last executing test programs:

2.313919056s ago: executing program 1 (id=369):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/121)

1.749554997s ago: executing program 1 (id=379):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xd}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.548980627s ago: executing program 1 (id=385):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f00000002c0)=0x9)

1.548751922s ago: executing program 0 (id=386):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x1c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1.493544621s ago: executing program 0 (id=388):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000a0000000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x10)

1.444162163s ago: executing program 0 (id=390):
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x400000000000000, 0x8000)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000a00)={'\x00', 0x2, 0x1, 0xfffffffe, 0x0, 0x5, 0xffffffffffffffff})

1.394320417s ago: executing program 0 (id=391):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

1.331778263s ago: executing program 0 (id=393):
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xe72c5e8f5e8528e9, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0xffffffffffffffda, 0x80000003, {0x2, 0x7ffffffffffc, 0x2, 0x3, 0x30c7, 0xa2, {0x0, 0x2, 0x3, 0xa, 0x8000000000000000, 0x9, 0x1, 0x801, 0x42, 0x6000, 0x4, 0x0, 0x0, 0xffffffff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)

941.749496ms ago: executing program 2 (id=397):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x4, 0x4)

895.26487ms ago: executing program 1 (id=398):
unshare(0x400)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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")
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10)

707.093188ms ago: executing program 2 (id=399):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x8004}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x760}, 0x94)

408.516786ms ago: executing program 1 (id=400):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', 0x4480, &(0x7f0000000100)=ANY=[], 0x86, 0x23f, &(0x7f00000004c0)="$eJzs2r9rJGUYB/BnYo6cOXK74i/uQHzRQm2GJLXFBc2BuKDorXAKcnNmokvG3ZBZAivipdLWP8FaLO0EudImIP4FFnZpUl4hjiSby22OtRDxNujnU8w88M4X3pd3eOcp5uDVrz/d2qzzzWIYc1kWc9diL+5l0Y65uG8vXnnp5k/PvXvz/TfXOp31d1K6vnZjZTWldPn5Hz/4/LsX7g4vvff95R8WYr/94cHh6m/7z+xfOfjjxie9OvXq1B8MU5FuDwbD4nZVpo1evZWn9HZVFnWZev263DkzvlkNtrdHqehvLC1u75R1nYr+KG2VozQcpOHOKBUfF71+yvM8LS0G/0T323tNE4fNhVvRNM3j38SlZiEiWpE9kbInr2VP38qe3cuuHDZNa9ZT5V/x8P7fjaVf7f//x8ShfjGi+mq3u9sd38fjr/8cvaiijOVoxe9x9JqcOP4wRERnfTkda8eX1Z2T/J0L3ceO82ubJ/mVaEX7bP7oev2NzvrKOJ8m87vdhViczK9GK56anl+dmr8YL784kc+jFb98FIOoYiOOsg/yX6yk9NpbnYfyV4+fAwD4r8nTqfbZ/mfcv+X5X42P86f91ZT+8H5/tTy1P5uPq/OzXTsR9eizraKqyh3FaTEf52IaCsUMi1mfTDwKDzZ91jMBAAAAAAAAAADg73gUvxPOeo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD59mcAAAD//9qY0D8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000140)='./file0/../file0/file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
stat(&(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340))

408.150785ms ago: executing program 2 (id=401):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e)

230.747282ms ago: executing program 2 (id=402):
r0 = semget$private(0x0, 0x4, 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003100)=[0x8100])

132.95004ms ago: executing program 2 (id=403):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e)

922.812µs ago: executing program 1 (id=404):
r0 = io_uring_setup(0x2e34, &(0x7f0000000340))
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18)
connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)

608.107µs ago: executing program 2 (id=405):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000340)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@unhide}, {@noadinicb}, {@utf8}, {}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortad}, {@uid_forget}, {@adinicb}]}, 0x1, 0xc5f, &(0x7f0000000f40)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800052, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

