lzo compression, level 1
[  118.172027][ T6928] BTRFS info (device loop0): max_inline set to 4096
[  118.313598][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.318866][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.336333][ T6965] macsec1: left promiscuous mode
[  118.598003][ T5912] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  118.813144][ T6971] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.456'.
[  119.231404][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'.
[  119.276044][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[  119.279382][ T6988] netlink: 'syz.2.463': attribute type 13 has an invalid length.
[  119.788450][ T6991] loop0: detected capacity change from 0 to 32768
[  119.792125][ T6991] BTRFS warning: excessive commit interval 65536, use with care
[  119.799626][ T6991] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.464 (6991)
[  119.810619][ T6991] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.813570][ T6991] BTRFS info (device loop0): using sha256 checksum algorithm
[  119.837920][ T6991] BTRFS info (device loop0): enabling ssd optimizations
[  119.840455][ T6991] BTRFS info (device loop0): turning on async discard
[  119.842620][ T6991] BTRFS info (device loop0): enabling free space tree
[  119.862509][ T5912] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.095473][ T5198] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  120.153109][ T7027] openvswitch: netlink: IP tunnel dst address not specified
[  120.628848][ T7043] loop1: detected capacity change from 0 to 2048
[  120.716095][ T7043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.315174][ T5971] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  121.507252][ T5971] usb 2-1: config 0 has an invalid interface number: 106 but max is 0
[  121.510501][ T5971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.534131][ T5971] usb 2-1: config 0 has no interface number 0
[  121.536895][ T5971] usb 2-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[  121.541223][ T5971] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  121.546383][ T5971] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  121.552135][ T5971] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  121.558316][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.568157][ T5971] usb 2-1: config 0 descriptor??
[  121.627925][ T5971] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  121.740565][ T7058] loop0: detected capacity change from 0 to 8
[  121.771844][ T7058] SQUASHFS error: zstd decompression error: 10
[  121.774277][ T7058] SQUASHFS error: zstd decompression failed, data probably corrupt
[  121.786241][ T5971] usb 2-1: USB disconnect, device number 6
[  121.786825][ T5920] usb 2-1: Failed to submit usb control message: -71
[  121.791387][ T7058] SQUASHFS error: Failed to read block 0x62b: -5
[  121.793750][ T7058] SQUASHFS error: Unable to read metadata cache entry [629]
[  121.793770][ T5920] usb 2-1: unable to send the bmi data to the device: -71
[  121.800376][ T7058] SQUASHFS error: Unable to read directory block [629:ff26]
[  121.817657][ T5920] usb 2-1: unable to get target info from device
[  121.819587][ T5920] usb 2-1: could not get target info (-71)
[  121.821459][ T5920] usb 2-1: could not probe fw (-71)
[  122.750045][ T7000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.900322][ T7075] loop1: detected capacity change from 0 to 128
[  122.927279][ T7075] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  122.953560][ T7075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.710032][ T7092] loop1: detected capacity change from 0 to 256
[  123.713558][ T7092] exfat: Deprecated parameter 'utf8'
[  123.716331][ T7092] exfat: Deprecated parameter 'utf8'
[  123.718665][ T7092] exfat: Deprecated parameter 'utf8'
[  123.752426][ T7092] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  123.847026][   T34] audit: type=1800 audit(1774161842.069:3): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.498" name="bus" dev="loop1" ino=1048638 res=0 errno=0
[  124.263921][ T7104] capability: warning: `syz.0.504' uses deprecated v2 capabilities in a way that may be insecure
[  124.269994][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'.
[  124.416124][ T7099] loop2: detected capacity change from 0 to 32768
[  124.481080][ T7099] JBD2: Ignoring recovery information on journal
[  124.758927][ T7099] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  124.791907][ T7099] (syz.2.502,7099,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  124.795323][ T7099] (syz.2.502,7099,1):ocfs2_group_add:503 ERROR: Can't read the group descriptor # 262144 from the device.
[  124.856246][ T5908] ocfs2: Unmounting device (7,2) on (node local)
[  125.005723][ T5971] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  125.067287][ T7125] netlink: 'syz.2.512': attribute type 11 has an invalid length.
