last executing test programs:

29.271234479s ago: executing program 2 (id=232):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000001a40), 0x1003, r4}, 0x38)

28.24329664s ago: executing program 2 (id=238):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x100b, 0x3, @discrete={0x8, 0x7}})

28.190404264s ago: executing program 2 (id=239):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2501000000000000000009000000040003800400018050000380060007004e2200000800030004000000140002007767300000000000000000000000000008000100000000000800010002000000060004"], 0x6c}}, 0x0)

28.100966082s ago: executing program 2 (id=240):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35)

27.89467054s ago: executing program 2 (id=241):
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0)

27.561694521s ago: executing program 2 (id=245):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0xfdfd, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}})

27.437641261s ago: executing program 32 (id=245):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0xfdfd, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}})

2.65868599s ago: executing program 3 (id=460):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0xc000)

2.535932409s ago: executing program 3 (id=462):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x1, &(0x7f0000000080)=[0x0])
read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020)

2.36975075s ago: executing program 3 (id=465):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@user_xattr}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0)

2.110232747s ago: executing program 1 (id=471):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x19, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)

1.65767838s ago: executing program 3 (id=475):
syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x0, 0xac0, &(0x7f0000000140)="$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")

1.469116482s ago: executing program 0 (id=478):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x80}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xfff}]}}}]}, 0x50}}, 0x4000000)

1.319519373s ago: executing program 1 (id=479):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x2)

1.31920705s ago: executing program 0 (id=480):
syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x21, 0x1ff, &(0x7f00000005c0)="$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")
truncate(&(0x7f0000000040)='./file2\x00', 0x80000)

1.129536366s ago: executing program 1 (id=481):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x100, {0x0, 0xa}, {0x3}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

1.128851518s ago: executing program 0 (id=482):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36)

879.812398ms ago: executing program 3 (id=483):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4)

879.537514ms ago: executing program 0 (id=484):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0)

831.24529ms ago: executing program 3 (id=485):
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000032663d107b06b32315da0109030109021200018f0000000904"], 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

786.598157ms ago: executing program 0 (id=486):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
accept4(r0, 0x0, 0x0, 0x800)

680.95516ms ago: executing program 0 (id=487):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$link(0x8, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}]}, 0x24}}, 0x24000000)

80.851756ms ago: executing program 1 (id=488):
socket$inet6_sctp(0xa, 0x5, 0x84)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
mount$nfs(&(0x7f0000000340)='\a\x00\xea\x06\xaf\a', &(0x7f0000000380)='./file1\x00', 0x0, 0x3089469, 0x0)
mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0)

274.48µs ago: executing program 1 (id=489):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xf, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80)