0s ago: executing program 0 (id=406):
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50069' (ED25519) to the list of known hosts.
syzkaller login: [   64.218419][ T5843] cgroup: Unknown subsys name 'net'
[   64.318343][ T5843] cgroup: Unknown subsys name 'cpuset'
[   64.322402][ T5843] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.159164][ T5843] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.298605][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.301198][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   72.864487][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.881925][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.895082][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.899168][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.902915][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.906187][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.909397][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.912749][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.917038][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.920657][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.923826][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.927054][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.934189][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.944730][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.955831][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.251531][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   73.329262][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   73.383035][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   73.433962][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.437294][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.440328][ T5859] bridge_slave_0: entered allmulticast mode
[   73.444312][ T5859] bridge_slave_0: entered promiscuous mode
[   73.457307][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.459498][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.461945][ T5859] bridge_slave_1: entered allmulticast mode
[   73.465016][ T5859] bridge_slave_1: entered promiscuous mode
[   73.534342][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.541204][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.578256][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.580952][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.583326][ T5855] bridge_slave_0: entered allmulticast mode
[   73.587524][ T5855] bridge_slave_0: entered promiscuous mode
[   73.592321][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.595814][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.598517][ T5855] bridge_slave_1: entered allmulticast mode
[   73.601614][ T5855] bridge_slave_1: entered promiscuous mode
[   73.655779][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.660136][ T5859] team0: Port device team_slave_0 added
[   73.674415][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.689593][ T5859] team0: Port device team_slave_1 added
[   73.692357][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.695672][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.698409][ T5851] bridge_slave_0: entered allmulticast mode
[   73.702095][ T5851] bridge_slave_0: entered promiscuous mode
[   73.739273][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.741931][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.744215][ T5851] bridge_slave_1: entered allmulticast mode
[   73.747148][ T5851] bridge_slave_1: entered promiscuous mode
[   73.750627][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.752951][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.763412][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.769182][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.771838][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.781703][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.786668][ T5855] team0: Port device team_slave_0 added
[   73.821151][ T5855] team0: Port device team_slave_1 added
[   73.826295][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.831940][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.901082][ T5859] hsr_slave_0: entered promiscuous mode
[   73.904178][ T5859] hsr_slave_1: entered promiscuous mode
[   73.910473][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.912657][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.920125][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.925859][ T5851] team0: Port device team_slave_0 added
[   73.928710][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.931185][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.940630][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.949511][ T5851] team0: Port device team_slave_1 added
[   73.992092][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.994889][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.004478][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.030520][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.033160][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.044362][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.095453][ T5855] hsr_slave_0: entered promiscuous mode
[   74.098496][ T5855] hsr_slave_1: entered promiscuous mode
[   74.101282][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   74.103640][ T5855] Cannot create hsr debugfs directory
[   74.188729][ T5851] hsr_slave_0: entered promiscuous mode
[   74.191785][ T5851] hsr_slave_1: entered promiscuous mode
[   74.194557][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   74.198220][ T5851] Cannot create hsr debugfs directory
[   74.462417][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.484673][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.491262][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.503135][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.544168][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.558156][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.566931][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.571708][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.654604][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.669432][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.676671][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.696887][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.763857][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.813208][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   74.822604][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.843244][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.846096][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.860355][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.862923][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.877902][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   74.897129][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.899353][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.903765][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.906651][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.941125][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.976222][ T5858] Bluetooth: hci2: command tx timeout
[   74.977007][   T54] Bluetooth: hci1: command tx timeout
[   74.978749][ T5860] Bluetooth: hci0: command tx timeout
[   75.001540][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.026395][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   75.043568][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.046533][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.068400][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.070669][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.101574][ T5851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   75.106840][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.186852][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.247761][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.270823][ T5859] veth0_vlan: entered promiscuous mode