[  125.171516][ T7127] loop2: detected capacity change from 0 to 8192
[  125.223550][ T5971] usb 1-1: Using ep0 maxpacket: 16
[  125.227650][ T5971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.231617][ T5971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.238298][ T5971] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  125.243160][ T5971] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  125.247176][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.260354][ T5971] usb 1-1: config 0 descriptor??
[  125.284552][ T7129] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.514'.
[  125.392763][ T7132] xt_socket: unknown flags 0x50
[  125.527846][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'.
[  125.679918][ T5971] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  125.682123][ T5971] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  125.684900][ T5971] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  125.691614][ T5971] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  125.694355][ T5971] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  125.705906][ T5971] input: HID 0955:7214 Haptics as /devices/virtual/input/input6
[  125.735700][ T5971] shield 0003:0955:7214.0004: Registered Thunderstrike controller
[  125.738215][ T5971] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  125.885183][   T32] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  125.893305][ T5971] usb 1-1: USB disconnect, device number 8
[  125.896092][   T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  125.918310][   T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  125.922435][   T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  125.930613][   T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  126.035342][   T32] usb 3-1: Using ep0 maxpacket: 8
[  126.041447][   T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.048828][   T32] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40
[  126.051672][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.054239][   T32] usb 3-1: Product: syz
[  126.056400][   T32] usb 3-1: Manufacturer: syz
[  126.057973][   T32] usb 3-1: SerialNumber: syz
[  126.232321][ T7145] loop1: detected capacity change from 0 to 131072
[  126.245194][ T7145] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  126.248669][ T7145] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  126.253962][ T7145] F2FS-fs (loop1): invalid crc value
[  126.295464][   T32] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  126.312709][   T32] usb 3-1: USB disconnect, device number 10
[  126.336585][ T7145] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.347766][ T7145] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  126.350904][ T7145] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  126.362325][   T34] audit: type=1800 audit(1774161844.579:4): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.522" name="file1" dev="loop1" ino=7 res=0 errno=0
[  126.634366][ T7155] fuse: root generation should be zero
[  127.351332][ T7182] loop2: detected capacity change from 0 to 32768
[  127.364048][ T7182] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.537 (7182)
[  127.394660][ T7182] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  127.406398][ T7182] BTRFS info (device loop2): using xxhash64 checksum algorithm
[  127.456068][ T7184] loop0: detected capacity change from 0 to 32768
[  127.468021][ T7184] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.538 (7184)
[  127.506181][   T41] BTRFS warning (device loop2): checksum verify failed on logical 5341184 mirror 1 wanted 0x3b0a04538f099629 found 0xdfe0b7e581a2df9c level 0
[  127.506803][ T7184] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  127.512301][ T7182] BTRFS error (device loop2): failed to load root free space
[  127.541442][ T7184] BTRFS info (device loop0): using sha256 checksum algorithm
[  127.597579][ T7182] BTRFS error (device loop2): open_ctree failed: -5
[  127.648719][ T7184] BTRFS info (device loop0): enabling ssd optimizations
[  127.653723][ T7184] BTRFS info (device loop0): turning on async discard
[  127.662344][ T7184] BTRFS info (device loop0): enabling free space tree
[  127.685200][ T7184] BTRFS info (device loop0): enabling auto defrag
[  127.695462][ T7184] BTRFS info (device loop0): max_inline set to 4096
[  127.944422][ T5912] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  127.954533][ T7220] netlink: 256 bytes leftover after parsing attributes in process `syz.1.542'.
[  128.243597][ T7233] xt_connbytes: Forcing CT accounting to be enabled
[  128.329683][ T7237] loop5: detected capacity change from 0 to 7
[  128.355564][ T7237]  loop5:
[  128.356586][ T7237] loop5: partition table partially beyond EOD, truncated
[  128.543614][ T7242] loop1: detected capacity change from 0 to 32768
[  128.548207][ T7242] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.551 (7242)
[  128.588380][ T7242] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  128.591817][ T7242] BTRFS info (device loop1): using crc32c checksum algorithm
[  128.594383][ T7242] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  128.789889][ T7242] BTRFS info (device loop1): rebuilding free space tree
[  128.800483][ T7242] BTRFS info (device loop1): disabling free space tree
[  128.802590][ T7242] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  128.805569][ T7242] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  128.812224][ T7242] BTRFS info (device loop1): enabling ssd optimizations
[  128.814325][ T7242] BTRFS info (device loop1): turning on async discard
[  128.816517][ T7242] BTRFS info (device loop1): enabling disk space caching
[  128.818624][ T7242] BTRFS info (device loop1): force clearing of disk cache
[  128.820752][ T7242] BTRFS info (device loop1): use zstd compression, level 3
[  129.675356][  T784] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  129.838465][  T784] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  129.841939][  T784] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.859217][  T784] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  129.861464][ T7276] netlink: 'syz.0.558': attribute type 8 has an invalid length.
