last executing test programs:

18.612852392s ago: executing program 2 (id=414):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8)

18.513836601s ago: executing program 2 (id=416):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

17.346195744s ago: executing program 2 (id=430):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xe, &(0x7f0000000140))
ioperm(0xc, 0x1ff, 0x8)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)

17.261742542s ago: executing program 2 (id=431):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

17.182350081s ago: executing program 2 (id=433):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd)

16.9132212s ago: executing program 2 (id=436):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001600010a2dbd700003000000fd000017"], 0x1c}}, 0x40040)

16.747807141s ago: executing program 32 (id=436):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001600010a2dbd700003000000fd000017"], 0x1c}}, 0x40040)

5.539862287s ago: executing program 1 (id=551):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

5.490811804s ago: executing program 1 (id=554):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.515219181s ago: executing program 1 (id=569):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)

2.621602307s ago: executing program 1 (id=592):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4018, &(0x7f0000000140)={[{}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x400005}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@errors_remount}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@errors_remount}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000001f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x1000041, 0x0)

2.47081787s ago: executing program 1 (id=593):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4)
recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000000)='\x00', 0x1, 0x20044880, &(0x7f00000004c0)={0x11, 0x8100, r2, 0x1, 0x1}, 0x14)

2.277368082s ago: executing program 1 (id=596):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

2.145100632s ago: executing program 33 (id=596):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

1.345299922s ago: executing program 0 (id=602):
syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58)

1.261224887s ago: executing program 0 (id=605):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x27, 0x3, 0x80000000)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7)
renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2)

1.112170124s ago: executing program 3 (id=609):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(0xffffffffffffff9c, 0x0, r1, 0x0, 0x64)

1.009440905s ago: executing program 3 (id=610):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)

1.009266726s ago: executing program 3 (id=611):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000001f9ff00000000000300000085000000410000001800000003000000000000000400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)

878.058263ms ago: executing program 3 (id=612):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c0017800400050004000400"], 0x138}}, 0x0)

356.040824ms ago: executing program 0 (id=613):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71189b000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

217.475022ms ago: executing program 0 (id=614):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0)

61.865369ms ago: executing program 3 (id=615):
futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x0)

61.64613ms ago: executing program 0 (id=616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

210.864µs ago: executing program 3 (id=617):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file2\x00', 0x8, &(0x7f0000000240)={[{@autodefrag}, {@autodefrag}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@space_cache_v2}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r0, 0x0, 0x0, 0x1001f0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
fallocate(r1, 0x10, 0x2, 0x7fff)

