last executing test programs:

2.345140945s ago: executing program 0 (id=491):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000))

2.344605882s ago: executing program 0 (id=492):
mount(0x0, &(0x7f00000002c0)='./file3\x00', &(0x7f0000000100)='vxfs\x00', 0x30e8023, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file3\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x1b1, &(0x7f0000000740)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x0, 0x118)

2.344377333s ago: executing program 1 (id=493):
syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040303dfe5000000010902b901010000003f0904"], 0x0)

2.227565254s ago: executing program 0 (id=494):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

1.945679673s ago: executing program 0 (id=497):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x1010006, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0x3867}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {}, {@nodiscard}, {@noquota}, {@nodiscard}]}, 0x24, 0x6208, &(0x7f0000013980)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)

1.568599977s ago: executing program 0 (id=500):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x800810, &(0x7f0000000240)={[{@datacow}, {@nodatasum}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1}}, {@ssd}, {}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

1.106040392s ago: executing program 1 (id=501):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000800)="08003b117c123a3d4d", 0x9}], 0x2}, 0x20008890)

1.105761334s ago: executing program 1 (id=502):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.01886087s ago: executing program 1 (id=503):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)

1.0007037s ago: executing program 1 (id=504):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
writev(0xffffffffffffffff, 0x0, 0x0)
rmdir(&(0x7f00000003c0)='./control\x00')
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
write$qrtrtun(r2, &(0x7f0000000240)="e853", 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x1], 0x0, 0x0, 0x1}}, 0x40)

877.554091ms ago: executing program 1 (id=506):
r0 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)=' ', 0x1}], 0x1, 0x5412, 0x800, 0x12)
r2 = dup2(r1, r0)
write$FUSE_POLL(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x0, {0x5}}, 0x18)

486.365886ms ago: executing program 2 (id=510):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_rm_watch(0xffffffffffffffff, 0x0)

357.746424ms ago: executing program 2 (id=511):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000)

213.237122ms ago: executing program 0 (id=512):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x8})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380))

213.011082ms ago: executing program 2 (id=513):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
setresuid(0x0, 0x0, 0xffffffffffffffff)

212.898538ms ago: executing program 2 (id=514):
r0 = syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x80044520, &(0x7f0000000000)=""/85)

105.744625ms ago: executing program 2 (id=515):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e900000000000000030006000000000002000000000000000000000000000000020001000000007ffffffe16ff000020030005000000000002000000ac1414aa00000000000000000a0008"], 0xb0}, 0x1, 0x7}, 0x4008800)