0s ago: executing program 1 (id=490):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43930' (ED25519) to the list of known hosts.
syzkaller login: [   58.791903][ T5819] cgroup: Unknown subsys name 'net'
[   58.873992][ T5819] cgroup: Unknown subsys name 'cpuset'
[   58.881792][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   61.078991][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.471373][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.476133][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.480365][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.484346][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.487827][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.490084][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.495637][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.502285][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.506765][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.510542][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.562971][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.566972][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.571805][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.575829][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.580842][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.903566][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   67.026095][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   67.091928][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   67.130917][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.133845][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.136550][ T5833] bridge_slave_0: entered allmulticast mode
[   67.139801][ T5833] bridge_slave_0: entered promiscuous mode
[   67.166839][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.169328][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.172058][ T5833] bridge_slave_1: entered allmulticast mode
[   67.175713][ T5833] bridge_slave_1: entered promiscuous mode
[   67.234204][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.236618][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.239253][ T5834] bridge_slave_0: entered allmulticast mode
[   67.242180][ T5834] bridge_slave_0: entered promiscuous mode
[   67.246488][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.249603][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.252722][ T5834] bridge_slave_1: entered allmulticast mode
[   67.256441][ T5834] bridge_slave_1: entered promiscuous mode
[   67.291511][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.340838][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.346876][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.352157][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.402790][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.405120][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.407483][ T5843] bridge_slave_0: entered allmulticast mode
[   67.411667][ T5843] bridge_slave_0: entered promiscuous mode
[   67.417873][ T5833] team0: Port device team_slave_0 added
[   67.423973][ T5834] team0: Port device team_slave_0 added
[   67.427739][ T5833] team0: Port device team_slave_1 added
[   67.431910][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.434815][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.437831][ T5843] bridge_slave_1: entered allmulticast mode
[   67.442849][ T5843] bridge_slave_1: entered promiscuous mode
[   67.475139][ T5834] team0: Port device team_slave_1 added
[   67.522760][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.525045][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.534455][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.540498][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.542759][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.551500][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.558563][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.564622][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.567381][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.578207][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.584736][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.586946][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.594830][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.607358][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.647330][ T5843] team0: Port device team_slave_0 added
[   67.651413][ T5843] team0: Port device team_slave_1 added
[   67.691408][ T5834] hsr_slave_0: entered promiscuous mode
[   67.694266][ T5834] hsr_slave_1: entered promiscuous mode
[   67.709813][ T5833] hsr_slave_0: entered promiscuous mode
[   67.712148][ T5833] hsr_slave_1: entered promiscuous mode
[   67.714333][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.716787][ T5833] Cannot create hsr debugfs directory
[   67.730131][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.732306][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.740631][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.760774][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.762966][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.771750][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.836353][ T5843] hsr_slave_0: entered promiscuous mode
[   67.840111][ T5843] hsr_slave_1: entered promiscuous mode
[   67.842924][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.845918][ T5843] Cannot create hsr debugfs directory
[   68.087738][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.104018][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.123726][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.128119][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.169075][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.178435][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.187804][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.196250][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.263699][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.274894][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.281409][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.296141][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.388083][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.421334][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.432912][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   68.444885][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.447180][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.461032][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   68.467169][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.469861][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.481740][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.491873][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.494680][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.509908][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.512309][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.546967][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   68.574949][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.577255][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.581718][ T5219] Bluetooth: hci0: command tx timeout
[   68.590036][ T5219] Bluetooth: hci1: command tx timeout
[   68.604839][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.607792][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.659906][ T5219] Bluetooth: hci2: command tx timeout
[   68.779285][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.828704][ T5833] veth0_vlan: entered promiscuous mode
[   68.854303][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.876243][ T5833] veth1_vlan: entered promiscuous mode
[   68.889960][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.936245][ T5834] veth0_vlan: entered promiscuous mode
[   68.961288][ T5833] veth0_macvtap: entered promiscuous mode
[   68.966506][ T5834] veth1_vlan: entered promiscuous mode
[   68.977022][ T5833] veth1_macvtap: entered promiscuous mode
[   69.003413][ T5843] veth0_vlan: entered promiscuous mode
[   69.017655][ T5843] veth1_vlan: entered promiscuous mode
[   69.029601][ T5834] veth0_macvtap: entered promiscuous mode
[   69.036329][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.046618][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.058307][ T5834] veth1_macvtap: entered promiscuous mode
[   69.068344][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.073358][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.077160][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.082318][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.105621][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.117342][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.152747][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.155558][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.158179][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.163014][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.181864][ T5843] veth0_macvtap: entered promiscuous mode
[   69.203127][ T5843] veth1_macvtap: entered promiscuous mode
[   69.219713][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.222958][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.294226][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.306275][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.312943][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.316660][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.347954][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.351449][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.354826][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.358141][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.393194][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.396978][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.426955][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.450699][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.458177][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.519481][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.527988][ T5900] pim6reg: entered allmulticast mode
[   69.530220][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.576414][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.579573][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.936183][ T5906] loop2: detected capacity change from 0 to 32768
[   69.951102][ T5904] loop1: detected capacity change from 0 to 40427
[   69.954237][ T5906] =======================================================
[   69.954237][ T5906] WARNING: The mand mount option has been deprecated and
[   69.954237][ T5906]          and is ignored by this kernel. Remove the mand
[   69.954237][ T5906]          option from the mount to silence this warning.
[   69.954237][ T5906] =======================================================
[   69.974963][ T5904] F2FS-fs (loop1): build fault injection rate: 690
[   69.977879][ T5904] F2FS-fs (loop1): Image doesn't support compression
[   69.995866][ T5904] F2FS-fs (loop1): Image doesn't support compression
[   69.996229][ T5906] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   70.011512][ T5904] F2FS-fs (loop1): invalid crc value
[   70.045394][ T5906] XFS (loop2): Ending clean mount
[   70.053582][ T5906] XFS (loop2): Quotacheck needed: Please wait.
[   70.073319][ T5906] XFS (loop2): Quotacheck: Done.
[   70.084829][   T33] audit: type=1800 audit(1752295865.545:2): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5" name="file1" dev="loop2" ino=9286 res=0 errno=0
[   70.097877][ T5904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   70.120248][ T5833] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   70.129970][ T5864] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   70.299917][ T5864] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   70.302736][ T5864] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.305720][ T5864] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   70.321257][ T5864] usb 1-1: config 1 has no interface number 0
[   70.323737][ T5864] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[   70.328018][ T5864] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[   70.342755][ T5926] bpf setsockopt: ignoring program buffer with optlen=65458 (max_optlen=4096)
[   70.359233][ T5864] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   70.362790][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.372926][ T5864] usb 1-1: Product: syz
[   70.376219][ T5864] usb 1-1: Manufacturer: syz
[   70.378122][ T5864] usb 1-1: SerialNumber: syz
[   70.659177][ T5219] Bluetooth: hci1: command tx timeout
[   70.661231][   T54] Bluetooth: hci0: command tx timeout
[   70.740678][ T5219] Bluetooth: hci2: command tx timeout
[   70.824363][ T5864] usb 1-1: USB disconnect, device number 2
[   71.067242][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.071693][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.141474][ T5937] loop2: detected capacity change from 0 to 40427
[   71.160313][ T5937] F2FS-fs (loop2): heap/no_heap options were deprecated
[   71.163042][ T5937] F2FS-fs (loop2): build fault injection rate: 19
[   71.165519][ T5937] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[   71.184072][ T5937] F2FS-fs (loop2): invalid crc value
[   71.196761][ T5937] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[   71.263340][ T5937] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[   71.273722][ T5937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   71.287333][ T5937] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[   71.362847][    C1] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of blk_update_request+0x5eb/0xe70
[   71.368151][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[   71.368173][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.368182][    C1] Call Trace:
[   71.368188][    C1]  <TASK>
[   71.368196][    C1]  dump_stack_lvl+0x189/0x250
[   71.368222][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.368239][    C1]  ? __pfx_queue_work_on+0x10/0x10
[   71.368295][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.368319][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.368347][    C1]  f2fs_handle_critical_error+0x37c/0x540
[   71.368376][    C1]  f2fs_write_end_io+0x495/0x810
[   71.368389][    C1]  ? blkg_put+0x22/0x240
[   71.368418][    C1]  blk_update_request+0x5eb/0xe70
[   71.368448][    C1]  blk_mq_end_request+0x3e/0x70