[   75.308907][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.313634][ T5859] veth1_vlan: entered promiscuous mode
[   75.333098][ T5855] veth0_vlan: entered promiscuous mode
[   75.352028][ T5855] veth1_vlan: entered promiscuous mode
[   75.403773][ T5859] veth0_macvtap: entered promiscuous mode
[   75.408695][ T5851] veth0_vlan: entered promiscuous mode
[   75.423731][ T5859] veth1_macvtap: entered promiscuous mode
[   75.433172][ T5855] veth0_macvtap: entered promiscuous mode
[   75.439214][ T5851] veth1_vlan: entered promiscuous mode
[   75.451458][ T5855] veth1_macvtap: entered promiscuous mode
[   75.470643][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.490802][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.511270][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.527152][ T5883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.532978][ T5851] veth0_macvtap: entered promiscuous mode
[   75.544668][ T5883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.548967][ T5883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.552242][ T5883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.562245][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.579173][ T5880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.585553][ T5851] veth1_macvtap: entered promiscuous mode
[   75.596230][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.600209][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.603676][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.623683][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.638101][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.678143][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.683303][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.706127][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.710347][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.796919][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.800014][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.841650][  T732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.844669][  T732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.909138][ T4563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.912280][ T4563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.917995][  T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.923534][  T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.975851][  T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.982012][  T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.992050][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.999659][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.014537][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.233544][ T5930] capability: warning: `syz.0.6' uses deprecated v2 capabilities in a way that may be insecure
[   76.272267][ T5936] loop2: detected capacity change from 0 to 16
[   76.292966][ T5936] erofs (device loop2): mounted with root inode @ nid 36.
[   76.375037][   T33] audit: type=1326 audit(1756522618.559:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.2.8" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b78ebe9 code=0x7ffc0000
[   76.377567][ T5939] erofs (device loop2): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[   76.413661][ T5939] erofs (device loop2): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[   76.434957][   T33] audit: type=1326 audit(1756522618.559:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.2.8" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b78ebe9 code=0x7ffc0000
[   76.443911][   T33] audit: type=1326 audit(1756522618.569:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.2.8" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f793b78ebe9 code=0x7ffc0000
[   76.453739][ T5939] erofs (device loop2): read error -95 @ 8200 of nid 36
[   76.479062][ T5940] erofs (device loop2): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[   76.483359][ T5940] erofs (device loop2): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[   76.508962][   T33] audit: type=1326 audit(1756522618.669:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.2.8" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b78ebe9 code=0x7ffc0000
[   76.532322][   T33] audit: type=1326 audit(1756522618.679:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.2.8" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b78ebe9 code=0x7ffc0000
[   76.551898][ T5940] erofs (device loop2): read error -95 @ 8200 of nid 36
[   76.593101][   T33] audit: type=1326 audit(1756522618.759:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.2.8" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f793b78ebe9 code=0x7ffc0000
[   76.612333][   T33] audit: type=1326 audit(1756522618.759:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.2.8" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b78ebe9 code=0x7ffc0000
[   76.644922][   T33] audit: type=1326 audit(1756522618.759:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.2.8" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b78ebe9 code=0x7ffc0000
[   76.671924][   T33] audit: type=1326 audit(1756522618.809:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.2.8" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f793b78ebe9 code=0x7ffc0000
[   76.704333][   T33] audit: type=1326 audit(1756522618.809:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.2.8" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b78ebe9 code=0x7ffc0000
[   76.718903][ T5944] loop1: detected capacity change from 0 to 1024
[   77.056080][ T5858] Bluetooth: hci2: command tx timeout
[   77.059404][ T5860] Bluetooth: hci1: command tx timeout
[   77.059466][   T54] Bluetooth: hci0: command tx timeout
[   77.563113][ T5953] netlink: 'syz.1.15': attribute type 49 has an invalid length.
[   77.923061][ T5957] loop0: detected capacity change from 0 to 1024
[   77.933794][ T5957] =======================================================
[   77.933794][ T5957] WARNING: The mand mount option has been deprecated and
[   77.933794][ T5957]          and is ignored by this kernel. Remove the mand
[   77.933794][ T5957]          option from the mount to silence this warning.
[   77.933794][ T5957] =======================================================
[   77.975433][ T5957] EXT4-fs: Ignoring removed nobh option
[   77.987668][ T5957] EXT4-fs: Ignoring removed bh option
[   78.134405][ T5957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.237575][ T5968] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21'.
[   78.242242][ T5968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21'.
[   78.350626][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.585474][ T5976] loop1: detected capacity change from 0 to 1024
[   78.620230][ T5976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.669687][ T5976] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.25: missing EA_INODE flag
[   78.697292][ T5976] EXT4-fs (loop1): Remounting filesystem read-only
[   78.709829][ T5976] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   78.750985][ T5980] loop0: detected capacity change from 0 to 1024
[   78.806716][ T5980] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[   78.829115][ T5980] hfsplus: filesystem is marked journaled, leaving read-only.
[   78.882361][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.135125][   T54] Bluetooth: hci1: command tx timeout
[   79.146669][   T54] Bluetooth: hci0: command tx timeout