0s ago: executing program 2 (id=516):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:8277' (ED25519) to the list of known hosts.
syzkaller login: [   56.135253][ T5773] cgroup: Unknown subsys name 'net'
[   56.260550][ T5773] cgroup: Unknown subsys name 'cpuset'
[   56.264596][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.592698][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.483573][ T5909] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.251741][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[   71.254512][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[   71.305773][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.310147][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.313583][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.324123][ T5937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.327370][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.331460][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.334877][ T5937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.370592][ T5934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.375467][ T5934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.379550][ T5934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.445455][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.449370][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.452972][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.456883][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.461212][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.724434][ T5931] chnl_net:caif_netlink_parms(): no params data found
[   71.794932][ T5935] chnl_net:caif_netlink_parms(): no params data found
[   71.873422][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.876538][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.879406][ T5931] bridge_slave_0: entered allmulticast mode
[   71.882168][ T5931] bridge_slave_0: entered promiscuous mode
[   71.921884][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.924449][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.928984][ T5931] bridge_slave_1: entered allmulticast mode
[   71.931898][ T5931] bridge_slave_1: entered promiscuous mode
[   71.957792][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.960295][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.962662][ T5935] bridge_slave_0: entered allmulticast mode
[   71.965288][ T5935] bridge_slave_0: entered promiscuous mode
[   71.999410][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.002310][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.004568][ T5935] bridge_slave_1: entered allmulticast mode
[   72.007164][ T5935] bridge_slave_1: entered promiscuous mode
[   72.023396][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.045483][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.053243][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.057027][ T5940] chnl_net:caif_netlink_parms(): no params data found
[   72.063712][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.108374][ T5935] team0: Port device team_slave_0 added
[   72.120211][ T5931] team0: Port device team_slave_0 added
[   72.123720][ T5935] team0: Port device team_slave_1 added
[   72.127268][ T5931] team0: Port device team_slave_1 added
[   72.182546][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.185272][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.195811][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.203580][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.206310][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.216851][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.249430][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.252253][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.265429][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.278878][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.281619][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.291305][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.295412][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.299251][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.301990][ T5940] bridge_slave_0: entered allmulticast mode
[   72.305933][ T5940] bridge_slave_0: entered promiscuous mode
[   72.317080][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.320435][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.323457][ T5940] bridge_slave_1: entered allmulticast mode
[   72.327191][ T5940] bridge_slave_1: entered promiscuous mode
[   72.374092][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.380062][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.410956][ T5935] hsr_slave_0: entered promiscuous mode
[   72.414313][ T5935] hsr_slave_1: entered promiscuous mode
[   72.434533][ T5931] hsr_slave_0: entered promiscuous mode
[   72.438357][ T5931] hsr_slave_1: entered promiscuous mode
[   72.441132][ T5931] debugfs: 'hsr0' already exists in 'hsr'
[   72.443534][ T5931] Cannot create hsr debugfs directory
[   72.470972][ T5940] team0: Port device team_slave_0 added
[   72.502316][ T5940] team0: Port device team_slave_1 added
[   72.555304][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.558588][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.568196][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.589728][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.591986][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.601977][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.677381][ T5940] hsr_slave_0: entered promiscuous mode
[   72.680822][ T5940] hsr_slave_1: entered promiscuous mode
[   72.683494][ T5940] debugfs: 'hsr0' already exists in 'hsr'
[   72.685645][ T5940] Cannot create hsr debugfs directory
[   72.846849][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.856778][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.865582][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.873604][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.936164][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.950051][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.960962][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.969819][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.034222][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.046262][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.056328][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.063836][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.135436][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.171940][ T5935] 8021q: adding VLAN 0 to HW filter on device team0
[   73.190855][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.193990][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.203908][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.216288][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.219303][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.230200][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.253935][ T5931] 8021q: adding VLAN 0 to HW filter on device team0
[   73.263988][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.266863][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.291486][ T5940] 8021q: adding VLAN 0 to HW filter on device team0
[   73.297297][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.300113][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.316709][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.319592][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.364028][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.367037][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.408735][   T55] Bluetooth: hci1: command tx timeout
[   73.408742][ T5934] Bluetooth: hci0: command tx timeout
[   73.422190][ T5940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.426262][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.489943][   T55] Bluetooth: hci2: command tx timeout
[   73.573678][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.580325][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.644589][ T5931] veth0_vlan: entered promiscuous mode
[   73.652576][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.670220][ T5931] veth1_vlan: entered promiscuous mode
[   73.680321][ T5935] veth0_vlan: entered promiscuous mode
[   73.695494][ T5935] veth1_vlan: entered promiscuous mode
[   73.724287][ T5931] veth0_macvtap: entered promiscuous mode
[   73.732094][ T5940] veth0_vlan: entered promiscuous mode
[   73.738344][ T5931] veth1_macvtap: entered promiscuous mode
[   73.755031][ T5940] veth1_vlan: entered promiscuous mode
[   73.761126][ T5935] veth0_macvtap: entered promiscuous mode
[   73.768675][ T5935] veth1_macvtap: entered promiscuous mode
[   73.774502][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.796188][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.811137][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.821659][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.826242][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.831525][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.834776][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.841439][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.863926][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.868206][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.871937][ T5742] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.876003][ T5742] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.885104][ T5940] veth0_macvtap: entered promiscuous mode
[   73.903587][ T5940] veth1_macvtap: entered promiscuous mode
[   73.971450][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.984863][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.990452][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.998573][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.021100][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.024933][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.057155][ T5968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.061007][ T5968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.067750][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.070862][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.071446][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.076884][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.143591][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.161431][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.197413][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.201853][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.262019][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.270304][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.467315][ T5981] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.673163][ T5981] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[   74.676861][ T5981] usb 1-1: config 0 has no interface number 0