[   71.368467][    C1]  blk_done_softirq+0x10a/0x160
[   71.368491][    C1]  handle_softirqs+0x286/0x870
[   71.368509][    C1]  ? schedule+0x165/0x360
[   71.368531][    C1]  ? run_ksoftirqd+0x9b/0x100
[   71.368553][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[   71.368572][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.368590][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.368624][    C1]  run_ksoftirqd+0x9b/0x100
[   71.368642][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[   71.368663][    C1]  smpboot_thread_fn+0x542/0xa60
[   71.368679][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.368698][    C1]  kthread+0x711/0x8a0
[   71.368720][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   71.368734][    C1]  ? __pfx_kthread+0x10/0x10
[   71.368754][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.368772][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.368794][    C1]  ? __pfx_kthread+0x10/0x10
[   71.368813][    C1]  ret_from_fork+0x3fc/0x770
[   71.368832][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[   71.368851][    C1]  ? __switch_to_asm+0x39/0x70
[   71.368869][    C1]  ? __switch_to_asm+0x33/0x70
[   71.368885][    C1]  ? __pfx_kthread+0x10/0x10
[   71.368905][    C1]  ret_from_fork_asm+0x1a/0x30
[   71.368934][    C1]  </TASK>
[   71.445867][    C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   71.448730][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[   71.448751][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.448762][    C1] Call Trace:
[   71.448769][    C1]  <TASK>
[   71.448776][    C1]  dump_stack_lvl+0x189/0x250
[   71.448802][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.448832][    C1]  ? __pfx_queue_work_on+0x10/0x10
[   71.448849][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.448870][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.448897][    C1]  f2fs_handle_critical_error+0x37c/0x540
[   71.448924][    C1]  f2fs_write_end_io+0x495/0x810
[   71.448937][    C1]  ? blkg_put+0x22/0x240
[   71.448965][    C1]  blk_update_request+0x5eb/0xe70
[   71.449001][    C1]  blk_mq_end_request+0x3e/0x70
[   71.449021][    C1]  blk_done_softirq+0x10a/0x160
[   71.449041][    C1]  handle_softirqs+0x286/0x870
[   71.449057][    C1]  ? schedule+0x165/0x360
[   71.449078][    C1]  ? run_ksoftirqd+0x9b/0x100
[   71.449100][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[   71.449118][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.449136][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.449151][    C1]  run_ksoftirqd+0x9b/0x100
[   71.449169][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[   71.449191][    C1]  smpboot_thread_fn+0x542/0xa60
[   71.449209][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.449248][    C1]  kthread+0x711/0x8a0
[   71.449293][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   71.449305][    C1]  ? __pfx_kthread+0x10/0x10
[   71.449322][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.449340][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.449358][    C1]  ? __pfx_kthread+0x10/0x10
[   71.449378][    C1]  ret_from_fork+0x3fc/0x770
[   71.449396][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[   71.449410][    C1]  ? __switch_to_asm+0x39/0x70
[   71.449423][    C1]  ? __switch_to_asm+0x33/0x70
[   71.449435][    C1]  ? __pfx_kthread+0x10/0x10
[   71.449466][    C1]  ret_from_fork_asm+0x1a/0x30
[   71.449502][    C1]  </TASK>
[   71.449509][    C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   71.530546][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[   71.530564][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.530572][    C1] Call Trace:
[   71.530578][    C1]  <TASK>
[   71.530585][    C1]  dump_stack_lvl+0x189/0x250
[   71.530606][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.530621][    C1]  ? __pfx_queue_work_on+0x10/0x10
[   71.530636][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.530656][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.530682][    C1]  f2fs_handle_critical_error+0x37c/0x540
[   71.530710][    C1]  f2fs_write_end_io+0x495/0x810
[   71.530722][    C1]  ? blkg_put+0x22/0x240
[   71.530748][    C1]  blk_update_request+0x5eb/0xe70
[   71.530775][    C1]  blk_mq_end_request+0x3e/0x70
[   71.530792][    C1]  blk_done_softirq+0x10a/0x160
[   71.530809][    C1]  handle_softirqs+0x286/0x870
[   71.530824][    C1]  ? schedule+0x165/0x360
[   71.530846][    C1]  ? run_ksoftirqd+0x9b/0x100
[   71.530868][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[   71.530885][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.530901][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.530914][    C1]  run_ksoftirqd+0x9b/0x100
[   71.530930][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[   71.530947][    C1]  smpboot_thread_fn+0x542/0xa60
[   71.530964][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.530984][    C1]  kthread+0x711/0x8a0
[   71.531005][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   71.531021][    C1]  ? __pfx_kthread+0x10/0x10
[   71.531041][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.531059][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.531074][    C1]  ? __pfx_kthread+0x10/0x10
[   71.531091][    C1]  ret_from_fork+0x3fc/0x770
[   71.531108][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[   71.531127][    C1]  ? __switch_to_asm+0x39/0x70
[   71.531142][    C1]  ? __switch_to_asm+0x33/0x70
[   71.531157][    C1]  ? __pfx_kthread+0x10/0x10
[   71.531175][    C1]  ret_from_fork_asm+0x1a/0x30
[   71.531204][    C1]  </TASK>
[   71.531210][    C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   71.610675][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[   71.610694][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.610704][    C1] Call Trace:
[   71.610711][    C1]  <TASK>
[   71.610717][    C1]  dump_stack_lvl+0x189/0x250
[   71.610742][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.610760][    C1]  ? __pfx_queue_work_on+0x10/0x10
[   71.610776][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.610798][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.610826][    C1]  f2fs_handle_critical_error+0x37c/0x540
[   71.610852][    C1]  f2fs_write_end_io+0x495/0x810
[   71.610866][    C1]  ? blkg_put+0x22/0x240
[   71.610893][    C1]  blk_update_request+0x5eb/0xe70
[   71.610923][    C1]  blk_mq_end_request+0x3e/0x70
[   71.610943][    C1]  blk_done_softirq+0x10a/0x160
[   71.610962][    C1]  handle_softirqs+0x286/0x870
[   71.610977][    C1]  ? schedule+0x165/0x360
[   71.610999][    C1]  ? run_ksoftirqd+0x9b/0x100
[   71.611021][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[   71.611039][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.611057][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.611071][    C1]  run_ksoftirqd+0x9b/0x100
[   71.611090][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[   71.611113][    C1]  smpboot_thread_fn+0x542/0xa60
[   71.611130][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.611153][    C1]  kthread+0x711/0x8a0
[   71.611174][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   71.611189][    C1]  ? __pfx_kthread+0x10/0x10
[   71.611210][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.611256][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.611276][    C1]  ? __pfx_kthread+0x10/0x10
[   71.611296][    C1]  ret_from_fork+0x3fc/0x770
[   71.611314][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[   71.611333][    C1]  ? __switch_to_asm+0x39/0x70
[   71.611351][    C1]  ? __switch_to_asm+0x33/0x70
[   71.611367][    C1]  ? __pfx_kthread+0x10/0x10
[   71.611387][    C1]  ret_from_fork_asm+0x1a/0x30
[   71.611417][    C1]  </TASK>
[   71.611423][    C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   71.689706][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[   71.689727][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.689736][    C1] Call Trace:
[   71.689742][    C1]  <TASK>
[   71.689748][    C1]  dump_stack_lvl+0x189/0x250
[   71.689771][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.689788][    C1]  ? __pfx_queue_work_on+0x10/0x10
[   71.689804][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.689822][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.689843][    C1]  f2fs_handle_critical_error+0x37c/0x540
[   71.689862][    C1]  f2fs_write_end_io+0x495/0x810
[   71.689873][    C1]  ? blkg_put+0x22/0x240
[   71.689893][    C1]  blk_update_request+0x5eb/0xe70
[   71.689915][    C1]  blk_mq_end_request+0x3e/0x70
[   71.689930][    C1]  blk_done_softirq+0x10a/0x160
[   71.689949][    C1]  handle_softirqs+0x286/0x870
[   71.689965][    C1]  ? schedule+0x165/0x360
[   71.689985][    C1]  ? run_ksoftirqd+0x9b/0x100
[   71.690002][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[   71.690015][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.690028][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.690039][    C1]  run_ksoftirqd+0x9b/0x100
[   71.690052][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[   71.690068][    C1]  smpboot_thread_fn+0x542/0xa60
[   71.690081][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[   71.690097][    C1]  kthread+0x711/0x8a0
[   71.690118][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   71.690134][    C1]  ? __pfx_kthread+0x10/0x10
[   71.690154][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.690168][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.690183][    C1]  ? __pfx_kthread+0x10/0x10
[   71.690197][    C1]  ret_from_fork+0x3fc/0x770
[   71.690210][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[   71.690252][    C1]  ? __switch_to_asm+0x39/0x70
[   71.690267][    C1]  ? __switch_to_asm+0x33/0x70
[   71.690282][    C1]  ? __pfx_kthread+0x10/0x10
[   71.690301][    C1]  ret_from_fork_asm+0x1a/0x30
[   71.690330][    C1]  </TASK>
[   71.690335][    C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   71.697420][ T5949] input: syz1 as /devices/virtual/input/input4
[   71.778323][ T5833] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint
[   71.829068][ T5954] Bluetooth: MGMT ver 1.23
[   71.971444][ T5958] netlink: 'syz.0.18': attribute type 12 has an invalid length.
[   71.973957][ T5958] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.18'.
[   72.045491][ T5960] Bluetooth: hci0: invalid len left 7, exp >= 141
[   72.342113][ T5975] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   72.344871][ T5975] netlink: 'syz.0.25': attribute type 4 has an invalid length.
[   72.347254][ T5975] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.25'.
[   72.354873][ T5975] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   72.357933][ T5975] netlink: 'syz.0.25': attribute type 4 has an invalid length.
[   72.361504][ T5975] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.25'.
[   72.381636][ T5975] loop0: detected capacity change from 0 to 2048
[   72.448925][ T5898] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   72.468724][ T5864] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   72.602704][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   72.606882][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[   72.613416][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[   72.620617][ T5898] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[   72.624122][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.627217][ T5898] usb 3-1: Product: syz
[   72.630876][ T5898] usb 3-1: Manufacturer: syz
[   72.631382][ T5864] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[   72.632799][ T5898] usb 3-1: SerialNumber: syz
[   72.643699][ T5898] usb 3-1: config 0 descriptor??
[   72.648775][ T5864] usb 2-1: config 0 has no interface number 0
[   72.649142][ T5969] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   72.651350][ T5864] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   72.654309][ T5969] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   72.658197][ T5864] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   72.668438][ T5977] loop0: detected capacity change from 0 to 32768
[   72.672012][ T5898] usb 3-1: ucan: probing device on interface #0
[   72.676574][ T5977] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.26 (5977)
[   72.684838][ T5864] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   72.688768][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   72.693446][ T5864] usb 2-1: Product: syz
[   72.700832][ T5864] usb 2-1: SerialNumber: syz
[   72.717735][ T5864] usb 2-1: config 0 descriptor??
[   72.722094][ T5977] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   72.731679][ T5864] cm109 2-1:0.8: invalid payload size 0, expected 4
[   72.736626][ T5977] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[   72.742049][ T5219] Bluetooth: hci1: command tx timeout
[   72.744207][ T5219] Bluetooth: hci0: command tx timeout
[   72.748084][ T5864] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5
[   72.749667][ T5977] BTRFS info (device loop0): using free-space-tree
[   72.819437][   T54] Bluetooth: hci2: command tx timeout
[   72.874318][ T5977] BTRFS info (device loop0): rebuilding free space tree
[   72.913914][ T5898] usb 3-1: ucan: could not read protocol version, ret=-71
[   72.916698][ T5898] usb 3-1: ucan: probe failed; try to update the device firmware
[   72.966973][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   72.969303][ T5898] usb 3-1: USB disconnect, device number 2
[   72.970988][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   72.977032][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   72.980095][ T5864] usb 2-1: USB disconnect, device number 2
[   72.984640][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   72.987287][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   73.015923][ T5864] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   73.125719][ T5843] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   73.441476][ T6005] macvlan2: entered allmulticast mode
[   73.444305][ T6005] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   73.447489][ T6005] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   73.463219][ T6005] team0: Port device macvlan2 added
[   73.487466][ T6007] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.720824][ T6011] loop1: detected capacity change from 0 to 4096
[   73.747390][ T6011] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   73.758833][ T6011] ntfs3(loop1): Failed to load $Extend (-22).