[  129.863084][  T784] usb 3-1: config 0 interface 0 has no altsetting 0
[  129.872505][  T784] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  129.876820][  T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.883369][  T784] usb 3-1: config 0 descriptor??
[  130.063880][ T6510] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  130.284718][ T7278] loop0: detected capacity change from 0 to 32768
[  130.290091][ T7278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.559 (7278)
[  130.311875][  T784] holtek 0003:1241:5015.0005: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0
[  130.319809][ T7278] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.323714][  T784] holtek 0003:1241:5015.0005: no inputs found
[  130.323764][ T7278] BTRFS info (device loop0): using crc32c checksum algorithm
[  130.426506][ T7278] BTRFS info (device loop0): enabling ssd optimizations
[  130.429297][ T7278] BTRFS info (device loop0): turning on flush-on-commit
[  130.431999][ T7278] BTRFS info (device loop0): enabling free space tree
[  130.435676][ T7278] BTRFS info (device loop0): enabling auto defrag
[  130.438225][ T7278] BTRFS info (device loop0): use lzo compression, level 1
[  130.440985][ T7278] BTRFS info (device loop0): max_inline set to 4096
[  130.526071][  T784] usb 3-1: USB disconnect, device number 11
[  130.560848][ T5912] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  132.817562][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.846090][ T7352] loop0: detected capacity change from 0 to 4096
[  132.856941][ T7352] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  132.908707][ T7352] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  132.934784][ T7352] ntfs3(loop0): ino=1b, mi_enum_attr
[  132.936763][ T7352] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  133.047989][ T7364] loop2: detected capacity change from 0 to 512
[  133.049859][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.060809][ T7364] EXT4-fs: Ignoring removed nomblk_io_submit option
[  133.069391][ T7364] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  133.072422][ T7364] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  133.082625][ T7364] EXT4-fs (loop2): orphan cleanup on readonly fs
[  133.095326][ T7364] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  133.098920][ T7364] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  133.104156][ T7364] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  133.110035][ T7367] loop0: detected capacity change from 0 to 4096
[  133.138446][ T7367] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  133.151429][ T7364] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.590: bg 0: block 40: padding at end of block bitmap is not set
[  133.157913][ T7367] ntfs3(loop0): Failed to load $UpCase (-22).
[  133.175953][ T7364] loop2: lost filesystem error report for type 5 error -117
[  133.185101][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  133.190389][    C0] EXT4-fs (loop2): initial error at time 1774161851: ext4_validate_block_bitmap:441
[  133.193930][    C0] EXT4-fs (loop2): last error at time 1774161851: ext4_validate_block_bitmap:441
[  133.197513][ T7364] EXT4-fs (loop2): Remounting filesystem read-only
[  133.200066][ T7364] EXT4-fs (loop2): 1 truncate cleaned up
[  133.203498][ T7364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  133.236482][ T7364] EXT4-fs (loop2): shut down requested (2)
[  133.294763][ T5908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.378518][ T7379] loop2: detected capacity change from 0 to 512
[  133.414761][ T7379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.427696][ T7379] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  133.452001][ T5908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.455534][ T5275] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  133.625498][ T5275] usb 2-1: Using ep0 maxpacket: 16
[  133.637320][ T5275] usb 2-1: config index 0 descriptor too short (expected 46593, got 71)
[  133.640476][ T5275] usb 2-1: config 0 has too many interfaces: 158, using maximum allowed: 32
[  133.645308][ T5275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.649047][ T5275] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 158
[  133.652301][ T5275] usb 2-1: config 0 has no interface number 0
[  133.688120][ T5275] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01
[  133.691393][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.694292][ T5275] usb 2-1: Product: syz
[  133.700747][ T5275] usb 2-1: Manufacturer: syz
[  133.702556][ T5275] usb 2-1: SerialNumber: syz
[  133.716205][ T5275] usb 2-1: config 0 descriptor??