[   74.681602][ T5981] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[   74.685533][ T5981] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[   74.699864][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.711935][ T5981] usb 1-1: config 0 descriptor??
[   74.758140][ T5981] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input4
[   74.964056][    T9] usb 1-1: USB disconnect, device number 2
[   75.166022][ T6021] loop2: detected capacity change from 0 to 2048
[   75.215879][ T6021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.243340][ T6021] cifs: Unknown parameter 'norecovery'
[   75.291833][ T5940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.340788][   T33] audit: type=1326 audit(1755553319.138:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.76" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[   75.358013][   T33] audit: type=1326 audit(1755553319.138:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.76" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[   75.380924][   T33] audit: type=1326 audit(1755553319.138:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.76" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[   75.397114][   T33] audit: type=1326 audit(1755553319.138:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.76" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[   75.412107][   T33] audit: type=1326 audit(1755553319.138:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.76" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[   75.488272][   T55] Bluetooth: hci0: command tx timeout
[   75.489055][ T5934] Bluetooth: hci1: command tx timeout
[   75.568678][ T5934] Bluetooth: hci2: command tx timeout
[   75.633313][ T6047] Illegal XDP return value 532213729 on prog  (id 5) dev syz_tun, expect packet loss!
[   75.934801][ T6064] loop0: detected capacity change from 0 to 512
[   75.956669][ T6064] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   76.166992][ T6066] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   76.171857][ T6066] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   77.167810][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   77.218628][  T791] IPVS: starting estimator thread 0...
[   77.308032][ T6088] IPVS: using max 42 ests per chain, 100800 per kthread
[   77.328837][   T24] usb 1-1: Using ep0 maxpacket: 32
[   77.335236][   T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   77.340507][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.422312][   T24] usb 1-1: config 0 descriptor??
[   77.466687][ T6097] loop1: detected capacity change from 0 to 1024
[   77.474255][ T6097] EXT4-fs: Ignoring removed bh option
[   77.476676][ T6097] EXT4-fs: Ignoring removed nomblk_io_submit option
[   77.501868][ T6097] EXT4-fs (loop1): Test dummy encryption mode enabled
[   77.523042][ T6097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.534095][ T6097] VFS: Lookup of 'file0' in ext4 loop1 would have caused loop
[   77.576422][   T55] Bluetooth: hci1: command tx timeout
[   77.581580][ T5934] Bluetooth: hci0: command tx timeout
[   77.595623][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.640398][   T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   77.649182][ T5934] Bluetooth: hci2: command tx timeout
[   77.674759][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   77.690709][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   77.704468][   T24] usb 1-1: media controller created
[   77.903073][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   77.986812][   T24] az6027: usb out operation failed. (-71)
[   77.993699][ T6109] program syz.1.109 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.002478][   T24] az6027: usb out operation failed. (-71)
[   78.005014][   T24] stb0899_attach: Driver disabled by Kconfig
[   78.017279][   T24] az6027: no front-end attached
[   78.017279][   T24] 
[   78.028684][   T24] az6027: usb out operation failed. (-71)
[   78.031151][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   78.043655][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
[   78.072135][   T24] dvb-usb: schedule remote query interval to 400 msecs.
[   78.086708][   T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   78.106441][   T24] usb 1-1: USB disconnect, device number 3
[   78.155473][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'.
[   78.216478][   T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   78.238270][ T6123] loop1: detected capacity change from 0 to 512
[   78.244022][ T6123] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   78.257867][ T6123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.269440][ T6123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=800ec018, mo2=0082]
[   78.281360][ T6123] EXT4-fs (loop1): 1 truncate cleaned up
[   78.283884][ T6123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.431267][ T6130] syz.0.118 uses obsolete (PF_INET,SOCK_PACKET)
[   78.481570][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.246635][ T6146] tipc: Started in network mode
[   79.252568][ T6146] tipc: Node identity 060b9cb521af, cluster identity 4711
[   79.255809][ T6146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.267160][ T6146] syzkaller0: entered promiscuous mode
[   79.271539][ T6146] syzkaller0: entered allmulticast mode
[   79.400343][ T6146] tipc: Resetting bearer <eth:syzkaller0>
[   79.465782][ T6145] tipc: Resetting bearer <eth:syzkaller0>
[   79.502060][ T6145] tipc: Disabling bearer <eth:syzkaller0>
[   79.647722][ T5934] Bluetooth: hci0: command tx timeout
[   79.647963][   T55] Bluetooth: hci1: command tx timeout
[   79.729903][   T55] Bluetooth: hci2: command tx timeout
[   80.091345][  T791] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   80.238906][  T791] usb 3-1: Using ep0 maxpacket: 16
[   80.249914][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   80.253139][  T791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0
[   80.256279][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.267094][  T791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   80.277046][  T791] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[   80.280700][ T6183] tap0: tun_chr_ioctl cmd 1074025680
[   80.284547][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.287222][  T791] usb 3-1: Product: syz
[   80.290244][  T791] usb 3-1: Manufacturer: syz
[   80.291987][  T791] usb 3-1: SerialNumber: syz
[   80.299389][  T791] usb 3-1: config 0 descriptor??
[   80.310404][  T791] mcba_usb 3-1:0.0: Can't find endpoints
[   80.383149][ T6190] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.144'.
[   80.441727][ T6195] loop1: detected capacity change from 0 to 256
[   80.449905][ T6195] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[   80.524562][  T791] usb 3-1: USB disconnect, device number 2
[   81.049711][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   81.066818][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'.
[   81.074522][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.078138][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.097739][ T6017] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   81.197732][   T24] usb 2-1: Using ep0 maxpacket: 8
[   81.201834][   T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   81.204812][   T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   81.211002][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   81.221189][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   81.225233][   T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   81.235883][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'.
[   81.244123][   T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   81.250427][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.257729][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   81.262679][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.270662][ T6017] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[   81.278202][ T6017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.284839][ T6017] usb 1-1: config 0 descriptor??
[   81.613478][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.163'.
[   81.631775][ T6229] Zero length message leads to an empty skb
[   81.689174][  T791] usb 2-1: USB disconnect, device number 2
[   81.692056][ T6231] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   81.714551][ T6017] konepure 0003:1E7D:2DBE.0001: unbalanced collection at end of report description
[   81.722085][ T6017] konepure 0003:1E7D:2DBE.0001: parse failed
[   81.725060][ T6017] konepure 0003:1E7D:2DBE.0001: probe with driver konepure failed with error -22
[   81.912826][ T6080] usb 1-1: USB disconnect, device number 4
[   82.279380][ T6252] loop1: detected capacity change from 0 to 64
[   82.369122][ T6255] syz.1.174: attempt to access beyond end of device
[   82.369122][ T6255] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64
[   82.375839][ T6255] Buffer I/O error on dev loop1, logical block 8388608, async page read
[   82.383591][ T6255] syz.1.174: attempt to access beyond end of device
[   82.383591][ T6255] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64
[   82.390683][ T6255] Buffer I/O error on dev loop1, logical block 8388608, async page read
[   82.596871][ T6254] cgroup: fork rejected by pids controller in /syz2
[   82.823371][ T6294] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.071851][ T6313] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[   84.088215][ T6313] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.185'.
[   84.262375][ T6316] netlink: 'syz.0.187': attribute type 1 has an invalid length.
[   84.484853][ T6328] loop0: detected capacity change from 0 to 4096
[   84.542906][ T6335] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.700062][ T6347] loop0: detected capacity change from 0 to 256
[   84.702833][ T6347] exfat: Deprecated parameter 'utf8'
[   84.705456][ T6347] exfat: Deprecated parameter 'namecase'
[   84.718514][ T6347] exfat: Deprecated parameter 'utf8'
[   84.747902][ T6347] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   84.827364][ T6358] capability: warning: `syz.1.201' uses deprecated v2 capabilities in a way that may be insecure