[   73.761403][ T6011] ntfs3(loop1): Failed to initialize $Extend.
[   73.795296][ T6011] ntfs3(loop1): ino=21, The size of extended attributes must not exceed 64KiB
[   73.858586][ T6009] loop0: detected capacity change from 0 to 32768
[   73.870653][ T6007] loop2: detected capacity change from 0 to 32768
[   73.870718][ T6009] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   73.909698][ T6007] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.31 (6007)
[   73.914677][ T6009] XFS (loop0): Ending clean mount
[   73.916799][ T6009] XFS (loop0): Quotacheck needed: Please wait.
[   73.925944][ T6009] XFS (loop0): Quotacheck: Done.
[   73.943804][ T6007] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   73.961655][ T6007] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[   73.965969][ T6007] BTRFS info (device loop2): using free-space-tree
[   74.032850][ T5843] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   74.082547][ T5833] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   74.919739][   T54] Bluetooth: hci0: command tx timeout
[   74.921904][   T54] Bluetooth: hci1: command tx timeout
[   74.925259][ T5219] Bluetooth: hci2: command tx timeout
[   74.986892][ T6054] sp0: Synchronizing with TNC
[   75.603495][ T6061] capability: warning: `syz.0.43' uses deprecated v2 capabilities in a way that may be insecure
[   75.742750][ T6052] loop2: detected capacity change from 0 to 40427
[   75.747193][ T6052] F2FS-fs (loop2): build fault injection type: 0x7
[   75.770894][ T6052] F2FS-fs (loop2): invalid crc value
[   75.815264][ T6068] loop0: detected capacity change from 0 to 16
[   75.823814][ T6068] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   75.856346][ T6052] F2FS-fs (loop2): Start checkpoint disabled!
[   75.864658][ T6068] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   75.895583][ T6052] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   76.616453][ T6074] loop0: detected capacity change from 0 to 32768
[   76.667960][ T6074] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   76.748018][ T6074] XFS (loop0): Ending clean mount
[   76.836000][ T5843] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   77.018525][ T5884] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   77.178870][ T5884] usb 3-1: Using ep0 maxpacket: 16
[   77.188767][ T5884] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[   77.195301][ T5884] usb 3-1: config 0 has no interface number 0
[   77.198015][ T5884] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11
[   77.224857][ T5884] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[   77.250539][ T5884] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[   77.256879][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[   77.261720][ T5884] usb 3-1: Manufacturer: syz
[   77.263462][ T5884] usb 3-1: SerialNumber: syz
[   77.274262][ T5884] usb 3-1: config 0 descriptor??
[   77.277254][ T6088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   77.386138][ T6097] netlink: 104 bytes leftover after parsing attributes in process `syz.1.52'.
[   77.727580][ T5884] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71
[   77.743327][ T5884] usb 3-1: USB disconnect, device number 3
[   78.218870][ T6122] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   78.341954][ T6118] loop1: detected capacity change from 0 to 32768
[   78.490537][ T6118] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_target=invalid device 79,nojournal_transaction_names
[   78.490561][ T6118]   allowing incompatible features above 0.0: (unknown version)
[   78.490571][ T6118]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   78.517144][ T6118] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   78.521652][ T6118] bcachefs (loop1): initializing new filesystem
[   78.534896][ T6118] bcachefs (loop1): going read-write
[   78.553529][ T6118] bcachefs (loop1): marking superblocks
[   78.611808][ T6118] bcachefs (loop1): initializing freespace
[   78.620279][ T6118] bcachefs (loop1): done initializing freespace
[   78.628987][ T6118] bcachefs (loop1): reading snapshots table
[   78.631385][ T6118] bcachefs (loop1): reading snapshots done
[   78.669846][ T6118] bcachefs (loop1): done starting filesystem
[   78.850984][ T6150] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   79.111313][ T6118] syz.1.62 (6118) used greatest stack depth: 16296 bytes left
[   79.159011][ T5834] bcachefs (loop1): shutting down
[   79.161420][ T5834] bcachefs (loop1): going read-only
[   79.164071][ T5834] bcachefs (loop1): finished waiting for writes to stop
[   79.176864][ T5834] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[   79.214085][ T5834] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   79.224758][ T5834] bcachefs (loop1): clean shutdown complete, journal seq 4
[   79.229737][ T5834] bcachefs (loop1): marking filesystem clean
[   79.262077][ T5834] bcachefs (loop1): shutdown complete
[   79.652587][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   79.658496][ T6162] loop0: detected capacity change from 0 to 512
[   79.839607][   T10] usb 3-1: Using ep0 maxpacket: 16
[   79.844830][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.848035][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.860956][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   79.865378][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   79.878382][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   79.897975][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   79.915925][   T10] usb 3-1: SerialNumber: syz
[   79.951866][   T10] hub 3-1:1.0: bad descriptor, ignoring hub
[   79.954454][   T10] hub 3-1:1.0: probe with driver hub failed with error -5
[   79.960154][   T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[   80.380898][ T6155] raw-gadget.0 gadget.2: fail, usb_ep_set_wedge returned -11
[   80.503390][ T5897] usb 3-1: USB disconnect, device number 4
[   81.103322][ T6174] loop0: detected capacity change from 0 to 128
[   81.184978][ T6174] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   81.195055][ T6174] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   81.230157][ T6183] loop1: detected capacity change from 0 to 512
[   81.277301][ T6183] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.83: bad orphan inode 11
[   81.284488][ T5843] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   81.287831][ T6183] ext4_test_bit(bit=10, block=4) = 1
[   81.290961][ T6183] is_bad_inode(inode)=0
[   81.292679][ T6183] NEXT_ORPHAN(inode)=2080374784
[   81.294590][ T6183] max_ino=32
[   81.295907][ T6183] i_nlink=0
[   81.297657][ T6183] EXT4-fs (loop1): 1 truncate cleaned up
[   81.344450][ T6183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.457218][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.618899][ T5897] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   81.685681][ T6198] loop2: detected capacity change from 0 to 1024
[   81.738326][ T6198] hfsplus: xattr searching failed
[   81.747077][   T33] audit: type=1800 audit(1752295877.205:3): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.88" name="file1" dev="loop2" ino=2 res=0 errno=0
[   81.790978][ T5897] usb 1-1: Using ep0 maxpacket: 32
[   81.796406][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.813438][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.839183][ T6199] hfsplus: xattr searching failed
[   81.847104][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   81.866287][ T5897] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   81.871665][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.878117][ T5897] usb 1-1: config 0 descriptor??
[   82.435069][ T5897] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input7
[   82.547603][ T5897] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input8
[   82.727026][ T5897] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0
[   82.920375][ T6202] syz.0.84 uses obsolete (PF_INET,SOCK_PACKET)
[   83.061928][ T5898] usb 1-1: USB disconnect, device number 3
[   83.346502][ T6212] loop2: detected capacity change from 0 to 512
[   83.350424][ T6212] EXT4-fs: Ignoring removed oldalloc option
[   83.376501][ T6212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.382590][ T6212] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   83.445967][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.547006][ T6218] netlink: 160 bytes leftover after parsing attributes in process `syz.2.95'.
[   83.556611][ T6218] netlink: 'syz.2.95': attribute type 1 has an invalid length.
[   83.564407][ T6218] netlink: 'syz.2.95': attribute type 2 has an invalid length.
[   83.567382][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.95'.
[   83.929816][ T6236] loop2: detected capacity change from 0 to 64
[   83.998856][   T33] audit: type=1326 audit(1752295879.455:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.1.91" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73f18e929 code=0x7fc00000
[   84.187806][ T6246] affs: No valid root block on device nullb0
[   84.337884][ T6252] sch_tbf: burst 8256 is lower than device lo mtu (65550) !
[   84.474024][ T6244] loop1: detected capacity change from 0 to 32768
[   84.483427][ T6244] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.107 (6244)
[   84.528094][ T6244] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   84.538946][ T6244] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[   84.541805][ T6244] BTRFS info (device loop1): using free-space-tree
[   84.586344][ T6264] loop2: detected capacity change from 0 to 512
[   84.645544][ T6264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.654888][ T6264] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.665395][ T6264] Quota error (device loop2): do_check_range: Getting block 1702428675 out of range 1-5
[   84.672708][ T6264] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   84.676513][ T6264] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.115: Failed to acquire dquot type 1
[   84.695493][ T6244] BTRFS info (device loop1): rebuilding free space tree
[   84.705150][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.827603][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'.
[   84.963776][ T6244] BTRFS info (device loop1): space_info DATA+METADATA (sub-group id 0) has 0 free, is not full
[   84.968097][ T6244] BTRFS info (device loop1): space_info total=3276800, used=86016, pinned=155648, reserved=53248, may_use=2981888, readonly=0 zone_unusable=0
[   84.974129][ T6244] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1441792
[   84.977965][ T6244] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[   84.981408][ T6244] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[   84.984199][ T6244] BTRFS info (device loop1): delayed_block_rsv: size 32768 reserved 32768
[   84.987850][ T6244] BTRFS info (device loop1): delayed_refs_rsv: size 1507328 reserved 1507328
[   85.092842][ T5834] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   85.212886][ T6292] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.216871][ T6292] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.220504][ T6292] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.224015][ T6292] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.257863][ T6292] Zero length message leads to an empty skb
[   85.269120][ T6291] loop0: detected capacity change from 0 to 4096
[   85.433632][ T6295] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.985553][ T6308] loop2: detected capacity change from 0 to 8192
[   86.040483][ T6311] loop1: detected capacity change from 0 to 16
[   86.106129][ T6311] erofs (device loop1): mounted with root inode @ nid 36.
[   86.771434][ T6312] erofs (device loop1): readahead error at folio 2 @ nid 89
[   86.774918][ T6312] erofs (device loop1): readahead error at folio 0 @ nid 89
[   86.777563][ T6312] syz.1.128: attempt to access beyond end of device
[   86.777563][ T6312] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16
[   86.782250][ T6312] syz.1.128: attempt to access beyond end of device
[   86.782250][ T6312] loop1: rw=0, sector=524296, nr_sectors = 8 limit=16
[   86.786955][ T6312] erofs (device loop1): read error -5 @ 0 of nid 89
[   86.802197][   T33] audit: type=1800 audit(1752295882.255:5): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.128" name="file2" dev="loop1" ino=89 res=0 errno=0
[   86.837957][   T96] cfg80211: failed to load regulatory.db
[   87.405823][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.135'.
[   87.421516][ T1269] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   87.465721][ T6331] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   87.469347][ T6331] overlayfs: failed to set xattr on upper
[   87.471721][ T6331] overlayfs: ...falling back to redirect_dir=nofollow.
[   87.474285][ T6331] overlayfs: ...falling back to metacopy=off.
[   87.476609][ T6331] overlayfs: ...falling back to index=off.
[   87.479524][ T6331] overlayfs: ...falling back to uuid=null.
[   87.579373][ T1269] usb 3-1: Using ep0 maxpacket: 16
[   87.586003][ T1269] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[   87.593459][ T1269] usb 3-1: config 0 has no interface number 0
[   87.598529][ T1269] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=df.0a
[   87.602917][ T1269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.606017][ T1269] usb 3-1: Product: syz
[   87.607699][ T1269] usb 3-1: Manufacturer: syz
[   87.611998][ T1269] usb 3-1: SerialNumber: syz
[   87.616289][ T1269] usb 3-1: config 0 descriptor??
[   87.630026][ T1269] ums-datafab 3-1:0.88: USB Mass Storage device detected
[   87.703323][ T1269] ums-sddr55 3-1:0.88: USB Mass Storage device detected
[   87.825490][ T1269] usb 3-1: USB disconnect, device number 5
[   87.879872][ T5898] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   87.963926][ T6343] loop0: detected capacity change from 0 to 512
[   87.980724][ T6343] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   87.986362][ T6343] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   88.012281][ T6343] EXT4-fs (loop0): 1 truncate cleaned up
[   88.016068][ T6343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.038221][ T6343] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 3: comm syz.0.140: lblock 1 mapped to illegal pblock 3 (length 1)
[   88.045474][ T5898] usb 2-1: Using ep0 maxpacket: 16
[   88.052303][ T5898] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[   88.055523][ T5898] usb 2-1: config 0 has no interface number 0
