last executing test programs:

969.193101ms ago: executing program 1 (id=1660):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x74, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x1}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00'}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0xa4}}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

968.740558ms ago: executing program 2 (id=1661):
syz_read_part_table(0x106b, &(0x7f0000000000)="$eJzszzFKxUAUBdA7/J/oFOI2bK0+6QKuwVbciXGHNoL7yAJGEhKJWFpocU4zzOPO4074U9fJ3U2mpP8alSnJS7r+dMhdJWlJzXm9nlLv55Tzx3O6PfLQpy6p97fhsK5Mra2ReSy51LaNx9wmeSzb6m+efrTs9iqv27k8znD57e8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/4DAAA///hzg+V")

861.643952ms ago: executing program 1 (id=1662):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000bc0)=@get={0x1, &(0x7f0000000b80)=""/62, 0x3})

810.367794ms ago: executing program 1 (id=1663):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e28, 0x0, @empty, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)

809.939993ms ago: executing program 2 (id=1664):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x4040, 0x0)

809.017082ms ago: executing program 1 (id=1665):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$DRM_IOCTL_VERSION(r0, 0xc04064fe, 0x0)

746.960274ms ago: executing program 1 (id=1666):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getitimer(0x0, &(0x7f00000010c0))

746.633704ms ago: executing program 1 (id=1667):
socket$pptp(0x18, 0x1, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
r2 = fanotify_init(0x4, 0x40000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fanotify_mark(r2, 0x101, 0x8000011, r3, 0x0)
ftruncate(r1, 0x6000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x4000)

578.930536ms ago: executing program 0 (id=1668):
r0 = syz_mount_image$nilfs2(&(0x7f00000008c0), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40106e80, &(0x7f0000000480)={@desc={0x1, 0x0, @auto="00000000000100"}})

401.530604ms ago: executing program 0 (id=1669):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14)

351.333775ms ago: executing program 0 (id=1670):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000b8000001294", 0x2e}], 0x1}, 0x0)

241.343838ms ago: executing program 2 (id=1671):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
listen(r0, 0x6)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x37, 0x28, 0x67, 0x0, 0xb, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x6071, 0x0, 0xe7}}}}}}, 0x0)

240.992698ms ago: executing program 0 (id=1672):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)

150.122796ms ago: executing program 2 (id=1673):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000600)={0x14, 0x1, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000)

149.787ms ago: executing program 0 (id=1674):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)

89.199949ms ago: executing program 2 (id=1675):
syz_emit_ethernet(0x4e, &(0x7f0000001e40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x6, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0)

88.689066ms ago: executing program 0 (id=1676):
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)