[   85.131953][ T6360] loop1: detected capacity change from 0 to 32768
[   85.719807][ T6375] netlink: 288 bytes leftover after parsing attributes in process `syz.1.208'.
[   85.989309][ T6080] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   86.149071][ T6080] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   86.152830][ T6080] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[   86.157289][ T6080] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[   86.165569][ T6080] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[   86.170285][ T6080] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.173589][ T6080] usb 1-1: Product: syz
[   86.175242][ T6080] usb 1-1: Manufacturer: syz
[   86.177200][ T6080] usb 1-1: SerialNumber: syz
[   86.183688][ T6080] usb 1-1: config 0 descriptor??
[   86.186358][ T6377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   86.190450][ T6377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   86.195295][ T6080] usb 1-1: ucan: probing device on interface #0
[   86.277670][  T791] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   86.427583][  T791] usb 3-1: Using ep0 maxpacket: 32
[   86.432035][  T791] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[   86.436374][  T791] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[   86.440651][  T791] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   86.449122][  T791] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[   86.452854][  T791] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[   86.456263][  T791] usb 3-1: Product: syz
[   86.459109][  T791] usb 3-1: Manufacturer: syz
[   86.461030][  T791] usb 3-1: SerialNumber: syz
[   86.470275][  T791] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6
[   86.610698][ T6377] loop0: detected capacity change from 0 to 2048
[   86.617853][ T6377] =======================================================
[   86.617853][ T6377] WARNING: The mand mount option has been deprecated and
[   86.617853][ T6377]          and is ignored by this kernel. Remove the mand
[   86.617853][ T6377]          option from the mount to silence this warning.
[   86.617853][ T6377] =======================================================
[   86.627138][  T842] cfg80211: failed to load regulatory.db
[   86.641337][ T6377] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   86.656442][ T6391] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.660024][ T6377] syz.0.209: attempt to access beyond end of device
[   86.660024][ T6377] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[   86.677004][  T842] usb 3-1: USB disconnect, device number 3
[   86.694056][  T842] appletouch 3-1:1.0: input: appletouch disconnected
[   86.875949][ T6080] ucan 1-1:0.0: probe with driver ucan failed with error -71
[   86.887836][ T6080] usb 1-1: USB disconnect, device number 5
[   87.471231][ T6393] loop0: detected capacity change from 0 to 1024
[   87.521566][ T6393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   87.521647][ T6397] loop2: detected capacity change from 0 to 512
[   87.526099][ T6393] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.532724][ T6397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   87.544883][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.549684][ T6397] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.555636][ T6393] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.216: Freeing blocks not in datazone - block = 0, count = 16
[   87.564569][ T6393] EXT4-fs (loop0): Remounting filesystem read-only
[   87.580766][ T5931] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   87.765712][ T6411] loop0: detected capacity change from 0 to 512
[   87.783776][ T6411] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   88.554075][ T5940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.666358][ T6429] loop2: detected capacity change from 0 to 4096
[   88.674393][ T6429] ntfs3(loop2): ino=3, Correct links count -> 2.
[   88.696902][ T6429] ntfs3(loop2): ino=1a, mi_enum_attr
[   88.700268][ T6429] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   88.788166][ T6431] loop2: detected capacity change from 0 to 2048
[   88.807910][ T6431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.812764][ T6431] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.838536][ T5940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.940897][ T6437] loop2: detected capacity change from 0 to 256
[   88.950958][ T6437] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   89.263259][ T6017] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   89.277578][  T842] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   89.418343][ T6017] usb 1-1: Using ep0 maxpacket: 32
[   89.427623][  T842] usb 3-1: Using ep0 maxpacket: 32
[   89.433195][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.434822][  T842] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[   89.438329][ T6017] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[   89.441431][  T842] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[   89.445056][ T6017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.457605][  T842] usb 3-1: Product: syz
[   89.459431][  T842] usb 3-1: Manufacturer: syz
[   89.460124][ T6017] usb 1-1: config 0 descriptor??
[   89.462577][  T842] usb 3-1: SerialNumber: syz
[   89.472881][  T842] usb 3-1: config 0 descriptor??
[   89.693091][  T842] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[   89.695958][  T842] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[   89.739237][  T842] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71
[   89.747114][  T842] usb 3-1: USB disconnect, device number 4
[   89.887350][ T6017] belkin 0003:1020:0006.0002: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.0-1/input0
[   90.083996][ T6017] usb 1-1: USB disconnect, device number 6
[   90.136262][ T6449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.314957][ T6459] loop2: detected capacity change from 0 to 64
[   90.763860][ T6466] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.767080][ T6466] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.975779][   T33] audit: type=1800 audit(1755553334.767:7): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.243" name="file1" dev="loop2" ino=5 res=0 errno=0
[   91.019201][ T6467] minix: Unknown parameter '18446744073709551615@LqE: 艞t}0$'
[   91.096045][   T33] audit: type=1800 audit(1755553334.777:8): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.243" name="file2" dev="loop2" ino=6 res=0 errno=0
[   92.611330][   T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   92.615468][   T55] Bluetooth: hci2: Injecting HCI hardware error event
[   92.621015][ T5934] Bluetooth: hci2: hardware error 0x00
[   93.096353][ T6523] loop1: detected capacity change from 0 to 4096
[   93.113647][ T6523] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   94.107309][ T6554] loop1: detected capacity change from 0 to 512
[   94.143374][ T6554] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.278: bad orphan inode 15
[   94.160975][ T6554] ext4_test_bit(bit=14, block=18) = 1
[   94.163293][ T6554] is_bad_inode(inode)=0
[   94.165063][ T6554] NEXT_ORPHAN(inode)=1023
[   94.166888][ T6554] max_ino=32
[   94.181149][ T6554] i_nlink=0
[   94.190146][ T6554] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.278: corrupted xattr block 19: invalid header
[   94.229285][ T6554] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[   94.239575][ T6554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   94.243455][ T6554] ext4 filesystem being mounted at /65/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   94.272017][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   94.351135][ T6557] loop0: detected capacity change from 0 to 32768
[   94.375551][ T6557] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.279 (6557)
[   94.415813][ T6557] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   94.421861][ T6557] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   94.436246][ T6557] BTRFS info (device loop0): using free-space-tree
[   94.629792][ T5931] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   94.714300][ T6569] loop1: detected capacity change from 0 to 32768
[   94.745958][ T6569] (syz.1.284,6569,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len % 4 != 0 - offset=108, inode=18446744073709486150, rec_len=65535, name_len=9
[   94.764664][ T6569] (syz.1.284,6569,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[   94.774342][ T6569] (syz.1.284,6569,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[   94.774369][ T6569] (syz.1.284,6569,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[   94.805931][ T6569] (syz.1.284,6569,1):ocfs2_initialize_super:2198 ERROR: status = -22
[   94.810538][ T6569] (syz.1.284,6569,1):ocfs2_fill_super:1177 ERROR: status = -22
[   94.880189][ T6592] process 'syz.0.287' launched './file2' with NULL argv: empty string added
[   94.927632][ T5934] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   95.257758][ T6017] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   95.300743][ T6602] overlayfs: failed to decode file handle (len=4, type=251, flags=0, err=-22)
[   95.307986][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   95.438433][ T6017] usb 1-1: Using ep0 maxpacket: 16
[   95.447285][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.453400][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.458204][ T6017] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   95.465233][ T6017] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   95.469354][ T6017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.479918][ T6017] usb 1-1: config 0 descriptor??
[   95.485357][   T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[   95.492449][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.495868][   T10] usb 2-1: Product: syz
[   95.498621][   T10] usb 2-1: Manufacturer: syz
[   95.500663][   T10] usb 2-1: SerialNumber: syz
[   95.507311][   T10] usb 2-1: config 0 descriptor??
[   95.516448][ T6611] syzkaller1: entered promiscuous mode
[   95.519976][ T6611] syzkaller1: entered allmulticast mode
[   95.723641][   T10] hso 2-1:0.0: Failed to find BULK IN ep
[   95.793548][   T10] usb-storage 2-1:0.0: USB Mass Storage device detected
[   95.947930][ T6017] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   95.950910][ T6017] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   95.953991][ T6017] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   95.962247][   T10] usb 2-1: USB disconnect, device number 3