[   80.185305][   T54] Bluetooth: hci2: command tx timeout
[   80.538271][ T5996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.30'.
[   80.773669][ T6003] netlink: 'syz.1.34': attribute type 4 has an invalid length.
[   80.843044][ T6003] netlink: 'syz.1.34': attribute type 4 has an invalid length.
[   81.216572][ T5860] Bluetooth: hci1: command tx timeout
[   81.216594][   T54] Bluetooth: hci0: command tx timeout
[   82.414443][ T6015] sp0: Synchronizing with TNC
[   82.596311][ T6019] loop0: detected capacity change from 0 to 512
[   82.639998][ T6019] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[   82.675092][ T6019] EXT4-fs (loop0): group descriptors corrupted!
[   83.017439][ T6032] loop2: detected capacity change from 0 to 1024
[   84.043438][ T6039] loop0: detected capacity change from 0 to 512
[   84.158730][ T6041] warning: `syz.1.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.652137][  T144] hfsplus: b-tree write err: -5, ino 4
[   84.685231][ T6053] syz.1.55 uses obsolete (PF_INET,SOCK_PACKET)
[   84.810551][ T5707] Process accounting resumed
[   85.030037][ T6072] Bluetooth: MGMT ver 1.23
[   85.130943][ T6078] libceph: resolve '4' (ret=-3): failed
[   85.226861][   T33] kauditd_printk_skb: 7 callbacks suppressed
[   85.226877][   T33] audit: type=1800 audit(1756522627.430:19): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.65" name="/newroot/24/bus/#146//deleted" dev="tmpfs" ino=146 res=0 errno=0
[   85.465553][ T6096] ieee802154 phy0 wpan0: encryption failed: -22
[   85.765317][ T5707] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   85.914950][ T5707] usb 1-1: Using ep0 maxpacket: 16
[   85.920424][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   85.930765][ T5707] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[   85.934171][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.939516][ T5707] usb 1-1: Product: syz
[   85.941275][ T5707] usb 1-1: Manufacturer: syz
[   85.943094][ T5707] usb 1-1: SerialNumber: syz
[   85.959390][ T5707] usb 1-1: config 0 descriptor??
[   85.978473][ T5707] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   86.082926][ T6106] loop2: detected capacity change from 0 to 128
[   86.093740][ T6106] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.101442][ T6106] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.131212][ T5855] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.185186][ T5707] usb 1-1: USB disconnect, device number 2
[   86.327763][ T6117] pimreg: entered allmulticast mode
[   86.355765][ T6119] process 'syz.1.82' launched './file0' with NULL argv: empty string added
[   86.361425][ T6117] pimreg: left allmulticast mode
[   86.513750][ T6129] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   86.657602][   T47] cfg80211: failed to load regulatory.db
[   87.214979][ T5707] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   87.535121][ T5707] usb 2-1: Using ep0 maxpacket: 16
[   87.563409][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.579338][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.588107][ T5707] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   87.598440][ T5707] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   87.613451][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.641986][ T5707] usb 2-1: config 0 descriptor??
[   88.132621][ T5707] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input6
[   88.194372][ T5707] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   88.203955][ T6165] loop0: detected capacity change from 0 to 1024
[   88.254173][   T29] hfsplus: b-tree write err: -5, ino 4
[   88.319097][   T47] usb 2-1: USB disconnect, device number 2
[   88.931519][ T6173] loop1: detected capacity change from 0 to 1024
[   88.938858][ T6173] EXT4-fs: Ignoring removed nobh option
[   88.941209][ T6173] EXT4-fs: Ignoring removed bh option
[   88.965436][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.006431][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.083140][ T6178] loop1: detected capacity change from 0 to 1024
[   89.592332][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880274af000: rx timeout, send abort
[   89.596880][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880274af000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   89.635001][   T47] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   89.737508][ T6195] loop0: detected capacity change from 0 to 4096
[   89.748767][ T6195] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   89.776583][ T6195] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[   89.787200][   T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   89.791576][   T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   89.800708][   T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   89.804356][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   89.808135][   T47] usb 2-1: SerialNumber: syz
[   89.822986][   T47] usb 2-1: bad CDC descriptors
[   89.837248][   T47] usb-storage 2-1:1.0: USB Mass Storage device detected
[   89.852400][   T47] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   89.881526][   T47] scsi host6: usb-storage 2-1:1.0
[   90.024128][   T47] usb 2-1: USB disconnect, device number 3
[   90.568778][ T6205] CUSE: info not properly terminated
[   90.688905][ T6211] loop1: detected capacity change from 0 to 64
[   90.717697][ T6211] Trying to free block not in datazone
[   90.878135][ T6220] loop0: detected capacity change from 0 to 8
[   90.916115][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'.
[   90.919611][ T6220] openvswitch: netlink: nsh attr 2656 is out of range max 3
[   90.964975][ T6220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.334933][  T975] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   91.485087][  T975] usb 1-1: Using ep0 maxpacket: 8
[   91.495472][  T975] usb 1-1: config 162 has an invalid interface number: 166 but max is 0
[   91.501841][  T975] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config
[   91.506658][  T975] usb 1-1: config 162 has no interface number 0
[   91.509407][  T975] usb 1-1: config 162 interface 166 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[   91.514507][  T975] usb 1-1: config 162 interface 166 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   91.526672][ T6231] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.127'.
[   91.530456][ T6231] netlink: zone id is out of range
[   91.532026][  T975] usb 1-1: config 162 interface 166 has no altsetting 0
[   91.532610][ T6231] netlink: get zone limit has 8 unknown bytes
[   91.539026][  T975] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea
[   91.542724][  T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.548582][  T975] usb 1-1: Product: syz
[   91.550988][  T975] usb 1-1: Manufacturer: syz
[   91.555483][  T975] usb 1-1: SerialNumber: syz
[   91.781177][  T975] appledisplay 1-1:162.166: Could not find int-in endpoint
[   91.787741][  T975] usbhid 1-1:162.166: couldn't find an input interrupt endpoint
[   91.797457][  T975] usb 1-1: USB disconnect, device number 3
[   91.812314][ T5880] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.812468][ T6237] Zero length message leads to an empty skb
[   91.818611][ T5880] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.831820][ T5880] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.843926][ T5880] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.863712][ T6239] loop2: detected capacity change from 0 to 4096
[   91.915222][ T6239] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[   91.917238][ T6239] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   91.919764][ T6239] ntfs3(loop2): mft corrupted
[   91.941429][ T6239] ntfs3(loop2): Failed to load root (-22).