0s ago: executing program 0 (id=618):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x81)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x9, 0x5, 0x5, 0x2, 0x12, "0a2ad98453e9817cacbf39d84740f1eebb4e0c"})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43305' (ED25519) to the list of known hosts.
syzkaller login: [   58.212521][ T5833] cgroup: Unknown subsys name 'net'
[   58.343368][ T5833] cgroup: Unknown subsys name 'cpuset'
[   58.350517][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.566664][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.154610][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.159103][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.168773][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.172362][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.175277][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.197554][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.202010][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.205248][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.208256][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.212986][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.217183][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.257092][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.261003][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.265994][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.281320][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.455365][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   66.596367][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.601456][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.604523][ T5845] bridge_slave_0: entered allmulticast mode
[   66.608349][ T5845] bridge_slave_0: entered promiscuous mode
[   66.629392][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.631639][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.634188][ T5845] bridge_slave_1: entered allmulticast mode
[   66.637756][ T5845] bridge_slave_1: entered promiscuous mode
[   66.701807][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.738029][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.801168][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   66.812316][ T5845] team0: Port device team_slave_0 added
[   66.827794][ T5845] team0: Port device team_slave_1 added
[   66.839913][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   66.903041][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.905845][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.916700][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.935218][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.937951][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.948065][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.994990][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.997975][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.001713][ T5852] bridge_slave_0: entered allmulticast mode
[   67.005523][ T5852] bridge_slave_0: entered promiscuous mode
[   67.010332][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.013234][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.016235][ T5852] bridge_slave_1: entered allmulticast mode
[   67.020230][ T5852] bridge_slave_1: entered promiscuous mode
[   67.104959][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.120381][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.123456][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.126381][ T5850] bridge_slave_0: entered allmulticast mode
[   67.130840][ T5850] bridge_slave_0: entered promiscuous mode
[   67.135963][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.163175][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.166175][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.169941][ T5850] bridge_slave_1: entered allmulticast mode
[   67.173831][ T5850] bridge_slave_1: entered promiscuous mode
[   67.186615][ T5852] team0: Port device team_slave_0 added
[   67.192433][ T5845] hsr_slave_0: entered promiscuous mode
[   67.194851][ T5845] hsr_slave_1: entered promiscuous mode
[   67.200396][ T5852] team0: Port device team_slave_1 added
[   67.261390][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.266367][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.271135][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.280033][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.296996][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.301271][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.303680][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.313822][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.368329][ T5850] team0: Port device team_slave_0 added
[   67.382079][ T5850] team0: Port device team_slave_1 added
[   67.446244][ T5852] hsr_slave_0: entered promiscuous mode
[   67.449296][ T5852] hsr_slave_1: entered promiscuous mode
[   67.451717][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   67.454054][ T5852] Cannot create hsr debugfs directory
[   67.474267][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.477183][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.488199][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.499111][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.501976][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.513626][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.680089][ T5850] hsr_slave_0: entered promiscuous mode
[   67.683159][ T5850] hsr_slave_1: entered promiscuous mode
[   67.686003][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   67.688203][ T5850] Cannot create hsr debugfs directory
[   67.831158][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.841463][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.862613][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.870421][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.952535][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.960929][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.980301][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.987373][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.044029][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.056512][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.065123][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.074962][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.143049][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.178987][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   68.199443][ T5849] Bluetooth: hci0: command tx timeout
[   68.204624][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.208976][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.212006][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.233902][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.236926][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.262934][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   68.276790][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.280068][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.304354][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.307389][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.330237][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.360074][   T54] Bluetooth: hci1: command tx timeout
[   68.362783][ T5849] Bluetooth: hci2: command tx timeout
[   68.392097][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   68.414610][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.424058][ T1842] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.426450][ T1842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.441727][ T1842] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.444066][ T1842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.574677][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.636348][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.656236][ T5845] veth0_vlan: entered promiscuous mode
[   68.665420][ T5845] veth1_vlan: entered promiscuous mode
[   68.707118][ T5845] veth0_macvtap: entered promiscuous mode
[   68.721982][ T5845] veth1_macvtap: entered promiscuous mode
[   68.734665][ T5852] veth0_vlan: entered promiscuous mode
[   68.747666][ T5852] veth1_vlan: entered promiscuous mode
[   68.763441][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.776740][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.795603][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.810419][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.822610][ T5852] veth0_macvtap: entered promiscuous mode
[   68.828392][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.833546][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.840591][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.856368][ T5852] veth1_macvtap: entered promiscuous mode
[   68.875126][ T5850] veth0_vlan: entered promiscuous mode
[   68.900244][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.915968][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.925776][ T5850] veth1_vlan: entered promiscuous mode
[   68.940748][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.950448][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.960889][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.977962][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.996175][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.011255][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.028271][ T5850] veth0_macvtap: entered promiscuous mode
[   69.046464][ T5850] veth1_macvtap: entered promiscuous mode
[   69.074561][ T1842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.077834][ T1842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.091572][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.132859][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.137063][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.146853][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.154869][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.158072][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.161858][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.186127][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.194309][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.234239][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.259849][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.362778][ T1842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.365920][ T1842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.424962][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.428139][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.537164][ T5918] overlayfs: upper fs does not support file handles, falling back to index=off.
[   69.542740][ T5918] overlayfs: fs on './bus' does not support file handles, falling back to xino=off.
[   69.555310][ T5918] overlayfs: conflicting lowerdir path
[   69.657395][ T5928] loop2: detected capacity change from 0 to 256
[   69.706775][ T5928] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[   69.836638][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'.
[   69.859154][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.862804][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.866440][ T5938] Zero length message leads to an empty skb
[   69.872719][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.876277][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.969135][ T5944] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.13'.
[   70.175117][ T5960] loop1: detected capacity change from 0 to 256
[   70.279708][ T5849] Bluetooth: hci0: command tx timeout
[   70.363995][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   70.436107][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'.
[   70.440616][ T5849] Bluetooth: hci2: command tx timeout
[   70.442777][ T5849] Bluetooth: hci1: command tx timeout
[   70.539564][ T5969] loop1: detected capacity change from 0 to 2048
[   70.542900][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   70.550562][    T9] usb 3-1: config 4 has an invalid interface number: 180 but max is 0
[   70.553953][    T9] usb 3-1: config 4 has no interface number 0
[   70.556396][    T9] usb 3-1: config 4 interface 180 has no altsetting 0
[   70.568124][ T5973] loop0: detected capacity change from 0 to 1024
[   70.579795][    T9] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=eb.29
[   70.583521][ T5974] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.588809][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.602502][    T9] usb 3-1: Product: syz