[   95.989069][ T6017] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   95.993798][ T6017] microsoft 0003:045E:07DA.0003: no inputs found
[   95.996547][ T6017] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway
[   96.131384][   T47] usb 1-1: USB disconnect, device number 7
[   96.978312][ T6632] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.305'.
[   97.041693][ T6634] loop2: detected capacity change from 0 to 128
[   97.051554][ T6636] loop0: detected capacity change from 0 to 65
[   97.064180][ T6636] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0
[   97.138657][ T6017] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   97.329144][ T6017] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   97.342553][ T6017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.347395][ T6017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.364842][ T6017] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   97.447302][ T6017] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   97.484598][ T6017] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   97.498230][ T6017] usb 2-1: Manufacturer: syz
[   97.537035][ T6017] usb 2-1: config 0 descriptor??
[   98.058746][ T6017] appleir 0003:05AC:8243.0004: unknown main item tag 0x0
[   98.150037][ T6017] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[   98.816611][ T6648] loop6: detected capacity change from 0 to 63
[   98.820703][ T5999] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.823613][ T5999] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.826590][ T5999] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.830861][ T5999] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.834004][ T5999] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.837253][ T5999] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.846933][ T5999] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.859697][ T5999] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.863392][ T5999] ldm_validate_partition_table(): Disk read failed.
[   98.871758][ T6653] Buffer I/O error on dev loop6, logical block 0, lost async page write
[   98.875050][ T5999]  loop6: unable to read partition table
[   98.881967][ T6653] Buffer I/O error on dev loop6, logical block 1, lost async page write
[   98.893565][ T6648] ldm_validate_partition_table(): Disk read failed.
[   98.900222][ T6648] Dev loop6: unable to read RDB block 0
[   98.903078][ T6648]  loop6: unable to read partition table
[   98.905880][ T6648] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[   98.986937][ T6658] loop0: detected capacity change from 0 to 512
[   98.997069][ T6659] random: crng reseeded on system resumption
[   99.014548][ T6659] Restarting kernel threads ...
[   99.019356][ T6658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.025391][ T6659] Done restarting kernel threads.
[   99.029089][ T6658] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   99.077018][ T5931] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.350238][ T6675] loop0: detected capacity change from 0 to 4096
[   99.397795][ T6676] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.591534][ T6680] loop0: detected capacity change from 0 to 512
[   99.595157][ T6680] EXT4-fs: Ignoring removed bh option
[   99.609401][ T6680] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.616808][ T6680] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   99.643517][ T6680] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   99.646981][ T6680] EXT4-fs (loop0): orphan cleanup on readonly fs
[   99.659349][ T6680] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4
[   99.665852][ T6680] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[   99.671771][ T6680] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.324: Failed to acquire dquot type 1
[   99.679658][ T6680] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.324: Invalid block bitmap block 0 in block_group 0
[   99.686343][ T6680] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.324: Invalid block bitmap block 0 in block_group 0
[   99.693606][ T6680] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.324: Invalid block bitmap block 0 in block_group 0
[   99.699504][ T6680] Quota error (device loop0): write_blk: dquota write failed
[   99.702488][ T6680] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[   99.709172][ T6680] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.324: Failed to acquire dquot type 1
[   99.714362][ T6680] Quota error (device loop0): write_blk: dquota write failed
[   99.725750][ T6680] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[   99.729656][ T6680] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.324: Failed to acquire dquot type 1
[   99.738384][ T6680] EXT4-fs (loop0): 1 orphan inode deleted
[   99.742729][ T6680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   99.761745][ T5931] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.037679][ T6017] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  100.066044][ T6693] loop1: detected capacity change from 0 to 32768
[  100.072196][ T6693] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v1: too many devices for section size
[  100.072196][ T6693] members_v1 (size 40):
[  100.072196][ T6693] nr_devices mismatch: have 0 entries, should be 1
[  100.081604][ T6693] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  100.122300][    T9] usb 2-1: USB disconnect, device number 4
[  100.197799][ T6017] usb 1-1: Using ep0 maxpacket: 8
[  100.207803][ T6017] usb 1-1: unable to get BOS descriptor or descriptor too short
[  100.212514][ T6017] usb 1-1: config 4 has an invalid interface number: 177 but max is 0
[  100.216249][ T6017] usb 1-1: config 4 has no interface number 0
[  100.222754][ T6017] usb 1-1: config 4 interface 177 has no altsetting 0
[  100.231195][ T6017] usb 1-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=26.35
[  100.234829][ T6017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.245744][ T6017] usb 1-1: Product: syz
[  100.247993][ T6017] usb 1-1: Manufacturer: syz
[  100.249981][ T6017] usb 1-1: SerialNumber: syz
[  100.312789][ T6702] loop1: detected capacity change from 0 to 512
[  100.364143][ T6702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.369212][ T6702] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.399238][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.467199][ T6017] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  100.480526][ T6017] usb 1-1: USB disconnect, device number 8
[  101.059880][ T6718] sctp: [Deprecated]: syz.1.337 (pid 6718) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.059880][ T6718] Use struct sctp_sack_info instead
[  102.502238][ T6726] loop0: detected capacity change from 0 to 32768
[  102.599194][ T6726] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  102.686352][ T6726] XFS (loop0): Ending clean mount
[  102.718124][ T6725] loop2: detected capacity change from 0 to 32768
[  102.722572][ T6725] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.340 (6725)
[  102.731919][ T6725] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  102.737331][ T6725] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  102.741281][ T6725] BTRFS info (device loop2): using free-space-tree
[  102.781353][ T6725] BTRFS info (device loop2): rebuilding free space tree
[  102.789629][   T33] audit: type=1800 audit(1755553346.607:9): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.341" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  102.878104][   T33] audit: type=1800 audit(1755553346.697:10): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.340" name="bus" dev="loop2" ino=263 res=0 errno=0
[  102.979673][ T5931] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  103.041026][ T5940] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.259451][ T6758] netlink: 'syz.2.344': attribute type 2 has an invalid length.
[  103.262798][ T6758] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[  103.466784][ T6762] loop2: detected capacity change from 0 to 2048
[  103.545726][ T6762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.553526][ T6762] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.592224][ T6775] loop1: detected capacity change from 0 to 2048
[  103.606574][ T6776] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.667925][   T33] audit: type=1800 audit(1755553347.477:11): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.350" name="file1" dev="loop1" ino=15 res=0 errno=0
[  103.769481][   T33] audit: type=1800 audit(1755553347.557:12): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.350" name="file2" dev="loop1" ino=16 res=0 errno=0
[  103.854951][ T6778] NILFS (loop1): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0
[  103.868572][ T6778] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16)
[  103.886624][ T6778] Remounting filesystem read-only
[  103.995154][ T5940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.042275][ T5935] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  104.394673][ T6786] loop2: detected capacity change from 0 to 32768
[  104.398582][ T6786] XFS: ikeep mount option is deprecated.
[  104.461540][ T6786] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.486785][ T6786] XFS (loop2): Ending clean mount
[  104.497615][ T6786] XFS (loop2): Quotacheck needed: Please wait.
[  104.551722][ T6786] XFS (loop2): Quotacheck: Done.
[  104.696448][ T5940] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.908642][ T6819] loop1: detected capacity change from 0 to 64
[  105.000520][ T6819] overlayfs: upper fs needs to support d_type.
[  105.016772][ T6819] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  105.021800][ T6819] overlayfs: failed to set xattr on upper
[  105.025870][ T6819] overlayfs: ...falling back to redirect_dir=nofollow.
[  105.031795][ T6819] overlayfs: ...falling back to index=off.
[  105.037119][ T6819] overlayfs: ...falling back to uuid=null.
[  105.218023][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'.
[  105.225543][ T6832] veth1_to_hsr: entered promiscuous mode
[  105.228014][ T6832] macsec1: entered promiscuous mode
[  105.229919][ T6832] macsec1: entered allmulticast mode
[  105.231749][ T6832] veth1_to_hsr: entered allmulticast mode
[  105.244043][ T6832] veth1_to_hsr: left allmulticast mode
[  105.246190][ T6832] veth1_to_hsr: left promiscuous mode
[  105.246567][ T5935] Trying to free block not in datazone