0s ago: executing program 2 (id=1677):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16555' (ED25519) to the list of known hosts.
syzkaller login: [   56.194408][ T5765] cgroup: Unknown subsys name 'net'
[   56.261945][ T5765] cgroup: Unknown subsys name 'cpuset'
[   56.266540][ T5765] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.981144][ T5765] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.820973][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.826303][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.830714][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.836745][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.840830][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.844185][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.847006][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.857519][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.860690][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.864125][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.867915][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.871685][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.882557][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.885035][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.887845][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.190418][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   65.256862][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   65.262849][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   65.357873][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.361898][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.365552][ T5832] bridge_slave_0: entered allmulticast mode
[   65.368556][ T5832] bridge_slave_0: entered promiscuous mode
[   65.385568][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.387842][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.391229][ T5832] bridge_slave_1: entered allmulticast mode
[   65.395017][ T5832] bridge_slave_1: entered promiscuous mode
[   65.467371][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.474013][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.487862][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.490268][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.492670][ T5831] bridge_slave_0: entered allmulticast mode
[   65.495472][ T5831] bridge_slave_0: entered promiscuous mode
[   65.499217][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.502024][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.504840][ T5827] bridge_slave_0: entered allmulticast mode
[   65.509812][ T5827] bridge_slave_0: entered promiscuous mode
[   65.514356][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.517187][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.520252][ T5827] bridge_slave_1: entered allmulticast mode
[   65.523995][ T5827] bridge_slave_1: entered promiscuous mode
[   65.552904][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.555481][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.557755][ T5831] bridge_slave_1: entered allmulticast mode
[   65.560815][ T5831] bridge_slave_1: entered promiscuous mode
[   65.583815][ T5832] team0: Port device team_slave_0 added
[   65.607428][ T5832] team0: Port device team_slave_1 added
[   65.611792][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.616794][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.652438][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.657719][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.674873][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.677757][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.688105][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.721164][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.724014][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.734909][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.755081][ T5827] team0: Port device team_slave_0 added
[   65.767557][ T5831] team0: Port device team_slave_0 added
[   65.774465][ T5831] team0: Port device team_slave_1 added
[   65.779703][ T5827] team0: Port device team_slave_1 added
[   65.864003][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.866790][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.878478][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.888984][ T5832] hsr_slave_0: entered promiscuous mode
[   65.892136][ T5832] hsr_slave_1: entered promiscuous mode
[   65.896552][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.900293][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.910446][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.915563][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.918272][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.928938][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.948360][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.951186][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.962619][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.090775][ T5831] hsr_slave_0: entered promiscuous mode
[   66.093872][ T5831] hsr_slave_1: entered promiscuous mode
[   66.097184][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.101352][ T5831] Cannot create hsr debugfs directory
[   66.108774][ T5827] hsr_slave_0: entered promiscuous mode
[   66.111857][ T5827] hsr_slave_1: entered promiscuous mode
[   66.114645][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.117214][ T5827] Cannot create hsr debugfs directory
[   66.438707][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.452588][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.464170][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.476253][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.510469][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.516604][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.521512][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.532122][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.628139][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.641952][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.654101][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.663153][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.732173][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.776948][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.786971][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   66.806742][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.809189][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.820938][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.823342][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.831821][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   66.850093][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.852589][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.873419][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.876232][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.908190][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.950914][   T55] Bluetooth: hci2: command tx timeout
[   66.950941][ T5218] Bluetooth: hci0: command tx timeout
[   66.953367][   T55] Bluetooth: hci1: command tx timeout
[   66.962823][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   66.979366][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.981600][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.008967][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.011526][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.074506][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.126652][ T5832] veth0_vlan: entered promiscuous mode
[   67.144381][ T5832] veth1_vlan: entered promiscuous mode
[   67.186466][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.197620][ T5832] veth0_macvtap: entered promiscuous mode
[   67.207703][ T5832] veth1_macvtap: entered promiscuous mode
[   67.224922][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.243278][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.253279][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.257079][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.262959][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.266526][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.297558][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.335013][ T5827] veth0_vlan: entered promiscuous mode
[   67.384190][ T5827] veth1_vlan: entered promiscuous mode
[   67.401396][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.404075][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.464071][ T5831] veth0_vlan: entered promiscuous mode
[   67.467148][ T5827] veth0_macvtap: entered promiscuous mode
[   67.471742][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.475910][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.477449][ T5831] veth1_vlan: entered promiscuous mode
[   67.488165][ T5827] veth1_macvtap: entered promiscuous mode
[   67.530401][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.546874][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.557793][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.564659][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.571449][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.575019][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.578727][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.626937][ T5831] veth0_macvtap: entered promiscuous mode
[   67.655748][ T5831] veth1_macvtap: entered promiscuous mode
[   67.716745][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.765362][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.771127][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.781472][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.794293][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.797044][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.810368][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.813929][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.888394][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.891699][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.960775][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.963323][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.009807][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.013110][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.359947][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   68.459669][ T5919] loop0: detected capacity change from 0 to 4096
[   68.476976][ T5919] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   68.499739][ T5919] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   68.509299][ T5895] usb 3-1: Using ep0 maxpacket: 16
[   68.519825][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[   68.523698][ T5895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[   68.534678][ T5895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 132
[   68.550988][ T5895] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=14.47
[   68.554641][ T5895] usb 3-1: New USB device strings: Mfr=55, Product=172, SerialNumber=120
[   68.557876][ T5895] usb 3-1: Product: syz
[   68.568520][ T5895] usb 3-1: Manufacturer: syz
[   68.570663][ T5895] usb 3-1: SerialNumber: syz
[   68.579450][ T5895] usb 3-1: config 0 descriptor??
[   68.584184][ T5909] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   68.622618][ T5895] mcba_usb 3-1:0.0 can0: failed tx_urb -90
[   68.627933][ T5895] mcba_usb 3-1:0.0 can0: Failed to send cmd (169)
[   68.635868][ T5895] mcba_usb 3-1:0.0 can0: failed tx_urb -90
[   68.641772][ T5895] mcba_usb 3-1:0.0 can0: Failed to send cmd (169)
[   68.645722][ T5895] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected
[   68.823774][ T5906] usb 3-1: USB disconnect, device number 2
[   68.833501][ T5906] mcba_usb 3-1:0.0 can0: device disconnected
[   69.031864][   T55] Bluetooth: hci0: command tx timeout
[   69.032866][ T5835] Bluetooth: hci2: command tx timeout
[   69.038486][ T5835] Bluetooth: hci1: command tx timeout
[   69.295620][ T5927] loop0: detected capacity change from 0 to 32768
[   69.319992][ T5927] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.13 (5927)
[   69.421368][ T5927] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   69.425833][ T5927] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   69.468791][ T5927] BTRFS info (device loop0): using free-space-tree
[   70.171690][ T5831] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   70.521812][ T5968] x_tables: duplicate underflow at hook 1
[   70.843434][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'.
[   70.991355][ T5970] loop2: detected capacity change from 0 to 32768
[   70.995956][ T5970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.22 (5970)
[   71.005848][ T5970] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.010293][ T5970] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[   71.013588][ T5970] BTRFS info (device loop2): disk space caching is enabled
[   71.015951][ T5970] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   71.043161][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.045842][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.111551][ T5835] Bluetooth: hci1: command tx timeout
[   71.111589][   T55] Bluetooth: hci2: command tx timeout
[   71.122557][   T55] Bluetooth: hci0: command tx timeout
[   71.147563][ T5970] BTRFS info (device loop2): rebuilding free space tree
[   71.154084][ T6002] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   71.160208][ T5970] BTRFS info (device loop2): disabling free space tree