[   88.057978][ T5898] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   88.063897][ T5898] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   88.079982][ T5898] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   88.083673][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   88.086756][ T5898] usb 2-1: Product: syz
[   88.088487][ T5898] usb 2-1: SerialNumber: syz
[   88.108103][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.116596][ T5898] usb 2-1: config 0 descriptor??
[   88.135423][ T5898] cm109 2-1:0.8: invalid payload size 0, expected 4
[   88.144121][ T5898] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input9
[   88.340940][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[   88.422505][ T6353] loop2: detected capacity change from 0 to 256
[   88.445787][ T6353] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   88.455666][ T6353] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   88.464196][ T6353] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   88.529861][ T1269] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   88.545652][ T5897] usb 2-1: USB disconnect, device number 3
[   88.563533][ T5897] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   88.678789][ T1269] usb 1-1: Using ep0 maxpacket: 32
[   88.682486][ T1269] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[   88.685611][ T1269] usb 1-1: config 0 has no interface number 0
[   88.687712][ T1269] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   88.693405][ T1269] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[   88.696177][ T1269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.698596][ T1269] usb 1-1: Product: syz
[   88.700376][ T1269] usb 1-1: Manufacturer: syz
[   88.701778][ T1269] usb 1-1: SerialNumber: syz
[   88.706172][ T1269] usb 1-1: config 0 descriptor??
[   88.714263][ T1269] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[   88.717821][ T1269] em28xx 1-1:0.132: Video interface 132 found:
[   88.909270][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   89.069803][   T10] usb 3-1: Using ep0 maxpacket: 16
[   89.089944][   T10] usb 3-1: config 4 has an invalid interface number: 51 but max is 0
[   89.093000][   T10] usb 3-1: config 4 has no interface number 0
[   89.095315][   T10] usb 3-1: config 4 interface 51 has no altsetting 0
[   89.116623][ T1269] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[   89.121639][   T10] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[   89.131379][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.136236][   T10] usb 3-1: Product: syz
[   89.137621][   T10] usb 3-1: Manufacturer: syz
[   89.139697][   T10] usb 3-1: SerialNumber: syz
[   89.148538][   T10] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22
[   89.580758][ T5898] usb 3-1: USB disconnect, device number 6
[   89.602855][ T1269] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[   89.607168][ T1269] em28xx 1-1:0.132: board has no eeprom
[   89.668751][ T1269] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[   89.671983][ T1269] em28xx 1-1:0.132: analog set to bulk mode.
[   89.677459][   T10] em28xx 1-1:0.132: Registering V4L2 extension
[   89.685628][ T1269] usb 1-1: USB disconnect, device number 4
[   89.691617][ T1269] em28xx 1-1:0.132: Disconnecting em28xx
[   89.773517][   T10] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[   89.776475][   T10] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[   89.780614][   T10] em28xx 1-1:0.132: No AC97 audio processor
[   89.789183][   T10] usb 1-1: Decoder not found
[   89.791103][   T10] em28xx 1-1:0.132: failed to create media graph
[   89.793572][   T10] em28xx 1-1:0.132: V4L2 device video103 deregistered
[   89.801188][   T10] em28xx 1-1:0.132: Remote control support is not available for this card.
[   89.805333][ T1269] em28xx 1-1:0.132: Closing input extension
[   89.823311][ T1269] em28xx 1-1:0.132: Freeing device
[   90.299073][ T6379] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.311584][ T6379] ubi31: attaching mtd0
[   90.324951][ T6379] ubi31: scanning is finished
[   90.326939][ T6379] ubi31: empty MTD device detected
[   90.561369][ T6384] loop2: detected capacity change from 0 to 16
[   90.581253][ T6384] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[   90.585109][ T6379] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   90.587945][ T6379] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   90.590685][ T6379] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   90.593019][ T6384] erofs (device loop2): mounted with root inode @ nid 36.
[   90.593281][ T6379] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   90.599319][ T6379] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   90.601715][ T6379] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   90.604278][ T6379] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2058310199
[   90.606748][ T6384] syz.2.153: attempt to access beyond end of device
[   90.606748][ T6384] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16
[   90.607306][ T6379] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   90.619123][ T6387] ubi31: background thread "ubi_bgt31d" started, PID 6387
[   90.628222][ T6384] erofs (device loop2): read error -5 @ 0 of nid 36
[   91.422693][ T6414] netlink: 176 bytes leftover after parsing attributes in process `syz.0.166'.
[   91.476389][ T6416] usb usb8: usbfs: process 6416 (syz.1.167) did not claim interface 0 before use
[   92.658026][ T6439] mkiss: ax0: crc mode is auto.
[   93.008220][ T6445] netlink: 372 bytes leftover after parsing attributes in process `syz.0.180'.
[   93.055316][ T6450] loop2: detected capacity change from 0 to 512
[   93.096282][ T6450] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   93.120939][ T6450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002]
[   93.145482][ T6450] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.182: missing EA_INODE flag
[   93.164411][ T6450] EXT4-fs (loop2): Remounting filesystem read-only
[   93.167325][ T6450] EXT4-fs (loop2): 1 orphan inode deleted
[   93.180081][ T6450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.186842][ T6454] loop0: detected capacity change from 0 to 2048
[   93.213038][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.302753][ T6454] syz.0.183: attempt to access beyond end of device
[   93.302753][ T6454] loop0: rw=0, sector=562949953421392, nr_sectors = 2 limit=2048
[   93.308433][ T6454] NILFS (loop0): I/O error reading meta-data file (ino=4, block-offset=0)
[   93.329891][ T6454] NILFS (loop0): error -5 while loading last checkpoint (checkpoint number=2)
[   93.464131][ T6462] loop1: detected capacity change from 0 to 8192
[   93.475765][ T6462] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   93.636482][ T6476] trusted_key: encrypted_key: insufficient parameters specified
[   93.665123][ T6474] loop1: detected capacity change from 0 to 2048
[   93.787438][ T6482] loop1: detected capacity change from 0 to 1764
[   93.917562][ T6491] xt_TCPMSS: Only works on TCP SYN packets
[   93.940106][ T6492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'.
[   94.211349][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'.
[   94.215495][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'.
[   94.239143][ T6516] loop0: detected capacity change from 0 to 256
[   94.259901][ T5864] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   94.282883][ T6516] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   94.289171][ T6516] FAT-fs (loop0): Filesystem has been set read-only
[   94.420638][ T5864] usb 2-1: Using ep0 maxpacket: 32
[   94.425234][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.429537][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.433132][ T5864] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   94.436464][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.450422][ T5864] usb 2-1: config 0 descriptor??
[   94.458086][ T5864] hub 2-1:0.0: USB hub found
[   94.654981][ T6529] syz.0.218: attempt to access beyond end of device
[   94.654981][ T6529] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0
[   94.660349][ T6529] qnx6: unable to read the first superblock
[   94.663841][ T6529] syz.0.218: attempt to access beyond end of device
[   94.663841][ T6529] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[   94.667793][ T6529] qnx6: unable to read the first superblock
[   94.669766][ T6529] qnx6: unable to read the first superblock
[   94.792666][ T5864] hub 2-1:0.0: 10 ports detected
[   94.798110][ T5864] hub 2-1:0.0: insufficient power available to use all downstream ports
[   95.216145][ T5864] usb 2-1: USB disconnect, device number 4
[   95.373459][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'.
[   95.641324][ T6550] loop0: detected capacity change from 0 to 24
[   95.832569][ T6561] loop1: detected capacity change from 0 to 2048
[   95.837888][ T6561] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   95.870915][ T6562] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   95.897201][ T6561] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=104, inode=16, rec_len=24, name_len=128
[   95.922492][ T6561] Remounting filesystem read-only
[   95.924942][ T6557] loop0: detected capacity change from 0 to 4096
[   96.419483][ T5898] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   96.568820][ T5898] usb 2-1: Using ep0 maxpacket: 32
[   96.573908][ T5898] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[   96.577225][ T5898] usb 2-1: config 0 has no interface number 0
[   96.583838][ T5898] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   96.587656][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.591167][ T5898] usb 2-1: Product: syz
[   96.593034][ T5898] usb 2-1: Manufacturer: syz
[   96.595225][ T5898] usb 2-1: SerialNumber: syz
[   96.606793][ T5898] usb 2-1: config 0 descriptor??
[   96.620550][ T5898] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   96.834882][ T5898] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   96.854555][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.239'.
[   96.860574][ T5898] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   96.870592][ T6575] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   96.952847][ T6577] loop2: detected capacity change from 0 to 128
[   96.970263][ T6577] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   96.977567][ T6577] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   97.069236][ T6577] loop2: detected capacity change from 128 to 64
[   97.082031][ T6577] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Out of memory
[   97.087574][ T6577] EXT4-fs error (device loop2): ext4_ext_tree_init:883: inode #13: comm syz.2.240: mark_inode_dirty error
[   97.092965][ T6577] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Out of memory
[   97.096835][ T6577] EXT4-fs error (device loop2): __ext4_new_inode:1343: inode #13: comm syz.2.240: mark_inode_dirty error
[   97.103487][ T6577] EXT4-fs error (device loop2) in __ext4_new_inode:1345: Out of memory
[   97.107207][ T6577] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Out of memory
[   97.113237][ T6577] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #13: comm syz.2.240: mark_inode_dirty error
[   97.117850][ T6577] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -12)
[   97.150740][ T5833] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Out of memory
[   97.157137][ T5833] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz-executor: mark_inode_dirty error
[   97.249434][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[   97.255059][ T5884] usb 2-1: USB disconnect, device number 5
[   97.272718][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   97.284114][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   97.301942][ T5884] quatech2 2-1:0.51: device disconnected
[   97.403032][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.451818][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.456729][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.512747][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.516125][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.585002][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.588237][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.675875][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.680519][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.795126][   T12] bridge_slave_1: left allmulticast mode
[   97.797027][   T12] bridge_slave_1: left promiscuous mode
[   97.801882][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.840653][   T12] bridge_slave_0: left allmulticast mode
[   97.842793][   T12] bridge_slave_0: left promiscuous mode
[   97.845052][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.943633][ T5884] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   97.946434][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   97.956354][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   97.962053][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   97.973510][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   97.977976][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   98.141895][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[   98.146294][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   98.151144][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   98.169504][ T5884] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[   98.174601][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.177974][ T5884] usb 1-1: Product: syz
[   98.179970][ T5884] usb 1-1: Manufacturer: syz
[   98.182111][ T5884] usb 1-1: SerialNumber: syz
[   98.194180][ T5884] usb 1-1: config 0 descriptor??
[   98.216873][ T5884] iguanair 1-1:0.0: probe with driver iguanair failed with error -12
[   98.277539][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.284437][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.291514][   T12] bond0 (unregistering): Released all slaves
[   98.427203][   T10] usb 1-1: USB disconnect, device number 5
[   98.428771][   T12] IPVS: stopping backup sync thread 6575 ...
[   98.703569][ T6594] chnl_net:caif_netlink_parms(): no params data found
[   98.832156][   T12] hsr_slave_0: left promiscuous mode
[   98.836454][   T12] hsr_slave_1: left promiscuous mode
[   98.840571][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.843561][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.847612][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.851994][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.869515][   T12] veth1_macvtap: left promiscuous mode