[   91.944016][ T6239] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[   92.230185][ T6261] loop2: detected capacity change from 0 to 512
[   92.237590][ T6261] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[   92.241371][ T6261] UDF-fs: Scanning with blocksize 512 failed
[   92.248349][ T6261] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[   92.252058][ T6261] UDF-fs: Scanning with blocksize 1024 failed
[   92.259600][ T6261] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[   92.263177][ T6261] UDF-fs: Scanning with blocksize 2048 failed
[   92.267792][ T6261] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   92.273779][ T6261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.365869][ T6263] loop2: detected capacity change from 0 to 512
[   92.370745][ T6263] EXT4-fs: Ignoring removed mblk_io_submit option
[   92.390631][ T6263] EXT4-fs (loop2): orphan cleanup on readonly fs
[   92.393410][ T6263] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[   92.404676][ T6263] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.138: attempt to clear invalid blocks 2 len 1
[   92.410956][ T6263] EXT4-fs (loop2): Remounting filesystem read-only
[   92.413746][ T6263] EXT4-fs (loop2): 1 truncate cleaned up
[   92.417852][ T6263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   92.436707][ T6263] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work
[   92.485759][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.613586][ T6276] loop2: detected capacity change from 0 to 1024
[   92.626628][ T6276] EXT4-fs: Ignoring removed nobh option
[   92.636334][ T6276] EXT4-fs: Ignoring removed bh option
[   92.678197][ T6276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.694291][ T6276] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.144: Allocating blocks 385-513 which overlap fs metadata
[   92.717860][ T6276] EXT4-fs (loop2): pa ffff8880211891d0: logic 16, phys. 129, len 24
[   92.720296][ T6276] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[   92.752504][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.824332][ T6287] ieee802154 phy0 wpan0: encryption failed: -22
[   92.871685][ T6291] tipc: Started in network mode
[   92.873366][ T6291] tipc: Node identity 22cfde3b99bf, cluster identity 4711
[   92.885257][ T6291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.890068][ T6291] syzkaller0: entered promiscuous mode
[   92.893125][ T6291] syzkaller0: entered allmulticast mode
[   92.920220][ T6291] tipc: Resetting bearer <eth:syzkaller0>
[   92.928220][ T6290] tipc: Resetting bearer <eth:syzkaller0>
[   92.945186][ T6290] tipc: Disabling bearer <eth:syzkaller0>
[   92.978523][ T6294] fanotify: failed to encode fid (type=0, len=0, err=-2)
[   93.065379][  T975] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   93.196622][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'.
[   93.237131][  T975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   93.241071][  T975] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   93.253673][  T975] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   93.259781][  T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.269302][ T6286] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   93.279177][  T975] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   93.343149][ T6314] loop2: detected capacity change from 0 to 16
[   93.361604][ T6314] erofs (device loop2): mounted with root inode @ nid 36.
[   93.552841][  T975] usb 1-1: USB disconnect, device number 4
[   93.890685][ T6319] netlink: 76 bytes leftover after parsing attributes in process `syz.1.162'.
[   94.028570][ T6328] loop2: detected capacity change from 0 to 256
[   94.596864][ T6337] loop2: detected capacity change from 0 to 4096
[   94.791079][ T6346] loop1: detected capacity change from 0 to 512
[   94.810709][ T6346] FAT-fs (loop1): bogus number of FAT sectors
[   94.818824][ T6346] FAT-fs (loop1): Can't find a valid FAT filesystem
[   95.006789][ T6354] loop0: detected capacity change from 0 to 256
[   95.010634][ T6354] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   95.049878][ T6354] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   95.557346][ T6376] loop2: detected capacity change from 0 to 1024
[   95.604577][ T6376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.698238][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.825248][ T5919] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   96.016400][ T5919] usb 2-1: Using ep0 maxpacket: 8
[   96.046359][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short
[   96.050774][ T5919] usb 2-1: config 8 has an invalid interface number: 24 but max is 1
[   96.054104][ T5919] usb 2-1: config 8 has an invalid interface number: 242 but max is 1
[   96.061721][ T5919] usb 2-1: config 8 has no interface number 0
[   96.064146][ T5919] usb 2-1: config 8 has no interface number 1
[   96.066815][ T5919] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024
[   96.071222][ T5919] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11
[   96.077399][ T5919] usb 2-1: config 8 interface 24 has no altsetting 0
[   96.080179][ T5919] usb 2-1: config 8 interface 242 has no altsetting 0
[   96.085887][ T5919] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[   96.089554][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.092854][ T5919] usb 2-1: Product: syz
[   96.094618][ T5919] usb 2-1: Manufacturer: syz
[   96.104861][ T5919] usb 2-1: SerialNumber: syz
[   96.118995][ T6378] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   96.144019][ T6388] loop2: detected capacity change from 0 to 32768
[   96.183711][ T6388] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.191 (6388)
[   96.210505][ T6388] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.214708][ T6388] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   96.290577][ T6402] loop0: detected capacity change from 0 to 512
[   96.294555][ T6402] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.298035][ T6402] EXT4-fs: inline encryption not supported
[   96.300371][ T6402] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.302819][ T6402] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.307641][ T6402] EXT4-fs (loop0): Test dummy encryption mode enabled
[   96.310308][ T6402] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.316515][ T6402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   96.344718][ T6402] EXT4-fs (loop0): 1 truncate cleaned up
[   96.362037][ T6388] BTRFS info (device loop2): allowing degraded mounts
[   96.366906][ T6388] BTRFS info (device loop2): enabling ssd optimizations
[   96.370210][ T6388] BTRFS info (device loop2): enabling free space tree
[   96.373893][ T6402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.380590][ T6388] BTRFS info (device loop2): force zlib compression, level 3
[   96.383692][ T5919] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'.
[   96.407187][ T5919] vmk80xx 2-1:8.242: driver 'vmk80xx' failed to auto-configure device.
[   96.426804][ T5855] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.435452][ T5919] usb 2-1: USB disconnect, device number 4
[   96.583519][ T6402] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   96.628560][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.201195][ T6431] bpf: Bad value for 'gid'
[   97.772015][ T6444] loop2: detected capacity change from 0 to 2048
[   98.107426][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'.
[   98.119455][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.208'.
[   98.128571][ T6458] loop2: detected capacity change from 0 to 128
[   98.386834][ T6465] loop1: detected capacity change from 0 to 2048
[   98.409106][ T6465] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=66359, location=66359