[   71.160953][   T24] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   71.162894][ T5970] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   71.171200][ T5970] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   71.177633][ T6002] netlink: 'syz.1.30': attribute type 4 has an invalid length.
[   71.184372][ T6002] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.30'.
[   71.251186][ T5827] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.330784][   T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   71.334230][   T24] usb 1-1: config 0 has no interface number 0
[   71.336621][   T24] usb 1-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   71.354628][   T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   71.364789][   T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 255, setting to 8
[   71.374959][   T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   71.388674][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.399889][   T24] usb 1-1: config 0 descriptor??
[   71.406370][ T5982] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   71.423684][   T24] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   71.643282][ T6007] loop1: detected capacity change from 0 to 32768
[   71.664509][   T24] usb 1-1: USB disconnect, device number 2
[   71.704682][ T6007] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   71.784016][ T6007] XFS (loop1): Ending clean mount
[   71.802669][ T6007] XFS (loop1): Quotacheck needed: Please wait.
[   71.847008][ T6007] XFS (loop1): Quotacheck: Done.
[   71.889871][ T5832] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   72.042447][ T6012] loop2: detected capacity change from 0 to 32768
[   72.052035][ T6012] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section journal_v2: duplicate journal buckets in ranges 9-10, 9-16
[   72.052035][ T6012] journal_v2 (size 40):
[   72.052035][ T6012] Buckets:  9-16 9-10
[   72.052035][ T6012] 
[   72.074366][ T6012] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[   72.104686][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'.
[   72.112660][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'.
[   72.523963][ T6024] loop1: detected capacity change from 0 to 32768
[   72.528005][ T6024] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.35 (6024)
[   72.536190][ T6024] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   72.540222][ T6024] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   72.543861][ T6024] BTRFS info (device loop1): disk space caching is enabled
[   72.546689][ T6024] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   72.631245][ T6024] BTRFS info (device loop1): rebuilding free space tree
[   72.662688][ T6024] BTRFS info (device loop1): disabling free space tree
[   72.665532][ T6024] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   72.688475][ T6024] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   72.793081][ T6024] BTRFS info (device loop1): balance: start -susage=0..0,drange=0..0,vrange=18446744073709551614..0,limit=0..0,stripes=0..0
[   72.848572][ T6024] BTRFS info (device loop1): balance: ended with status: 0
[   73.089691][ T6063] loop6: detected capacity change from 0 to 64
[   73.210308][   T55] Bluetooth: hci1: command tx timeout
[   73.210418][ T5835] Bluetooth: hci0: command tx timeout
[   73.214713][ T5835] Bluetooth: hci2: command tx timeout
[   73.245971][ T5899] Buffer I/O error on dev loop6, logical block 4, async page read
[   73.267207][ T5832] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   73.395567][ T6067] bond0: (slave bond_slave_0): Releasing backup interface
[   73.577168][   T33] audit: type=1326 audit(1753414208.328:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.49" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[   73.627824][   T33] audit: type=1326 audit(1753414208.338:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.49" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[   73.644547][   T33] audit: type=1326 audit(1753414208.348:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.49" exe="/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[   73.682624][   T33] audit: type=1326 audit(1753414208.348:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.49" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[   73.691287][   T33] audit: type=1326 audit(1753414208.348:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.49" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[   74.588147][ T6097] loop2: detected capacity change from 0 to 128
[   74.595637][ T6097] =======================================================
[   74.595637][ T6097] WARNING: The mand mount option has been deprecated and
[   74.595637][ T6097]          and is ignored by this kernel. Remove the mand
[   74.595637][ T6097]          option from the mount to silence this warning.
[   74.595637][ T6097] =======================================================
[   74.626725][ T6097] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   74.633349][ T6097] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.652920][    T9] IPVS: starting estimator thread 0...
[   74.744517][ T6102] IPVS: using max 63 ests per chain, 151200 per kthread
[   75.009273][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   75.164498][    T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[   75.167489][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.170857][    T9] usb 2-1: Product: syz
[   75.172638][    T9] usb 2-1: Manufacturer: syz
[   75.175311][    T9] usb 2-1: SerialNumber: syz
[   75.183632][    T9] usb 2-1: config 0 descriptor??
[   75.468001][ T5827] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   75.574843][ T6131] pim6reg1: entered promiscuous mode
[   75.576962][ T6131] pim6reg1: entered allmulticast mode
[   75.595283][    T9] usb 2-1: f81604_write: reg: 105 data: 8a failed: -EPROTO
[   75.606555][    T9] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO
[   75.610107][    T9] f81604 2-1:0.0: probe with driver f81604 failed with error -71
[   75.618124][    T9] usb 2-1: USB disconnect, device number 2
[   75.851666][ T6145] netlink: 'syz.0.73': attribute type 4 has an invalid length.
[   75.854496][ T6145] netlink: 'syz.0.73': attribute type 3 has an invalid length.
[   75.857061][ T6145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.73'.
[   75.904585][ T6147] xt_policy: output policy not valid in PREROUTING and INPUT
[   76.009877][ T6143] loop2: detected capacity change from 0 to 32768
[   76.014419][ T6143] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.72 (6143)
[   76.044699][ T6143] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   76.048835][ T6143] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[   76.052654][ T6143] BTRFS info (device loop2): using free-space-tree
[   76.112489][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   76.116889][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   76.122620][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   76.177093][ T6143] BTRFS info (device loop2): rebuilding free space tree
[   76.333267][   T55] Bluetooth: hci1: ACL packet for unknown connection handle 0
[   76.385493][ T6143] BTRFS info (device loop2 state M): max_inline set to 5
[   76.446384][ T5827] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   77.503190][ T6187] geneve2: entered promiscuous mode
[   77.773717][ T6191] netlink: 'syz.1.87': attribute type 11 has an invalid length.
[   77.800539][ T6182] loop0: detected capacity change from 0 to 32768
[   77.873257][ T6198] loop1: detected capacity change from 0 to 16
[   77.873802][ T6182] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   77.936431][ T6198] erofs (device loop1): unsupported i_format 127 of nid 36
[   77.936525][ T6182] (syz.0.83,6182,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[   78.026834][ T6203] program syz.2.91 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.065410][ T5831] (syz-executor,5831,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72
[   78.114934][ T5831] ocfs2: Unmounting device (7,0) on (node local)
[   78.523472][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'.
[   78.687479][ T6239] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.159203][ T6254] process 'syz.0.115' launched '/dev/fd/7' with NULL argv: empty string added
[   79.788559][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   79.951770][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.960289][    T9] usb 3-1: config 0 has no interfaces?
[   79.963584][    T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[   79.966814][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.981775][    T9] usb 3-1: config 0 descriptor??
[   80.177924][ T6276] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.125'.
[   80.183969][ T6276] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   80.198193][    T9] usb 3-1: USB disconnect, device number 3
[   80.656593][ T6297] loop0: detected capacity change from 0 to 2048
[   80.665205][ T6297] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   80.674019][ T5840] udevd[5840]: incorrect nilfs2 checksum on /dev/loop0
[   80.683833][ T6298] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   80.687387][ T5840] udevd[5840]: incorrect nilfs2 checksum on /dev/loop0
[   80.848800][ T1276] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   80.988642][ T5882] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   81.002817][ T1276] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   81.007373][ T1276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   81.016944][ T1276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   81.030614][ T1276] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   81.035620][ T1276] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   81.041018][ T1276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.047847][ T1276] usb 2-1: config 0 descriptor??
[   81.053536][ T6295] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   81.161671][ T5882] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[   81.164889][ T5882] usb 3-1: config 0 has no interface number 0
[   81.177713][ T5882] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   81.185691][ T5882] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   81.192379][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.195618][ T5882] usb 3-1: Product: syz
[   81.197354][ T5882] usb 3-1: Manufacturer: syz
[   81.199987][ T5882] usb 3-1: SerialNumber: syz
[   81.205541][ T5882] usb 3-1: config 0 descriptor??
[   81.214656][ T5882] yurex 3-1:0.50: Could not find endpoints
[   81.408407][ T6312] loop0: detected capacity change from 0 to 40427
[   81.435347][ T5906] usb 3-1: USB disconnect, device number 4
[   81.447104][ T6312] F2FS-fs (loop0): invalid crc value
[   81.502459][ T1276] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd
[   81.518182][ T1276] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   81.556858][ T6312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   81.583213][ T6312] syz.0.141: attempt to access beyond end of device
[   81.583213][ T6312] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   81.590422][ T6312] syz.0.141: attempt to access beyond end of device
[   81.590422][ T6312] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[   81.595846][ T6312] syz.0.141: attempt to access beyond end of device
[   81.595846][ T6312] loop0: rw=2049, sector=45144, nr_sectors = 16 limit=40427
[   81.602360][ T6312] syz.0.141: attempt to access beyond end of device
[   81.602360][ T6312] loop0: rw=2049, sector=45176, nr_sectors = 16 limit=40427
[   81.608066][ T6312] syz.0.141: attempt to access beyond end of device
[   81.608066][ T6312] loop0: rw=2049, sector=45200, nr_sectors = 24 limit=40427
[   81.614897][ T6312] syz.0.141: attempt to access beyond end of device
[   81.614897][ T6312] loop0: rw=2049, sector=45240, nr_sectors = 24 limit=40427
[   81.649569][ T5831] syz-executor: attempt to access beyond end of device
[   81.649569][ T5831] loop0: rw=2049, sector=45264, nr_sectors = 8 limit=40427
[   81.656403][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[   81.656423][ T5831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.656434][ T5831] Call Trace:
[   81.656440][ T5831]  <TASK>
[   81.656465][ T5831]  dump_stack_lvl+0x189/0x250
[   81.656493][ T5831]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.656507][ T5831]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   81.656523][ T5831]  ? __pfx_queue_work_on+0x10/0x10
[   81.656543][ T5831]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   81.656557][ T5831]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   81.656572][ T5831]  ? f2fs_hw_is_readonly+0x39b/0x470
[   81.656593][ T5831]  f2fs_handle_critical_error+0x37c/0x540
[   81.656613][ T5831]  f2fs_write_end_io+0x495/0x810
[   81.656630][ T5831]  ? blkg_put+0x22/0x240
[   81.656664][ T5831]  __submit_merged_bio+0x27a/0x6a0
[   81.656684][ T5831]  __submit_merged_write_cond+0x255/0x530
[   81.656713][ T5831]  f2fs_write_data_pages+0x261d/0x3000
[   81.656759][ T5831]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   81.656816][ T5831]  ? check_path+0x21/0x40
[   81.656833][ T5831]  ? check_noncircular+0xe0/0x160
[   81.656891][ T5831]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   81.656908][ T5831]  do_writepages+0x32e/0x550
[   81.656938][ T5831]  ? do_raw_spin_unlock+0x4d/0x240
[   81.656961][ T5831]  filemap_fdatawrite+0x191/0x230
