last executing test programs:

2m45.303126357s ago: executing program 1 (id=2522):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m45.221709485s ago: executing program 1 (id=2524):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x5, 0xd13, 0x80000000, {}, {0x0, 0xea60}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x21, 0x3, 0x0, 0x0, "ecf8e8a8437c0b323d3884310e2eb6ec3080157dd99ac49261b1c8d82d1c6b338a16356bbf9760c94b503c38bcb6c2e7ff17e983ad91d68ac0d4aa459771e884"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000010)

2m45.143145076s ago: executing program 1 (id=2526):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x1000000, 0x1000, 0x5, 0x1}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00')
write$tcp_mem(r1, &(0x7f00000000c0)={0x800000008, 0x20, 0x4, 0x20, 0x1ff}, 0x48)

2m44.663453936s ago: executing program 1 (id=2534):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)

2m44.542078881s ago: executing program 1 (id=2535):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
setpgid(0x0, r0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)

2m44.298904178s ago: executing program 1 (id=2540):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

2m29.29400929s ago: executing program 32 (id=2540):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

2m20.68091925s ago: executing program 0 (id=2801):
unshare(0x22060480)
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)

2m20.591525989s ago: executing program 0 (id=2802):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r0}, 0x38)

2m20.439068362s ago: executing program 0 (id=2804):
unshare(0x28020480)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x0, 0x0, &(0x7f0000000000))

2m20.378581409s ago: executing program 0 (id=2806):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000340)={0x0, 0x881c, 0x1, 0x2, 0x40000333, 0x0, r0}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/205, 0xcd}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2m20.110366648s ago: executing program 0 (id=2810):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
io_uring_setup(0x696a, &(0x7f0000000340)={0x0, 0x7828, 0x2, 0x3})
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
creat(&(0x7f0000000280)='./file0\x00', 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @mcast2, @private0, 0x7800, 0x80, 0x20003, 0x270}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2m19.650097299s ago: executing program 0 (id=2814):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
close(0x3)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
sendmsg$rds(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1039}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
write(r3, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0xbf82)

2m19.531103306s ago: executing program 33 (id=2814):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d016e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e8b701d2d17ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01d51e242443618c02e0a428da651366e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab7158edeeccd92e3a88dc0f432187ce92d7b17a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb373845255012e028cb2654d493afb4b35faae176f99b745eda2967199cc93685bb444f9bc50713061385537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d1ff07000000000000000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ab2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31f3f514573f1e30d1fd2d763f3ee9210b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f240080000534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74d1ffdaccf0ea5f02e0163a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01f7ada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd2190780fa39c43ea647eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0000000000000001062a35376413c29f7c6f7bde29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000fc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5018e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e2b70590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5002adef9546abb7a2d9c085b189b5ff30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd0387837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f012df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dc816126b6f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bb01b53a2d862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94986157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d7004d29ad77f54836779600bb0b247139d429df96362db3ecfbd36fa8164fabdcf2e58b720e8e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a56f3ebb16fad3e9269495230cd88b0ea2e3affa196a2f0adf733bc6afd37a659ecc933d636c1b27d3a16c5ea25301f9b5789e4aa8e7228e3002f146aa5e575bb74b1ebb82147edf8161d362704377058e887c608be8719ea1b6c490f79e0832e2ddd7e217c7adddd4731e032d7eb35bdc38160c676d840e2e8be9033a686cf7061f5f55e2851736aa8c2f3bad8ac05c048e20d8c03b68008a70b8f80c93ebd2ababb5c65fe9abc4642d7b58d8c93efd7b6b39c68a16d75a7852dfc37a6a50cb28a9b6f685a465d08fc603d81d8ddd5296fae97be1401a8be7748a71fcdc85ba2049e96c4e6dce59b88cd5472726bc237fbcf3ffcbf32e2aac9b2f9d6013b59780ded723b08c767fa091e2fa4d51863500fcd5041bcc98a685504835743194113ea0b97b4f9ddc395b9ac4defefadd37a8871fd91f31a56eb96ecf90000000000000000000000000000000000000000000c447ea475c236c3b7f24079fe375f3f861fc54d9d8a04a6cb8c0dbf9e9cc53a84a5795ae5ebcbd825e3572df16fbdcd395e995fa4fcbbf31583d9e1d3ff537f401a3139200a8bd2122157887199cd54075a4d5b29935dda5c6aa0f3ac6895eb73c7abbd4603abdaa8629dedb2cab0fa80f9514ad310491a9a300015c18cdfd9342cff50d849d7516134d45d1a8cf157abe0c79de543993cf689f8a7113508fbf8a610417045e6c38a5d4ff4656dbd9656ad6ce625e1674ab57944ebb834743a248a2be304ba1e037cb63a169d340be8befc1b238aa26e24"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
close(0x3)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
sendmsg$rds(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1039}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
write(r3, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0xbf82)