[  105.256505][ T5935] Trying to free block not in datazone
[  105.262553][ T5935] Trying to free block not in datazone
[  105.326204][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'.
[  105.330361][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'.
[  105.333662][ T6836] netlink: 'syz.0.370': attribute type 13 has an invalid length.
[  105.336717][ T6836] netlink: 'syz.0.370': attribute type 12 has an invalid length.
[  105.380954][ T6839] netlink: 596 bytes leftover after parsing attributes in process `syz.1.369'.
[  105.395838][ T6839] program syz.1.369 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  105.727756][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  105.877522][   T10] usb 1-1: Using ep0 maxpacket: 8
[  105.880871][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  105.886322][   T10] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54
[  105.889893][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.892927][   T10] usb 1-1: Product: syz
[  105.894378][   T10] usb 1-1: Manufacturer: syz
[  105.895999][   T10] usb 1-1: SerialNumber: syz
[  105.902850][   T10] usb 1-1: config 0 descriptor??
[  105.920620][   T10] usb 1-1: invalid MIDI EP
[  105.922263][   T10] usb 1-1: snd-bcd2000: error during probing
[  105.923684][ T6856] vivid-000: disconnect
[  105.925160][   T10] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  105.928159][ T6855] vivid-000: reconnect
[  106.041862][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'.
[  106.045052][ T6862] netlink: 56 bytes leftover after parsing attributes in process `syz.2.381'.
[  106.049000][ T6862] netlink: 'syz.2.381': attribute type 10 has an invalid length.
[  106.124361][   T24] usb 1-1: USB disconnect, device number 9
[  106.727637][   T33] audit: type=1326 audit(1755553350.467:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[  106.774323][   T33] audit: type=1326 audit(1755553350.467:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.387" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[  106.882948][   T33] audit: type=1326 audit(1755553350.467:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[  106.916225][   T33] audit: type=1326 audit(1755553350.467:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.387" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[  106.933829][   T33] audit: type=1326 audit(1755553350.467:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[  106.945186][   T33] audit: type=1326 audit(1755553350.467:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.387" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[  106.955082][   T33] audit: type=1326 audit(1755553350.467:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[  106.962721][ T6883] netlink: 204 bytes leftover after parsing attributes in process `syz.0.389'.
[  106.964141][   T33] audit: type=1326 audit(1755553350.467:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.387" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[  106.967787][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  106.976476][   T33] audit: type=1326 audit(1755553350.477:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2318ebe9 code=0x7ffc0000
[  106.987716][   T33] audit: type=1326 audit(1755553350.477:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.387" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb2318d550 code=0x7ffc0000
[  107.036614][ T6885] netlink: 348 bytes leftover after parsing attributes in process `syz.0.390'.
[  107.138083][   T10] usb 2-1: Using ep0 maxpacket: 32
[  107.147127][   T10] usb 2-1: config 0 has an invalid interface number: 155 but max is 0
[  107.151762][   T10] usb 2-1: config 0 has no interface number 0
[  107.160165][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c
[  107.164302][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.176724][   T10] usb 2-1: Product: syz
[  107.178975][   T10] usb 2-1: Manufacturer: syz
[  107.180836][   T10] usb 2-1: SerialNumber: syz
[  107.192334][   T10] usb 2-1: config 0 descriptor??
[  107.738563][ T6017] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  107.839093][ T6907] warning: `syz.0.398' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.899432][ T6017] usb 3-1: Using ep0 maxpacket: 32
[  107.902748][ T6909] capability: warning: `syz.0.399' uses 32-bit capabilities (legacy support in use)
[  107.909910][ T6017] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  107.913999][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.914019][ T6017] usb 3-1: Product: syz
[  107.914029][ T6017] usb 3-1: Manufacturer: syz
[  107.914040][ T6017] usb 3-1: SerialNumber: syz
[  107.930497][ T6017] usb 3-1: config 0 descriptor??
[  108.267653][  T791] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  108.342523][ T6017] airspy 3-1:0.0: Board ID: 00
[  108.344698][ T6017] airspy 3-1:0.0: Firmware version: 
[  108.437521][  T791] usb 1-1: Using ep0 maxpacket: 16
[  108.442521][  T791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  108.447112][  T791] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  108.454386][  T791] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  108.458410][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.462170][  T791] usb 1-1: Product: syz
[  108.464117][  T791] usb 1-1: Manufacturer: syz
[  108.466164][  T791] usb 1-1: SerialNumber: syz
[  108.686569][  T791] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  108.729504][  T791] usb 1-1: USB disconnect, device number 10
[  108.749086][ T6017] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e
[  108.775414][ T6017] airspy 3-1:0.0: Registered as swradio24
[  108.784444][ T6017] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  108.815795][ T6017] usb 3-1: USB disconnect, device number 5
[  109.412519][   T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.155/input/input9
[  109.431313][ T5282] bcm5974 2-1:0.155: could not read from device
[  109.493941][   T10] usb 2-1: USB disconnect, device number 5
[  109.496697][ T5282] bcm5974 2-1:0.155: could not read from device
[  109.512840][ T6927] netlink: 'syz.2.405': attribute type 1 has an invalid length.
[  109.531233][ T6927] netlink: 228 bytes leftover after parsing attributes in process `syz.2.405'.
[  109.750281][ T6935] loop1: detected capacity change from 0 to 2048
[  109.766473][ T6938] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.781430][ T6935] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[  109.791771][ T6935] Remounting filesystem read-only
[  109.935779][ T6943] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.412'.
[  110.170112][ T6945] loop1: detected capacity change from 0 to 32768
[  110.176491][ T6945] (syz.1.413,6945,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  110.196826][ T6945] (syz.1.413,6945,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  110.239471][ T6945] JBD2: Ignoring recovery information on journal
[  110.278034][ T6945] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  110.386169][ T5935] ocfs2: Unmounting device (7,1) on (node local)
[  110.462740][ T6948] loop0: detected capacity change from 0 to 32768
[  110.567406][ T6953] loop1: detected capacity change from 0 to 128
[  110.572942][ T6953] ubifs: Unknown parameter '00000000000000000000011'
[  110.828442][ T6948] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  110.828465][ T6948]   allowing incompatible features above 0.0: (unknown version)
[  110.828552][ T6948]   features: lz4
[  110.845995][ T6948] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  110.850149][ T6948] bcachefs (loop0): initializing new filesystem
[  110.869946][ T6948] bcachefs (loop0): going read-write
[  110.885954][ T6948] bcachefs (loop0): marking superblocks
[  110.983771][ T6948] bcachefs (loop0): initializing freespace
[  111.011154][ T6948] bcachefs (loop0): done initializing freespace
[  111.027755][ T5982] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  111.073952][ T6948] bcachefs (loop0): reading snapshots table
[  111.078865][ T6948] bcachefs (loop0): reading snapshots done
[  111.187093][ T6948] bcachefs (loop0): done starting filesystem
[  111.259739][ T5982] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  111.263570][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.274260][ T5982] usb 3-1: Product: syz
[  111.276266][ T5982] usb 3-1: Manufacturer: syz
[  111.282296][ T5982] usb 3-1: SerialNumber: syz
[  111.315291][ T5982] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  111.409105][ T6017] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  111.593720][ T6948] syz.0.414 (6948) used greatest stack depth: 16112 bytes left
[  111.674443][ T5931] bcachefs (loop0): shutting down
[  111.677161][ T5931] bcachefs (loop0): going read-only
[  111.681870][ T5931] bcachefs (loop0): finished waiting for writes to stop
[  111.705700][ T5931] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  111.843314][   T24] usb 3-1: USB disconnect, device number 6
[  111.865146][ T5931] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  111.875391][ T5931] bcachefs (loop0): clean shutdown complete, journal seq 5
[  111.880971][ T5931] bcachefs (loop0): marking filesystem clean
[  111.942579][ T5931] bcachefs (loop0): shutdown complete
[  112.236596][ T6972] loop1: detected capacity change from 0 to 4096
[  112.348371][ T6974] fuse: Bad value for 'fd'
[  112.537574][ T6017] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  112.540960][ T6017] ath9k_htc: Failed to initialize the device
[  112.544187][   T24] usb 3-1: ath9k_htc: USB layer deinitialized
[  112.676978][ T6980] loop2: detected capacity change from 0 to 32768
[  112.695486][ T6980] JBD2: Ignoring recovery information on journal
[  112.725790][ T6980] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  112.757669][  T791] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  112.791235][ T5940] ocfs2: Unmounting device (7,2) on (node local)
[  112.918558][  T791] usb 2-1: Using ep0 maxpacket: 8
[  112.925090][  T791] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  112.930946][  T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.936007][  T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.940456][  T791] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  112.945970][  T791] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  112.949970][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.955477][  T791] usb 2-1: config 0 descriptor??
[  113.315384][ T6988] loop2: detected capacity change from 0 to 32768