[   98.480970][ T6465] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.669259][ T6476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.645071][  T975] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   99.772831][   T33] audit: type=1400 audit(1756522641.970:20): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200DFFFFFFFFFFFFFF7FA6 pid=6503 comm="syz.1.228"
[   99.815320][  T975] usb 1-1: Using ep0 maxpacket: 16
[   99.819185][  T975] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.828194][  T975] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[   99.833454][  T975] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[   99.846832][  T975] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   99.850271][  T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   99.852823][  T975] usb 1-1: SerialNumber: syz
[   99.875828][ T6494] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   99.887184][  T975] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[   99.912968][ T6514] loop1: detected capacity change from 0 to 512
[   99.932987][ T6514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   99.983784][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.093908][  T975] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  100.116116][  T975] usb 1-1: USB disconnect, device number 5
[  102.185815][  T975] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  102.339906][  T975] usb 1-1: Using ep0 maxpacket: 16
[  102.356066][  T975] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  102.359485][  T975] usb 1-1: config 0 has no interface number 0
[  102.362230][  T975] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  102.372294][  T975] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  102.378554][  T975] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  102.382123][  T975] usb 1-1: Product: syz
[  102.384145][  T975] usb 1-1: SerialNumber: syz
[  102.404028][  T975] usb 1-1: config 0 descriptor??
[  102.425191][  T975] cm109 1-1:0.8: invalid payload size 3, expected 4
[  102.441467][  T975] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input7
[  102.921257][ T6545] loop1: detected capacity change from 0 to 32768
[  102.951727][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.955534][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.958570][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.961522][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.964528][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.969757][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.972718][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.975783][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.978684][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.981615][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  103.005516][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  103.009263][  T975] usb 1-1: USB disconnect, device number 6
[  103.037708][  T975] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  103.057672][ T6545] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  103.250580][ T5859] ocfs2: Unmounting device (7,1) on (node local)
[  103.582896][ T6552] loop2: detected capacity change from 0 to 256
[  103.651822][ T6552] FAT-fs (loop2): Directory bread(block 64) failed
[  103.654729][ T6552] FAT-fs (loop2): Directory bread(block 65) failed
[  103.665129][ T6552] FAT-fs (loop2): Directory bread(block 66) failed
[  103.668046][ T6554] loop0: detected capacity change from 0 to 1024
[  103.670790][ T6552] FAT-fs (loop2): Directory bread(block 67) failed
[  103.686305][ T6552] FAT-fs (loop2): Directory bread(block 68) failed
[  103.688864][ T6552] FAT-fs (loop2): Directory bread(block 69) failed
[  103.693298][ T6552] FAT-fs (loop2): Directory bread(block 70) failed
[  103.697977][ T6552] FAT-fs (loop2): Directory bread(block 71) failed
[  103.699482][ T6554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.700754][ T6552] FAT-fs (loop2): Directory bread(block 72) failed
[  103.713354][ T6552] FAT-fs (loop2): Directory bread(block 73) failed
[  103.796604][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.848772][ T6562] loop1: detected capacity change from 0 to 256
[  103.867981][ T6562] exfat: Deprecated parameter 'utf8'
[  103.892289][ T6562] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d)
[  104.211123][ T6583] loop1: detected capacity change from 0 to 2048
[  104.593280][ T6607] loop3: detected capacity change from 0 to 1
[  104.599510][ T6607] Dev loop3: unable to read RDB block 1
[  104.601811][ T6607]  loop3: unable to read partition table
[  104.610420][ T6607] loop3: partition table beyond EOD, truncated
[  104.620174][ T6607] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5)
[  104.926775][  T975] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  104.933466][ T6628] loop1: detected capacity change from 0 to 128
[  104.948144][ T6628] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  104.958199][ T6628] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  104.983650][ T5859] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.084890][  T975] usb 3-1: Using ep0 maxpacket: 16
[  105.088731][  T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.092176][  T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  105.097353][  T975] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  105.100986][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.106678][  T975] usb 3-1: config 0 descriptor??
[  105.115654][  T975] pxrc 3-1:0.0: Could not find endpoint
[  105.118151][  T975] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  105.246688][ T6631] loop1: detected capacity change from 0 to 32768
[  105.317245][  T975] usb 3-1: USB disconnect, device number 2
[  105.322009][ T6631] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  105.322032][ T6631]   allowing incompatible features above 0.0: (unknown version)
[  105.322042][ T6631]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  105.340934][ T6631] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  105.344038][ T6631] bcachefs (loop1): initializing new filesystem
[  105.356526][ T6631] bcachefs (loop1): going read-write
[  105.367822][ T6631] bcachefs (loop1): marking superblocks
[  105.406610][ T6631] bcachefs (loop1): initializing freespace
[  105.414350][ T6631] bcachefs (loop1): done initializing freespace
[  105.422838][ T6631] bcachefs (loop1): reading snapshots table
[  105.425485][ T6631] bcachefs (loop1): reading snapshots done
[  105.445435][ T6631] bcachefs (loop1): done starting filesystem
[  105.496884][ T6647] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  105.584156][ T6631] bcachefs (loop1): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[  105.584156][ T6631]   set version_upgrade=incompat to enable
[  105.654371][ T6631] syz.1.285 (6631) used greatest stack depth: 16968 bytes left
[  105.688899][ T5859] bcachefs (loop1): shutting down
[  105.691871][ T5859] bcachefs (loop1): going read-only
[  105.695436][ T5859] bcachefs (loop1): finished waiting for writes to stop
[  105.703178][ T5859] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  105.778209][ T5859] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13
[  105.784250][ T5859] bcachefs (loop1): clean shutdown complete, journal seq 14
[  105.790192][ T5859] bcachefs (loop1): marking filesystem clean
[  105.824602][ T5859] bcachefs (loop1): shutdown complete
[  105.869700][ T6658] block nbd2: NBD_DISCONNECT
[  106.005030][ T5884] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  106.165482][ T5884] usb 1-1: Using ep0 maxpacket: 8
[  106.170609][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17