[   98.871521][   T12] veth0_macvtap: left promiscuous mode
[   98.873229][   T12] veth1_vlan: left promiscuous mode
[   98.874884][   T12] veth0_vlan: left promiscuous mode
[   98.943577][   T12] pim6reg (unregistering): left allmulticast mode
[   99.123000][ T6614] ieee802154 phy0 wpan0: encryption failed: -22
[   99.594876][ T5884] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   99.769128][ T5884] usb 1-1: Using ep0 maxpacket: 16
[   99.791826][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.795614][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   99.818351][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   99.825481][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   99.830620][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   99.866646][ T5884] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   99.873894][ T5884] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   99.883225][ T5884] usb 1-1: Manufacturer: syz
[   99.890381][ T5884] usb 1-1: config 0 descriptor??
[   99.913573][   T12] team0 (unregistering): Port device team_slave_1 removed
[   99.952002][   T12] team0 (unregistering): Port device team_slave_0 removed
[  100.036804][ T5219] Bluetooth: hci0: command tx timeout
[  100.158900][   T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  100.170088][ T5884] rc_core: IR keymap rc-hauppauge not found
[  100.172661][ T5884] Registered IR keymap rc-empty
[  100.177025][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.191043][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.226563][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  100.235490][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11
[  100.251200][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.279915][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.308916][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.318057][ T6613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.333369][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.337811][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.339401][ T6613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.347419][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.352372][   T47] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  100.356582][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.379423][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.401016][   T47] usb 2-1: config 0 descriptor??
[  100.409426][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.429076][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.439922][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.468928][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.489733][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.511574][ T5884] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  100.514719][ T5884] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  100.599987][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.603279][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.606078][ T6594] bridge_slave_0: entered allmulticast mode
[  100.634714][ T6594] bridge_slave_0: entered promiscuous mode
[  100.640583][ T6624] binder: 6623:6624 ioctl c0306201 200000000640 returned -22
[  100.655956][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.662270][ T5884] usb 1-1: USB disconnect, device number 6
[  100.667238][   T47] usbhid 2-1:0.0: can't add hid device: -71
[  100.677342][   T47] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  100.679902][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.682309][   T47] usb 2-1: USB disconnect, device number 6
[  100.693348][ T6594] bridge_slave_1: entered allmulticast mode
[  100.720847][ T6594] bridge_slave_1: entered promiscuous mode
[  100.860766][ T6594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.866723][ T6594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.904974][ T6594] team0: Port device team_slave_0 added
[  100.914363][ T6594] team0: Port device team_slave_1 added
[  100.961803][ T6594] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.967202][ T6594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.980353][ T6594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.991749][ T6594] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.994541][ T6594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.005689][ T6594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.073768][ T6594] hsr_slave_0: entered promiscuous mode
[  101.076170][ T6594] hsr_slave_1: entered promiscuous mode
[  101.078267][ T6594] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.081261][ T6594] Cannot create hsr debugfs directory
[  101.334841][ T6594] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  101.360216][ T6594] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  101.366770][ T6644] loop1: detected capacity change from 0 to 4096
[  101.370831][ T6594] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  101.378147][ T6594] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  101.427872][ T6644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.433589][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.435874][ T6594] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.439173][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.441915][ T6594] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.495977][ T6594] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.518163][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.531607][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.594083][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.664461][ T6594] 8021q: adding VLAN 0 to HW filter on device team0
[  101.681932][ T6664] loop0: detected capacity change from 0 to 8
[  101.700009][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.702632][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.731165][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.734088][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.735978][ T6667] loop1: detected capacity change from 0 to 512
[  101.746387][ T6664] SQUASHFS error: Failed to read block 0x1ec: -5
[  101.748407][ T6664] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  101.770029][ T6667] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.263: casefold flag without casefold feature
[  101.783959][ T6667] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.263: couldn't read orphan inode 15 (err -117)
[  101.811781][ T6667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.816633][ T6594] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  101.822865][ T6594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.958530][ T5219] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  101.962619][ T5219] Bluetooth: hci1: Injecting HCI hardware error event
[  101.970514][ T5219] Bluetooth: hci1: hardware error 0x00
[  102.085437][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.106246][ T5837] Bluetooth: hci0: command tx timeout
[  102.180442][ T6594] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.291422][ T6594] veth0_vlan: entered promiscuous mode
[  102.322478][ T6594] veth1_vlan: entered promiscuous mode
[  102.367325][ T6690] netlink: 'syz.1.270': attribute type 11 has an invalid length.
[  102.386369][ T6594] veth0_macvtap: entered promiscuous mode
[  102.391219][   T47] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  102.426544][ T6594] veth1_macvtap: entered promiscuous mode
[  102.451207][ T6594] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.458306][ T6594] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.473711][ T6594] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.477462][ T6594] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.484326][ T6594] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.488483][ T6594] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.558535][   T47] usb 1-1: config 0 has an invalid interface number: 154 but max is 0
[  102.573719][   T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.577773][   T47] usb 1-1: config 0 has no interface number 0
[  102.612423][   T47] usb 1-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0
[  102.615299][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.636551][ T6699] loop1: detected capacity change from 0 to 256
[  102.642770][   T47] usb 1-1: config 0 descriptor??
[  102.648130][   T47] qmi_wwan 1-1:0.154: bogus CDC Union: master=0, slave=0
[  102.650591][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.656485][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.657388][   T47] qmi_wwan 1-1:0.154: probe with driver qmi_wwan failed with error -22
[  102.690295][ T6699] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  102.693720][ T6699] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  102.700430][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.708294][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.721011][ T6699] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  102.858901][   T47] usb 1-1: USB disconnect, device number 7
[  102.953167][ T6699] exFAT-fs (loop1): abnormal access to deleted source dentry
[  103.203828][ T6705] loop3: detected capacity change from 0 to 32768
[  103.271552][ T6712] loop1: detected capacity change from 0 to 40427
[  103.276057][ T6712] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  103.279371][ T6712] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  103.298992][ T6712] F2FS-fs (loop1): invalid crc value
[  103.375797][ T6712] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  103.379191][ T6712] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  103.404699][   T33] audit: type=1800 audit(1752295898.845:6): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.274" name="bus" dev="loop1" ino=10 res=0 errno=0
[  103.761567][ T6732] loop0: detected capacity change from 0 to 2048
[  103.828956][ T6732] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  103.860078][ T6732] UDF-fs: Scanning with blocksize 512 failed
[  103.887600][ T6732] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.015574][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.280'.
[  104.100167][ T5219] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  104.134386][ T6748] loop0: detected capacity change from 0 to 512
[  104.137500][ T6751] loop1: detected capacity change from 0 to 128
[  104.170168][ T6751] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  104.175988][ T6751] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  104.188549][ T5219] Bluetooth: hci0: command tx timeout
[  104.207629][ T6748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  104.229905][ T6748] System zones: 1-12
[  104.232694][ T6748] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.281: Directory hole found for htree index block 0
[  104.284786][ T6748] EXT4-fs (loop0): Remounting filesystem read-only
[  104.288275][ T6748] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[  104.292201][ T6748] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  104.297538][ T6748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.354811][ T5834] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  104.363082][ T6748] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  104.455551][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.784394][ T6779] loop0: detected capacity change from 0 to 512
[  104.788096][ T6779] EXT4-fs: Ignoring removed orlov option
[  104.796974][ T6779] EXT4-fs: old and new quota format mixing
[  105.222686][ T6796] netlink: 'syz.0.298': attribute type 1 has an invalid length.
[  105.225217][ T6796] netlink: 'syz.0.298': attribute type 2 has an invalid length.
[  105.352871][ T6800] input: syz1 as /devices/virtual/input/input12
[  106.247463][ T6822] loop3: detected capacity change from 0 to 4096
[  106.259239][ T5219] Bluetooth: hci0: command tx timeout
[  106.312582][ T6828] loop0: detected capacity change from 0 to 2048
[  106.360697][ T6828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.608250][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'.
[  106.770127][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'.
[  106.951633][ T6860] loop0: detected capacity change from 0 to 8
[  106.970924][ T6860] SQUASHFS error: zlib decompression failed, data probably corrupt
[  106.974528][ T6860] SQUASHFS error: Failed to read block 0x9b: -5
[  106.982961][ T6860] SQUASHFS error: Unable to read metadata cache entry [99]
[  106.998034][ T6860] SQUASHFS error: Unable to read inode 0x127
[  107.018920][ T5864] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  107.094645][ T6856] loop1: detected capacity change from 0 to 32768
[  107.144622][ T6864] netlink: 'syz.0.329': attribute type 21 has an invalid length.
[  107.151914][ T6864] netlink: 132 bytes leftover after parsing attributes in process `syz.0.329'.
[  107.168935][ T5864] usb 4-1: Using ep0 maxpacket: 32
[  107.181926][ T5864] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  107.188945][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.191830][ T5864] usb 4-1: Product: syz
[  107.193513][ T5864] usb 4-1: Manufacturer: syz
[  107.195413][ T5864] usb 4-1: SerialNumber: syz
[  107.223429][ T5864] usb 4-1: config 0 descriptor??
[  107.354179][ T6870] loop0: detected capacity change from 0 to 1024
[  107.377232][ T6870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.401600][ T6870] EXT4-fs error (device loop0): ext4_get_first_dir_block:3536: inode #11: comm syz.0.333: directory missing '.'
[  107.410935][ T6870] EXT4-fs (loop0): Remounting filesystem read-only
[  107.432349][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.612459][ T6881] loop0: detected capacity change from 0 to 128
[  107.620049][ T6881] FAT-fs (loop0): bogus number of FAT sectors
[  107.622965][ T6881] FAT-fs (loop0): Can't find a valid FAT filesystem
[  107.640774][ T5864] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  107.645974][ T5864] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  107.740465][ T5864] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[  107.749275][ T5864] usb 4-1: USB disconnect, device number 2
[  108.195968][ T6891] loop1: detected capacity change from 0 to 256
[  108.411037][ T6887] loop0: detected capacity change from 0 to 40427
[  108.414117][ T6887] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  108.416343][ T6887] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  108.421031][ T6887] F2FS-fs (loop0): Invalid uid value -1