2.240136953s ago: executing program 3 (id=4192):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000240)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x5558, &(0x7f0000000a00)="$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")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40)
pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61)
r1 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3)

1.639769122s ago: executing program 3 (id=4204):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x29}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x502a, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x40}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x2, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x6}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1.166034371s ago: executing program 3 (id=4208):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8)
sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1)

1.098929683s ago: executing program 3 (id=4209):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0xca}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044045}, 0xc090)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.009290863s ago: executing program 3 (id=4210):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
io_setup(0x8, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r4, 0x321, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}}, 0x4000000)

539.285144ms ago: executing program 2 (id=4217):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0)

488.717912ms ago: executing program 2 (id=4218):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

406.782969ms ago: executing program 2 (id=4220):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x80000)
r2 = fcntl$dupfd(r0, 0x406, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014})
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2)

306.98016ms ago: executing program 2 (id=4222):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

306.263971ms ago: executing program 2 (id=4224):
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000f0ffffffffffff0080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000001000050feffffff", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff000000f0"])
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000200)={&(0x7f000000e000/0x3000)=nil, 0x3000})

239.505206ms ago: executing program 4 (id=4225):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001440)={'bond0\x00', &(0x7f0000000500)=@ethtool_regs={0x4, 0x2}})

239.250165ms ago: executing program 2 (id=4226):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13}], 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000))

239.011768ms ago: executing program 4 (id=4227):
syz_io_uring_setup(0x20236, &(0x7f0000000380)={0x0, 0x1ffffe, 0x20000, 0xfffffffe, 0xb3}, &(0x7f0000000080), 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000080)=0x8}})

178.887351ms ago: executing program 4 (id=4228):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x70bd24, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@multicast1}, @NHA_BLACKHOLE={0x4}]}, 0x30}}, 0x44010)

128.207366ms ago: executing program 4 (id=4229):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x2d, 0xa00, @void}, 0x10)

127.790687ms ago: executing program 3 (id=4230):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff03000000000000000000000000000100000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac14142300000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ffffffffffffff"], 0xf8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0)
remap_file_pages(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000003, 0x200, 0x10)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe)
futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x4000000)
setsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f00000001c0)=0x3, 0x4)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
dup(r7)

60.343433ms ago: executing program 4 (id=4231):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)

0s ago: executing program 4 (id=4232):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

kernel console output (not intermixed with test programs):