[  106.181683][ T5884] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  106.186491][ T5884] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  106.190082][ T5884] usb 1-1: Product: syz
[  106.191830][ T5884] usb 1-1: Manufacturer: syz
[  106.193774][ T5884] usb 1-1: SerialNumber: syz
[  106.210568][ T5884] usb 1-1: config 0 descriptor??
[  106.422802][ T5884] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  106.825154][ T5884] gspca_sunplus: reg_w_riv err -71
[  106.827529][ T5884] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  106.837643][ T5884] usb 1-1: USB disconnect, device number 7
[  107.121851][ T6671] loop2: detected capacity change from 0 to 32768
[  107.191583][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'.
[  107.229101][ T6671] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  107.229124][ T6671]   allowing incompatible features above 0.0: (unknown version)
[  107.229133][ T6671]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  107.245202][ T6671] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  107.249490][ T6671] bcachefs (loop2): initializing new filesystem
[  107.258757][ T6671] bcachefs (loop2): going read-write
[  107.275011][ T6671] bcachefs (loop2): marking superblocks
[  107.279579][ T6688] loop1: detected capacity change from 0 to 1024
[  107.280890][ T6671] bcachefs (loop2): initializing freespace
[  107.286239][ T6671] bcachefs (loop2): done initializing freespace
[  107.289741][ T6671] bcachefs (loop2): reading snapshots table
[  107.292468][ T6671] bcachefs (loop2): reading snapshots done
[  107.319911][ T6688] hfsplus: request for non-existent node 128 in B*Tree
[  107.322577][ T6671] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[  107.327664][ T6671] bcachefs (loop2): done starting filesystem
[  107.335105][ T6688] hfsplus: request for non-existent node 128 in B*Tree
[  107.517623][ T6671] syz.2.297 (6671) used greatest stack depth: 16696 bytes left
[  107.553219][ T5855] bcachefs (loop2): shutting down
[  107.567420][ T5855] bcachefs (loop2): going read-only
[  107.569258][ T5855] bcachefs (loop2): finished waiting for writes to stop
[  107.586182][ T5855] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  107.615869][ T5855] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  107.622948][ T5855] bcachefs (loop2): clean shutdown complete, journal seq 5
[  107.626445][ T5855] bcachefs (loop2): marking filesystem clean
[  107.644093][ T5855] bcachefs (loop2): shutdown complete
[  107.744976][ T6710] loop1: detected capacity change from 0 to 8
[  107.754436][ T6710] unable to read inode lookup table
[  107.948126][ T6718] loop1: detected capacity change from 0 to 1764
[  108.134167][ T6722] loop1: detected capacity change from 0 to 4096
[  108.242464][ T6728] loop1: detected capacity change from 0 to 256
[  108.247688][ T6728] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  108.259377][ T6728] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  108.764335][ T6731] loop1: detected capacity change from 0 to 32768
[  108.783902][ T6731] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  108.837673][   T33] audit: type=1800 audit(1756522651.030:21): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.320" name="bus" dev="loop1" ino=17058 res=0 errno=0
[  108.879595][   T33] audit: type=1800 audit(1756522651.030:22): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.320" name="file1" dev="loop1" ino=17059 res=0 errno=0
[  108.943180][ T5859] ocfs2: Unmounting device (7,1) on (node local)
[  109.048851][ T6741] loop2: detected capacity change from 0 to 128
[  109.085592][ T6741] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  109.282321][ T6752] loop2: detected capacity change from 0 to 256
[  109.432464][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.333'.
[  109.438833][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'.
[  109.597088][ T6760] loop1: detected capacity change from 0 to 32768
[  109.718677][ T6760] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  109.718690][ T6760]   allowing incompatible features above 0.0: (unknown version)
[  109.718696][ T6760]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  109.734496][ T6760] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  109.737362][ T6760] bcachefs (loop1): initializing new filesystem
[  109.748093][ T6760] bcachefs (loop1): going read-write
[  109.755377][ T6760] bcachefs (loop1): marking superblocks
[  109.768672][ T6760] bcachefs (loop1): initializing freespace
[  109.773409][ T6760] bcachefs (loop1): done initializing freespace
[  109.780624][ T6760] bcachefs (loop1): reading snapshots table
[  109.782589][ T6760] bcachefs (loop1): reading snapshots done
[  109.797628][ T6760] bcachefs (loop1): done starting filesystem
[  109.830499][ T6766] loop2: detected capacity change from 0 to 40427
[  109.852274][ T6766] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288)
[  109.859877][ T6766] F2FS-fs (loop2): build fault injection rate: 771
[  109.865046][ T5859] bcachefs (loop1): shutting down
[  109.867065][ T5859] bcachefs (loop1): going read-only
[  109.869173][ T5859] bcachefs (loop1): finished waiting for writes to stop
[  109.881119][ T5859] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  109.885588][ T6766] F2FS-fs (loop2): invalid crc value
[  109.908561][ T5859] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  109.912015][ T5859] bcachefs (loop1): clean shutdown complete, journal seq 4
[  109.914525][ T5859] bcachefs (loop1): marking filesystem clean
[  109.916836][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  109.936349][ T5859] bcachefs (loop1): shutdown complete
[  109.973289][ T6766] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.980502][ T6766] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  110.089157][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  110.094052][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  110.099995][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  110.103903][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  110.109906][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  110.112695][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.119363][    T9] usb 1-1: config 0 descriptor??
[  110.121678][ T6772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  110.937148][    T9] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd
[  110.972624][    T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  110.991702][    T9] usb 1-1: USB disconnect, device number 8
[  111.598575][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'.
[  111.602232][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'.
[  111.608143][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'.
[  111.612791][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'.
[  111.617058][ T6809] netlink: 'syz.1.337': attribute type 6 has an invalid length.
[  111.755127][  T975] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  111.960029][  T975] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  111.967826][  T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.981034][  T975] usb 1-1: Product: syz
[  111.986408][  T975] usb 1-1: Manufacturer: syz
[  111.992115][  T975] usb 1-1: SerialNumber: syz
[  112.049107][  T975] usb 1-1: config 0 descriptor??
[  112.058744][  T975] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  112.062110][  T975] usb 1-1: setting power ON
[  112.072483][  T975] dvb-usb: bulk message failed: -22 (2/0)
[  112.093593][  T975] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  112.103499][  T975] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[  112.106933][  T975] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22
[  112.271200][  T975] usb 1-1: USB disconnect, device number 9