[   70.603880][    T9] usb 3-1: Manufacturer: syz
[   70.605417][    T9] usb 3-1: SerialNumber: syz
[   70.621129][ T5973] syz.0.26: attempt to access beyond end of device
[   70.621129][ T5973] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   70.622251][   T33] audit: type=1800 audit(1756523205.825:2): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="file1" dev="loop0" ino=20 res=0 errno=0
[   70.626357][ T5973] Buffer I/O error on dev loop0, logical block 2889, async page read
[   70.637655][ T5973] syz.0.26: attempt to access beyond end of device
[   70.637655][ T5973] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   70.640668][ T5974] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   70.647145][ T5973] Buffer I/O error on dev loop0, logical block 2889, async page read
[   70.651448][ T5973] syz.0.26: attempt to access beyond end of device
[   70.651448][ T5973] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   70.655882][ T5973] Buffer I/O error on dev loop0, logical block 2889, async page read
[   70.660711][ T5974] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[   70.670344][ T5974] Remounting filesystem read-only
[   70.672946][ T5969] NILFS (loop1): mounting fs with errors
[   70.688242][ T5974] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   70.695860][ T5974] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[   70.699736][ T5974] Remounting filesystem read-only
[   70.752717][ T5852] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[   70.838141][ T5978] netlink: 'syz.0.27': attribute type 21 has an invalid length.
[   70.840046][ T5979] loop1: detected capacity change from 0 to 47
[   70.846549][ T5978] netlink: 128 bytes leftover after parsing attributes in process `syz.0.27'.
[   70.850863][ T5979] =======================================================
[   70.850863][ T5979] WARNING: The mand mount option has been deprecated and
[   70.850863][ T5979]          and is ignored by this kernel. Remove the mand
[   70.850863][ T5979]          option from the mount to silence this warning.
[   70.850863][ T5979] =======================================================
[   70.852509][ T5978] netlink: 3 bytes leftover after parsing attributes in process `syz.0.27'.
[   70.896176][    T9] qmi_wwan 3-1:4.180: probe with driver qmi_wwan failed with error -22
[   70.932683][    T9] usb 3-1: USB disconnect, device number 2
[   71.164542][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.167078][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.521434][ T5991] PKCS7: Unknown OID: [4] 0.0
[   71.526918][ T5991] PKCS7: Only support pkcs7_signedData type
[   71.707859][ T5989] loop1: detected capacity change from 0 to 32768
[   71.721973][ T5989] XFS: noikeep mount option is deprecated.
[   71.780980][ T5989] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   71.855585][ T5989] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   71.873235][ T5989] XFS (loop1): Starting recovery (logdev: internal)
[   71.895908][ T5989] XFS (loop1): Ending recovery (logdev: internal)
[   71.932274][ T5852] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   72.033180][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   72.189670][   T10] usb 3-1: Using ep0 maxpacket: 16
[   72.196486][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.201855][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.210485][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[   72.213963][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.224552][   T10] usb 3-1: config 0 descriptor??
[   72.273644][ T6010] block nbd1: shutting down sockets
[   72.362403][   T54] Bluetooth: hci0: command tx timeout
[   72.532181][   T54] Bluetooth: hci1: command tx timeout
[   72.534829][   T54] Bluetooth: hci2: command tx timeout
[   73.317015][ T6039] loop1: detected capacity change from 0 to 1764
[   73.419921][   T10] apple 0003:05AC:024B.0001: unknown main item tag 0x6
[   73.453463][   T10] apple 0003:05AC:024B.0001: ignoring exceeding usage max
[   73.459084][   T10] apple 0003:05AC:024B.0001: invalid report_size 16640
[   73.470582][ T6042] iso9660: Corrupted directory entry in block 2 of inode 1920
[   74.435568][   T10] apple 0003:05AC:024B.0001: item 0 2 1 7 parsing failed
[   74.438880][ T5849] Bluetooth: hci0: command tx timeout
[   74.569691][   T10] apple 0003:05AC:024B.0001: parse failed
[   74.601771][ T5849] Bluetooth: hci2: command tx timeout
[   74.603744][ T5849] Bluetooth: hci1: command tx timeout
[   74.736695][ T6052] loop2: detected capacity change from 0 to 8
[   75.026730][ T6056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.029791][ T6056] IPv6: NLM_F_CREATE should be set when creating new route
[   75.032760][ T6056] IPv6: NLM_F_CREATE should be set when creating new route
[   75.117260][   T10] apple 0003:05AC:024B.0001: probe with driver apple failed with error -22
[   75.123238][   T10] usb 3-1: USB disconnect, device number 3
[   75.326145][ T6065] capability: warning: `syz.2.52' uses deprecated v2 capabilities in a way that may be insecure
[   75.499551][ T5846] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   75.652284][ T5846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.662056][ T5846] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   75.670122][ T5846] usb 2-1: config 1 has no interface number 0
[   75.675218][ T5846] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.692523][ T5846] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   75.702962][ T5846] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   75.706573][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.718538][ T5846] usb 2-1: Product: syz
[   75.720171][ T5846] usb 2-1: Manufacturer: syz
[   75.722101][ T5846] usb 2-1: SerialNumber: syz
[   76.001641][ T6073] loop0: detected capacity change from 0 to 8
[   76.005314][ T6073] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   76.017513][ T6073] cramfs: Error -5 while decompressing!
[   76.023389][ T6073] cramfs: ffffffff99bec5f8(16)->ffff88811c1b0000(4096)
[   76.026039][ T6073] cramfs: Error -5 while decompressing!
[   76.028076][ T6073] cramfs: ffffffff99bec5f8(16)->ffff88811c1b0000(4096)
[   76.031872][   T33] audit: type=1800 audit(1756523211.245:3): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.57" name="file0" dev="loop0" ino=244 res=0 errno=0
[   76.434700][   T33] audit: type=1800 audit(1756523211.645:4): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.64" name="bus" dev="overlay" ino=201 res=0 errno=0
[   76.540989][ T6093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.556707][ T5846] cdc_ncm 2-1:1.1: bind() failure
[   76.568253][ T5846] usb 2-1: USB disconnect, device number 2
[   76.614958][ T6096] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   76.798986][ T6104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.71'.
[   76.999456][ T6114] loop2: detected capacity change from 0 to 164
[   77.123576][ T6120] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.145926][ T6122] netlink: 'syz.0.80': attribute type 12 has an invalid length.
[   77.385290][ T6133] loop0: detected capacity change from 0 to 128
[   77.405777][ T6133] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.413404][ T6133] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   77.449016][ T5845] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.918611][   T51] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   78.053866][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'.
[   78.102695][   T51] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   78.107525][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.461379][   T51] usb 1-1: Product: syz
[   78.487907][   T51] usb 1-1: Manufacturer: syz
[   78.495288][   T51] usb 1-1: SerialNumber: syz
[   78.576896][ T5910] IPVS: starting estimator thread 0...
[   78.582371][ T6155] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[   78.680345][ T6156] IPVS: using max 63 ests per chain, 151200 per kthread
[   79.154163][   T51] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[   79.157960][   T51] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   79.192482][   T51] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   79.224043][   T51] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[   79.257686][   T51] usb 1-1: USB disconnect, device number 2
[   79.438248][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'.
[   79.974372][ T5849] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   79.982451][ T5849] Bluetooth: hci0: Injecting HCI hardware error event
[   79.997261][ T5849] Bluetooth: hci0: hardware error 0x00
[   80.493411][ T6183] loop0: detected capacity change from 0 to 4096
[   80.512670][ T6185] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   80.527654][ T6186] sctp: [Deprecated]: syz.1.106 (pid 6186) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.527654][ T6186] Use struct sctp_sack_info instead
[   80.584181][ T6183] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.'
[   80.591089][ T6183] Remounting filesystem read-only
[   80.626984][ T6188] trusted_key: encrypted_key: hex blob is missing
[   80.641964][ T5845] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[   80.903988][ T6201] bond1: entered allmulticast mode
[   81.004753][ T6210] loop2: detected capacity change from 0 to 256
[   81.041797][ T6210] FAT-fs (loop2): Directory bread(block 64) failed
[   81.044589][ T6210] FAT-fs (loop2): Directory bread(block 65) failed
[   81.047225][ T6210] FAT-fs (loop2): Directory bread(block 66) failed
[   81.054993][ T6210] FAT-fs (loop2): Directory bread(block 67) failed
[   81.058236][ T6210] FAT-fs (loop2): Directory bread(block 68) failed
[   81.061832][ T6210] FAT-fs (loop2): Directory bread(block 69) failed
[   81.063995][ T6210] FAT-fs (loop2): Directory bread(block 70) failed
[   81.066562][ T6210] FAT-fs (loop2): Directory bread(block 71) failed
[   81.069579][ T6210] FAT-fs (loop2): Directory bread(block 72) failed
[   81.072243][ T6210] FAT-fs (loop2): Directory bread(block 73) failed
[   81.184418][ T6209] loop1: detected capacity change from 0 to 32768
[   81.230876][ T6209] (syz.1.116,6209,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb6731743. Applying ECC.
[   81.238242][ T6209] (syz.1.116,6209,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   81.248017][ T6209] (syz.1.116,6209,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   81.256523][ T6209] (syz.1.116,6209,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xa7efa3e4. Applying ECC.
[   81.270308][ T6209] (syz.1.116,6209,0):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device.
[   81.549297][ T6209] (syz.1.116,6209,1):ocfs2_fill_super:1177 ERROR: status = -22
[   81.765911][ T6220] netlink: 84 bytes leftover after parsing attributes in process `syz.0.120'.
[   81.773993][ T6220] netlink: 84 bytes leftover after parsing attributes in process `syz.0.120'.
[   82.006885][ T6228] loop2: detected capacity change from 0 to 2048
[   82.021667][ T6228] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   82.118643][ T5849] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   82.217100][ T6235] befs: (nullb0): No write support. Marking filesystem read-only
[   82.234049][ T6235] befs: (nullb0): invalid magic header
[   82.647342][ T6234] loop2: detected capacity change from 0 to 32768
[   83.824322][ T6243] loop1: detected capacity change from 0 to 32768
[   83.866834][ T6243] ialloc: diAlloc returned -5!
[   84.008110][ T6249] loop0: detected capacity change from 0 to 32768
[   84.277108][ T6253] loop2: detected capacity change from 0 to 32768
[   84.345784][ T6253] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[   85.695440][ T6270] loop1: detected capacity change from 0 to 32768
[   85.732693][ T6270] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   85.751010][ T6270] OCFS2: ERROR (device loop1): int ocfs2_validate_xattr_block(struct super_block *, struct buffer_head *): Extended attribute block #2304 has bad signature 
[   85.758306][ T6270] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   85.762517][ T6270] OCFS2: File system is now read-only.
[   85.764850][ T6270] (syz.1.143,6270,0):ocfs2_xattr_block_find:2831 ERROR: status = -30
[   85.800919][ T5852] ocfs2: Unmounting device (7,1) on (node local)
[   86.203833][ T6282] loop1: detected capacity change from 0 to 32768
[   86.215744][ T6282] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.146 (6282)