] usb 5-1: SerialNumber: syz
[  376.957818][ T5910] usb 5-1: config 0 descriptor??
[  376.985733][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2972'.
[  376.993063][ T5910] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  377.017780][ T5910] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28
[  377.585608][ T5910] usb 5-1: USB disconnect, device number 5
[  378.469647][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.472422][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.641729][T13704] loop4: detected capacity change from 0 to 32768
[  378.645717][T13704] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2978 (13704)
[  378.657900][T13704] BTRFS error: failed to open device for path /dev/loop4 with flags 0x23: -13
[  378.985823][T13717] loop4: detected capacity change from 0 to 8192
[  379.775076][T13729] loop3: detected capacity change from 0 to 32768
[  380.124688][T13729] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  380.124775][T13729]   allowing incompatible features above 0.0: (unknown version)
[  380.124785][T13729]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  380.197430][T13729] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  380.200666][T13729] bcachefs (loop3): initializing new filesystem
[  380.211221][T13729] bcachefs (loop3): going read-write
[  380.227626][T13729] bcachefs (loop3): marking superblocks
[  380.313728][T13729] bcachefs (loop3): initializing freespace
[  380.332818][T13729] bcachefs (loop3): done initializing freespace
[  380.343405][T13729] bcachefs (loop3): reading snapshots table
[  380.345856][T13729] bcachefs (loop3): reading snapshots done
[  380.409740][T13729] bcachefs (loop3): done starting filesystem
[  380.693800][T12950] bcachefs (loop3): shutting down
[  380.705839][T12950] bcachefs (loop3): going read-only
[  380.709228][T12950] bcachefs (loop3): finished waiting for writes to stop
[  380.723223][T12950] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  380.746770][T13762] netlink: 'syz.4.3001': attribute type 21 has an invalid length.
[  380.759559][T13762] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3001'.
[  380.808207][T12950] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  380.815801][T12950] bcachefs (loop3): clean shutdown complete, journal seq 4
[  380.819637][T12950] bcachefs (loop3): marking filesystem clean
[  380.855468][T12950] bcachefs (loop3): shutdown complete
[  381.242093][T13765] loop4: detected capacity change from 0 to 32768
[  381.841050][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  382.013546][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  382.017981][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  382.023975][   T24] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  382.027697][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.057249][   T24] usb 5-1: config 0 descriptor??
[  382.519198][   T24] razer 0003:1532:010E.0023: unknown main item tag 0x3
[  382.528875][   T24] razer 0003:1532:010E.0023: unbalanced collection at end of report description
[  382.534976][   T24] razer 0003:1532:010E.0023: probe with driver razer failed with error -22
[  382.728108][ T5949] usb 5-1: USB disconnect, device number 6
[  383.039699][T13798] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3016'.
[  383.238121][T13814] loop3: detected capacity change from 0 to 256
[  383.258462][T13814] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  383.270406][T13814] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  383.285852][T13814] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  383.638036][T13816] loop4: detected capacity change from 0 to 32768
[  383.643787][T13827] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  383.863327][T13837] binder: 13836:13837 ioctl c0306201 200000000540 returned -14
[  384.072582][T13835] loop3: detected capacity change from 0 to 32768
[  384.137338][T13835] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,noexcl,read_only,nocow
[  384.137364][T13835]   allowing incompatible features above 0.0: (unknown version)
[  384.137375][T13835]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  384.150242][ T5949] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  384.155737][T11835] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  384.161936][T13835] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  384.165348][T13835] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  384.168757][T13835] bcachefs (loop3): Version upgrade required:
[  384.168757][T13835] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  384.168757][T13835] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  384.168757][T13835]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  384.218446][T13835] bcachefs (loop3): accounting_read... done
[  384.223275][T13835] bcachefs (loop3): alloc_read... done
[  384.228199][T13835] bcachefs (loop3): done starting filesystem
[  384.254928][   T33] audit: type=1800 audit(384.119:80): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3032" name="file1" dev="loop3" ino=536870912 res=0 errno=0
[  384.272340][T12950] bcachefs (loop3): shutting down
[  384.298403][T12950] bcachefs (loop3): shutdown complete