[  112.328984][ T6824] loop1: detected capacity change from 0 to 512
[  112.336464][ T6824] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  112.368568][ T6824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.374102][ T6824] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.385649][ T6824] EXT4-fs error (device loop1): ext4_xattr_block_list:762: inode #15: comm syz.1.351: corrupted xattr block 19: overlapping e_value 
[  112.415948][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.808504][ T6847] Bluetooth: MGMT ver 1.23
[  112.995207][ T6856] loop1: detected capacity change from 0 to 1764
[  113.056332][ T6856] ISOFS: Unable to identify CD-ROM format.
[  113.479910][ T6881] loop0: detected capacity change from 0 to 1024
[  113.753990][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'.
[  113.763492][ T6890] netlink: 'syz.1.379': attribute type 11 has an invalid length.
[  113.786266][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'.
[  113.798520][ T6890] netlink: 'syz.1.379': attribute type 11 has an invalid length.
[  114.717433][ T6927] loop1: detected capacity change from 0 to 2048
[  114.804896][ T6927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.985731][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.221450][ T6935] loop1: detected capacity change from 0 to 128
[  115.397000][ T5859] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000f0b)
[  115.405020][ T5859] FAT-fs (loop1): Filesystem has been set read-only
[  115.507768][ T6943] loop2: detected capacity change from 0 to 2048
[  115.514490][ T6943] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
Connection to localhost closed by remote host.
[  116.283360][ T5917] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.407572][ T5917] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.488222][ T5917] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.557003][ T5917] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.678213][ T5917] bridge_slave_1: left allmulticast mode
[  116.680313][ T5917] bridge_slave_1: left promiscuous mode
[  116.683075][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.695840][ T5917] bridge_slave_0: left allmulticast mode
[  116.699469][ T5917] bridge_slave_0: left promiscuous mode
[  116.702453][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.046777][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.054327][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.059682][ T5917] bond0 (unregistering): Released all slaves
[  117.130450][ T5917] tipc: Left network mode
[  117.368308][ T5917] hsr_slave_0: left promiscuous mode
[  117.371430][ T5917] hsr_slave_1: left promiscuous mode
[  117.376768][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.379838][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.386961][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.389896][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.417103][ T5917] veth1_macvtap: left promiscuous mode
[  117.419667][ T5917] veth0_macvtap: left promiscuous mode
[  117.422142][ T5917] veth1_vlan: left promiscuous mode
[  117.424868][ T5917] veth0_vlan: left promiscuous mode
[  117.870995][ T5917] team0 (unregistering): Port device team_slave_1 removed
[  117.911377][ T5917] team0 (unregistering): Port device team_slave_0 removed
[  118.647807][ T5917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.747633][ T5917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.807394][ T5917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.881602][ T5917] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.052537][ T5917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.056629][ T5917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.135264][ T5917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.139680][ T5917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.205631][ T5917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.209483][ T5917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.277876][ T5917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.284361][ T5917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.412911][ T5917] bridge_slave_1: left allmulticast mode
[  119.415193][ T5917] bridge_slave_1: left promiscuous mode
[  119.418692][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.427886][ T5917] bridge_slave_0: left allmulticast mode
[  119.432564][ T5917] bridge_slave_0: left promiscuous mode
[  119.434812][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.459399][ T5917] bridge_slave_1: left allmulticast mode
[  119.461404][ T5917] bridge_slave_1: left promiscuous mode
[  119.463445][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.472991][ T5917] bridge_slave_0: left allmulticast mode
[  119.475239][ T5917] bridge_slave_0: left promiscuous mode
[  119.477536][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.866430][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.871930][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.877881][ T5917] bond0 (unregistering): Released all slaves
[  120.164277][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.169649][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.174256][ T5917] bond0 (unregistering): Released all slaves
[  120.659648][ T5917] hsr_slave_0: left promiscuous mode
[  120.665765][ T5917] hsr_slave_1: left promiscuous mode
[  120.668457][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.671912][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.675347][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.678281][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.687123][ T5917] hsr_slave_0: left promiscuous mode
[  120.689799][ T5917] hsr_slave_1: left promiscuous mode
[  120.692317][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.694732][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.698308][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.703561][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.730048][ T5917] veth1_macvtap: left promiscuous mode
[  120.731821][ T5917] veth0_macvtap: left promiscuous mode
[  120.733607][ T5917] veth1_vlan: left promiscuous mode
[  120.735312][ T5917] veth0_vlan: left promiscuous mode
[  120.739789][ T5917] veth1_macvtap: left promiscuous mode
[  120.741609][ T5917] veth0_macvtap: left promiscuous mode
[  120.743894][ T5917] veth1_vlan: left promiscuous mode
[  120.745688][ T5917] veth0_vlan: left promiscuous mode
[  121.204682][ T5917] team0 (unregistering): Port device team_slave_1 removed
[  121.238286][ T5917] team0 (unregistering): Port device team_slave_0 removed
[  121.910902][ T5917] team0 (unregistering): Port device team_slave_1 removed
[  121.947507][ T5917] team0 (unregistering): Port device team_slave_0 removed
[  132.601254][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.603714][ T1365] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
02:57:47  Registers:
info registers vcpu 0

CPU#0
RAX=14060ea7bdc76000 RBX=ffffffff819683c8 RCX=14060ea7bdc76000 RDX=0000000000000001
RSI=ffffffff8d9b77e3 RDI=ffffffff8be33680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38a30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79a3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffea67bbb78 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=3e9f927aa8f35100 RBX=ffffffff819683c8 RCX=3e9f927aa8f35100 RDX=0000000000000001
RSI=ffffffff8d9b77e3 RDI=ffffffff8be33680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38a30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b79a3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff15b1ef6c0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000500000067 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00000000ff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