[  113.371855][ T6988] JBD2: Ignoring recovery information on journal
[  113.393819][  T791] redragon 0003:0C45:760B.0005: unknown main item tag 0x6
[  113.396578][  T791] redragon 0003:0C45:760B.0005: item fetching failed at offset 7/133
[  113.425439][ T6988] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  113.433609][  T791] redragon 0003:0C45:760B.0005: probe with driver redragon failed with error -22
[  113.447042][ T6988] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74)
[  113.458516][ T6988] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  113.463057][ T6988] OCFS2: File system is now read-only.
[  113.465393][ T6988] (syz.2.426,6988,0):ocfs2_search_one_group:1738 ERROR: status = -30
[  113.469995][ T6988] (syz.2.426,6988,0):ocfs2_claim_suballoc_bits:1989 ERROR: status = -30
[  113.473276][ T6988] (syz.2.426,6988,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  113.476666][ T6988] (syz.2.426,6988,0):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  113.480264][ T6988] (syz.2.426,6988,0):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  113.483358][ T6988] (syz.2.426,6988,0):ocfs2_mknod_locked:641 ERROR: status = -30
[  113.486691][ T6988] (syz.2.426,6988,0):ocfs2_mknod:388 ERROR: status = -30
[  113.491791][ T6988] (syz.2.426,6988,0):ocfs2_mknod:505 ERROR: status = -30
[  113.496510][ T6988] (syz.2.426,6988,0):ocfs2_create:678 ERROR: status = -30
[  113.518977][ T5940] ocfs2: Unmounting device (7,2) on (node local)
[  113.606696][  T791] usb 2-1: USB disconnect, device number 6
[  113.712649][ T7008] loop2: detected capacity change from 0 to 512
[  113.737011][ T7008] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.433: invalid indirect mapped block 4294967295 (level 1)
[  113.749500][ T7008] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.433: invalid indirect mapped block 4294967295 (level 1)
[  113.755801][ T7008] EXT4-fs (loop2): 2 truncates cleaned up
[  113.760257][ T7008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.771776][ T7008] EXT4-fs error (device loop2): ext4_get_parent:1834: inode #11: comm syz.2.433: bad parent inode number: 3
[  113.808215][ T5940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.159019][ T7028] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.222283][ T7018] loop2: detected capacity change from 0 to 32768
[  114.234573][ T7018] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.437 (7018)
[  114.256157][ T7018] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.266915][ T7018] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  114.279115][ T7018] BTRFS info (device loop2): using free-space-tree
[  114.332599][ T7046] netlink: 'syz.0.442': attribute type 1 has an invalid length.
[  114.335989][ T7046] netlink: 'syz.0.442': attribute type 4 has an invalid length.
[  114.349183][ T7046] __nla_validate_parse: 1 callbacks suppressed
[  114.349197][ T7046] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.442'.
[  114.359948][ T7046] netlink: 'syz.0.442': attribute type 1 has an invalid length.
[  114.363018][ T7046] netlink: 'syz.0.442': attribute type 4 has an invalid length.
[  114.366066][ T7046] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.442'.
[  114.400224][ T5940] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.458444][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  114.631662][   T24] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77
[  114.635102][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.648344][   T24] usb 2-1: Product: syz
[  114.650156][   T24] usb 2-1: Manufacturer: syz
[  114.652016][   T24] usb 2-1: SerialNumber: syz
[  114.665734][   T24] usb 2-1: config 0 descriptor??
[  114.672651][   T24] usb 2-1: disable ehci-hcd to run US-144
[  114.871599][ T7074] loop2: detected capacity change from 0 to 4096
[  114.886957][   T47] usb 2-1: USB disconnect, device number 7
[  114.911447][ T7079] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.096063][ T7087] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  115.630964][ T7100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.465'.
[  115.951853][ T7109] loop2: detected capacity change from 0 to 128
[  115.997299][ T7109] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  116.005144][ T7109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.313450][ T7115] loop1: detected capacity change from 0 to 32768
[  117.327341][ T7115] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.471 (7115)
[  117.407740][  T791] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  117.423340][ T7090] Set syz1 is full, maxelem 65536 reached
[  117.485832][ T7115] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.507162][ T7115] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  117.519045][ T7115] BTRFS info (device loop1): disk space caching is enabled
[  117.522497][ T7115] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  117.600396][  T791] usb 3-1: unable to get BOS descriptor or descriptor too short
[  117.605788][  T791] usb 3-1: not running at top speed; connect to a high speed hub
[  117.617716][  T791] usb 3-1: config 12 has an invalid interface number: 173 but max is 1
[  117.621221][  T791] usb 3-1: config 12 has an invalid interface number: 173 but max is 1
[  117.624622][  T791] usb 3-1: config 12 has 1 interface, different from the descriptor's value: 2
[  117.644286][  T791] usb 3-1: config 12 has no interface number 0
[  117.646987][  T791] usb 3-1: config 12 interface 173 has no altsetting 0
[  117.654654][  T791] usb 3-1: config 12 interface 173 has no altsetting 1
[  117.660207][ T7115] BTRFS info (device loop1): rebuilding free space tree
[  117.671153][  T791] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7
[  117.675034][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.675212][ T7115] BTRFS info (device loop1): disabling free space tree
[  117.680015][  T791] usb 3-1: Product: syz
[  117.681887][ T7115] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  117.683967][  T791] usb 3-1: Manufacturer: syz
[  117.688613][ T7115] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  117.690925][  T791] usb 3-1: SerialNumber: syz
[  117.707585][   T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  117.760064][ T5935] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.873178][   T24] usb 1-1: Using ep0 maxpacket: 8
[  117.900542][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  117.904839][   T24] usb 1-1: config 127 has an invalid interface number: 250 but max is 1
[  117.908850][   T24] usb 1-1: config 127 has an invalid interface number: 129 but max is 1
[  117.912143][   T24] usb 1-1: config 127 has no interface number 0
[  117.914790][   T24] usb 1-1: config 127 has no interface number 1
[  117.925189][   T24] usb 1-1: config 127 interface 250 altsetting 8 bulk endpoint 0xA has invalid maxpacket 64
[  117.932608][  T791] usb 3-1: USB disconnect, device number 7
[  117.934388][   T24] usb 1-1: config 127 interface 250 has no altsetting 0
[  117.946884][   T24] usb 1-1: config 127 interface 129 has no altsetting 0
[  117.957022][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=04f4, bcdDevice=51.ac
[  117.966776][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.974411][   T24] usb 1-1: Product: syz
[  117.976210][   T24] usb 1-1: Manufacturer: syz
[  117.981012][   T24] usb 1-1: SerialNumber: syz
[  117.989166][ T7117] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  118.002600][ T7135] loop1: detected capacity change from 0 to 2048
[  118.042364][ T6912] Dev loop1: RDB in block 2 has bad checksum
[  118.054576][ T7135] Dev loop1: RDB in block 2 has bad checksum
[  118.257193][   T24] usb 1-1: USB disconnect, device number 11
[  118.281875][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:127.250/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  118.883684][   T33] kauditd_printk_skb: 31 callbacks suppressed
[  118.883695][   T33] audit: type=1400 audit(1755553362.697:54): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7144 comm="syz.1.478"
[  118.947596][  T791] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  118.963554][ T7152] loop0: detected capacity change from 0 to 1024
[  119.019039][ T1100] hfsplus: b-tree write err: -5, ino 4
[  119.100819][  T791] usb 3-1: config 0 has an invalid interface number: 3 but max is 0
[  119.106436][  T791] usb 3-1: config 0 has no interface number 0
[  119.115785][  T791] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  119.124241][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.132875][  T791] usb 3-1: config 0 descriptor??
[  119.140666][  T791] hub 3-1:0.3: bad descriptor, ignoring hub
[  119.144205][  T791] hub 3-1:0.3: probe with driver hub failed with error -5
[  119.192258][  T791] sierra 3-1:0.3: Sierra USB modem converter detected
[  119.205747][ T7158] loop0: detected capacity change from 0 to 8
[  119.345247][  T791] usb 3-1: Sierra USB modem converter now attached to ttyUSB0
[  119.386785][  T791] usb 3-1: USB disconnect, device number 8
[  119.408871][  T791] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  119.412868][  T791] sierra 3-1:0.3: device disconnected
[  119.617857][ T7178] loop0: detected capacity change from 0 to 16
[  119.629413][ T7178] erofs (device loop0): mounted with root inode @ nid 36.
[  119.847678][   T47] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  120.016051][ T7188] loop2: detected capacity change from 0 to 128
[  120.022840][   T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.029545][   T47] usb 2-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df
[  120.034342][ T7188] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  120.039868][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.046412][   T47] usb 2-1: config 0 descriptor??
[  120.049370][ T7188] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.059921][   T47] pwc: Philips PCA646VC USB webcam detected.
[  120.099658][ T5940] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.261886][   T47] pwc: send_video_command error -71
[  120.264775][   T47] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  120.270776][   T47] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  120.276951][   T47] usb 2-1: USB disconnect, device number 8
[  120.287799][ T7186] loop0: detected capacity change from 0 to 32768
[  120.846094][ T7197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.502'.
[  120.970002][   T33] audit: type=1804 audit(1755553364.787:55): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.504" name="file0" dev="ramfs" ino=10450 res=1 errno=0