[  384.332079][ T5949] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  384.336456][ T5949] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  384.341471][T11835] usb 5-1: Using ep0 maxpacket: 16
[  384.344431][ T5949] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  384.348685][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  384.353290][T11835] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  384.353680][ T5949] usb 3-1: SerialNumber: syz
[  384.358232][T11835] usb 5-1: config 1 interface 0 has no altsetting 0
[  384.369677][T11835] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40
[  384.381506][T11835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.384818][T11835] usb 5-1: Product: syz
[  384.386565][T11835] usb 5-1: Manufacturer: syz
[  384.388461][T11835] usb 5-1: SerialNumber: syz
[  384.584944][ T5949] usb 3-1: 0:2 : does not exist
[  384.587188][ T5949] usb 3-1: usbmixer: too many channels (61) in unit 5
[  384.606172][ T5949] usb 3-1: USB disconnect, device number 62
[  384.633826][T11835] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input29
[  384.647801][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  384.658061][T11835] usb 5-1: USB disconnect, device number 7
[  385.197820][T13842] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  385.206095][T11835] IPVS: starting estimator thread 0...
[  385.218657][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3037'.
[  385.227085][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3037'.
[  385.290642][T13847] IPVS: using max 63 ests per chain, 151200 per kthread
[  385.461346][ T5949] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  385.612112][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.619843][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.623405][ T5949] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  385.626918][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.637418][ T5949] usb 3-1: config 0 descriptor??
[  385.649914][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  385.745863][T13864] loop3: detected capacity change from 0 to 32768
[  385.790441][T13864] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  385.817373][T13864] XFS (loop3): Ending clean mount
[  385.824447][T13864] XFS (loop3): Quotacheck needed: Please wait.
[  385.837016][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.841663][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.845686][   T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[  385.850255][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.856647][   T10] usb 5-1: config 0 descriptor??
[  385.901003][T13864] XFS (loop3): Quotacheck: Done.
[  385.977864][T12950] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  386.061875][ T5949] elo 0003:04E7:0030.0024: unknown main item tag 0x0
[  386.080530][ T5949] elo 0003:04E7:0030.0024: unknown main item tag 0x0
[  386.083540][ T5949] elo 0003:04E7:0030.0024: unknown main item tag 0x0
[  386.104205][ T5949] elo 0003:04E7:0030.0024: unknown main item tag 0x0
[  386.107264][ T5949] elo 0003:04E7:0030.0024: unknown main item tag 0x0
[  386.111320][ T5949] elo 0003:04E7:0030.0024: unknown main item tag 0x0
[  386.114181][ T5949] elo 0003:04E7:0030.0024: unknown main item tag 0x0
[  386.138985][ T5949] elo 0003:04E7:0030.0024: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0
[  386.273413][ T5910] usb 3-1: USB disconnect, device number 63
[  386.285811][   T10] stadia 0003:18D1:9400.0025: item fetching failed at offset 2/5
[  386.290366][   T10] stadia 0003:18D1:9400.0025: parse failed
[  386.292640][   T10] stadia 0003:18D1:9400.0025: probe with driver stadia failed with error -22
[  386.366251][T13880] netlink: 392 bytes leftover after parsing attributes in process `syz.3.3049'.
[  386.490095][   T10] usb 5-1: USB disconnect, device number 8
[  386.538399][T13886] loop3: detected capacity change from 0 to 2048
[  386.544413][T13886] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  386.548460][T13886] NILFS (loop3): mounting unchecked fs
[  386.549549][ T5858] udevd[5858]: incorrect nilfs2 checksum on /dev/loop3
[  386.567477][T13886] NILFS (loop3): recovery complete
[  386.574663][T13887] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  387.491033][T11835] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  387.550436][ T5910] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  387.643212][T11835] usb 5-1: unable to get BOS descriptor or descriptor too short
[  387.647735][T11835] usb 5-1: config 250 has an invalid interface number: 222 but max is 1
[  387.651724][T11835] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  387.655853][T11835] usb 5-1: config 250 has no interface number 1
[  387.658470][T11835] usb 5-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  387.663469][T11835] usb 5-1: config 250 interface 222 altsetting 22 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  387.668011][T11835] usb 5-1: config 250 interface 222 altsetting 22 endpoint 0x8 has invalid maxpacket 983, setting to 64
[  387.672880][T11835] usb 5-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  387.677425][T11835] usb 5-1: config 250 interface 222 altsetting 22 has a duplicate endpoint with address 0x6, skipping