[   86.246075][ T6282] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.259121][ T6282] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   86.265142][ T6282] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   86.403749][ T6282] BTRFS info (device loop1): rebuilding free space tree
[   86.435387][ T6282] BTRFS info (device loop1): disabling free space tree
[   86.439587][ T6282] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   86.444480][ T6282] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   86.458851][ T6282] BTRFS info (device loop1): setting nodatasum
[   86.461580][ T6282] BTRFS info (device loop1): setting nodatacow
[   86.464325][ T6282] BTRFS info (device loop1): enabling ssd optimizations
[   86.468098][ T6282] BTRFS info (device loop1): turning off barriers
[   86.473026][ T6282] BTRFS info (device loop1): turning on flush-on-commit
[   86.478864][ T6282] BTRFS info (device loop1): enabling disk space caching
[   86.488399][ T6282] BTRFS info (device loop1): force clearing of disk cache
[   86.495245][ T6282] BTRFS info (device loop1): doing ref verification
[   86.497910][ T6282] BTRFS info (device loop1): max_inline set to 4096
[   86.538267][   T24] cfg80211: failed to load regulatory.db
[   86.595265][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   86.616339][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   86.619899][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   86.626312][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   86.631318][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   86.634704][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   86.638182][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   86.644121][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   86.647785][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   86.651715][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   86.652272][ T5852] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.697439][ T6290] mmap: syz.2.150 (6290) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   87.129843][ T6319] dns_resolver: Unsupported server list version (0)
[   87.533676][ T6325] loop2: detected capacity change from 0 to 40427
[   87.555656][ T6325] F2FS-fs (loop2): invalid crc value
[   87.621548][ T6325] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   87.627720][ T6325] F2FS-fs (loop2): Start checkpoint disabled!
[   87.642929][ T6325] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   87.688692][ T1091] kworker/u9:7: attempt to access beyond end of device
[   87.688692][ T1091] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   87.694609][ T1091] CPU: 0 UID: 0 PID: 1091 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) 
[   87.694624][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.694630][ T1091] Workqueue: writeback wb_workfn (flush-7:2)
[   87.694648][ T1091] Call Trace:
[   87.694662][ T1091]  <TASK>
[   87.694666][ T1091]  dump_stack_lvl+0x189/0x250
[   87.694682][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.694691][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[   87.694701][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   87.694715][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   87.694731][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[   87.694748][ T1091]  f2fs_write_end_io+0x886/0xb60
[   87.694766][ T1091]  __submit_merged_bio+0x27a/0x6a0
[   87.694781][ T1091]  __submit_merged_write_cond+0x255/0x530
[   87.694795][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[   87.694825][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.694844][ T1091]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   87.694880][ T1091]  ? stack_trace_save+0x9c/0xe0
[   87.694909][ T1091]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   87.694927][ T1091]  ? trace_f2fs_writepages+0x7f/0x200
[   87.694939][ T1091]  ? f2fs_write_node_pages+0x478/0x6e0
[   87.694952][ T1091]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   87.694970][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.694982][ T1091]  do_writepages+0x32e/0x550
[   87.694998][ T1091]  ? reacquire_held_locks+0x127/0x1d0
[   87.695006][ T1091]  ? writeback_sb_inodes+0x384/0x1010
[   87.695022][ T1091]  __writeback_single_inode+0x145/0xff0
[   87.695033][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[   87.695045][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[   87.695068][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   87.695100][ T1091]  ? rcu_is_watching+0x15/0xb0
[   87.695114][ T1091]  wb_writeback+0x43b/0xaf0
[   87.695128][ T1091]  ? queue_io+0x3a1/0x590
[   87.695141][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[   87.695161][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.695179][ T1091]  wb_workfn+0x409/0xef0
[   87.695203][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[   87.695227][ T1091]  ? __lock_acquire+0xab9/0xd20
[   87.695253][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[   87.695265][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.695274][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[   87.695281][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[   87.695294][ T1091]  process_scheduled_works+0xae1/0x17b0
[   87.695327][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[   87.695355][ T1091]  worker_thread+0x8a0/0xda0
[   87.695393][ T1091]  kthread+0x711/0x8a0
[   87.695414][ T1091]  ? __pfx_worker_thread+0x10/0x10
[   87.695426][ T1091]  ? __pfx_kthread+0x10/0x10
[   87.695444][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.695459][ T1091]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.695477][ T1091]  ? __pfx_kthread+0x10/0x10
[   87.695493][ T1091]  ret_from_fork+0x3fc/0x770
[   87.695512][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[   87.695531][ T1091]  ? __switch_to_asm+0x39/0x70
[   87.695546][ T1091]  ? __switch_to_asm+0x33/0x70
[   87.695561][ T1091]  ? __pfx_kthread+0x10/0x10
[   87.695577][ T1091]  ret_from_fork_asm+0x1a/0x30
[   87.695609][ T1091]  </TASK>
[   87.695615][ T1091] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   88.624910][ T6346] loop1: detected capacity change from 0 to 32768
[   88.655200][ T6346] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.166 (6346)
[   88.753937][ T6346] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   88.778108][ T6346] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   88.989372][ T6346] BTRFS info (device loop1): enabling ssd optimizations
[   88.992209][ T6346] BTRFS info (device loop1): enabling free space tree
[   89.247500][ T5852] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   89.441545][ T6384] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   89.971283][ T6390] block nbd0: server does not support multiple connections per device.
[   89.994726][ T6390] block nbd0: shutting down sockets
[   90.011619][ T6392] netlink: 'syz.0.178': attribute type 12 has an invalid length.
[   90.015596][ T6392] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.178'.
[   90.989999][ T6420] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[   91.193705][ T6430] process 'syz.2.197' launched './file0' with NULL argv: empty string added
[   91.280805][ T6416] loop0: detected capacity change from 0 to 32768
[   91.290410][ T6416] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.191 (6416)
[   91.328286][ T6416] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   91.347374][ T6416] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   91.350973][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   91.450347][ T6416] BTRFS info (device loop0): enabling ssd optimizations
[   91.453159][ T6416] BTRFS info (device loop0): enabling free space tree
[   91.528676][   T24] usb 2-1: Using ep0 maxpacket: 16
[   91.542538][   T24] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[   91.546997][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.554412][   T24] usb 2-1: Product: syz
[   91.556201][   T24] usb 2-1: Manufacturer: syz
[   91.558386][   T24] usb 2-1: SerialNumber: syz
[   91.566339][   T24] usb 2-1: config 0 descriptor??
[   91.574271][ T5845] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   91.581740][   T24] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   91.601939][   T24] usb 2-1: Detected FT232H
[   91.788280][   T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   91.910795][ T6466] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   91.959883][ T6468] bridge0: port 1(bridge_slave_0) entered listening state
[   92.173132][ T6476] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   92.215660][   T24] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   92.417958][   T10] usb 2-1: USB disconnect, device number 3
[   92.437233][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   92.443626][   T10] ftdi_sio 2-1:0.0: device disconnected
[   92.478699][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   92.630902][   T24] usb 1-1: Using ep0 maxpacket: 32
[   92.636733][   T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[   92.646518][   T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   92.651043][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[   92.654617][   T24] usb 1-1: config 1 has no interface number 0
[   92.657606][   T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   92.665129][   T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   92.671936][   T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   92.681946][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.705830][   T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[   92.895472][ T6488] netlink: 'syz.2.217': attribute type 10 has an invalid length.
[   92.905880][   T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[   92.907843][ T6488] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   93.044798][ T6492] net_ratelimit: 22 callbacks suppressed
[   93.044818][ T6492] netlink: del zone limit has 4 unknown bytes
[   93.125441][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.129682][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.349548][   T51] usb 1-1: USB disconnect, device number 3
[   93.353549][   T51] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[   93.390445][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.407951][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.464291][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[   93.565551][ T5864] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.570444][ T5864] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.573899][ T5864] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.577722][ T5864] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.149436][ T6534] netlink: 'syz.0.237': attribute type 10 has an invalid length.
[   94.153101][ T6534] lo: entered promiscuous mode
[   94.165589][ T6534] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   94.245532][ T6531] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   94.463186][ T6548] netlink: 64 bytes leftover after parsing attributes in process `syz.2.244'.
[   94.663629][ T6559] loop1: detected capacity change from 0 to 8
[   94.696483][ T6559] SQUASHFS error: xz decompression failed, data probably corrupt
[   94.699749][ T6559] SQUASHFS error: Failed to read block 0x108: -5
[   94.706483][ T6559] SQUASHFS error: Unable to read metadata cache entry [106]
[   94.710397][ T6559] SQUASHFS error: Unable to read inode 0x11f
[   94.789056][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   94.940638][   T10] usb 3-1: config 3 has an invalid interface number: 246 but max is 1
[   94.944087][   T10] usb 3-1: config 3 has no interface number 1
[   94.946479][   T10] usb 3-1: config 3 interface 246 has no altsetting 0
[   94.951017][   T10] usb 3-1: config 3 interface 0 has no altsetting 0
[   94.958399][   T10] usb 3-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=77.29
[   94.962092][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.967217][   T10] usb 3-1: Product: syz
[   94.973918][   T10] usb 3-1: Manufacturer: syz
[   94.977640][ T6566] loop0: detected capacity change from 0 to 256
[   95.000208][   T10] usb 3-1: SerialNumber: syz
[   95.233061][   T10] gspca_main: spca505-2.14.0 probing 041e:401d
[   95.236039][   T10] gspca_spca505: reg write: error -71
[   95.238284][   T10] spca505 3-1:3.0: probe with driver spca505 failed with error -5
[   95.241834][    T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   95.248935][   T10] usb 3-1: USB disconnect, device number 4
[   95.390899][    T9] usb 1-1: config 128 has an invalid interface number: 249 but max is 0