[  133.719751][ T7397] loop2: detected capacity change from 0 to 32768
[  133.722344][ T7397] btrfs: Deprecated parameter 'usebackuproot'
[  133.724414][ T7397] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  133.728885][ T7397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.598 (7397)
[  133.730210][  T784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.738005][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'.
[  133.746479][ T7399] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  133.770416][ T5275] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e0)
[  133.773109][ T5275] uvcvideo 2-1:0.105: No valid video chain found.
[  133.776493][ T7397] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.780195][ T7397] BTRFS info (device loop2): using crc32c checksum algorithm
[  133.780730][ T7399] netlink: 184 bytes leftover after parsing attributes in process `syz.0.600'.
[  133.851339][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.878066][   T41] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  133.884914][ T7397] BTRFS error (device loop2): failed to load root extent
[  133.889010][ T7397] BTRFS warning (device loop2): try to load backup roots slot 1
[  133.893486][   T41] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  133.905358][ T7397] BTRFS warning (device loop2): couldn't read tree root
[  133.907905][ T7397] BTRFS warning (device loop2): try to load backup roots slot 2
[  133.916879][   T67] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  133.920372][ T7397] BTRFS warning (device loop2): couldn't read tree root
[  133.922720][ T7397] BTRFS warning (device loop2): try to load backup roots slot 3
[  133.929228][ T5275] usb 2-1: USB disconnect, device number 7
[  133.930906][ T7397] BTRFS info (device loop2): rebuilding free space tree
[  133.941307][ T7397] BTRFS info (device loop2): checking UUID tree
[  133.945392][ T7397] BTRFS info (device loop2): enabling ssd optimizations
[  133.947988][ T7397] BTRFS info (device loop2): turning on async discard
[  133.949968][ T7397] BTRFS info (device loop2): enabling free space tree
[  133.952507][ T7397] BTRFS info (device loop2): force clearing of disk cache
[  133.955449][ T7397] BTRFS info (device loop2): trying to use backup root at mount time
[  133.958195][ T7397] BTRFS info (device loop2): force zlib compression, level 3
[  134.079660][ T5908] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.125180][ T5971] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  134.285423][ T5971] usb 1-1: Using ep0 maxpacket: 16
[  134.289213][ T5971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  134.292937][ T5971] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  134.297659][ T5971] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  134.301296][ T5971] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  134.304943][ T5971] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  134.309750][ T5971] usb 1-1: config 1 interface 0 has no altsetting 0
[  134.312339][ T5971] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  134.316227][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.324608][ T5971] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  134.455215][   T32] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  134.635336][ T5971] scsi host6: usb-storage 1-1:1.0
[  134.697617][   T32] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  134.778631][ T7427] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.782426][ T7427] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.931140][ T5275] usb 1-1: USB disconnect, device number 9
[  135.000543][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.028591][   T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  135.032041][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  135.035520][   T32] usb 3-1: Product: syz
[  135.037195][   T32] usb 3-1: Manufacturer: syz
[  135.038971][   T32] usb 3-1: SerialNumber: syz
[  135.249305][   T32] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  136.007086][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.805923][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.887654][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.045754][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.087656][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.145155][ T5275] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  138.172225][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  138.174567][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  138.297791][ T5275] usb 1-1: unable to get BOS descriptor or descriptor too short
[  138.301034][ T5275] usb 1-1: not running at top speed; connect to a high speed hub
[  138.304878][ T5275] usb 1-1: config 139 has an invalid interface number: 196 but max is 0
[  138.307850][ T5275] usb 1-1: config 139 has no interface number 0
[  138.310152][ T5275] usb 1-1: config 139 interface 196 has no altsetting 0
[  138.314699][ T5275] usb 1-1: New USB device found, idVendor=0733, idProduct=0401, bcdDevice=73.39
[  138.318091][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.320925][ T5275] usb 1-1: Product: syz
[  138.322315][ T5275] usb 1-1: Manufacturer: syz