[  387.683381][T11835] usb 5-1: config 250 interface 222 has no altsetting 0
[  387.688884][T11835] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[  387.692925][T11835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.696163][T11835] usb 5-1: Product: syz
[  387.697928][T11835] usb 5-1: Manufacturer: syz
[  387.700495][ T5910] usb 4-1: Using ep0 maxpacket: 16
[  387.702869][T11835] usb 5-1: SerialNumber: syz
[  387.710773][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  387.714915][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  387.719394][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  387.723608][ T5910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  387.728756][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  387.735971][T13923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  387.737674][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  387.743302][ T5910] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  387.746542][ T5910] usb 4-1: Manufacturer: syz
[  387.752792][ T5910] usb 4-1: config 0 descriptor??
[  387.970522][T11835] usb 5-1: USB disconnect, device number 9
[  388.030458][ T5910] rc_core: IR keymap rc-hauppauge not found
[  388.032954][ T5910] Registered IR keymap rc-empty
[  388.035700][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.050978][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.072541][ T5910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  388.079492][ T5910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30
[  388.087551][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.110765][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.130401][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.151102][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.170511][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.191036][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.210758][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.230454][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.250441][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.270372][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  388.294624][ T5910] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  388.297868][ T5910] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  388.424526][   T95] usb 4-1: USB disconnect, device number 9
[  388.502437][T13945] loop4: detected capacity change from 0 to 256
[  388.821616][T13950] loop4: detected capacity change from 0 to 32768
[  388.825117][T13950] bcachefs (/dev/loop4): error reading superblock: error opening /dev/loop4: EACCES
[  388.828277][T13950] bcachefs: bch2_fs_get_tree() error: EACCES
[  389.294829][T13976] program syz.3.3094 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  389.909881][ T5949] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  389.939966][   T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  390.059986][ T5949] usb 3-1: Using ep0 maxpacket: 32
[  390.069915][ T5949] usb 3-1: config 0 has an invalid interface number: 63 but max is 0
[  390.076126][ T5949] usb 3-1: config 0 has no interface number 0
[  390.082039][ T5949] usb 3-1: config 0 interface 63 has no altsetting 0
[  390.085303][ T5949] usb 3-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=3b.9a
[  390.092987][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.098774][ T5949] usb 3-1: config 0 descriptor??
[  390.122001][   T10] usb 4-1: config 16 has an invalid interface number: 19 but max is 0
[  390.125292][   T10] usb 4-1: config 16 has no interface number 0
[  390.133397][   T10] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee
[  390.137224][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.150030][   T10] usb 4-1: Product: syz
[  390.151835][   T10] usb 4-1: Manufacturer: syz
[  390.153722][   T10] usb 4-1: SerialNumber: syz
[  390.254294][T14006] loop4: detected capacity change from 0 to 4096
[  390.341736][ T5949] usb 3-1: string descriptor 0 read error: -71
[  390.393067][ T5949] gspca_main: t613-2.14.0 probing 17a1:0128
[  390.429598][ T5949] gspca_t613: unknown sensor 0000
[  390.440176][ T5949] t613 3-1:0.63: probe with driver t613 failed with error -22
[  390.451785][ T5949] usb 3-1: USB disconnect, device number 64
[  390.525317][   T10] usb 4-1: USB disconnect, device number 10
[  390.549201][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  392.071346][T11835] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  392.250088][T11835] usb 5-1: Using ep0 maxpacket: 32
[  392.256896][T11835] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  392.260856][T11835] usb 5-1: config 0 has no interface number 0
[  392.266338][T11835] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  392.270536][T11835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.273837][T11835] usb 5-1: Product: syz
[  392.275640][T11835] usb 5-1: Manufacturer: syz
[  392.277613][T11835] usb 5-1: SerialNumber: syz
[  392.284832][T11835] usb 5-1: config 0 descriptor??
[  392.293856][T11835] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  392.297528][T11835] usb 5-1: selecting invalid altsetting 1