[   81.656981][ T5831]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   81.657040][ T5831]  ? do_raw_spin_unlock+0x4d/0x240
[   81.657062][ T5831]  f2fs_sync_dirty_inodes+0x31f/0x830
[   81.657090][ T5831]  f2fs_write_checkpoint+0x94a/0x1de0
[   81.657130][ T5831]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   81.657183][ T5831]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   81.657199][ T5831]  ? kfree+0x18e/0x440
[   81.657220][ T5831]  ? kill_f2fs_super+0x298/0x6c0
[   81.657243][ T5831]  kill_f2fs_super+0x2c3/0x6c0
[   81.657265][ T5831]  ? __pfx_kill_f2fs_super+0x10/0x10
[   81.657308][ T5831]  ? radix_tree_delete_item+0x2b6/0x400
[   81.657336][ T5831]  ? shrinker_free+0x2ce/0x3e0
[   81.657356][ T5831]  deactivate_locked_super+0xbc/0x130
[   81.657376][ T5831]  cleanup_mnt+0x425/0x4c0
[   81.657394][ T5831]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.657413][ T5831]  task_work_run+0x1d4/0x260
[   81.657437][ T5831]  ? __pfx_task_work_run+0x10/0x10
[   81.657454][ T5831]  ? __x64_sys_umount+0x122/0x160
[   81.657478][ T5831]  ? exit_to_user_mode_loop+0x40/0x110
[   81.657497][ T5831]  exit_to_user_mode_loop+0xec/0x110
[   81.657513][ T5831]  do_syscall_64+0x2bd/0x3b0
[   81.657529][ T5831]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.657543][ T5831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.657558][ T5831]  ? exc_page_fault+0x9f/0xf0
[   81.657575][ T5831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.657588][ T5831] RIP: 0033:0x7f8c5b98fcd7
[   81.657605][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   81.657616][ T5831] RSP: 002b:00007ffcd2f608a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   81.657632][ T5831] RAX: 0000000000000000 RBX: 00007f8c5ba10b55 RCX: 00007f8c5b98fcd7
[   81.657641][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd2f60960
[   81.657648][ T5831] RBP: 00007ffcd2f60960 R08: 0000000000000000 R09: 0000000000000000
[   81.657655][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd2f619f0
[   81.657665][ T5831] R13: 00007f8c5ba10b55 R14: 0000000000013e74 R15: 00007ffcd2f61a30
[   81.657689][ T5831]  </TASK>
[   81.657695][ T5831] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   81.752703][ T5882] usb 2-1: USB disconnect, device number 3
[   82.019602][ T6317] loop2: detected capacity change from 0 to 1024
[   82.101684][   T32] hfsplus: b-tree write err: -5, ino 4
[   82.488448][ T5906] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   82.642861][ T5906] usb 1-1: Using ep0 maxpacket: 16
[   82.647344][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.653545][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.657404][ T5906] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[   82.661170][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.667602][ T5906] usb 1-1: config 0 descriptor??
[   82.738564][ T1276] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   82.914057][ T1276] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[   82.917627][ T1276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.925605][ T1276] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   82.934450][ T1276] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   82.937647][ T1276] usb 2-1: Manufacturer: syz
[   82.944735][ T1276] usb 2-1: config 0 descriptor??
[   83.041787][ T1276] rc_core: IR keymap rc-hauppauge not found
[   83.044288][ T1276] Registered IR keymap rc-empty
[   83.052838][ T1276] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   83.061853][ T1276] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5
[   83.098714][ T5906] apple 0003:05AC:024B.0002: unknown main item tag 0x6
[   83.101535][ T5906] apple 0003:05AC:024B.0002: ignoring exceeding usage max
[   83.105683][ T5906] apple 0003:05AC:024B.0002: invalid report_size 16640
[   83.110469][ T5906] apple 0003:05AC:024B.0002: item 0 2 1 7 parsing failed
[   83.114317][ T5906] apple 0003:05AC:024B.0002: parse failed
[   83.116698][ T5906] apple 0003:05AC:024B.0002: probe with driver apple failed with error -22
[   83.291491][ T5906] usb 1-1: USB disconnect, device number 3
[   83.291825][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'.
[   83.561099][ T5906] usb 2-1: USB disconnect, device number 4
[   85.338442][ T5906] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   85.498447][ T5906] usb 2-1: Using ep0 maxpacket: 16
[   85.504913][ T5906] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.510780][ T5906] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.514427][ T5906] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   85.520763][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0
[   85.523541][ T5906] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   85.527134][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.535710][ T5906] usb 2-1: config 0 descriptor??
[   85.957584][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.968480][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.185242][ T5906] usb 2-1: USB disconnect, device number 5
[   86.254378][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[   86.313428][ T6455] netem: change failed
[   86.419806][   T10] cfg80211: failed to load regulatory.db
[   86.458827][ T6464] netlink: 'syz.2.211': attribute type 4 has an invalid length.
[   86.462098][ T6464] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.211'.
[   86.659332][ T6471] netlink: 56 bytes leftover after parsing attributes in process `syz.2.214'.
[   87.098422][ T5881] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   87.208080][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'.
[   87.218509][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'.
[   87.252237][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   87.258621][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.262423][ T5881] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   87.265979][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.275666][ T5881] usb 2-1: config 0 descriptor??
[   88.192511][ T5881] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   88.309226][ T5895] usb 2-1: USB disconnect, device number 6
[   88.382838][ T6499] Zero length message leads to an empty skb
[   88.630042][ T5881] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   88.789513][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.793907][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.797014][ T5881] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   88.800740][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.806208][ T5881] usb 1-1: config 0 descriptor??
[   88.913790][ T6525] netlink: 'syz.1.238': attribute type 10 has an invalid length.
[   88.934647][ T6525] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   88.961421][   T33] audit: type=1804 audit(1753414223.728:7): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.241" name="file0" dev="tmpfs" ino=568 res=1 errno=0
[   89.091121][ T6536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.245'.
[   89.235120][ T5881] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[   89.248194][ T5881] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0
[   89.262067][ T5881] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints?
[   89.512899][    C1] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71
[   89.513277][    T9] usb 1-1: USB disconnect, device number 4
[   89.547446][ T6541] loop1: detected capacity change from 0 to 40427
[   89.554162][ T6541] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   89.557357][ T6541] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   89.564656][ T6541] F2FS-fs (loop1): invalid crc value
[   89.600797][ T6555] bond0: Unable to set up delay as MII monitoring is disabled
[   89.655791][ T6541] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   89.658899][ T6541] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   90.881652][ T6576] loop1: detected capacity change from 0 to 131072
[   90.887990][ T6576] F2FS-fs (loop1): QUOTA feature is enabled, so ignore jquota_fmt
[   90.891217][ T6576] F2FS-fs (loop1): inline_xattr_size option should be set with inline_xattr option
[   91.618812][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'.
[   91.625068][ T6616] delete_channel: no stack
[   92.166963][ T6653] Driver unsupported XDP return value 0 on prog  (id 28) dev N/A, expect packet loss!
[   93.494427][ T6683] syz.0.310: attempt to access beyond end of device
[   93.494427][ T6683] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[   93.508481][ T6683] (syz.0.310,6683,0):ocfs2_get_sector:1714 ERROR: status = -5
[   93.510950][ T6683] (syz.0.310,6683,0):ocfs2_sb_probe:753 ERROR: status = -5
[   93.513286][ T6683] (syz.0.310,6683,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   93.524537][ T6683] (syz.0.310,6683,0):ocfs2_fill_super:1177 ERROR: status = -5
[   93.659089][ T6689] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.313'.
[   93.669042][ T6689] netlink: zone id is out of range
[   93.670794][ T6689] netlink: zone id is out of range
[   93.672452][ T6689] netlink: zone id is out of range
[   93.679469][ T6689] netlink: zone id is out of range
[   93.680992][ T6689] netlink: zone id is out of range
[   93.682864][ T6689] netlink: zone id is out of range
[   93.684770][ T6689] netlink: zone id is out of range
[   93.698223][ T6689] netlink: zone id is out of range
[   93.700623][ T6689] netlink: zone id is out of range
[   93.702409][ T6689] netlink: zone id is out of range
[   93.753802][ T6691] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[   93.760319][ T6691] netlink: 88 bytes leftover after parsing attributes in process `syz.2.314'.
[   94.048597][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   94.221329][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.224939][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   94.230623][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   94.236952][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   94.240705][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.243491][    T9] usb 1-1: Product: syz
[   94.245021][    T9] usb 1-1: Manufacturer: syz
[   94.246826][    T9] usb 1-1: SerialNumber: syz
[   95.000051][    T9] usb 1-1: USB disconnect, device number 5
[   95.166826][ T6726] overlayfs: failed to clone upperpath
[   95.392809][   T33] audit: type=1326 audit(1753414230.158:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.335" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[   95.410776][   T33] audit: type=1326 audit(1753414230.158:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.335" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[   95.417812][   T33] audit: type=1326 audit(1753414230.168:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.335" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd43638d310 code=0x7ffc0000
[   95.425056][   T33] audit: type=1326 audit(1753414230.168:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.335" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd4363901d7 code=0x7ffc0000
[   95.433604][   T33] audit: type=1326 audit(1753414230.168:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.335" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[   95.441159][   T33] audit: type=1326 audit(1753414230.168:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.335" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd4363901d7 code=0x7ffc0000
[   95.449921][   T33] audit: type=1326 audit(1753414230.168:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.335" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd43638d60a code=0x7ffc0000
[   95.467847][   T33] audit: type=1326 audit(1753414230.168:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.335" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[   95.484232][   T33] audit: type=1326 audit(1753414230.168:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.335" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[   95.812638][ T6760] loop1: detected capacity change from 0 to 4096
[   95.828016][ T6760] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   95.843594][ T6760] ntfs3(loop1): failed to replay log file. Can't mount rw!
[   95.866117][ T6766] netlink: 'syz.0.350': attribute type 5 has an invalid length.
[   96.318381][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   96.469355][    T9] usb 2-1: too many configurations: 23, using maximum allowed: 8
[   96.520844][    T9] usb 2-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e
[   96.547002][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19
[   96.561607][    T9] usb 2-1: SerialNumber: syz
[   96.611293][    T9] usb 2-1: config 0 descriptor??
[   96.742681][    T9] usb 2-1: bad CDC descriptors
[   96.854916][    T9] usb 2-1: USB disconnect, device number 7
[   96.949294][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.361'.
[   97.288574][   T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   97.311724][ T6799] capability: warning: `syz.2.364' uses deprecated v2 capabilities in a way that may be insecure
[   97.451984][   T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[   97.454556][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.457755][   T10] usb 1-1: config 0 has no interface number 0
[   97.462455][   T10] usb 1-1: New USB device found, idVendor=fff8, idProduct=ffff, bcdDevice= b.28
[   97.465254][   T10] usb 1-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3
[   97.467739][   T10] usb 1-1: Product: syz
[   97.469378][   T10] usb 1-1: Manufacturer: syz
[   97.471323][   T10] usb 1-1: SerialNumber: syz
[   97.477976][   T10] usb 1-1: config 0 descriptor??