[  138.324065][ T5275] usb 1-1: SerialNumber: syz
[  138.541193][ T5275] gspca_main: spca501-2.14.0 probing 0733:0401
[  138.547127][ T5275] gspca_spca501: reg write: error -71
[  138.548867][ T5275] spca501 1-1:139.196: Reg write failed for 0x00,0xaa,0x00
[  138.551052][ T5275] spca501 1-1:139.196: probe with driver spca501 failed with error -22
[  138.561604][ T5275] usb 1-1: USB disconnect, device number 10
[  138.725165][ T5914] Bluetooth: hci3: command 0x1003 tx timeout
[  138.725223][ T5198] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  138.809109][  T784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.009461][ T7483] m>e5n: entered promiscuous mode
[  139.125369][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.365175][ T5275] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  139.527822][ T5275] usb 1-1: Using ep0 maxpacket: 16
[  139.539243][ T5275] usb 1-1: unable to get BOS descriptor or descriptor too short
[  139.543553][ T5275] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 28, changing to 7
[  139.550065][ T5275] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  139.553371][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.556310][ T5275] usb 1-1: Product: syz
[  139.557922][ T5275] usb 1-1: Manufacturer: syz
[  139.559631][ T5275] usb 1-1: SerialNumber: syz
[  139.778999][ T5275] usb 1-1: 1:1 : unsupported sample bitwidth 1 in 5 bytes
[  139.781754][ T5275] usb 1-1: 1:1 : unsupported format bits 0x2002
[  139.784675][ T5275] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  139.842473][ T5275] usb 1-1: USB disconnect, device number 11
[  139.925687][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.165375][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.427327][ T7515] loop1: detected capacity change from 0 to 128
[  140.440705][ T7515] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.447486][ T7515] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  140.456281][ T7515] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.644: No space for directory leaf checksum. Please run e2fsck -D.
[  140.461368][ T7515] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.644: Directory block failed checksum
[  140.487919][ T6510] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  140.915339][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  141.075169][    T9] usb 1-1: Using ep0 maxpacket: 8
[  141.081467][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  141.091585][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.096065][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  141.108230][    T9] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  141.124423][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.128098][    T9] usb 1-1: Product: syz
[  141.129922][    T9] usb 1-1: Manufacturer: syz
[  141.131914][    T9] usb 1-1: SerialNumber: syz
[  141.163017][ T7546] loop1: detected capacity change from 0 to 1024
[  141.174427][ T7546] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  141.179482][ T7546] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  141.182953][ T7546] EXT4-fs (loop1): orphan cleanup on readonly fs
[  141.187008][ T7546] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  141.190650][ T7546] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  141.196573][ T7546] EXT4-fs (loop1): Cannot turn on quotas: error -5
[  141.206320][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.210002][ T7546] EXT4-fs (loop1): 1 truncate cleaned up
[  141.213626][ T7546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  141.242845][ T6510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.357023][    T9] usb 1-1: disable ehci-hcd to run US-144
[  141.367169][    T9] usb 1-1: USB disconnect, device number 12
[  141.479011][ T7555] Invalid argument reading file caps for ./file0
[  142.039645][    T9] usb 3-1: USB disconnect, device number 12
[  142.055850][    T9] usblp0: removed
[  142.083151][ T7573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.113103][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.154917][ T7573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.200444][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.212160][   T33] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  142.385119][   T33] usb 1-1: Using ep0 maxpacket: 16
[  142.393959][   T33] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  142.398270][   T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.401367][   T33] usb 1-1: Product: syz
[  142.403239][   T33] usb 1-1: Manufacturer: syz
[  142.405462][   T33] usb 1-1: SerialNumber: syz
[  142.585529][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  142.654612][   T34] audit: type=1326 audit(1774161860.869:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.1.668" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f286f19c799 code=0x0
[  142.745207][    T9] usb 3-1: Using ep0 maxpacket: 32
[  142.748476][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.751674][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.754928][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  142.758345][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.769435][    T9] usb 3-1: config 0 descriptor??