[  108.766234][ T6891] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  108.770345][ T6891] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  108.778856][ T6891] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  108.782369][ T6891] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  108.785983][ T6891] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  108.792390][ T6891] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  109.605006][ T6920] loop0: detected capacity change from 0 to 128
[  109.639331][ T6920] ufs: You didn't specify the type of your ufs filesystem
[  109.639331][ T6920] 
[  109.639331][ T6920] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  109.639331][ T6920] 
[  109.639331][ T6920] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  109.660121][ T6920] ufs: ufstype=old is supported read-only
[  109.667284][ T6920] ufs: ufs_fill_super(): bad magic number
[  109.686285][ T6910] loop1: detected capacity change from 0 to 32768
[  109.907506][ T6910] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  110.024545][ T5834] (syz-executor,5834,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72
[  110.050978][ T5834] ocfs2: Unmounting device (7,1) on (node local)
[  110.127021][ T6923] loop0: detected capacity change from 0 to 32768
[  110.153508][ T6923] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.183818][ T6944] loop3: detected capacity change from 0 to 256
[  110.199843][ T6923] XFS (loop0): Ending clean mount
[  110.211569][ T6944] vfat: Bad value for 'nonumtail'
[  110.270831][ T5843] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.387451][ T6947] loop1: detected capacity change from 0 to 512
[  110.419287][ T5219] Bluetooth: hci2: command 0x0c1a tx timeout
[  110.441359][ T6947] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  110.488733][   T96] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  110.497881][ T6947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.507830][ T6947] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  110.774836][ T6952] loop0: detected capacity change from 0 to 32768
[  110.789886][ T6952] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.358 (6952)
[  110.818746][ T5219] Bluetooth: hci0: command 0x0c1a tx timeout
[  110.979665][ T6952] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  110.984472][ T6952] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  110.994677][ T6952] BTRFS info (device loop0): using free-space-tree
[  111.183921][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.248978][   T33] audit: type=1800 audit(1752295906.715:7): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.358" name="file0" dev="loop0" ino=263 res=0 errno=0
[  111.259709][   T96] usb 4-1: Using ep0 maxpacket: 8
[  111.288203][   T96] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89
[  111.306334][   T96] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 99, changing to 10
[  111.313319][   T96] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 34391, setting to 1024
[  111.316767][   T96] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  111.332275][   T96] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.351648][   T96] usb 4-1: config 0 descriptor??
[  111.355382][ T6944] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  111.554531][ T5843] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  111.623588][   T96] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  111.637874][   T96] usb 4-1: USB disconnect, device number 3
[  111.731428][ T6970] loop1: detected capacity change from 0 to 32768
[  111.742729][ T6970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.359 (6970)
[  111.759214][ T6970] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.763139][ T6970] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  111.766527][ T6970] BTRFS info (device loop1): using free-space-tree
[  111.825161][ T6970] BTRFS info (device loop1): rebuilding free space tree
[  111.901422][ T6970] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  112.105513][ T5834] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.170878][ T6995] loop0: detected capacity change from 0 to 256
[  112.200608][ T6995] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  112.208816][ T6995] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  112.253883][ T6995] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  112.491594][ T7001] input: syz0 as /devices/virtual/input/input13
[  112.500551][ T5219] Bluetooth: hci2: command 0x0c1a tx timeout
[  112.510571][ T7003] loop0: detected capacity change from 0 to 1024
[  112.548326][ T7003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  112.556461][ T7003] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  112.579189][ T7003] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  112.613596][ T7003] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.366: lblock 2 mapped to illegal pblock 2 (length 1)
[  112.636643][ T7003] EXT4-fs (loop0): Remounting filesystem read-only
[  112.645597][ T7003] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  112.648401][ T7003] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  112.657707][ T7003] EXT4-fs (loop0): 1 orphan inode deleted
[  112.667997][ T7003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.742345][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.898970][ T5219] Bluetooth: hci0: command 0x0c1a tx timeout
[  112.949181][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'.
[  113.562373][ T7014] loop3: detected capacity change from 0 to 32768
[  113.589946][ T7014] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  113.635295][ T7014] XFS (loop3): Ending clean mount
[  113.831755][ T6594] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.121693][ T7028] process 'syz.3.373' launched './file0' with NULL argv: empty string added
[  114.182750][ T7018] loop0: detected capacity change from 0 to 32768
[  114.187564][ T7030] loop1: detected capacity change from 0 to 8
[  114.198171][ T7030] SQUASHFS error: zlib decompression failed, data probably corrupt
[  114.206027][ T7030] SQUASHFS error: Failed to read block 0x9b: -5
[  114.211576][ T7030] SQUASHFS error: Unable to read metadata cache entry [99]
[  114.216155][ T7030] SQUASHFS error: Unable to read inode 0x127
[  114.218814][ T7018] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  114.247814][ T7018] XFS (loop0): Ending clean mount
[  114.351083][ T5843] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  114.360842][ T7043] nbd0: detected capacity change from 0 to 127
[  114.371412][ T6146] block nbd0: Receive control failed (result -104)
[  114.382953][ T7046] netlink: 'syz.1.378': attribute type 21 has an invalid length.
[  114.385937][ T7046] netlink: 128 bytes leftover after parsing attributes in process `syz.1.378'.
[  114.393917][ T7046] netlink: 'syz.1.378': attribute type 4 has an invalid length.
[  114.397112][ T7046] netlink: 'syz.1.378': attribute type 3 has an invalid length.
[  114.401932][ T7046] netlink: 3 bytes leftover after parsing attributes in process `syz.1.378'.
[  114.597916][ T5219] Bluetooth: hci2: command 0x0c1a tx timeout
[  114.626003][ T7059] loop3: detected capacity change from 0 to 1024
[  114.738594][ T7065] loop1: detected capacity change from 0 to 2048
[  114.749857][ T7065] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  114.756369][ T7065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  114.985382][ T5219] Bluetooth: hci0: command 0x0c1a tx timeout
[  115.626814][ T7084] loop0: detected capacity change from 0 to 4096
[  115.946566][   T33] audit: type=1800 audit(1752295911.405:8): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.389" name="file1" dev="loop0" ino=30 res=0 errno=0
[  115.974299][ T7092] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  116.021881][ T7093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.391'.
[  116.027273][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.053327][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.362592][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'.
[  116.370907][ T7107] warning: `syz.3.394' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  116.517378][ T7115] loop3: detected capacity change from 0 to 512
[  116.547724][ T7112] loop0: detected capacity change from 0 to 4096
[  116.554836][ T7115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  116.568919][ T7112] ntfs3(loop0): Primary boot: invalid bytes per sector 0.
[  116.591038][ T7112] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[  116.595503][ T7115] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264
[  117.035014][ T7141] loop3: detected capacity change from 0 to 256
[  117.059534][ T7141] FAT-fs (loop3): Directory bread(block 64) failed
[  117.062344][ T7141] FAT-fs (loop3): Directory bread(block 65) failed
[  117.064655][ T7141] FAT-fs (loop3): Directory bread(block 66) failed
[  117.066858][ T7141] FAT-fs (loop3): Directory bread(block 67) failed
[  117.077386][ T7141] FAT-fs (loop3): Directory bread(block 68) failed
[  117.080454][ T7141] FAT-fs (loop3): Directory bread(block 69) failed
[  117.111275][ T7141] FAT-fs (loop3): Directory bread(block 70) failed
[  117.129773][ T7141] FAT-fs (loop3): Directory bread(block 71) failed
[  117.131907][ T7141] FAT-fs (loop3): Directory bread(block 72) failed
[  117.134073][ T7141] FAT-fs (loop3): Directory bread(block 73) failed
[  117.298231][   T36] kworker/u10:1: attempt to access beyond end of device
[  117.298231][   T36] loop3: rw=1, sector=1224, nr_sectors = 544 limit=256
[  117.319469][   T36] kworker/u10:1: attempt to access beyond end of device
[  117.319469][   T36] loop3: rw=1, sector=1800, nr_sectors = 128 limit=256
[  117.324418][ T7160] devtmpfs: Too few inodes for current use
[  117.335596][   T36] kworker/u10:1: attempt to access beyond end of device
[  117.335596][   T36] loop3: rw=1, sector=1960, nr_sectors = 1472 limit=256
[  117.377598][ T5864] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  117.551004][ T5864] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  117.564709][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.572637][ T5864] usb 2-1: Product: syz
[  117.574196][ T5864] usb 2-1: Manufacturer: syz
[  117.584603][ T5864] usb 2-1: SerialNumber: syz
[  117.606284][ T5864] usb 2-1: config 0 descriptor??
[  117.750264][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'.
[  117.785866][ T7184] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  117.794264][ T7184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.221105][ T7193] loop3: detected capacity change from 0 to 32768
[  118.415403][ T7199] loop0: detected capacity change from 0 to 40427
[  118.429758][ T7199] F2FS-fs (loop0): invalid crc value
[  118.490156][ T7199] F2FS-fs (loop0): Start checkpoint disabled!
[  118.495713][ T7199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  118.522207][ T7199] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[  118.643270][ T5864] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  118.799181][ T7207] loop3: detected capacity change from 0 to 22
[  118.802989][ T7207] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  118.820521][ T7207] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  118.849286][ T7139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.853072][ T7139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.856669][ T7207] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  118.871233][ T7207] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  118.871481][ T5864] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  118.876441][ T5864] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  118.893013][ T5864] asix 2-1:0.0: probe with driver asix failed with error -71
[  118.917319][ T5864] usb 2-1: USB disconnect, device number 7
[  119.165381][ T7219] syz_tun: entered allmulticast mode
[  119.176627][ T7218] syz_tun: left allmulticast mode
[  119.379247][   T96] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  119.468040][   T33] audit: type=1800 audit(1752295914.855:9): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.431" name="bus" dev="overlay" ino=892 res=0 errno=0
[  119.550253][   T96] usb 4-1: Using ep0 maxpacket: 8
[  119.563334][   T96] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.567171][   T96] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00
[  119.583083][   T96] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.598030][   T96] usb 4-1: config 0 descriptor??
[  119.760429][ T7232] vxcan1: tx address claim with dest, not broadcast
[  120.054007][   T96] hid (null): invalid report_size -1281265923
[  120.065044][   T96] uclogic 0003:28BD:0075.0002: interface is invalid, ignoring
[  120.263074][   T96] usb 4-1: USB disconnect, device number 4
[  120.528497][ T7246] loop0: detected capacity change from 0 to 32768
[  120.550258][ T7246] jfs_strtoUCS: char2uni returned -22.
[  120.552377][ T7246] charset = cp950, char = 0xd4
[  120.986505][ T7263] loop0: detected capacity change from 0 to 4096
[  121.173306][ T7263] ntfs3(loop0): try to read out of volume at offset 0x3fffffc7000
[  121.188856][ T7263] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB
[  122.310804][ T7278] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  122.342725][ T7281] xt_bpf: check failed: parse error
[  122.416090][ T7286] loop0: detected capacity change from 0 to 512
[  122.457855][ T7286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.462593][ T7286] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.472457][ T7286] fs-verity (loop0, inode 15): Unrecognized descriptor size: 0 bytes
[  122.475290][ T7286] fs-verity (loop0, inode 15): Unrecognized descriptor size: 0 bytes
[  122.500827][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.508079][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[  122.522272][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[  122.557464][ T7293] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  122.589403][ T7293] ip6gretap1: entered allmulticast mode
[  122.620377][   T47] kernel write not supported for file /input/mouse0 (pid: 47 comm: kworker/1:1)
[  122.706311][ T7303] netlink: 32 bytes leftover after parsing attributes in process `syz.1.466'.
[  123.018403][ T7301] loop3: detected capacity change from 0 to 40427
[  123.023010][ T7301] F2FS-fs (loop3): build fault injection rate: 14
[  123.038183][ T7301] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  123.062359][ T7301] F2FS-fs (loop3): invalid crc value