[   95.394109][    T9] usb 1-1: config 128 has no interface number 0
[   95.396617][    T9] usb 1-1: config 128 interface 249 has no altsetting 0
[   95.402600][    T9] usb 1-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= a.c0
[   95.406035][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.410104][    T9] usb 1-1: Product: syz
[   95.411772][    T9] usb 1-1: Manufacturer: syz
[   95.413621][    T9] usb 1-1: SerialNumber: syz
[   95.683224][ T6568] loop1: detected capacity change from 0 to 512
[   95.716140][    T9] gspca_main: spca506-2.14.0 probing 06e1:a190
[   95.728894][ T6568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.734912][ T6568] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.808009][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.861737][    T9] usb 1-1: USB disconnect, device number 4
[   97.102733][   T33] audit: type=1326 audit(1756523232.315:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.1.263" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fec1c385ba7 code=0x0
[   97.135354][ T6603] bridge_slave_0: left allmulticast mode
[   97.137661][ T6603] bridge_slave_0: left promiscuous mode
[   97.141530][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.149887][ T6603] bridge_slave_1: left allmulticast mode
[   97.152578][ T6603] bridge_slave_1: left promiscuous mode
[   97.155030][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.169661][ T6603] bond0: (slave bond_slave_0): Releasing backup interface
[   97.185899][ T6603] bond0: (slave bond_slave_1): Releasing backup interface
[   97.197754][ T6603] team0: Port device team_slave_0 removed
[   97.206638][ T6603] team0: Port device team_slave_1 removed
[   97.210393][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.213542][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.218532][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.221788][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.235067][ T6603] bond0: (slave wlan1): Releasing backup interface
[   97.273941][ T6604] team0: Mode changed to "activebackup"
[   97.319063][ T5897] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   97.328395][ T6606] netlink: 'syz.2.265': attribute type 26 has an invalid length.
[   97.361974][ T6608] syz.2.266 uses obsolete (PF_INET,SOCK_PACKET)
[   97.368167][ T6608] dummy0: entered allmulticast mode
[   97.472054][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.475881][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   97.481094][ T5897] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[   97.484266][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.505196][ T5897] usb 1-1: config 0 descriptor??
[   97.510627][ T5897] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22
[   97.725839][ T5897] usb 1-1: USB disconnect, device number 5
[   98.060234][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   98.083537][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'.
[   98.087379][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'.
[   98.240995][    T9] usb 3-1: Using ep0 maxpacket: 16
[   98.247458][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.261201][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   98.265574][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   98.278550][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   98.282393][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   98.304251][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   98.307725][    T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   98.318283][    T9] usb 3-1: Manufacturer: syz
[   98.327163][    T9] usb 3-1: config 0 descriptor??
[   98.472235][ T6654] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.865150][    T9] rc_core: IR keymap rc-hauppauge not found
[   98.867210][    T9] Registered IR keymap rc-empty
[   98.879617][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   98.898657][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   98.920979][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   98.927184][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input4
[   98.957952][ T6663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.288'.
[   98.962179][ T6663] netlink: 'syz.0.288': attribute type 7 has an invalid length.
[   98.962758][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   98.965302][ T6663] netlink: 'syz.0.288': attribute type 8 has an invalid length.
[   98.967658][    C0] mceusb 3-1:0.0: short-range (0x3e) receiver active
[   98.971389][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'.
[   98.984929][ T6663] bond0: entered promiscuous mode
[   98.986579][ T6663] bond_slave_0: entered promiscuous mode
[   98.990047][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   98.992950][ T6663] bond_slave_1: entered promiscuous mode
[   98.997562][ T6663] ip6gretap0: entered promiscuous mode
[   99.001441][ T6663] bond0: left promiscuous mode
[   99.003599][ T6663] bond_slave_0: left promiscuous mode
[   99.006272][ T6663] bond_slave_1: left promiscuous mode
[   99.010319][ T6663] ip6gretap0: left promiscuous mode
[   99.028685][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   99.058884][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   99.078875][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   99.098691][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   99.124709][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   99.149360][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   99.181310][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   99.198810][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   99.222105][    T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   99.226653][    T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x3e active)
[   99.263478][    T9] usb 3-1: USB disconnect, device number 5
[   99.842700][ T6672] loop1: detected capacity change from 0 to 1024
[   99.956578][ T6673] hfsplus: bad catalog entry type
[  100.368276][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'.
[  100.849169][ T6688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.298'.
[  100.857304][ T6688] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  100.875711][ T6688] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  101.086547][   T67] hfsplus: b-tree write err: -5, ino 4
[  101.449165][ T5897] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  101.501545][ T6705] loop2: detected capacity change from 0 to 32768
[  101.527600][ T6705] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  101.586927][   T33] audit: type=1800 audit(1756523236.795:6): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.306" name="file1" dev="loop2" ino=9553 res=0 errno=0
[  101.598801][ T5897] usb 2-1: Using ep0 maxpacket: 16
[  101.602408][ T5897] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  101.606880][ T5897] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  101.611608][ T5897] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  101.618031][ T5897] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  101.621205][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.623796][ T5897] usb 2-1: Product: syz
[  101.625124][ T5897] usb 2-1: Manufacturer: syz
[  101.626595][ T5897] usb 2-1: SerialNumber: syz
[  101.748231][ T6728] loop0: detected capacity change from 0 to 128
[  101.791811][ T6728] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  101.798324][ T6728] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.305771][ T5897] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  102.404064][ T6705] syz.2.306 (6705) used greatest stack depth: 19272 bytes left
[  102.444975][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[  102.716039][ T5845] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  102.884375][ T6749] loop2: detected capacity change from 0 to 2048
[  102.905687][ T6748] loop0: detected capacity change from 0 to 4096
[  102.926695][ T6749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.947573][ T6752] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.967613][ T6749] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  103.062657][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.130929][ T6756] netlink: 'syz.0.323': attribute type 11 has an invalid length.
[  103.185950][ T5975] udevd[5975]: failed to send result of seq 10939 to main daemon: Connection refused
[  103.191858][ T5897] usb 2-1: USB disconnect, device number 4
[  103.688666][ T5846] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  103.843999][ T5846] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  103.850720][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.868160][ T5846] usb 3-1: config 0 descriptor??
[  103.883031][ T5846] cp210x 3-1:0.0: cp210x converter detected
[  104.264464][ T6778] veth2: entered promiscuous mode
[  104.266693][ T6778] veth2: entered allmulticast mode
[  104.438078][ T6780] netlink: 'syz.1.334': attribute type 1 has an invalid length.
[  104.498734][ T5846] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  104.502984][ T5846] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  104.507621][ T6780] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.513099][ T5846] usb 3-1: cp210x converter now attached to ttyUSB0
[  104.526412][ T5846] usb 3-1: USB disconnect, device number 6
[  104.548253][ T5846] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  104.552099][ T5846] cp210x 3-1:0.0: device disconnected
[  104.768305][ T6798] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.774769][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'.
[  104.799777][ T6798] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.035737][ T6800] loop0: detected capacity change from 0 to 32768
[  105.086518][ T6800] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  105.099630][ T6800] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  105.107824][ T6800] XFS (loop0): Starting recovery (logdev: internal)
[  105.123463][ T6800] XFS (loop0): Ending recovery (logdev: internal)
[  105.146333][ T5845] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  105.297978][ T6829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'.
[  105.597727][ T6847] netlink: 64 bytes leftover after parsing attributes in process `syz.0.360'.
[  105.676741][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'.
[  105.796503][ T6858] loop1: detected capacity change from 0 to 1024
[  105.799709][ T6860] loop0: detected capacity change from 0 to 512
[  105.800273][ T6858] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  105.803371][ T6860] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  105.815668][ T6860] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  105.823398][ T6860] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.365: bg 0: block 384: padding at end of block bitmap is not set
[  105.833916][ T6860] EXT4-fs (loop0): Remounting filesystem read-only
[  105.836821][ T6860] EXT4-fs (loop0): 1 truncate cleaned up
[  105.840666][ T6860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.865535][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.914346][ T6865] loop1: detected capacity change from 0 to 4096
[  106.015493][ T6875] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  106.147957][ T6879] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  106.197791][ T6874] loop1: detected capacity change from 0 to 32768
[  106.202270][ T6874] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.371 (6874)
[  106.209992][ T6874] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.213946][ T6874] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  106.237393][ T6874] BTRFS info (device loop1): rebuilding free space tree
[  106.250933][ T6874] BTRFS info (device loop1): disabling free space tree
[  106.253551][ T6874] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  106.256899][ T6874] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  106.263978][ T6874] BTRFS info (device loop1): enabling ssd optimizations
[  106.266422][ T6874] BTRFS info (device loop1): turning on sync discard
[  106.269459][ T6874] BTRFS info (device loop1): force clearing of disk cache
[  106.271759][ T6874] BTRFS info (device loop1): enabling auto defrag
[  106.274336][ T6874] BTRFS info (device loop1): doing ref verification
[  106.276648][ T6874] BTRFS info (device loop1): max_inline set to 0
[  106.281310][   T27] BTRFS warning (device loop1): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x67f2f04faba62b02d53ecab93b265991892c0f7a982ddf210d845819bb4cc85f level 0