[  392.301467][T11835] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  392.307831][T11835] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  392.312597][T11835] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  392.316572][T11835] usb 5-1: media controller created
[  392.337755][T11835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  392.499499][T11835] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  392.504512][T11835] zl10353_read_register: readreg error (reg=127, ret==-71)
[  392.514009][T11835] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  392.619016][T11835] usb 5-1: USB disconnect, device number 10
[  392.774067][T14034] program syz.2.3121 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  392.789418][T14035] loop3: detected capacity change from 0 to 1024
[  392.822508][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3122'.
[  392.842056][T14035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.919286][T12950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.949988][T14041] loop2: detected capacity change from 2364 to 0
[  393.410089][T14064] netlink: 'syz.3.3132': attribute type 1 has an invalid length.
[  393.465274][T14064] 8021q: adding VLAN 0 to HW filter on device bond1
[  393.502418][T14064] vlan2: entered allmulticast mode
[  393.504476][T14064] macvtap0: entered allmulticast mode
[  393.506433][T14064] veth0_macvtap: entered allmulticast mode
[  393.514513][T14064] bond1: (slave vlan2): making interface the new active one
[  393.523794][T14064] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  393.577743][T14072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.430830][ T5949] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  394.589649][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  394.595910][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  394.604036][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  394.608592][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  394.615918][ T5949] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  394.623486][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.641278][ T5949] usb 3-1: config 0 descriptor??
[  394.646498][T14086] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  394.911014][T14106] block device autoloading is deprecated and will be removed.
[  395.249739][ T5949] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  395.253485][ T5949] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  395.256364][ T5949] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  395.259648][ T5949] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  395.263475][ T5949] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  395.281927][ T5949] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  395.544771][ T5949] usb 3-1: USB disconnect, device number 65
[  395.940847][ T5910] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  396.120393][ T5910] usb 4-1: Using ep0 maxpacket: 16
[  396.125263][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  396.129556][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  396.135465][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  396.139483][ T5910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  396.143831][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  396.151019][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  396.155311][ T5910] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  396.158734][ T5910] usb 4-1: Manufacturer: syz
[  396.164319][ T5910] usb 4-1: config 0 descriptor??
[  396.466282][ T5910] rc_core: IR keymap rc-hauppauge not found
[  396.468913][ T5910] Registered IR keymap rc-empty
[  396.483056][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.520312][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.541799][ T5910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  396.549098][ T5910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32
[  396.563435][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.584568][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.611280][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.637901][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.661923][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.690412][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.718919][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.750404][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.771731][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.792543][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  396.812106][ T5910] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  396.815493][ T5910] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  396.857194][   T10] usb 4-1: USB disconnect, device number 11
[  396.970025][ T5949] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  397.071843][T14138] netlink: 'syz.2.3164': attribute type 1 has an invalid length.
[  397.076739][T14138] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3164'.
[  397.145545][ T5949] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  397.148413][ T5949] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  397.153806][ T5949] usb 5-1: config 220 has no interface number 2