[  143.181232][    T9] koneplus 0003:1E7D:2D51.0006: unbalanced collection at end of report description
[  143.189486][    T9] koneplus 0003:1E7D:2D51.0006: parse failed
[  143.191902][    T9] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -22
[  143.285643][   T24] net_ratelimit: 8 callbacks suppressed
[  143.285655][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.386006][   T24] usb 3-1: USB disconnect, device number 13
[  143.605711][ T7586] loop1: detected capacity change from 0 to 512
[  143.616974][ T7586] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  143.634254][   T33] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[  143.636373][ T7586] EXT4-fs (loop1): orphan cleanup on readonly fs
[  143.641266][   T33] usb 1-1: USB disconnect, device number 13
[  143.644640][ T7586] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.670: Block bitmap for bg 0 marked uninitialized
[  143.656115][ T7586] loop1: lost filesystem error report for type 5 error -117
[  143.659152][ T7586] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  143.665208][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  143.665221][    C1] EXT4-fs (loop1): initial error at time 1774161861: ext4_read_block_bitmap_nowait:517
[  143.665237][    C1] EXT4-fs (loop1): last error at time 1774161861: ext4_read_block_bitmap_nowait:517
[  143.673668][ T7586] loop1: lost filesystem error report for type 5 error -117
[  143.674167][ T7586] EXT4-fs (loop1): 1 orphan inode deleted
[  143.679111][ T7586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  143.698641][ T6510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.384329][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.818323][ T7630] netlink: 'syz.1.690': attribute type 1 has an invalid length.
[  144.821254][ T7630] netlink: 96 bytes leftover after parsing attributes in process `syz.1.690'.
[  144.824641][ T7630] netlink: 1 bytes leftover after parsing attributes in process `syz.1.690'.
[  144.828407][ T7630] netlink: 'syz.1.690': attribute type 1 has an invalid length.
[  144.829282][ T7614] loop2: detected capacity change from 0 to 32768
[  144.876363][ T7614] read_mapping_page failed!
[  144.878434][ T7614] ERROR: (device loop2): txCommit: 
[  144.878434][ T7614] 
[  144.901409][ T7632] loop1: detected capacity change from 0 to 256
[  144.914405][  T117] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0)
[  144.925466][  T117] ------------[ cut here ]------------
[  144.927606][  T117] kernel BUG at fs/jfs/jfs_txnmgr.c:932!
[  144.929715][  T117] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  144.932124][  T117] CPU: 0 UID: 0 PID: 117 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  144.936701][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.940362][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[  144.942181][  T117] Code: ca fd 90 0f 0b e8 61 52 68 fe 48 c7 c7 20 91 0b 8c 48 c7 c6 19 8d 0b 8c ba a4 03 00 00 48 c7 c1 20 9e 0b 8c e8 32 7a ca fd 90 <0f> 0b e8 3a 52 68 fe 48 c7 c7 20 91 0b 8c 48 c7 c6 19 8d 0b 8c ba
[  144.948803][  T117] RSP: 0018:ffffc900030c7c48 EFLAGS: 00010246
[  144.951039][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 029a87b50d8cb200
[  144.952264][ T7632] FAT-fs (loop1): Directory bread(block 64) failed
[  144.954042][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  144.954054][  T117] RBP: ffffc90002c1a0d8 R08: ffffc900030c79c7 R09: 1ffff92000618f38
[  144.954065][  T117] R10: dffffc0000000000 R11: fffff52000618f39 R12: dffffc0000000000
[  144.954075][  T117] R13: 1ffff11022a50434 R14: ffff8881152821a0 R15: 0000000000000000
[  144.954084][  T117] FS:  0000000000000000(0000) GS:ffff88818de65000(0000) knlGS:0000000000000000
[  144.954093][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.956335][ T7632] FAT-fs (loop1): Directory bread(block 65) failed
[  144.959218][  T117] CR2: 00007f286f417dac CR3: 000000010bc1c000 CR4: 00000000000006f0
[  144.959254][  T117] Call Trace:
[  144.959262][  T117]  <TASK>
[  144.959273][  T117]  jfs_lazycommit+0x582/0xaa0