[   97.658397][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   97.690566][ T5881] usb 1-1: USB disconnect, device number 6
[   97.809483][    T9] usb 2-1: too many configurations: 65, using maximum allowed: 8
[   97.814297][    T9] usb 2-1: config 0 has no interfaces?
[   97.817720][    T9] usb 2-1: config 0 has no interfaces?
[   97.823065][    T9] usb 2-1: config 0 has no interfaces?
[   97.826846][    T9] usb 2-1: config 0 has no interfaces?
[   97.830572][    T9] usb 2-1: config 0 has no interfaces?
[   97.834274][    T9] usb 2-1: config 0 has no interfaces?
[   97.837881][    T9] usb 2-1: config 0 has no interfaces?
[   97.843087][    T9] usb 2-1: config 0 has no interfaces?
[   97.845584][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[   97.849713][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.858901][    T9] usb 2-1: config 0 descriptor??
[   98.068753][ T5881] usb 2-1: USB disconnect, device number 8
[   98.273775][ T6809] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.466745][ T6823] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.376'.
[   98.727998][ T6837] loop1: detected capacity change from 0 to 512
[   98.781249][ T6837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.785302][ T6837] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   98.790325][ T5881] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   98.814983][ T6837] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.383: corrupted inode contents
[   98.822024][ T6837] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.383: mark_inode_dirty error
[   98.826964][ T6837] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.383: corrupted inode contents
[   98.832693][ T6837] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.383: mark_inode_dirty error
[   98.861657][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.952733][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   98.968344][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   98.971761][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   98.975616][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   98.995461][ T5881] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   99.001940][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.017454][ T5881] usb 1-1: config 0 descriptor??
[   99.121342][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.394'.
[   99.388191][ T6875] [U] 
[   99.435438][ T5881] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[   99.456873][ T5881] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   99.714185][    T9] usb 1-1: USB disconnect, device number 7
[   99.892881][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.407'.
[  100.321145][ T6902] loop1: detected capacity change from 0 to 32768
[  100.325233][ T6902] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.410 (6902)
[  100.433420][ T6902] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.437448][ T6902] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  100.452578][ T6902] BTRFS info (device loop1): using free-space-tree
[  101.063759][ T5832] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.662148][ T6943] warning: `syz.1.418' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  102.725254][ T6977] netlink: 68 bytes leftover after parsing attributes in process `syz.0.434'.
[  102.736264][ T6975] loop1: detected capacity change from 0 to 4096
[  102.740244][ T6975] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  102.775099][ T6975] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  102.779109][ T6975] ntfs3(loop1): Failed to load $AttrDef (-22)
[  103.519596][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  103.522482][ T7013] loop1: detected capacity change from 0 to 32768
[  103.692504][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.696675][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.714338][   T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  103.717879][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.730463][   T10] usb 1-1: config 0 descriptor??
[  103.841449][ T7035] loop1: detected capacity change from 0 to 1024
[  103.873248][ T7035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.924065][ T7035] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.460: Abort forced by user
[  103.930408][ T7035] EXT4-fs (loop1): Remounting filesystem read-only
[  103.932904][ T7035] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  104.047001][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.393063][   T10] cm6533_jd 0003:0D8C:0022.0007: invalid report_size -101239751
[  104.395930][   T10] cm6533_jd 0003:0D8C:0022.0007: item 0 4 1 7 parsing failed
[  104.401243][   T10] cm6533_jd 0003:0D8C:0022.0007: parse failed
[  104.403602][   T10] cm6533_jd 0003:0D8C:0022.0007: probe with driver cm6533_jd failed with error -22
[  104.444534][   T24] usb 1-1: USB disconnect, device number 8
[  105.390910][ T7073] program syz.0.474 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.008701][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  108.173129][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  108.177053][   T10] usb 1-1: config 6 has an invalid interface number: 2 but max is 0
[  108.180095][   T10] usb 1-1: config 6 has no interface number 0
[  108.193547][   T10] usb 1-1: config 6 interface 2 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32
[  108.195102][ T7150] netlink: 160 bytes leftover after parsing attributes in process `syz.1.510'.
[  108.196889][   T10] usb 1-1: config 6 interface 2 has no altsetting 0
[  108.200452][ T7150] netlink: 'syz.1.510': attribute type 1 has an invalid length.
[  108.205185][   T10] usb 1-1: New USB device found, idVendor=110a, idProduct=1151, bcdDevice=ce.71
[  108.207158][ T7150] netlink: 'syz.1.510': attribute type 2 has an invalid length.
[  108.213486][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.216743][   T10] usb 1-1: Product: syz
[  108.217109][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'.
[  108.218150][   T10] usb 1-1: Manufacturer: syz
[  108.218160][   T10] usb 1-1: SerialNumber: syz
[  108.227320][ T7128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  108.287754][   T33] audit: type=1326 audit(1753414243.048:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.1.512" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd43638e9a9 code=0x0
[  108.448177][   T10] ti_usb_3410_5052 1-1:6.2: TI USB 3410 1 port adapter converter detected
[  108.452610][   T10] ti_usb_3410_5052 1-1:6.2: missing endpoints
[  108.460953][   T10] usb 1-1: USB disconnect, device number 9
[  109.159807][ T7168] loop1: detected capacity change from 0 to 256
[  109.255247][ T7169] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.563583][ T7175] loop1: detected capacity change from 0 to 8
[  109.587684][ T7175] overlay: filesystem on ./bus is read-only
[  109.715468][ T7185] netlink: 'syz.1.526': attribute type 9 has an invalid length.
[  110.026464][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[  110.075704][ T7204] dvmrp1: entered allmulticast mode
[  110.082726][ T7204] dvmrp1: left allmulticast mode
[  110.192840][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'.
[  110.584921][ T7220] loop1: detected capacity change from 0 to 32768
[  110.698454][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  110.858728][   T24] usb 1-1: Using ep0 maxpacket: 32
[  110.865718][   T24] usb 1-1: config 0 has an invalid interface number: 61 but max is 1
[  110.869677][   T24] usb 1-1: config 0 has no interface number 1
[  110.876113][   T24] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  110.884441][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.898571][   T24] usb 1-1: Product: syz
[  110.900313][   T24] usb 1-1: Manufacturer: syz
[  110.902250][   T24] usb 1-1: SerialNumber: syz
[  110.909061][   T24] usb 1-1: config 0 descriptor??
[  111.051387][   T24] viperboard 1-1:0.61: version 0.00 found at bus 001 address 010
[  111.069002][   T24] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100
[  111.072767][   T24] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5
[  111.087275][   T24] viperboard 1-1:0.0: version 0.00 found at bus 001 address 010
[  111.102024][   T24] viperboard-i2c viperboard-i2c.6.auto: error -EIO: failure setting i2c_bus_freq to 100
[  111.105900][   T24] viperboard-i2c viperboard-i2c.6.auto: probe with driver viperboard-i2c failed with error -5
[  111.167129][    T9] usb 1-1: USB disconnect, device number 10
[  111.188538][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  111.348554][   T10] usb 2-1: Using ep0 maxpacket: 16
[  111.354750][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  111.358023][   T10] usb 2-1: config 0 has no interface number 0
[  111.363661][   T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  111.367346][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.373004][   T10] usb 2-1: Product: syz
[  111.376829][   T10] usb 2-1: Manufacturer: syz
[  111.379037][   T10] usb 2-1: SerialNumber: syz
[  111.383658][   T10] usb 2-1: config 0 descriptor??
[  111.398516][   T33] audit: type=1326 audit(1753414246.158:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.2.547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c418e9a9 code=0x7fc00000
[  111.399398][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  111.500655][ T7243] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  111.554834][ T7245] netlink: 'syz.2.553': attribute type 4 has an invalid length.
[  111.558791][ T7245] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.553'.
[  111.869975][ T7263] 9pnet_fd: Insufficient options for proto=fd
[  111.886362][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.167760][ T7280] sctp: [Deprecated]: syz.2.568 (pid 7280) Use of int in maxseg socket option.
[  112.167760][ T7280] Use struct sctp_assoc_value instead
[  112.738979][ T7293] sch_tbf: burst 1821 is lower than device lo mtu (65550) !
[  112.754207][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'.
[  113.214836][   T10] gspca_spca1528: reg_r err -71
[  113.216854][   T10] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  113.230746][   T10] usb 2-1: USB disconnect, device number 9
[  113.827943][   T33] audit: type=1326 audit(1753414248.588:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd43632ab89 code=0x7ffc0000
[  113.838156][   T33] audit: type=1326 audit(1753414248.588:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd43632ab89 code=0x7ffc0000
[  113.860115][   T33] audit: type=1326 audit(1753414248.588:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd43632ab89 code=0x7ffc0000
[  113.889074][   T33] audit: type=1326 audit(1753414248.588:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd43632ab89 code=0x7ffc0000
[  113.910820][   T33] audit: type=1326 audit(1753414248.588:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd43632ab89 code=0x7ffc0000
[  113.920336][   T33] audit: type=1326 audit(1753414248.588:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd43632ab89 code=0x7ffc0000
[  113.929968][   T33] audit: type=1326 audit(1753414248.588:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd43632ab89 code=0x7ffc0000
[  113.944261][   T33] audit: type=1326 audit(1753414248.588:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd43632ab89 code=0x7ffc0000
[  113.975676][   T33] audit: type=1326 audit(1753414248.588:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd43632ab89 code=0x7ffc0000
[  113.992880][   T33] audit: type=1326 audit(1753414248.588:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd43632ab89 code=0x7ffc0000
[  114.033950][ T7334] 9pnet: p9_errstr2errno: server reported unknown error @
[  114.408012][ T7361] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.609'.
[  114.527075][ T7367] loop1: detected capacity change from 0 to 512
[  114.539268][ T7367] EXT4-fs: inline encryption not supported
[  114.541152][ T7367] EXT4-fs: Ignoring removed mblk_io_submit option
[  114.658041][ T7367] EXT4-fs (loop1): Test dummy encryption mode enabled
[  114.662521][ T7367] EXT4-fs (loop1): orphan cleanup on readonly fs
[  114.668633][ T7367] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.611: inode #13: comm syz.1.611: iget: illegal inode #
[  114.681248][ T7367] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.611: couldn't read orphan inode 13 (err -117)
[  114.690979][ T7367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  114.725319][ T7367] EXT4-fs: inline encryption not supported
[  114.727818][ T7367] EXT4-fs: Ignoring removed mblk_io_submit option
[  114.731542][ T7367] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  114.748390][ T7367] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.611: Abort forced by user
[  114.752726][ T7367] EXT4-fs (loop1): Remounting filesystem read-only
[  114.755329][ T7367] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  114.782338][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.954440][ T7379] netlink: 136 bytes leftover after parsing attributes in process `syz.0.614'.
[  114.959887][ T7379] net_ratelimit: 4052 callbacks suppressed
[  114.959903][ T7379] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  115.099997][ T7386] netlink: 'syz.2.618': attribute type 4 has an invalid length.
[  116.104022][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'.
[  117.532297][ T7465] netlink: 'syz.2.652': attribute type 30 has an invalid length.
[  117.819580][ T5881] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  117.868147][ T7484] loop1: detected capacity change from 0 to 128