[  397.156275][ T5949] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  397.161540][ T5949] usb 5-1: config 220 interface 0 has no altsetting 0
[  397.163841][ T5949] usb 5-1: config 220 interface 76 has no altsetting 0
[  397.166342][ T5949] usb 5-1: config 220 interface 1 has no altsetting 0
[  397.173648][ T5949] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  397.177139][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.183505][ T5949] usb 5-1: Product: syz
[  397.185169][ T5949] usb 5-1: Manufacturer: syz
[  397.186996][ T5949] usb 5-1: SerialNumber: syz
[  397.491210][ T5949] usb 5-1: selecting invalid altsetting 0
[  397.510716][ T5949] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  397.514156][ T5949] usb 5-1: No valid video chain found.
[  397.551949][ T5949] usb 5-1: selecting invalid altsetting 0
[  397.554561][ T5949] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  397.562739][ T5949] usb 5-1: USB disconnect, device number 11
[  398.001184][T14151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3170'.
[  398.005160][T14151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3170'.
[  398.149192][T14153] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3171'.
[  398.728753][T14164] loop3: detected capacity change from 0 to 512
[  398.812109][T14164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.861608][T14164] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #12: comm syz.3.3176: corrupted xattr block 6: invalid header
[  398.904175][T14164] EXT4-fs (loop3): Remounting filesystem read-only
[  398.950812][T12950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.965006][T10120] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  398.982326][T10120] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  399.036917][T14179] loop4: detected capacity change from 0 to 512
[  399.044076][T14179] EXT4-fs: Ignoring removed bh option
[  399.570000][ T5949] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  399.723131][ T5949] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  399.726221][ T5949] usb 5-1: config 0 has no interface number 0
[  399.731858][ T5949] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  399.735446][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.738307][ T5949] usb 5-1: Product: syz
[  399.743406][ T5949] usb 5-1: Manufacturer: syz
[  399.745261][ T5949] usb 5-1: SerialNumber: syz
[  399.749526][ T5949] usb 5-1: config 0 descriptor??
[  399.770040][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  399.946813][   T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  399.950522][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.953183][   T10] usb 4-1: Product: syz
[  399.955056][   T10] usb 4-1: Manufacturer: syz
[  399.956773][   T10] usb 4-1: SerialNumber: syz
[  399.962425][   T10] usb 4-1: config 0 descriptor??
[  400.313795][ T5949] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected
[  400.319336][ T5949] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81
[  400.323050][ T5949] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1
[  400.326197][ T5949] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2
[  400.334503][ T5949] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  400.555673][   T95] usb 5-1: USB disconnect, device number 12
[  400.570947][   T95] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  400.584490][   T95] keyspan 5-1:0.133: device disconnected
[  401.195189][T14223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3203'.
[  401.199208][T14224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3203'.
[  401.205630][T14228] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  401.233999][T14228] bond1: entered promiscuous mode
[  401.236238][T14228] bond1: entered allmulticast mode
[  401.250306][T14228] 8021q: adding VLAN 0 to HW filter on device bond1
[  401.393868][   T10] usb 4-1: f81604_read: reg: 200f failed: -EPROTO
[  401.405839][   T10] usb 4-1: USB disconnect, device number 12
[  401.463712][   T10] usb 4-1: f81604_read: reg: 100f failed: -ENODEV
[  401.547325][ T5592] usb 4-1: f81604_read: reg: 200f failed: -ENODEV
[  401.552984][   T10] usb 4-1: f81604_read: reg: 200f failed: -ENODEV
[  402.551392][ T5910] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  402.780865][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  402.784220][ T5910] usb 4-1: config 0 has an invalid interface number: 219 but max is 0
[  402.789313][ T5910] usb 4-1: config 0 has no interface number 0
[  402.797507][ T5910] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  402.807814][ T5910] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  402.817965][ T5910] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  402.825792][ T5910] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  402.834794][ T5910] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  402.843489][ T5910] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  402.853925][ T5910] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  402.865611][ T5910] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  402.868973][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.879431][ T5910] usb 4-1: Product: syz