[  121.029078][ T7205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.505'.
[  121.312022][ T7203] loop0: detected capacity change from 0 to 32768
[  121.316029][ T7203] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.500 (7203)
[  121.339846][ T7203] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.344016][ T7203] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  121.354177][ T7203] BTRFS info (device loop0): using free-space-tree
[  121.488811][ T7207] loop1: detected capacity change from 0 to 40427
[  121.510718][ T7207] F2FS-fs (loop1): build fault injection rate: 771
[  121.565236][ T7207] F2FS-fs (loop1): invalid crc value
[  121.793377][ T5931] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.805779][ T7207] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  121.841469][ T7207] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  121.979175][ T5935] syz-executor: attempt to access beyond end of device
[  121.979175][ T5935] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  122.005999][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  122.006018][ T5935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.006026][ T5935] Call Trace:
[  122.006033][ T5935]  <TASK>
[  122.006038][ T5935]  dump_stack_lvl+0x189/0x250
[  122.006058][ T5935]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.006071][ T5935]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  122.006087][ T5935]  ? __pfx_queue_work_on+0x10/0x10
[  122.006098][ T5935]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  122.006112][ T5935]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  122.006133][ T5935]  f2fs_handle_critical_error+0x37c/0x540
[  122.006157][ T5935]  f2fs_write_end_io+0x886/0xb60
[  122.006184][ T5935]  __submit_merged_bio+0x27a/0x6a0
[  122.006204][ T5935]  __submit_merged_write_cond+0x255/0x530
[  122.006227][ T5935]  f2fs_write_data_pages+0x261d/0x3000
[  122.006292][ T5935]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.006346][ T5935]  ? check_path+0x21/0x40
[  122.006357][ T5935]  ? check_noncircular+0xe0/0x160
[  122.006410][ T5935]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.006427][ T5935]  do_writepages+0x32e/0x550
[  122.006453][ T5935]  ? do_raw_spin_unlock+0x4d/0x240
[  122.006469][ T5935]  filemap_fdatawrite+0x199/0x240
[  122.006486][ T5935]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  122.006538][ T5935]  ? do_raw_spin_unlock+0x4d/0x240
[  122.006562][ T5935]  f2fs_sync_dirty_inodes+0x31f/0x830
[  122.006588][ T5935]  f2fs_write_checkpoint+0x95a/0x1df0
[  122.006617][ T5935]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  122.006661][ T5935]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  122.006674][ T5935]  ? kfree+0x18e/0x440
[  122.006688][ T5935]  ? kill_f2fs_super+0x298/0x6c0
[  122.006705][ T5935]  kill_f2fs_super+0x2c3/0x6c0
[  122.006722][ T5935]  ? __pfx_kill_f2fs_super+0x10/0x10
[  122.006731][ T5935]  ? radix_tree_delete_item+0x2b6/0x400
[  122.006752][ T5935]  ? shrinker_free+0x2ce/0x3e0
[  122.006766][ T5935]  deactivate_locked_super+0xbc/0x130
Connection to localhost closed by remote host.
[  122.006782][ T5935]  cleanup_mnt+0x425/0x4c0
[  122.006797][ T5935]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.006814][ T5935]  task_work_run+0x1d4/0x260
[  122.006832][ T5935]  ? __pfx_task_work_run+0x10/0x10
[  122.006845][ T5935]  ? __x64_sys_umount+0x122/0x160
[  122.006865][ T5935]  ? exit_to_user_mode_loop+0x40/0x110
[  122.006884][ T5935]  exit_to_user_mode_loop+0xec/0x110
[  122.006900][ T5935]  do_syscall_64+0x2bd/0x3b0
[  122.006913][ T5935]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.006927][ T5935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.006939][ T5935]  ? exc_page_fault+0x9f/0xf0
[  122.006954][ T5935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.006966][ T5935] RIP: 0033:0x7feb2318ff17
[  122.006977][ T5935] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  122.006984][ T5935] RSP: 002b:00007fff6e9ec2e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  122.006996][ T5935] RAX: 0000000000000000 RBX: 00007feb23211c05 RCX: 00007feb2318ff17
[  122.007005][ T5935] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6e9ec3a0
[  122.007011][ T5935] RBP: 00007fff6e9ec3a0 R08: 0000000000000000 R09: 0000000000000000
[  122.007019][ T5935] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff6e9ed430
[  122.007025][ T5935] R13: 00007feb23211c05 R14: 000000000001dbd8 R15: 00007fff6e9ed470
[  122.007047][ T5935]  </TASK>
[  122.007053][ T5935] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  122.089640][ T7251] loop0: detected capacity change from 0 to 64
[  122.653422][ T5968] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.743515][ T5968] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.817168][ T5968] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.911572][ T5968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.005623][ T5968] bridge_slave_1: left allmulticast mode
[  123.010395][ T5968] bridge_slave_1: left promiscuous mode
[  123.014693][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.030766][ T5968] bridge_slave_0: left allmulticast mode
[  123.033250][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.312946][ T5968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.321352][ T5968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.326002][ T5968] bond0 (unregistering): Released all slaves
[  123.632250][ T5968] hsr_slave_0: left promiscuous mode
[  123.634722][ T5968] hsr_slave_1: left promiscuous mode
[  123.636727][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.639214][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.642297][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.644979][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.657210][ T5968] veth1_macvtap: left promiscuous mode
[  123.660433][ T5968] veth0_macvtap: left promiscuous mode
[  123.662297][ T5968] veth1_vlan: left promiscuous mode
[  123.664081][ T5968] veth0_vlan: left promiscuous mode
[  124.005764][ T5968] team0 (unregistering): Port device team_slave_1 removed
[  124.032814][ T5968] team0 (unregistering): Port device team_slave_0 removed
[  124.978016][ T5968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.025173][ T5968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.071323][ T5968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.121830][ T5968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.213139][ T5968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.287364][ T5968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.352802][ T5968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.421776][ T5968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.524319][ T5968] bridge_slave_1: left allmulticast mode
[  125.526609][ T5968] bridge_slave_1: left promiscuous mode
[  125.529199][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.535122][ T5968] bridge_slave_0: left allmulticast mode
[  125.537441][ T5968] bridge_slave_0: left promiscuous mode
[  125.540204][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.548461][ T5968] bridge_slave_1: left allmulticast mode
[  125.550690][ T5968] bridge_slave_1: left promiscuous mode
[  125.553004][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.557174][ T5968] bridge_slave_0: left allmulticast mode
[  125.559622][ T5968] bridge_slave_0: left promiscuous mode
[  125.563305][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.914463][ T5968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.918529][ T5968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.922011][ T5968] bond0 (unregistering): Released all slaves
[  126.165450][ T5968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.171148][ T5968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.175901][ T5968] bond0 (unregistering): Released all slaves
[  126.271515][ T5968] tipc: Left network mode
[  126.675628][ T5968] hsr_slave_0: left promiscuous mode
[  126.678661][ T5968] hsr_slave_1: left promiscuous mode
[  126.681392][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.684399][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.689877][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.693042][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.703002][ T5968] hsr_slave_0: left promiscuous mode
[  126.705907][ T5968] hsr_slave_1: left promiscuous mode
[  126.708658][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.711663][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.715176][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.719614][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.748397][ T5968] veth1_macvtap: left promiscuous mode
[  126.750719][ T5968] veth0_macvtap: left promiscuous mode
[  126.753085][ T5968] veth1_vlan: left promiscuous mode
[  126.755359][ T5968] veth0_vlan: left promiscuous mode
[  126.760542][ T5968] veth1_macvtap: left promiscuous mode
[  126.763092][ T5968] veth0_macvtap: left promiscuous mode
[  126.765572][ T5968] veth1_vlan: left promiscuous mode
[  126.769019][ T5968] veth0_vlan: left promiscuous mode
[  127.231028][ T5968] team0 (unregistering): Port device team_slave_1 removed
[  127.263095][ T5968] team0 (unregistering): Port device team_slave_0 removed
[  127.822088][ T5968] team0 (unregistering): Port device team_slave_1 removed
[  127.846552][ T5968] team0 (unregistering): Port device team_slave_0 removed
[  128.728341][ T5968] IPVS: stop unused estimator thread 0...
[  132.692935][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  132.695000][ T1366] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
21:42:56  Registers:
info registers vcpu 0

CPU#0
RAX=d721036c19d6ae00 RBX=ffffffff81968308 RCX=d721036c19d6ae00 RDX=0000000000000001
RSI=ffffffff8d9b6dc6 RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2fc1aff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000002f032a79 0000000000000029 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a7081fb172394100 RBX=ffffffff81968308 RCX=a7081fb172394100 RDX=0000000000000001
RSI=ffffffff8d9b6dc6 RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020007000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2fa1bff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=000000000000ff00 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000000061 0000000000000000
XMM06=ffffffffff000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=0000000000306e61 632f74656e2f302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