[  117.876132][ T7484] EXT4-fs: Ignoring removed nobh option
[  117.912781][ T7484] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.919437][ T7484] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.971414][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.973425][ T5881] usb 1-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32
[  117.997947][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.003526][ T5881] usb 1-1: Product: syz
[  118.005213][ T5881] usb 1-1: Manufacturer: syz
[  118.007086][ T5881] usb 1-1: SerialNumber: syz
[  118.046726][ T5881] usb 1-1: config 0 descriptor??
[  118.093300][ T7496] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  118.094460][ T5881] pwc: Logitech QuickCam Zoom (new model) USB webcam detected.
[  118.098545][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.104198][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.307296][ T5881] pwc: Failed to set LED on/off time (-71)
[  118.333643][ T5881] pwc: send_video_command error -71
[  118.343611][ T5881] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  118.355419][ T5881] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  118.381011][ T5881] usb 1-1: USB disconnect, device number 11
[  119.479172][ T7515] loop1: detected capacity change from 0 to 256
[  119.510974][ T7515] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  119.995798][ T7525] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  120.488441][ T5881] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  120.532487][ T7553] netlink: 64 bytes leftover after parsing attributes in process `syz.2.691'.
[  120.642448][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.646811][ T5881] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  120.652542][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.659324][ T5881] usb 2-1: config 0 descriptor??
[  121.088886][ T5881] lua 0003:1E7D:2C2E.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0
[  121.202370][ T7561] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  121.205890][ T7561] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  121.210559][ T7561] overlayfs: missing 'lowerdir'
[  121.274517][    T9] usb 2-1: USB disconnect, device number 10
[  121.526881][ T7577] netlink: 'syz.0.703': attribute type 1 has an invalid length.
[  121.529779][ T7577] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.703'.
[  122.114501][ T7610] netlink: 'syz.0.719': attribute type 1 has an invalid length.
[  122.415292][ T1276] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  122.467947][ T7628] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.642914][ T7629] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  122.662698][ T1276] usb 2-1: Using ep0 maxpacket: 32
[  122.852236][ T1276] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  122.856025][ T1276] usb 2-1: config 0 has no interface number 0
[  122.862143][ T1276] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  122.865732][ T1276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.870048][ T1276] usb 2-1: Product: syz
[  122.871874][ T1276] usb 2-1: Manufacturer: syz
[  122.874708][ T1276] usb 2-1: SerialNumber: syz
[  122.877991][ T1276] usb 2-1: config 0 descriptor??
[  122.883946][ T1276] smsc95xx v2.0.0
[  122.885296][ T1276] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  122.889080][ T1276] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22
[  123.055993][ T7639] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  123.064127][ T7639] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  123.108004][ T5895] usb 2-1: USB disconnect, device number 11
[  123.909203][   T55] Bluetooth: hci2: command tx timeout
[  124.238427][ T5881] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  124.390665][ T5881] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  124.394308][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.401998][ T5881] usb 1-1: config 0 descriptor??
[  124.417657][ T5881] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  125.201954][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'.
[  125.254223][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'.
[  125.258082][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'.
[  125.461525][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'.
[  125.644043][ T5881] usb 1-1: USB disconnect, device number 12
[  125.803374][ T7736] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  126.202828][ T7746] 9pnet_fd: p9_fd_create_unix (7746): problem connecting socket: ./bus: -1
[  127.851831][ T7795] overlayfs: failed to clone upperpath
[  131.871419][ T7849] capability: warning: `syz.1.825' uses 32-bit capabilities (legacy support in use)
[  132.246642][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'.
[  132.473611][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.475654][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.736280][ T7885] netlink: 212 bytes leftover after parsing attributes in process `syz.0.841'.
[  133.022914][   T33] kauditd_printk_skb: 215 callbacks suppressed
[  133.022931][   T33] audit: type=1326 audit(1753414267.788:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.1.847" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd43638e9a9 code=0x0
[  133.475776][ T7921] 9pnet_fd: Insufficient options for proto=fd
[  133.691367][   T33] audit: type=1326 audit(1753414268.458:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.0.863" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x0
[  133.800218][ T7939] ip6gre1: entered allmulticast mode
[  133.902891][ T7943] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.176269][    T9] IPVS: starting estimator thread 0...
[  134.270615][ T7966] IPVS: using max 43 ests per chain, 103200 per kthread
[  134.892453][ T8003] @: renamed from bond_slave_0
[  135.034942][ T8015] syz.1.898 uses obsolete (PF_INET,SOCK_PACKET)
[  135.178539][ T5881] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  135.333005][ T5881] usb 1-1: config 131 has an invalid interface number: 242 but max is 0
[  135.335669][ T5881] usb 1-1: config 131 has no interface number 0
[  135.337799][ T5881] usb 1-1: config 131 interface 242 altsetting 13 endpoint 0x2 has invalid maxpacket 7573, setting to 64
[  135.342033][ T5881] usb 1-1: config 131 interface 242 altsetting 13 endpoint 0xC has invalid wMaxPacketSize 0
[  135.348233][ T5881] usb 1-1: config 131 interface 242 has no altsetting 0
[  135.362850][ T5881] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=19.10
[  135.366881][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5
[  135.374855][ T5881] usb 1-1: Product: syz
[  135.379498][ T5881] usb 1-1: Manufacturer: syz
[  135.386162][ T5881] usb 1-1: SerialNumber: syz
[  135.404215][ T8007] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  135.617009][ T5881] kvaser_usb 1-1:131.242: error -ENODEV: Cannot get usb endpoint(s)
[  135.628032][ T5881] usb 1-1: USB disconnect, device number 13
[  135.664648][ T8035] netlink: 'syz.2.905': attribute type 7 has an invalid length.
[  135.670246][ T8035] netlink: 'syz.2.905': attribute type 8 has an invalid length.
[  136.152036][ T8054] netlink: 104 bytes leftover after parsing attributes in process `syz.1.914'.
[  136.245485][   T33] audit: type=1326 audit(1753414271.008:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.0.919" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  136.254027][   T33] audit: type=1326 audit(1753414271.008:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.0.919" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  136.261963][   T33] audit: type=1326 audit(1753414271.008:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.0.919" exe="/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  136.278392][   T33] audit: type=1326 audit(1753414271.018:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.0.919" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  136.296655][   T33] audit: type=1326 audit(1753414271.018:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.0.919" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  136.305268][   T33] audit: type=1326 audit(1753414271.018:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.0.919" exe="/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  136.314935][   T33] audit: type=1326 audit(1753414271.018:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.0.919" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  136.356188][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'.
[  136.554752][ T8079] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  136.602537][ T8083] netlink: 'syz.2.929': attribute type 34 has an invalid length.
[  137.697231][ T8147] program syz.0.959 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  138.937827][ T8175] netlink: 'syz.1.970': attribute type 2 has an invalid length.
[  138.944092][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'.
[  140.739346][ T8224] bridge0: entered promiscuous mode
[  140.742676][ T8224] macvlan2: entered promiscuous mode
[  141.134422][ T8234] gretap0: entered promiscuous mode
[  141.137133][ T8234] vlan2: entered promiscuous mode
[  142.542099][   T33] audit: type=1326 audit(1753414277.308:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.0.999" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffe0000
[  144.269091][ T8304] bridge_slave_0: left allmulticast mode
[  144.271419][ T8304] bridge_slave_0: left promiscuous mode
[  144.273754][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.297308][ T8304] bridge_slave_1: left allmulticast mode
[  144.305909][ T8304] bridge_slave_1: left promiscuous mode
[  144.308033][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.325177][ T8304] bond0: (slave bond_slave_0): Releasing backup interface
[  144.333252][ T8304] bond0: (slave bond_slave_1): Releasing backup interface
[  144.356559][ T8304] team0: Port device team_slave_0 removed
[  144.363930][ T8304] team0: Port device team_slave_1 removed
[  144.366550][ T8304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.372210][ T8304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.376041][ T8304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.380640][ T8304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.394472][ T8308] netlink: 'syz.1.1026': attribute type 12 has an invalid length.
[  144.697028][ T8320] netlink: 'syz.1.1033': attribute type 21 has an invalid length.
[  144.700330][ T8320] IPv6: NLM_F_CREATE should be specified when creating new route
[  144.705128][ T8320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.708487][ T8320] IPv6: NLM_F_CREATE should be set when creating new route
[  144.711425][ T8320] IPv6: NLM_F_CREATE should be set when creating new route
[  144.714255][ T8320] IPv6: NLM_F_CREATE should be set when creating new route
[  144.860723][ T8333] dns_resolver: Unsupported server list version (0)
[  144.914287][ T8335] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.918219][ T8335] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.921936][ T8335] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.925407][ T8335] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.983186][ T8341] netlink: 'syz.0.1041': attribute type 1 has an invalid length.
[  145.030528][    T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  145.048759][    T9] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  147.063517][ T8401] netlink: 'syz.0.1066': attribute type 27 has an invalid length.
[  147.475093][ T8418] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1069'.
[  147.612929][ T8423] tipc: Started in network mode
[  147.629337][ T8423] tipc: Node identity 7365725f69643d3, cluster identity 4711
[  147.632381][ T8423] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  149.062801][   T33] audit: type=1326 audit(1753414283.828:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8478 comm="syz.0.1097" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x0
[  149.157037][ T8481] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1098'.
[  149.160647][ T8481] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  149.570406][ T8498] IPVS: Scheduler module ip_vs_sip not found
[  149.777697][ T8512] netlink: 'syz.2.1112': attribute type 2 has an invalid length.
[  150.312768][ T8527] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1118'.
[  151.216901][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1135'.
[  151.466975][ T8575] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  151.477978][ T8575] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  151.481554][ T8575] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  151.484957][ T8575] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  151.489011][ T8575] geneve2: entered promiscuous mode
[  151.496377][ T8575] geneve2: entered allmulticast mode
[  151.505306][ T8575] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  151.510872][ T8575] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  151.514032][ T8575] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  151.517429][ T8575] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  154.706444][ T8661] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0
[  155.138653][   T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  155.303307][   T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  155.306475][   T24] usb 1-1: config 0 has no interface number 0