[  106.293395][ T6874] BTRFS: error (device loop1) in btrfs_fill_super:988: errno=-5 IO failure
[  106.312259][ T6874] BTRFS error (device loop1 state E): commit super ret -30
[  106.432901][ T6903] loop2: detected capacity change from 0 to 4096
[  106.458873][ T6903] bond0: Removing last ns target with arp_interval on
[  106.484972][ T6905] netlink: 'syz.1.379': attribute type 20 has an invalid length.
[  107.246373][ T5846] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  107.413363][ T5846] usb 2-1: config 8 has an invalid interface number: 223 but max is 0
[  107.415800][ T5846] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  107.420924][ T5846] usb 2-1: config 8 has no interface number 0
[  107.423314][ T5846] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  107.433908][ T5846] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  107.438614][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.443536][ T5846] usb 2-1: Product: syz
[  107.446407][ T5846] usb 2-1: Manufacturer: syz
[  107.450316][ T5846] usb 2-1: SerialNumber: syz
[  107.803906][ T5846] usb 2-1: USB disconnect, device number 5
[  108.368600][ T5897] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  108.529214][ T5897] usb 3-1: Using ep0 maxpacket: 16
[  108.558946][ T5897] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  108.575646][ T5897] usb 3-1: config 0 has no interface number 0
[  108.602567][ T5897] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  108.606139][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.630029][ T5897] usb 3-1: Product: syz
[  108.631815][ T5897] usb 3-1: Manufacturer: syz
[  108.633715][ T5897] usb 3-1: SerialNumber: syz
[  108.646026][ T5897] usb 3-1: config 0 descriptor??
[  108.652803][ T5897] hub 3-1:0.132: bad descriptor, ignoring hub
[  108.655254][ T5897] hub 3-1:0.132: probe with driver hub failed with error -5
[  108.677807][ T5897] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input6
[  108.897001][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'.
[  108.902245][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'.
[  108.905731][ T6952] netlink: 'syz.0.400': attribute type 18 has an invalid length.
[  108.958948][   T51] usb 3-1: USB disconnect, device number 7
[  110.112479][   T51] IPVS: starting estimator thread 0...
[  110.209324][ T6970] IPVS: using max 37 ests per chain, 88800 per kthread
[  111.004225][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'.
[  111.186695][ T6998] netlink: 68 bytes leftover after parsing attributes in process `syz.1.419'.
[  111.324839][ T7004] loop0: detected capacity change from 0 to 4096
[  111.329497][ T7004] ntfs3(loop0): ino=3, Correct links count -> 2.
[  111.799255][ T7018] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  112.237693][ T7024] loop2: detected capacity change from 0 to 128
[  112.244526][ T7024] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  112.250938][ T7024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.271309][ T7024] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05
[  112.275423][ T7024] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed
[  112.305086][ T5850] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh
[  112.309374][ T5850] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh
[  112.513310][ T7031] loop1: detected capacity change from 0 to 64
[  112.597832][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.604233][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.683124][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.686759][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.743495][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.747639][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.817141][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.823192][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.012205][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.022130][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.027332][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.031323][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.034692][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.522767][   T12] bond0 (unregistering): Released all slaves
[  113.531883][   T12] bond1 (unregistering): Released all slaves
[  113.890122][ T7037] chnl_net:caif_netlink_parms(): no params data found
[  113.975303][   T12] hsr_slave_0: left promiscuous mode
[  113.979032][   T12] hsr_slave_1: left promiscuous mode
[  113.989275][   T12] veth1_macvtap: left promiscuous mode
[  113.991312][   T12] veth0_macvtap: left promiscuous mode
[  113.993035][   T12] veth1_vlan: left promiscuous mode
[  113.995537][   T12] veth0_vlan: left promiscuous mode
[  114.038031][ T7075] loop1: detected capacity change from 0 to 128
[  114.048422][ T7075] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  114.061783][ T7075] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  114.092600][ T6027] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  114.622860][ T7081] loop0: detected capacity change from 0 to 40427
[  114.627827][ T7081] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  114.632937][ T7081] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  114.636189][ T7081] F2FS-fs (loop0): build fault injection type: 0x6
[  114.642275][ T7081] F2FS-fs (loop0): invalid crc value
[  114.728517][ T7081] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  114.736479][ T7081] F2FS-fs (loop0): Start checkpoint disabled!
[  114.748284][ T7081] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  114.754841][ T7081] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  114.811543][ T7081] syz.0.458: attempt to access beyond end of device
[  114.811543][ T7081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  114.863919][ T6027] kworker/u10:5: attempt to access beyond end of device
[  114.863919][ T6027] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  114.870567][ T6027] CPU: 1 UID: 0 PID: 6027 Comm: kworker/u10:5 Not tainted syzkaller #0 PREEMPT(full) 
[  114.870583][ T6027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.870589][ T6027] Workqueue: writeback wb_workfn (flush-7:0)
[  114.870607][ T6027] Call Trace:
[  114.870611][ T6027]  <TASK>
[  114.870616][ T6027]  dump_stack_lvl+0x189/0x250
[  114.870631][ T6027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.870641][ T6027]  ? __pfx_queue_work_on+0x10/0x10
[  114.870650][ T6027]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.870662][ T6027]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.870678][ T6027]  f2fs_handle_critical_error+0x37c/0x540
[  114.870695][ T6027]  f2fs_write_end_io+0x886/0xb60
[  114.870712][ T6027]  __submit_merged_bio+0x27a/0x6a0
[  114.870727][ T6027]  __submit_merged_write_cond+0x255/0x530
[  114.870742][ T6027]  f2fs_write_data_pages+0x261d/0x3000
[  114.870774][ T6027]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.870794][ T6027]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  114.870820][ T6027]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  114.870838][ T6027]  ? trace_f2fs_writepages+0x7f/0x200
[  114.870850][ T6027]  ? f2fs_write_node_pages+0x478/0x6e0
[  114.870864][ T6027]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  114.870882][ T6027]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.870895][ T6027]  do_writepages+0x32e/0x550
[  114.870910][ T6027]  ? reacquire_held_locks+0x127/0x1d0
[  114.870919][ T6027]  ? writeback_sb_inodes+0x384/0x1010
[  114.870935][ T6027]  __writeback_single_inode+0x145/0xff0
[  114.870945][ T6027]  ? do_raw_spin_unlock+0x4d/0x240
[  114.870957][ T6027]  writeback_sb_inodes+0x6c7/0x1010
[  114.870980][ T6027]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  114.871012][ T6027]  ? rcu_is_watching+0x15/0xb0
[  114.871032][ T6027]  wb_writeback+0x43b/0xaf0
[  114.871046][ T6027]  ? queue_io+0x3a1/0x590
[  114.871058][ T6027]  ? __pfx_wb_writeback+0x10/0x10
[  114.871072][ T6027]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.871084][ T6027]  wb_workfn+0x409/0xef0
[  114.871101][ T6027]  ? __pfx_wb_workfn+0x10/0x10
[  114.871111][ T6027]  ? __lock_acquire+0xab9/0xd20
[  114.871129][ T6027]  ? process_scheduled_works+0x9ef/0x17b0
[  114.871141][ T6027]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.871150][ T6027]  ? process_scheduled_works+0x9ef/0x17b0
[  114.871157][ T6027]  ? process_scheduled_works+0x9ef/0x17b0
[  114.871165][ T6027]  process_scheduled_works+0xae1/0x17b0
[  114.871188][ T6027]  ? __pfx_process_scheduled_works+0x10/0x10
[  114.871205][ T6027]  worker_thread+0x8a0/0xda0
[  114.871215][ T6027]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.871229][ T6027]  ? __kthread_parkme+0x7b/0x200
[  114.871244][ T6027]  kthread+0x711/0x8a0
[  114.871256][ T6027]  ? __pfx_worker_thread+0x10/0x10
[  114.871263][ T6027]  ? __pfx_kthread+0x10/0x10
[  114.871274][ T6027]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.871283][ T6027]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.871294][ T6027]  ? __pfx_kthread+0x10/0x10
[  114.871327][ T6027]  ret_from_fork+0x3fc/0x770
[  114.871338][ T6027]  ? __pfx_ret_from_fork+0x10/0x10
[  114.871350][ T6027]  ? __switch_to_asm+0x39/0x70
[  114.871359][ T6027]  ? __switch_to_asm+0x33/0x70
[  114.871368][ T6027]  ? __pfx_kthread+0x10/0x10
[  114.871378][ T6027]  ret_from_fork_asm+0x1a/0x30
[  114.871397][ T6027]  </TASK>
[  114.871400][ T6027] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  115.096439][   T54] Bluetooth: hci1: command tx timeout
[  115.217240][ T7089] loop1: detected capacity change from 0 to 136
[  115.224820][ T7089] Attempt to read inode for relocated directory
[  115.246926][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.254449][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.257187][ T7037] bridge_slave_0: entered allmulticast mode
[  115.275679][ T7037] bridge_slave_0: entered promiscuous mode
[  115.295322][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.297557][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.301540][ T7037] bridge_slave_1: entered allmulticast mode
[  115.304633][ T7037] bridge_slave_1: entered promiscuous mode
[  115.411161][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.421307][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.471615][ T7037] team0: Port device team_slave_0 added
[  115.476875][ T7037] team0: Port device team_slave_1 added
[  115.500862][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.503204][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.516406][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.523265][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.525516][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.534050][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.551151][   T12] IPVS: stop unused estimator thread 0...
[  115.612980][ T7037] hsr_slave_0: entered promiscuous mode
[  115.616068][ T7037] hsr_slave_1: entered promiscuous mode
[  115.619375][ T7037] debugfs: 'hsr0' already exists in 'hsr'
[  115.622765][ T7037] Cannot create hsr debugfs directory
[  115.794186][ T7037] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  115.868091][ T7037] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  115.881829][ T7037] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  115.896522][ T7037] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  115.946061][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.948969][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.953862][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.956583][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.017298][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.029271][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.033402][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.054586][ T7122] loop1: detected capacity change from 0 to 1024
[  116.059411][ T7037] 8021q: adding VLAN 0 to HW filter on device team0
[  116.065212][ T7122] EXT4-fs: Ignoring removed bh option
[  116.069395][ T7122] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  116.073183][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.076747][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.087613][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.090875][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.104802][ T7122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.153764][ T7122] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #12: block 7: comm syz.1.472: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  116.164100][ T7122] EXT4-fs (loop1): Remounting filesystem read-only