[  144.962417][ T7632] FAT-fs (loop1): Directory bread(block 66) failed
[  144.965140][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  144.965168][  T117]  ? __pfx_default_wake_function+0x10/0x10
[  144.965183][  T117]  ? __kthread_parkme+0x7a/0x1f0
[  144.965199][  T117]  kthread+0x388/0x470
[  144.965208][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  144.965219][  T117]  ? __pfx_kthread+0x10/0x10
[  144.965227][  T117]  ret_from_fork+0x51e/0xb90
[  144.965241][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[  144.965251][  T117]  ? __switch_to+0xc7d/0x1450
[  144.965262][  T117]  ? __pfx_kthread+0x10/0x10
[  144.965270][  T117]  ret_from_fork_asm+0x1a/0x30
[  145.006093][  T117]  </TASK>
[  145.007284][  T117] Modules linked in:
[  145.009114][ T7632] FAT-fs (loop1): Directory bread(block 67) failed
[  145.009490][  T117] ---[ end trace 0000000000000000 ]---
[  145.011246][ T7632] FAT-fs (loop1): Directory bread(block 68) failed
[  145.015893][ T7632] FAT-fs (loop1): Directory bread(block 69) failed
[  145.018548][ T7632] FAT-fs (loop1): Directory bread(block 70) failed
[  145.018973][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[  145.020749][ T7632] FAT-fs (loop1): Directory bread(block 71) failed
[  145.022337][  T117] Code: ca fd 90 0f 0b e8 61 52 68 fe 48 c7 c7 20 91 0b 8c 48 c7 c6 19 8d 0b 8c ba a4 03 00 00 48 c7 c1 20 9e 0b 8c e8 32 7a ca fd 90 <0f> 0b e8 3a 52 68 fe 48 c7 c7 20 91 0b 8c 48 c7 c6 19 8d 0b 8c ba
[  145.022351][  T117] RSP: 0018:ffffc900030c7c48 EFLAGS: 00010246
[  145.022365][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 029a87b50d8cb200
[  145.022375][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  145.022447][  T117] RBP: ffffc90002c1a0d8 R08: ffffc900030c79c7 R09: 1ffff92000618f38
[  145.022458][  T117] R10: dffffc0000000000 R11: fffff52000618f39 R12: dffffc0000000000
[  145.022468][  T117] R13: 1ffff11022a50434 R14: ffff8881152821a0 R15: 0000000000000000
[  145.024434][ T7632] FAT-fs (loop1): Directory bread(block 72) failed
[  145.032183][  T117] FS:  0000000000000000(0000) GS:ffff88818de65000(0000) knlGS:0000000000000000
[  145.036082][ T7632] FAT-fs (loop1): Directory bread(block 73) failed
[  145.037269][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  145.076758][  T117] CR2: 00007f286f417dac CR3: 000000016cfd8000 CR4: 00000000000006f0
[  145.080656][  T117] Kernel panic - not syncing: Fatal exception
[  145.083666][  T117] Kernel Offset: disabled
[  145.085291][  T117] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:44:23  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000049 RBX=0000000000000049 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900030c7490
R8 =ffff8881616f8237 R9 =1ffff1102c2df046 R10=dffffc0000000000 R11=ffffffff853e97c0
R12=dffffc0000000000 R13=ffffffff9a2b1a60 R14=ffffffff9a5c9900 R15=0000000000000000
RIP=ffffffff853e983c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818de65000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f286f417dac CR3=000000010bc1c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ff000000 0000000000000000 XMM01=ffff000000000000 000000000000ff00
XMM02=0000000000000000 00000000000000ff XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff8882a9465000 RBX=ffffffff819a82ba RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8c27f160 RDI=ffffffff819a82ba RBP=ffffc90000197f10 RSP=ffffc90000197e20
R8 =ffff88823c63395b R9 =1ffff110478c672b R10=dffffc0000000000 R11=ffffed10478c672c
R12=ffffffff9011d9b0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102c096000
RIP=ffffffff8babee9f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9465000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f286f186340 CR3=0000000115f48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9fcf9ec5e8 00007f9fcf9ec618 XMM03=00007f9fcf9ec600 00007f9fcf9ec5e0
XMM04=00007f9fd054d020 00007f9fcf9ec5c0 XMM05=00007f9fcf9ec5d0 00007f9fcf9ec610
XMM06=00007f9fcf9ec5f8 00007f9fcf9ec5c8 XMM07=00007f9fcf9ec600 00007f9fcf9ec5e0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