[  155.309796][   T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.313725][   T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.317253][   T24] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.323483][   T24] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  155.327911][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.341578][   T24] usb 1-1: config 0 descriptor??
[  155.383140][   T55] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  155.526416][ T8698] trusted_key: encrypted_key: master key parameter 't' is invalid
[  155.590267][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  155.594550][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  155.597917][   T55] Bluetooth: hci1: hardware error 0x00
[  155.665236][ T8704] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1197'.
[  155.985093][   T24] uclogic 0003:28BD:0042.000A: failed retrieving string descriptor #100: -71
[  156.001610][   T24] uclogic 0003:28BD:0042.000A: failed retrieving pen parameters: -71
[  156.004532][   T24] uclogic 0003:28BD:0042.000A: pen probing failed: -71
[  156.006740][   T24] uclogic 0003:28BD:0042.000A: failed probing parameters: -71
[  156.010238][   T24] uclogic 0003:28BD:0042.000A: probe with driver uclogic failed with error -71
[  156.020461][   T24] usb 1-1: USB disconnect, device number 14
[  156.948462][ T5906] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  157.108725][ T5906] usb 1-1: Using ep0 maxpacket: 32
[  157.120191][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short
[  157.124567][ T5906] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  157.132914][ T5906] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  157.136408][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.140059][ T5906] usb 1-1: Product: syz
[  157.141716][ T5906] usb 1-1: Manufacturer: syz
[  157.143543][ T5906] usb 1-1: SerialNumber: syz
[  157.265614][ T8744] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1216'.
[  157.360639][ T5906] usb 1-1: Invalid number of CPorts: 0
[  157.363027][ T5906] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -22
[  157.563295][    T9] usb 1-1: USB disconnect, device number 15
[  157.668728][   T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  158.160517][ T8788] netlink: 'syz.1.1238': attribute type 1 has an invalid length.
[  158.309504][ T8793] dvmrp0: entered allmulticast mode
[  158.628458][    T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  158.828018][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  158.855878][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.874187][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[  158.885591][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.040030][    T9] usb 1-1: config 0 descriptor??
[  159.323712][ T8819] nft_compat: unsupported protocol 0
[  159.468785][    T9] wacom 0003:056A:0217.000B: Unknown device_type for 'HID 056a:0217'. Ignoring.
[  159.919859][    T9] usb 1-1: USB disconnect, device number 16
[  160.659288][ T8840] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.997817][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'.
[  161.435862][ T8866] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  162.420029][   T33] audit: type=1326 audit(1753414297.188:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.0.1291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  162.430205][   T33] audit: type=1326 audit(1753414297.188:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.0.1291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  162.438731][   T33] audit: type=1326 audit(1753414297.198:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.0.1291" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  162.446912][   T33] audit: type=1326 audit(1753414297.198:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.0.1291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  162.459775][   T33] audit: type=1326 audit(1753414297.198:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.0.1291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  162.466894][   T33] audit: type=1326 audit(1753414297.198:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.0.1291" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  162.483046][   T33] audit: type=1326 audit(1753414297.208:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.0.1291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  162.498559][   T33] audit: type=1326 audit(1753414297.208:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.0.1291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  162.505620][   T33] audit: type=1326 audit(1753414297.208:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.0.1291" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8c5b98e9a9 code=0x7ffc0000
[  162.516916][   T33] audit: type=1326 audit(1753414297.208:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.0.1291" exe="/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  162.596706][ T8931] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1298'.
[  162.784893][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.787567][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.890869][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.907398][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.037794][ T8939] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.051487][ T8939] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.055027][ T8939] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.218400][   T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  163.391866][   T24] usb 1-1: Using ep0 maxpacket: 32
[  163.402027][   T24] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d
[  163.405669][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.419227][   T24] usb 1-1: Product: syz
[  163.420919][   T24] usb 1-1: Manufacturer: syz
[  163.422742][   T24] usb 1-1: SerialNumber: syz
[  163.899110][   T24] aqc111 1-1:1.0: probe with driver aqc111 failed with error -22
[  163.908203][   T24] usb 1-1: USB disconnect, device number 17
[  164.646886][ T8998] overlayfs: failed to clone upperpath
[  166.758458][    T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  166.920662][    T9] usb 1-1: config 150 has an invalid interface number: 204 but max is 1
[  166.923969][    T9] usb 1-1: config 150 has no interface number 0
[  166.927344][    T9] usb 1-1: config 150 interface 204 has no altsetting 0
[  166.937090][    T9] usb 1-1: config 150 interface 1 has no altsetting 0
[  166.944496][    T9] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  166.948051][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.952847][    T9] usb 1-1: Product: syz
[  166.954929][    T9] usb 1-1: Manufacturer: syz
[  166.957052][    T9] usb 1-1: SerialNumber: syz
[  167.169909][    T9] xr_serial 1-1:150.204: xr_serial converter detected
[  167.555301][ T5895] IPVS: starting estimator thread 0...
[  167.560557][ T9087] overlayfs: failed to clone upperpath
[  167.639760][ T9089] IPVS: using max 63 ests per chain, 151200 per kthread
[  167.672868][ T9097] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  168.185828][    T9] usb 1-1: xr_serial converter now attached to ttyUSB0
[  168.376609][    T9] usb 1-1: USB disconnect, device number 18
[  168.386292][    T9] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  168.391901][    T9] xr_serial 1-1:150.204: device disconnected
[  168.745318][ T9121] overlay: Unknown parameter '\'
[  169.064301][ T9147] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1391'.
[  169.338213][ T1276] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  169.498244][ T1276] usb 1-1: Using ep0 maxpacket: 32
[  169.502284][ T1276] usb 1-1: config 0 interface 0 has no altsetting 0
[  169.506916][ T1276] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  169.509930][ T1276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.512702][ T1276] usb 1-1: Product: syz
[  169.514367][ T1276] usb 1-1: Manufacturer: syz
[  169.515929][ T1276] usb 1-1: SerialNumber: syz
[  169.520453][ T1276] usb 1-1: config 0 descriptor??
[  169.936805][ T1276] gs_usb 1-1:0.0: Couldn't get device config: (err=-71)
[  169.943311][ T1276] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  169.955838][ T1276] usb 1-1: USB disconnect, device number 19
[  170.948045][   T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  171.102870][   T24] usb 1-1: config 0 has no interfaces?
[  171.105134][   T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  171.113560][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.120837][   T24] usb 1-1: config 0 descriptor??
[  171.307431][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'.
[  171.335304][    T9] usb 1-1: USB disconnect, device number 20
[  172.907776][   T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  173.067683][   T24] usb 1-1: Using ep0 maxpacket: 32
[  173.071784][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.076091][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.080258][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  173.083654][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.096471][   T24] usb 1-1: config 0 descriptor??
[  173.302316][ T9284] netlink: 750 bytes leftover after parsing attributes in process `syz.1.1454'.
[  173.332315][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  173.332328][   T33] audit: type=1326 audit(1753414564.094:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.1.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[  173.358759][   T33] audit: type=1326 audit(1753414564.094:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.1.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[  173.365907][   T33] audit: type=1326 audit(1753414564.114:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.1.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[  173.375927][   T33] audit: type=1326 audit(1753414564.114:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.1.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[  173.384850][   T33] audit: type=1326 audit(1753414564.114:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.1.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[  173.517319][   T24] magicmouse 0003:05AC:0265.000C: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0
[  173.522501][   T24] magicmouse 0003:05AC:0265.000C: magicmouse input not registered
[  173.536010][   T24] magicmouse 0003:05AC:0265.000C: probe with driver magicmouse failed with error -12
[  173.584805][ T9298] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  173.587020][ T9300] nftables ruleset with unbound chain
[  173.710594][ T5895] usb 1-1: USB disconnect, device number 21
[  174.200440][   T33] audit: type=1800 audit(1753414564.954:272): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1473" name="bus" dev="tmpfs" ino=2456 res=0 errno=0
[  174.336935][ T9334] netlink: 'syz.1.1479': attribute type 4 has an invalid length.
[  174.351852][ T9334] netlink: 'syz.1.1479': attribute type 4 has an invalid length.
[  174.393853][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'.
[  174.755127][ T9370] veth0: entered promiscuous mode
[  174.762090][ T9370] veth0: left promiscuous mode
[  176.114095][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1511'.
[  176.117159][ T9404] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1511'.
[  176.120416][ T9404] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1511'.
[  176.123598][ T9404] netlink: 'syz.1.1511': attribute type 6 has an invalid length.
[  176.186306][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803b181400: rx timeout, send abort
[  176.195129][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803b181400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  176.308800][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'.
[  177.562393][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'.
[  178.679631][ T9515] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  179.470580][ T9554] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.1576'.
[  180.597034][ T9582] overlayfs: failed to clone upperpath
[  181.408149][ T9608] IPv6: NLM_F_REPLACE set, but no existing node found!
[  181.838214][   T33] audit: type=1804 audit(1753414572.605:273): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1609" name="/newroot/464/file1" dev="fuse" ino=1 res=1 errno=0
[  181.846082][   T33] audit: type=1800 audit(1753414572.605:274): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1609" name="/" dev="fuse" ino=1 res=0 errno=0
[  181.856435][   T33] audit: type=1800 audit(1753414572.625:275): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1609" name="/" dev="fuse" ino=1 res=0 errno=0
[  182.216626][   T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  182.364682][ T9641] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  182.366662][   T24] usb 1-1: Using ep0 maxpacket: 32
[  182.374191][   T24] usb 1-1: config 0 has an invalid interface number: 219 but max is 0
[  182.377879][   T24] usb 1-1: config 0 has no interface number 0
[  182.380429][   T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  182.384756][   T24] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  182.391883][   T24] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  182.399972][   T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  182.406047][   T24] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  182.411816][   T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  182.415805][   T24] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  182.425063][   T24] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  182.431023][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.434439][   T24] usb 1-1: Product: syz