[  116.167074][ T7122] overlayfs: cleanup of 'index/#a' failed (-30)
[  116.244352][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.301524][ T7133] overlayfs: conflicting options: nfs_export=on,index=off
[  116.353734][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.415759][ T7037] veth0_vlan: entered promiscuous mode
[  116.430560][ T7037] veth1_vlan: entered promiscuous mode
[  116.461659][ T7037] veth0_macvtap: entered promiscuous mode
[  116.468130][ T7037] veth1_macvtap: entered promiscuous mode
[  116.488370][ T7144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.511992][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.529590][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.537882][ T7148] bridge0: port 3(syz_tun) entered blocking state
[  116.541860][ T7148] bridge0: port 3(syz_tun) entered disabled state
[  116.544709][ T7148] syz_tun: entered allmulticast mode
[  116.549404][ T7148] syz_tun: entered promiscuous mode
[  116.561249][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.569626][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.575732][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.588052][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.654688][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.661256][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.689752][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.694396][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.877920][ T7150] loop1: detected capacity change from 0 to 40427
[  116.882834][ T7150] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  116.885969][ T7150] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  117.061289][ T7150] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  117.077605][ T7150] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  117.086682][ T7150] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  117.162917][   T54] Bluetooth: hci1: command tx timeout
[  118.002835][ T7173] loop1: detected capacity change from 0 to 4096
[  118.027870][ T7180] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.166145][ T7188] loop0: detected capacity change from 0 to 1024
[  118.273751][ T7190] loop1: detected capacity change from 0 to 4096
[  118.279419][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  118.284261][ T7190] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  118.288412][ T7190] ntfs3(loop1): ino=0, mi_enum_attr
[  118.291184][ T7190] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  118.303119][ T7190] ntfs3(loop1): volume is dirty and "force" flag is not set!
[  118.444113][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.448774][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.452414][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  118.457405][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  118.471522][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.483787][    T9] usb 4-1: config 0 descriptor??
[  118.926594][    T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  119.127536][ T7214] loop1: detected capacity change from 0 to 32768
[  119.184928][   T24] usb 4-1: USB disconnect, device number 2
[  119.220018][ T7214] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  119.220040][ T7214]   allowing incompatible features above 0.0: (unknown version)
[  119.220048][ T7214]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  119.238801][ T7214] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  119.242296][ T7214] bcachefs (loop1): initializing new filesystem
[  119.249560][   T54] Bluetooth: hci1: command tx timeout
[  119.260475][ T7214] bcachefs (loop1): going read-write
[  119.274513][ T7214] bcachefs (loop1): marking superblocks
[  119.302365][ T7214] bcachefs (loop1): initializing freespace
[  119.307587][ T7214] bcachefs (loop1): done initializing freespace
[  119.315519][ T7214] bcachefs (loop1): reading snapshots table
[  119.317608][ T7214] bcachefs (loop1): reading snapshots done
[  119.352935][ T7214] bcachefs (loop1):  loop1: Superblock write was silently dropped! (seq 0 expected 42)
[  119.362278][ T7214] bcachefs (loop1): done starting filesystem
[  119.412078][ T7214] syz.1.505 (7214) used greatest stack depth: 16984 bytes left
[  119.424201][ T5852] bcachefs (loop1): shutting down
[  119.426551][ T5852] bcachefs (loop1): going read-only
[  119.430023][ T5852] bcachefs (loop1): finished waiting for writes to stop
[  119.437713][ T5852] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  119.484273][ T5852] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  119.492672][ T5852] bcachefs (loop1): clean shutdown complete, journal seq 4
[  119.496559][ T5852] bcachefs (loop1): marking filesystem clean
[  119.526313][ T5852] bcachefs (loop1): shutdown complete
[  119.668676][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  119.803292][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'.
[  119.824357][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.827449][   T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df
[  119.831112][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.836499][   T24] usb 1-1: config 0 descriptor??
[  119.847831][   T24] pwc: Philips PCA646VC USB webcam detected.
[  120.043426][   T24] pwc: send_video_command error -71
[  120.045516][   T24] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  120.049388][   T24] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  120.055772][   T24] usb 1-1: USB disconnect, device number 6
[  120.138840][ T5910] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  120.288636][ T5910] usb 4-1: Using ep0 maxpacket: 8
[  120.292767][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.296616][ T5910] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00
[  120.302237][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.307845][ T5910] usb 4-1: config 0 descriptor??
[  120.716845][ T7247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.515'.
[  120.721325][ T7247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.515'.
[  120.742057][ T5910] hid-corsair-void 0003:1B1C:1B25.0003: item fetching failed at offset 0/1
[  120.746161][ T5910] hid-corsair-void 0003:1B1C:1B25.0003: parse failed (reason: -22)
[  120.750046][ T5910] hid-corsair-void 0003:1B1C:1B25.0003: probe with driver hid-corsair-void failed with error -22
[  120.830935][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'.
[  120.930064][   T51] usb 4-1: USB disconnect, device number 3
[  121.099620][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  121.250423][   T24] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  121.253941][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.259329][   T24] usb 2-1: config 0 descriptor??
[  121.264183][   T24] gspca_main: cpia1-2.14.0 probing 0813:0001
[  121.318650][   T54] Bluetooth: hci1: command tx timeout
[  121.348633][   T51] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  121.474495][   T24] gspca_cpia1: usb_control_msg 05, error -71
[  121.477761][   T24] gspca_cpia1: usb_control_msg 01, error -71
[  121.481904][   T24] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  121.487134][   T24] usb 2-1: USB disconnect, device number 6
[  121.503763][   T51] usb 1-1: unable to get BOS descriptor or descriptor too short
[  121.513282][   T51] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  121.517545][   T51] usb 1-1: config 1 interface 0 has no altsetting 0
[  121.524100][   T51] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40
[  121.527889][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.533456][   T51] usb 1-1: Product: syz
[  121.535186][   T51] usb 1-1: Manufacturer: syz
[  121.537471][   T51] usb 1-1: SerialNumber: syz
[  121.649409][ T7276] loop3: detected capacity change from 0 to 512
[  121.655135][ T7276] EXT4-fs (loop3): Test dummy encryption mode enabled
[  121.658275][ T7276] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  121.667950][ T7276] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.529: bad orphan inode 131083
[  121.674287][ T7276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.732621][ T7276] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  121.754815][   T51] usbhid 1-1:1.0: can't add hid device: -71
[  121.757390][   T51] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  121.764768][   T51] usb 1-1: USB disconnect, device number 7
[  121.789410][ T7037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.840132][ T7283] loop3: detected capacity change from 0 to 512
[  121.856739][ T7283] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  121.860173][ T7283] System zones: 0-2, 18-18, 34-35
[  121.864479][ T7283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.872267][ T7283] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.909373][ T7037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.214136][ T7289] loop1: detected capacity change from 0 to 32768
[  122.248240][ T7289] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc
[  122.248264][ T7289]   allowing incompatible features above 0.0: (unknown version)
[  122.248273][ T7289]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  122.266311][ T7289] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  122.269651][ T7289] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  122.272958][ T7289] bcachefs (loop1): Version upgrade required:
[  122.272958][ T7289] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  122.272958][ T7289] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  122.272958][ T7289]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  122.303649][ T7289] bcachefs (loop1): dropping and reconstructing all alloc info
[  122.331582][ T7289] bcachefs (loop1): accounting_read... done
[  122.336590][ T7289] bcachefs (loop1): alloc_read... done
[  122.341440][ T7289] bcachefs (loop1): done starting filesystem
[  122.388195][ T5852] bcachefs (loop1): shutting down
[  122.404825][ T5852] bcachefs (loop1): shutdown complete
[  123.147218][ T7302] 9p: Unknown Cache mode or invalid value mmXډm
[  123.213865][ T7303] loop3: detected capacity change from 0 to 2048
[  123.223297][ T7303] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.455723][ T7302] loop3: detected capacity change from 0 to 32768
[  123.473031][ T7302] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  123.480698][   T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  123.491542][ T7302] ocfs2: Unmounting device (7,3) on (node local)
[  124.104051][ T7343] loop0: detected capacity change from 0 to 1024
[  124.135103][ T7343] hfsplus: bad catalog entry type
[  124.158171][ T1091] hfsplus: b-tree write err: -5, ino 4
[  124.298620][ T5910] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  124.450720][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.454854][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.457983][ T5910] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  124.465632][ T7351] loop3: detected capacity change from 0 to 32768
[  124.468565][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.472220][ T7351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.559 (7351)
[  124.476946][ T5910] usb 2-1: config 0 descriptor??
[  124.485719][ T7351] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  124.489906][ T7351] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  124.511701][ T7351] BTRFS info (device loop3): rebuilding free space tree
[  124.522760][ T7351] BTRFS info (device loop3): enabling ssd optimizations
[  124.525715][ T7351] BTRFS info (device loop3): using spread ssd allocation scheme
[  124.531525][ T7351] BTRFS info (device loop3): enabling free space tree
[  124.534512][ T7351] BTRFS info (device loop3): force clearing of disk cache
[  124.606986][ T7037] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  124.786739][ T7383] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  125.145035][ T7383] loop0: detected capacity change from 0 to 32768
[  125.179377][ T7383] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  125.206383][ T7383] XFS (loop0): Ending clean mount
[  125.254887][ T5910] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  125.257729][ T5910] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  125.260497][ T5910] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  125.262892][ T5910] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  125.265141][ T5910] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  125.267400][ T5910] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  125.269653][ T5910] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  125.274054][ T5910] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[  125.452621][ T5910] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device