[  123.079148][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x5eb/0xe70
[  123.090849][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x5eb/0xe70
[  123.225160][ T7301] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  123.271304][ T7301] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  123.296659][ T7301] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  123.326959][ T7301] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x14c/0x5c0
[  123.373180][ T6594] syz-executor: attempt to access beyond end of device
[  123.373180][ T6594] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  123.400400][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  123.400422][ T6594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.400432][ T6594] Call Trace:
[  123.400439][ T6594]  <TASK>
[  123.400446][ T6594]  dump_stack_lvl+0x189/0x250
[  123.400499][ T6594]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.400515][ T6594]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  123.400537][ T6594]  ? __pfx_queue_work_on+0x10/0x10
[  123.400555][ T6594]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  123.400575][ T6594]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  123.400596][ T6594]  ? f2fs_hw_is_readonly+0x39b/0x470
[  123.400619][ T6594]  f2fs_handle_critical_error+0x37c/0x540
[  123.400644][ T6594]  f2fs_write_end_io+0x495/0x810
[  123.400657][ T6594]  ? blkg_put+0x22/0x240
[  123.400691][ T6594]  __submit_merged_bio+0x27a/0x6a0
[  123.400717][ T6594]  __submit_merged_write_cond+0x255/0x530
[  123.400742][ T6594]  f2fs_write_data_pages+0x261d/0x3000
[  123.400790][ T6594]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.400844][ T6594]  ? __mod_zone_page_state+0xd7/0x140
[  123.400870][ T6594]  ? folios_put_refs+0x560/0x640
[  123.400902][ T6594]  ? __lock_acquire+0xab9/0xd20
[  123.400924][ T6594]  ? do_raw_spin_lock+0x121/0x290
[  123.400953][ T6594]  ? do_raw_spin_unlock+0x4d/0x240
[  123.400972][ T6594]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.400994][ T6594]  do_writepages+0x32e/0x550
[  123.401018][ T6594]  ? do_raw_spin_unlock+0x4d/0x240
[  123.401041][ T6594]  filemap_fdatawrite+0x191/0x230
[  123.401058][ T6594]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  123.401111][ T6594]  ? do_raw_spin_unlock+0x4d/0x240
[  123.401134][ T6594]  f2fs_sync_dirty_inodes+0x31f/0x830
[  123.401160][ T6594]  f2fs_write_checkpoint+0x94a/0x1de0
[  123.401193][ T6594]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  123.401239][ T6594]  ? kasan_check_range+0x9f/0x2c0
[  123.401260][ T6594]  ? kill_f2fs_super+0x298/0x6c0
[  123.401278][ T6594]  kill_f2fs_super+0x2c3/0x6c0
[  123.401298][ T6594]  ? __pfx_kill_f2fs_super+0x10/0x10
[  123.401310][ T6594]  ? radix_tree_delete_item+0x2b6/0x400
[  123.401338][ T6594]  ? shrinker_free+0x2ce/0x3e0
[  123.401362][ T6594]  deactivate_locked_super+0xbc/0x130
[  123.401379][ T6594]  cleanup_mnt+0x425/0x4c0
[  123.401394][ T6594]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.401416][ T6594]  task_work_run+0x1d4/0x260
[  123.401459][ T6594]  ? __pfx_task_work_run+0x10/0x10
[  123.401503][ T6594]  ? __x64_sys_umount+0x122/0x160
[  123.401525][ T6594]  ? exit_to_user_mode_loop+0x40/0x110
[  123.401545][ T6594]  exit_to_user_mode_loop+0xec/0x110
[  123.401561][ T6594]  do_syscall_64+0x2bd/0x3b0
[  123.401574][ T6594]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.401594][ T6594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.401609][ T6594]  ? exc_page_fault+0x9f/0xf0
[  123.401631][ T6594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.401645][ T6594] RIP: 0033:0x7f6473b8fc57
[  123.401667][ T6594] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  123.401679][ T6594] RSP: 002b:00007ffe28af6858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  123.401696][ T6594] RAX: 0000000000000000 RBX: 00007f6473c10925 RCX: 00007f6473b8fc57
[  123.401705][ T6594] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe28af6910
[  123.401714][ T6594] RBP: 00007ffe28af6910 R08: 0000000000000000 R09: 0000000000000000
[  123.401722][ T6594] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe28af79a0
[  123.401731][ T6594] R13: 00007f6473c10925 R14: 000000000001e164 R15: 00007ffe28af79e0
[  123.401755][ T6594]  </TASK>
[  123.404211][ T6594] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  123.748850][ T7332] loop0: detected capacity change from 0 to 64
[  123.814882][ T7332] Trying to free block not in datazone
[  123.968024][ T7337] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.481'.
[  123.988938][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.481'.
[  123.996571][ T7336] syzkaller1: entered promiscuous mode
[  124.001261][ T7336] syzkaller1: entered allmulticast mode
[  124.031637][ T7339] loop3: detected capacity change from 0 to 2048
[  124.056995][ T7339] NILFS (loop3): bad btree root (ino=6): level = 5, flags = 0xbd, nchildren = 0
[  124.061387][ T7339] NILFS (loop3): ifile inode (checkpoint number=2) corrupted
[  124.063905][ T7339] NILFS (loop3): error -5 while loading last checkpoint (checkpoint number=2)
[  124.332912][ T7349] futex_wake_op: syz.0.487 tries to shift op by -1; fix this program
[  124.458877][ T5864] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  124.898969][ T5864] usb 4-1: Using ep0 maxpacket: 16
[  124.914943][ T5864] usb 4-1: New USB device found, idVendor=067b, idProduct=23b3, bcdDevice=da.15
[  124.918974][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3
[  124.922071][ T5864] usb 4-1: Product: syz
[  124.923745][ T5864] usb 4-1: Manufacturer: syz
[  124.925553][ T5864] usb 4-1: SerialNumber: syz
[  124.949270][ T5864] pl2303 4-1:143.0: required endpoints missing
[  125.101183][ T7359] 
[  125.102306][ T7359] ======================================================
[  125.105191][ T7359] WARNING: possible circular locking dependency detected
[  125.108157][ T7359] 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 Not tainted
[  125.111980][ T7359] ------------------------------------------------------
[  125.114879][ T7359] syz.1.491/7359 is trying to acquire lock:
[  125.116807][ T7359] ffff888109c3e358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  125.119898][ T7359] 
[  125.119898][ T7359] but task is already holding lock:
[  125.122571][ T7359] ffff888109c3d368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  125.126397][ T7359] 
[  125.126397][ T7359] which lock already depends on the new lock.
[  125.126397][ T7359] 
[  125.130399][ T7359] 
[  125.130399][ T7359] the existing dependency chain (in reverse order) is:
[  125.133944][ T7359] 
[  125.133944][ T7359] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  125.136679][ T7359]        lock_acquire+0x120/0x360
[  125.138372][ T7359]        down_write+0x96/0x1f0
[  125.139935][ T7359]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  125.141925][ T7359]        nbd_start_device+0x16c/0xac0
[  125.143671][ T7359]        nbd_genl_connect+0x135b/0x18f0
[  125.145501][ T7359]        genl_family_rcv_msg_doit+0x215/0x300
[  125.147408][ T7359]        genl_rcv_msg+0x60e/0x790
[  125.148991][ T7359]        netlink_rcv_skb+0x208/0x470
[  125.150706][ T7359]        genl_rcv+0x28/0x40
[  125.152323][ T7359]        netlink_unicast+0x75c/0x8e0
[  125.154387][ T7359]        netlink_sendmsg+0x805/0xb30
[  125.156458][ T7359]        __sock_sendmsg+0x21c/0x270
[  125.158522][ T7359]        ____sys_sendmsg+0x505/0x830
[  125.160641][ T7359]        ___sys_sendmsg+0x21f/0x2a0
[  125.162724][ T7359]        __x64_sys_sendmsg+0x19b/0x260
[  125.164643][ T7359]        do_syscall_64+0xfa/0x3b0
[  125.166250][ T7359]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.168370][ T7359] 
[  125.168370][ T7359] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  125.170961][ T7359]        lock_acquire+0x120/0x360
[  125.172823][ T7359]        __mutex_lock+0x182/0xe80
[  125.174695][ T7359]        refcount_dec_and_mutex_lock+0x30/0xa0
[  125.176683][ T7359]        nbd_config_put+0x2c/0x790
[  125.178290][ T7359]        nbd_release+0xfe/0x140
[  125.179873][ T7359]        bdev_release+0x536/0x650
[  125.181609][ T7359]        blkdev_release+0x15/0x20
[  125.183296][ T7359]        __fput+0x44c/0xa70
[  125.184829][ T7359]        fput_close_sync+0x119/0x200
[  125.186672][ T7359]        __x64_sys_close+0x7f/0x110
[  125.188269][ T7359]        do_syscall_64+0xfa/0x3b0
[  125.189848][ T7359]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.191989][ T7359] 
[  125.191989][ T7359] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  125.195047][ T7359]        validate_chain+0xb9b/0x2140
[  125.197385][ T7359]        __lock_acquire+0xab9/0xd20
[  125.199551][ T7359]        lock_acquire+0x120/0x360
[  125.201697][ T7359]        __mutex_lock+0x182/0xe80
[  125.203739][ T7359]        __del_gendisk+0x129/0x9e0
[  125.205744][ T7359]        del_gendisk+0xe8/0x160
[  125.207602][ T7359]        loop_remove+0x42/0xc0
[  125.209537][ T7359]        loop_control_ioctl+0x4ac/0x5a0
[  125.211691][ T7359]        __se_sys_ioctl+0xfc/0x170
[  125.213510][ T7359]        do_syscall_64+0xfa/0x3b0
[  125.215060][ T7359]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.217138][ T7359] 
[  125.217138][ T7359] other info that might help us debug this:
[  125.217138][ T7359] 
[  125.221258][ T7359] Chain exists of:
[  125.221258][ T7359]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  125.221258][ T7359] 
[  125.226907][ T7359]  Possible unsafe locking scenario:
[  125.226907][ T7359] 
[  125.229881][ T7359]        CPU0                    CPU1
[  125.232013][ T7359]        ----                    ----
[  125.234216][ T7359]   rlock(&set->update_nr_hwq_lock);
[  125.236274][ T7359]                                lock(&nbd->config_lock);
[  125.238972][ T7359]                                lock(&set->update_nr_hwq_lock);
[  125.242232][ T7359]   lock(&disk->open_mutex);
[  125.244138][ T7359] 
[  125.244138][ T7359]  *** DEADLOCK ***
[  125.244138][ T7359] 
[  125.247022][ T7359] 1 lock held by syz.1.491/7359:
[  125.248697][ T7359]  #0: ffff888109c3d368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  125.252113][ T7359] 
[  125.252113][ T7359] stack backtrace:
[  125.254506][ T7359] CPU: 1 UID: 0 PID: 7359 Comm: syz.1.491 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  125.254529][ T7359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.254540][ T7359] Call Trace:
[  125.254550][ T7359]  <TASK>
[  125.254560][ T7359]  dump_stack_lvl+0x189/0x250
[  125.254587][ T7359]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.254604][ T7359]  ? __pfx__printk+0x10/0x10
[  125.254626][ T7359]  ? print_lock_name+0xde/0x100
[  125.254645][ T7359]  print_circular_bug+0x2ee/0x310
[  125.254666][ T7359]  check_noncircular+0x134/0x160
[  125.254686][ T7359]  validate_chain+0xb9b/0x2140
[  125.254704][ T7359]  ? stack_depot_save_flags+0x40/0x900
[  125.254731][ T7359]  __lock_acquire+0xab9/0xd20
[  125.254747][ T7359]  ? __del_gendisk+0x129/0x9e0
[  125.254762][ T7359]  lock_acquire+0x120/0x360
[  125.254776][ T7359]  ? __del_gendisk+0x129/0x9e0
[  125.254791][ T7359]  ? lockdep_unlock+0x89/0x120
[  125.254805][ T7359]  __mutex_lock+0x182/0xe80
[  125.254821][ T7359]  ? __del_gendisk+0x129/0x9e0
[  125.254838][ T7359]  ? __del_gendisk+0x129/0x9e0
[  125.254854][ T7359]  ? __pfx___mutex_lock+0x10/0x10
[  125.254869][ T7359]  ? __pfx___might_resched+0x10/0x10
[  125.254890][ T7359]  ? __lock_acquire+0xab9/0xd20
[  125.254902][ T7359]  ? disk_del_events+0xb5/0x210
[  125.254919][ T7359]  ? __del_gendisk+0xc1/0x9e0
[  125.254932][ T7359]  __del_gendisk+0x129/0x9e0
[  125.254947][ T7359]  ? del_gendisk+0xe0/0x160
[  125.254962][ T7359]  ? __pfx___del_gendisk+0x10/0x10
[  125.254978][ T7359]  ? down_read+0x1ad/0x2e0
[  125.254993][ T7359]  del_gendisk+0xe8/0x160
[  125.255008][ T7359]  loop_remove+0x42/0xc0
[  125.255028][ T7359]  loop_control_ioctl+0x4ac/0x5a0
[  125.255045][ T7359]  ? __fget_files+0x2a/0x420
[  125.255066][ T7359]  ? __pfx_loop_control_ioctl+0x10/0x10
[  125.255083][ T7359]  ? __fget_files+0x2a/0x420
[  125.255101][ T7359]  ? bpf_lsm_file_ioctl+0x9/0x20
[  125.255117][ T7359]  ? __pfx_loop_control_ioctl+0x10/0x10
[  125.255135][ T7359]  __se_sys_ioctl+0xfc/0x170
[  125.255151][ T7359]  do_syscall_64+0xfa/0x3b0
[  125.255176][ T7359]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.255199][ T7359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.255216][ T7359]  ? exc_page_fault+0x9f/0xf0
[  125.255237][ T7359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.255252][ T7359] RIP: 0033:0x7fb73f18e929
[  125.255266][ T7359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.255278][ T7359] RSP: 002b:00007fb73ff8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  125.255296][ T7359] RAX: ffffffffffffffda RBX: 00007fb73f3b5fa0 RCX: 00007fb73f18e929
[  125.255308][ T7359] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004
[  125.255317][ T7359] RBP: 00007fb73f210b39 R08: 0000000000000000 R09: 0000000000000000
[  125.255356][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.255367][ T7359] R13: 0000000000000000 R14: 00007fb73f3b5fa0 R15: 00007fffbef7d9a8
[  125.255384][ T7359]  </TASK>
[  125.406656][ T5219] Bluetooth: hci0: Malformed LE Event: 0x0d
[  125.412271][ T5864] usb 4-1: USB disconnect, device number 5
[  132.501267][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.503796][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
04:52:00  Registers:
info registers vcpu 0

CPU#0
RAX=c604cdea2a74a600 RBX=ffffffff81976c78 RCX=c604cdea2a74a600 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3091bff8 CR3=0000000028b00000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb73f211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000017f6 RDI=00000000000017f7 RBP=00000000000003f8 RSP=ffffc9000489f170
R8 =ffff888108c08237 R9 =1ffff11021181046 R10=dffffc0000000000 R11=ffffffff85478e30
R12=dffffc0000000000 R13=ffffffff99af9887 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff85478eac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb73ff8a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000021294000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb73f385478 00007fb73f385450 XMM03=00007fb73f385488 00007fb73f385480
XMM04=00007fb73feed100 00007fb73f385440 XMM05=00007fb73f385458 00007fb73f3854a0
XMM06=00007fb73f385498 00007fb73f385490 XMM07=00007fb73f385488 00007fb73f385480
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb73f211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