[  182.436110][   T24] usb 1-1: Manufacturer: syz
[  182.438168][   T24] usb 1-1: SerialNumber: syz
[  182.443260][   T24] usb 1-1: config 0 descriptor??
[  182.452662][ T9633] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  182.667161][   T24] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz)
[  182.871421][   T24] etas_es58x 1-1:0.219: could not parse product info: '424242424242'
[  183.080706][   T24] usb 1-1: USB disconnect, device number 22
[  183.084804][   T24] etas_es58x 1-1:0.219: Disconnecting syz syz
[  183.898548][   T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  184.046416][   T24] usb 1-1: Using ep0 maxpacket: 32
[  184.052979][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  184.058423][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  184.062128][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  184.718832][   T24] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e
[  184.721623][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.724134][   T24] usb 1-1: Product: syz
[  184.725597][   T24] usb 1-1: Manufacturer: syz
[  184.727221][   T24] usb 1-1: SerialNumber: syz
[  184.734842][   T24] usb 1-1: config 0 descriptor??
[  184.739170][   T24] iguanair 1-1:0.0: probe with driver iguanair failed with error -12
[  184.951505][ T5895] usb 1-1: USB disconnect, device number 23
[  185.001360][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'.
[  185.004602][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'.
[  185.371741][   T33] audit: type=1326 audit(1753414576.136:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[  185.386716][   T33] audit: type=1326 audit(1753414576.136:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[  185.416792][   T33] audit: type=1326 audit(1753414576.136:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[  185.435722][   T33] audit: type=1326 audit(1753414576.136:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[  185.455101][   T33] audit: type=1326 audit(1753414576.136:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.1666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43638e9a9 code=0x7ffc0000
[  185.664471][ T9752] mmap: syz.2.1664 (9752) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  185.788951][ T9765] netlink: 'syz.0.1670': attribute type 10 has an invalid length.
[  185.808558][ T9765] veth0_vlan: left promiscuous mode
[  185.819413][ T9765] veth0_vlan: entered promiscuous mode
[  185.828501][ T9765] team0: Device veth0_vlan failed to register rx_handler
[  186.151856][ T9777] 
[  186.152990][ T9777] ======================================================
[  186.155855][ T9777] WARNING: possible circular locking dependency detected
[  186.158739][ T9777] 6.16.0-rc7-syzkaller-dirty #0 Not tainted
[  186.161337][ T9777] ------------------------------------------------------
[  186.165188][ T9777] syz.0.1676/9777 is trying to acquire lock:
[  186.167720][ T9777] ffff888021440988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  186.172216][ T9777] 
[  186.172216][ T9777] but task is already holding lock:
[  186.175274][ T9777] ffff888021440a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0
[  186.178955][ T9777] 
[  186.178955][ T9777] which lock already depends on the new lock.
[  186.178955][ T9777] 
[  186.183203][ T9777] 
[  186.183203][ T9777] the existing dependency chain (in reverse order) is:
[  186.186897][ T9777] 
[  186.186897][ T9777] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  186.190124][ T9777]        lock_acquire+0x120/0x360
[  186.192207][ T9777]        __mutex_lock+0x182/0xe80
[  186.194288][ T9777]        refcount_dec_and_mutex_lock+0x30/0xa0
[  186.196819][ T9777]        nbd_config_put+0x2c/0x790
[  186.198971][ T9777]        nbd_release+0xfe/0x140
[  186.200996][ T9777]        bdev_release+0x536/0x650
[  186.203104][ T9777]        blkdev_release+0x15/0x20
[  186.205204][ T9777]        __fput+0x44c/0xa70
[  186.207100][ T9777]        fput_close_sync+0x119/0x200
[  186.209299][ T9777]        __x64_sys_close+0x7f/0x110
[  186.211444][ T9777]        do_syscall_64+0xfa/0x3b0
[  186.213548][ T9777]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.216201][ T9777] 
[  186.216201][ T9777] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  186.219386][ T9777]        lock_acquire+0x120/0x360
[  186.221473][ T9777]        __mutex_lock+0x182/0xe80
[  186.223574][ T9777]        __del_gendisk+0x129/0x9e0
[  186.225697][ T9777]        del_gendisk+0xe8/0x160
[  186.227751][ T9777]        loop_remove+0x42/0xc0
[  186.229765][ T9777]        loop_control_ioctl+0x4ac/0x5a0
[  186.232046][ T9777]        __se_sys_ioctl+0xfc/0x170
[  186.234138][ T9777]        do_syscall_64+0xfa/0x3b0
[  186.236208][ T9777]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.238820][ T9777] 
[  186.238820][ T9777] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  186.242189][ T9777]        validate_chain+0xb9b/0x2140
[  186.244367][ T9777]        __lock_acquire+0xab9/0xd20
[  186.246478][ T9777]        lock_acquire+0x120/0x360
[  186.248526][ T9777]        down_write+0x96/0x1f0
[  186.250487][ T9777]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  186.253040][ T9777]        nbd_start_device+0x16c/0xac0
[  186.255255][ T9777]        nbd_ioctl+0x636/0xeb0
[  186.257222][ T9777]        blkdev_ioctl+0x5a8/0x6d0
[  186.259279][ T9777]        __se_sys_ioctl+0xfc/0x170
[  186.261398][ T9777]        do_syscall_64+0xfa/0x3b0
[  186.263473][ T9777]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.266095][ T9777] 
[  186.266095][ T9777] other info that might help us debug this:
[  186.266095][ T9777] 
[  186.270186][ T9777] Chain exists of:
[  186.270186][ T9777]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  186.270186][ T9777] 
[  186.275886][ T9777]  Possible unsafe locking scenario:
[  186.275886][ T9777] 
[  186.278890][ T9777]        CPU0                    CPU1
[  186.281067][ T9777]        ----                    ----
[  186.283259][ T9777]   lock(&nbd->config_lock);
[  186.285160][ T9777]                                lock(&disk->open_mutex);
[  186.288034][ T9777]                                lock(&nbd->config_lock);
[  186.290944][ T9777]   lock(&set->update_nr_hwq_lock);
[  186.293057][ T9777] 
[  186.293057][ T9777]  *** DEADLOCK ***
[  186.293057][ T9777] 
[  186.296189][ T9777] 1 lock held by syz.0.1676/9777:
[  186.298209][ T9777]  #0: ffff888021440a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0
[  186.301900][ T9777] 
[  186.301900][ T9777] stack backtrace:
[  186.304222][ T9777] CPU: 1 UID: 0 PID: 9777 Comm: syz.0.1676 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  186.304241][ T9777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  186.304252][ T9777] Call Trace:
[  186.304259][ T9777]  <TASK>
[  186.304267][ T9777]  dump_stack_lvl+0x189/0x250
[  186.304294][ T9777]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.304311][ T9777]  ? __pfx__printk+0x10/0x10
[  186.304332][ T9777]  ? print_lock_name+0xde/0x100
[  186.304349][ T9777]  print_circular_bug+0x2ee/0x310
[  186.304369][ T9777]  check_noncircular+0x134/0x160
[  186.304388][ T9777]  validate_chain+0xb9b/0x2140
[  186.304406][ T9777]  ? stack_depot_save_flags+0x40/0x900
[  186.304427][ T9777]  __lock_acquire+0xab9/0xd20
[  186.304443][ T9777]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  186.304462][ T9777]  lock_acquire+0x120/0x360
[  186.304474][ T9777]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  186.304494][ T9777]  ? __mutex_trylock_common+0x153/0x260
[  186.304513][ T9777]  down_write+0x96/0x1f0
[  186.304531][ T9777]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  186.304548][ T9777]  ? __pfx_down_write+0x10/0x10
[  186.304564][ T9777]  ? rcu_is_watching+0x15/0xb0
[  186.304581][ T9777]  ? trace_contention_end+0x39/0x120
[  186.304596][ T9777]  ? __mutex_lock+0x330/0xe80
[  186.304612][ T9777]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  186.304631][ T9777]  ? blkdev_common_ioctl+0xfc3/0x2450
[  186.304648][ T9777]  ? __pfx_aa_get_newest_label+0x10/0x10
[  186.304661][ T9777]  ? nbd_ioctl+0x131/0xeb0
[  186.304680][ T9777]  ? __pfx___mutex_lock+0x10/0x10
[  186.304696][ T9777]  nbd_start_device+0x16c/0xac0
[  186.304714][ T9777]  ? security_capable+0x7e/0x2e0
[  186.304731][ T9777]  nbd_ioctl+0x636/0xeb0
[  186.304748][ T9777]  ? __pfx_nbd_ioctl+0x10/0x10
[  186.304769][ T9777]  ? __pfx_nbd_ioctl+0x10/0x10
[  186.304787][ T9777]  blkdev_ioctl+0x5a8/0x6d0
[  186.304804][ T9777]  ? __pfx_blkdev_ioctl+0x10/0x10
[  186.304819][ T9777]  ? __fget_files+0x2a/0x420
[  186.304833][ T9777]  ? bpf_lsm_file_ioctl+0x9/0x20
[  186.304874][ T9777]  ? __pfx_blkdev_ioctl+0x10/0x10
[  186.304893][ T9777]  __se_sys_ioctl+0xfc/0x170
[  186.304913][ T9777]  do_syscall_64+0xfa/0x3b0
[  186.304930][ T9777]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.304944][ T9777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.304959][ T9777]  ? exc_page_fault+0x9f/0xf0
[  186.304974][ T9777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.304988][ T9777] RIP: 0033:0x7f8c5b98e9a9
[  186.305010][ T9777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.305024][ T9777] RSP: 002b:00007f8c5c83c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  186.305040][ T9777] RAX: ffffffffffffffda RBX: 00007f8c5bbb5fa0 RCX: 00007f8c5b98e9a9
[  186.305050][ T9777] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  186.305058][ T9777] RBP: 00007f8c5ba10d69 R08: 0000000000000000 R09: 0000000000000000
[  186.305067][ T9777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.305076][ T9777] R13: 0000000000000000 R14: 00007f8c5bbb5fa0 R15: 00007ffcd2f61618
[  186.305091][ T9777]  </TASK>
[  186.487826][ T9777] nbd0: detected capacity change from 0 to 4294967296
[  186.491030][ T9781] block nbd0: shutting down sockets
[  186.506359][ T9673] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.516445][ T9673] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.519100][ T9673] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.521943][ T9673] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.525084][ T9673] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.539422][ T9673] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.542637][ T9673] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.556417][ T9673] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.559777][ T9673] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.563237][ T9673] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.576538][ T9673] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.580302][ T9673] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.583804][ T9673] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.596396][ T9673] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.599609][ T9673] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.613487][ T9673] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.617250][ T9673] ldm_validate_partition_table(): Disk read failed.
[  186.620029][ T9673] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.623729][ T9673] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.628077][ T9673] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.631688][ T9673] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.635189][ T9673] Dev nbd0: unable to read RDB block 0
[  186.638641][ T9673]  nbd0: unable to read partition table
[  186.658953][ T9673] ldm_validate_partition_table(): Disk read failed.
[  186.661922][ T9673] Dev nbd0: unable to read RDB block 0
[  186.664430][ T9673]  nbd0: unable to read partition table
[  190.865698][ T5218] Bluetooth: hci0: command 0x0406 tx timeout
[  193.909770][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  193.912178][ T1360] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
03:32:01  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff84c45811 RBX=00000000cb177a06 RCX=ffff8881088cd640 RDX=0000000000000002
RSI=00000000382f088a RDI=000000005df2a462 RBP=ffffc9000291f1e8 RSP=ffffc9000291eeb8
R8 =dffffc0000000000 R9 =00000000cb177a06 R10=000000005512acd3 R11=000000003d1da795
R12=0000000069d14ad5 R13=000000003d1da795 R14=0000000000000018 R15=000000005512acd3
RIP=ffffffff81c02707 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd43719c6c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f53c504dfc8 CR3=00000000206a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f53c4386478 00007f53c4386450 XMM03=00007f53c4386488 00007f53c4386480
XMM04=00007f53c4eed100 00007f53c4386440 XMM05=00007f53c4386458 00007f53c43864a0
XMM06=00007f53c4386498 00007f53c4386490 XMM07=00007f53c4386488 00007f53c4386480
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f53c4211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000017aa RDI=00000000000017ab RBP=00000000000003f8 RSP=ffffc90007bd7170
R8 =ffff8881077d0237 R9 =1ffff11020efa046 R10=dffffc0000000000 R11=ffffffff85462e20
R12=dffffc0000000000 R13=ffffffff99af189a R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85462e9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8c5c83c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3041bff8 CR3=000000010e870000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0064656369767265 735f6f692e656c74
XMM02=00007fd436586478 00007fd436586450 XMM03=00007fd436586488 00007fd436586480
XMM04=00007fd4370ed100 00007fd436586440 XMM05=00007fd436586458 00007fd4365864a0
XMM06=00007fd436586498 00007fd436586490 XMM07=00007fd436586488 00007fd436586480
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fd436411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