[  125.455181][ T5910] pyra 0003:1E7D:2CF6.0004: couldn't install mouse
[  125.460591][ T5910] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71
[  125.464983][ T5910] usb 2-1: USB disconnect, device number 7
[  125.470812][   T33] audit: type=1326 audit(1756523260.685:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e5b8ebe9 code=0x7fc00000
[  125.982584][ T5845] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.113207][   T33] audit: type=1326 audit(1756523261.325:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93e5b2adb9 code=0x7fc00000
[  126.383749][ T7418] loop0: detected capacity change from 0 to 1024
[  126.393348][ T7418] hfsplus: failed to load root directory
[  126.761365][ T7432] loop3: detected capacity change from 0 to 32768
[  126.782986][ T7432] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  126.814921][ T7432] XFS (loop3): Ending clean mount
[  126.846640][ T7037] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  126.912988][ T7454] loop1: detected capacity change from 0 to 256
[  126.933500][ T7454] exfat: Deprecated parameter 'namecase'
[  126.938324][ T7454] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  126.950215][ T7454] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  127.029315][ T5910] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  127.035870][ T7456] binder: 7455:7456 unknown command 0
[  127.038087][ T7456] binder: 7455:7456 ioctl c0306201 200000000080 returned -22
[  127.112382][ T5852] syz_tun (unregistering): left allmulticast mode
[  127.114939][ T5852] syz_tun (unregistering): left promiscuous mode
[  127.117759][ T5852] bridge0: port 3(syz_tun) entered disabled state
[  127.199883][ T5910] usb 1-1: config 255 has an invalid interface number: 91 but max is 0
[  127.203233][ T5910] usb 1-1: config 255 has no interface number 0
[  127.205615][ T5910] usb 1-1: config 255 interface 91 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  127.221801][ T5910] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice=a8.6a
[  127.225043][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.228269][ T5910] usb 1-1: Product: syz
[  127.230750][ T5910] usb 1-1: Manufacturer: syz
[  127.232685][ T5910] usb 1-1: SerialNumber: syz
[  127.242376][ T5910] usbtouchscreen 1-1:255.91: probe with driver usbtouchscreen failed with error -12
[  127.462346][   T51] usb 1-1: USB disconnect, device number 8
[  127.515184][   T12] bridge_slave_1: left allmulticast mode
[  127.517611][   T12] bridge_slave_1: left promiscuous mode
[  127.522939][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.528291][   T12] bridge_slave_0: left allmulticast mode
[  127.532809][   T12] bridge_slave_0: left promiscuous mode
[  127.535348][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.579846][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.584470][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.595394][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.601082][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.604279][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.912722][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.917577][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.922586][   T12] bond0 (unregistering): Released all slaves
[  127.934431][   T12] bond1 (unregistering): Released all slaves
[  128.116567][   T12] bond2 (unregistering): Released all slaves
[  128.375244][ T7486] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  128.533341][   T12] hsr_slave_0: left promiscuous mode
[  128.538127][   T12] hsr_slave_1: left promiscuous mode
[  128.541428][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.627846][ T7498] netlink: 232 bytes leftover after parsing attributes in process `syz.3.612'.
[  128.871524][   T12] team0 (unregistering): Port device team_slave_1 removed
[  128.911696][   T12] team0 (unregistering): Port device team_slave_0 removed
[  129.392357][ T7463] chnl_net:caif_netlink_parms(): no params data found
[  129.516697][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.520534][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.523245][ T7463] bridge_slave_0: entered allmulticast mode
[  129.527310][ T7463] bridge_slave_0: entered promiscuous mode
[  129.545496][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.550981][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.553317][ T7463] bridge_slave_1: entered allmulticast mode
[  129.556384][ T7463] bridge_slave_1: entered promiscuous mode
[  129.633187][ T7463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.639064][ T5849] Bluetooth: hci2: command tx timeout
[  129.643653][ T7463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.661451][   T12] ------------[ cut here ]------------
[  129.663502][   T12] WARNING: CPU: 0 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  129.666811][   T12] Modules linked in:
[  129.669108][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  129.673406][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.677021][   T12] Workqueue: netns cleanup_net
[  129.679041][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  129.681022][   T12] Code: 78 44 df f7 4b 83 3c 2c 00 75 19 e8 3c d6 7b f7 49 81 fd f8 07 00 00 74 1d e8 2e d6 7b f7 49 83 c5 08 eb c9 e8 23 d6 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  129.686852][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[  129.689034][   T12] RAX: ffffffff8a43d56d RBX: ffff88802a294000 RCX: ffff88801c2dd640
[  129.691503][   T12] RDX: 0000000000000000 RSI: ffffffff8d9b77e3 RDI: ffff88802a294000
[  129.694001][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  129.697014][   T12] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: ffff88802a294000
[  129.700418][   T12] R13: 0000000000000000 R14: ffff888023900000 R15: dffffc0000000000
[  129.703178][   T12] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  129.705824][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  129.708264][   T12] CR2: 0000001b32420ff8 CR3: 000000010e8da000 CR4: 00000000000006f0
[  129.711053][   T12] Call Trace:
[  129.712122][   T12]  <TASK>
[  129.713055][   T12]  ops_undo_list+0x49a/0x990
[  129.714592][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  129.716331][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  129.718058][   T12]  cleanup_net+0x4c5/0x800
[  129.719969][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  129.721595][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.723517][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  129.725433][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  129.727321][   T12]  process_scheduled_works+0xae1/0x17b0
[  129.729183][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  129.731091][   T12]  worker_thread+0x8a0/0xda0
[  129.732604][   T12]  kthread+0x711/0x8a0
[  129.733949][   T12]  ? __pfx_worker_thread+0x10/0x10
[  129.735551][   T12]  ? __pfx_kthread+0x10/0x10
[  129.737037][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.738783][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.740547][   T12]  ? __pfx_kthread+0x10/0x10
[  129.742507][   T12]  ret_from_fork+0x3fc/0x770
[  129.744252][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  129.746118][   T12]  ? __switch_to_asm+0x39/0x70
[  129.747774][   T12]  ? __switch_to_asm+0x33/0x70
[  129.749480][   T12]  ? __pfx_kthread+0x10/0x10
[  129.750951][   T12]  ret_from_fork_asm+0x1a/0x30
[  129.752482][   T12]  </TASK>
[  129.753775][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  129.756492][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  129.760281][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.764265][   T12] Workqueue: netns cleanup_net
[  129.766242][   T12] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  129.767651][   T12]  <TASK>
[  129.769110][   T12]  dump_stack_lvl+0x99/0x250
[  129.771139][   T12]  ? __asan_memcpy+0x40/0x70
[  129.773021][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.775171][   T12]  ? __pfx__printk+0x10/0x10
[  129.777072][   T12]  vpanic+0x281/0x750
[  129.778680][   T12]  ? __pfx__printk+0x10/0x10
[  129.780537][   T12]  ? __pfx_vpanic+0x10/0x10
[  129.782361][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  129.784450][   T12]  panic+0xb9/0xc0
[  129.785972][   T12]  ? __pfx_panic+0x10/0x10
[  129.787776][   T12]  __warn+0x31b/0x4b0
[  129.789383][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  129.791364][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  129.793192][   T12]  report_bug+0x2be/0x4f0
[  129.794694][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  129.796820][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  129.798995][   T12]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  129.801085][   T12]  handle_bug+0x84/0x160
[  129.802714][   T12]  exc_invalid_op+0x1a/0x50
[  129.804474][   T12]  asm_exc_invalid_op+0x1a/0x20
[  129.806324][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  129.808423][   T12] Code: 78 44 df f7 4b 83 3c 2c 00 75 19 e8 3c d6 7b f7 49 81 fd f8 07 00 00 74 1d e8 2e d6 7b f7 49 83 c5 08 eb c9 e8 23 d6 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  129.816259][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[  129.818807][   T12] RAX: ffffffff8a43d56d RBX: ffff88802a294000 RCX: ffff88801c2dd640
[  129.822078][   T12] RDX: 0000000000000000 RSI: ffffffff8d9b77e3 RDI: ffff88802a294000
[  129.825330][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  129.828534][   T12] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: ffff88802a294000
[  129.831712][   T12] R13: 0000000000000000 R14: ffff888023900000 R15: dffffc0000000000
[  129.834856][   T12]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  129.837042][   T12]  ops_undo_list+0x49a/0x990
[  129.838926][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  129.841042][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  129.843161][   T12]  cleanup_net+0x4c5/0x800
[  129.844957][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  129.846996][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.849150][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  129.851452][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  129.853668][   T12]  process_scheduled_works+0xae1/0x17b0
[  129.855867][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  129.858324][   T12]  worker_thread+0x8a0/0xda0
[  129.860199][   T12]  kthread+0x711/0x8a0
[  129.861855][   T12]  ? __pfx_worker_thread+0x10/0x10
[  129.863917][   T12]  ? __pfx_kthread+0x10/0x10
[  129.865777][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.867953][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.870133][   T12]  ? __pfx_kthread+0x10/0x10
[  129.872105][   T12]  ret_from_fork+0x3fc/0x770
[  129.874050][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  129.876175][   T12]  ? __switch_to_asm+0x39/0x70
[  129.878120][   T12]  ? __switch_to_asm+0x33/0x70
[  129.880065][   T12]  ? __pfx_kthread+0x10/0x10
[  129.881926][   T12]  ret_from_fork_asm+0x1a/0x30
[  129.883926][   T12]  </TASK>
[  129.885953][   T12] Kernel Offset: disabled
[  129.887746][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:07:45  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7050
R8 =ffff8881075c0237 R9 =1ffff11020eb8046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8d5 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32420ff8 CR3=000000010e8da000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8167991b ffffffff8167991b
XMM02=00007fd0c2597498 ffffffff8167991b XMM03=00007fd0c25974a8 00007fd0c25974a0
XMM04=00007fd0c30fd100 00007fd0c2597460 XMM05=00007fd0c2597478 00007fd0c25974c0
XMM06=00007fd0c25974b8 00007fd0c25974b0 XMM07=00007fd0c25974a8 00007fd0c25974a0
XMM08=0000000000000000 00007fd0c2412ee7 XMM09=0000000000000000 00007fd0c2412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11021deae50 RBX=ffffffff99d19088 RCX=dffffc0000000000 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc90003d3f900 RBP=dffffc0000000000 RSP=ffffc90003d3fa10
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff520007a7f20
R12=ffff8880305457e0 R13=ffff88810ef57280 R14=0000000000000002 R15=ffff88810ef57268
RIP=ffffffff84d04255 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055776982d7e8 CR3=00000001202d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