[  402.883698][ T5910] usb 4-1: Manufacturer: syz
[  402.888008][ T5910] usb 4-1: SerialNumber: syz
[  402.895760][ T5910] usb 4-1: config 0 descriptor??
[  402.901904][T14261] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  403.121878][ T5910] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz)
[  403.322969][ T5910] etas_es58x 4-1:0.219: could not parse product info: '424242424242'
[  403.364895][T14287] block nbd2: shutting down sockets
[  403.531263][ T5910] usb 4-1: USB disconnect, device number 13
[  403.544526][ T5910] etas_es58x 4-1:0.219: Disconnecting syz syz
[  404.578680][T14329] loop4: detected capacity change from 0 to 256
[  404.857159][T14340] ptrace attach of "/syz-executor exec"[14344] was attempted by "/syz-executor exec"[14340]
[  405.083648][   T95] hid-generic 0005:10CF:0004.0027: item fetching failed at offset 0/1
[  405.092584][   T95] hid-generic 0005:10CF:0004.0027: probe with driver hid-generic failed with error -22
[  405.836482][T14363] loop3: detected capacity change from 0 to 32768
[  405.844401][T14363] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3258 (14363)
[  405.875979][T14363] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  405.880361][T14363] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  405.883800][T14363] BTRFS info (device loop3): using free-space-tree
[  405.921165][T14363] BTRFS info (device loop3): rebuilding free space tree
[  405.954759][   T33] audit: type=1800 audit(405.819:81): pid=14363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3258" name="file2" dev="loop3" ino=261 res=0 errno=0
[  406.104335][T12950] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  406.221384][   T33] audit: type=1326 audit(406.059:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.4.3262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50f98ebe9 code=0x7ffc0000
[  406.228649][   T33] audit: type=1326 audit(406.059:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.4.3262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50f98ebe9 code=0x7ffc0000
[  406.240640][   T33] audit: type=1326 audit(406.109:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.4.3262" exe="/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff50f98ebe9 code=0x7ffc0000
[  406.260983][   T33] audit: type=1326 audit(406.109:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.4.3262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50f98ebe9 code=0x7ffc0000
[  406.268027][   T33] audit: type=1326 audit(406.109:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.4.3262" exe="/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ff50f98ebe9 code=0x7ffc0000
[  406.297007][   T33] audit: type=1326 audit(406.109:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.4.3262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50f98ebe9 code=0x7ffc0000
[  406.323540][   T33] audit: type=1326 audit(406.109:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.4.3262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50f98ebe9 code=0x7ffc0000
[  406.721435][T14407] loop4: detected capacity change from 0 to 4096
[  407.085641][T14433] qnx6: unable to set blocksize
[  407.147780][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'.
[  407.229229][T14444] netlink: 'syz.2.3287': attribute type 21 has an invalid length.
[  407.233103][T14444] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3287'.
[  407.237465][T14444] netlink: 'syz.2.3287': attribute type 21 has an invalid length.
[  407.424499][T14458] bpf: Bad value for 'uid'
[  407.808498][T14476] loop4: detected capacity change from 0 to 64
[  408.028471][T14488] loop3: detected capacity change from 0 to 256
[  408.040280][T14488] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  408.055906][T14488] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  408.064033][T14488] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  409.000128][   T95] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  409.033821][T14545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3331'.
[  409.066463][T14542] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3331'.
[  409.172770][   T95] usb 5-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81
[  409.183733][   T95] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.198663][   T95] usb 5-1: config 0 descriptor??
[  409.209190][   T95] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[  409.223374][   T95] dvb-usb: bulk message failed: -22 (3/0)
[  409.235975][   T95] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  409.250333][   T95] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[  409.262058][   T95] usb 5-1: media controller created
[  409.264309][   T95] dvb-usb: bulk message failed: -22 (5/0)
[  409.274134][   T95] dvb-usb: MAC address reading failed.
[  409.288625][   T95] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  409.580976][   T95] dvb-usb: bulk message failed: -22 (6/0)
[  409.604924][   T95] dvb-usb: bulk message failed: -22 (6/0)
[  409.607463][   T95] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[  409.614386][   T95] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33
[  409.630258][   T95] dvb-usb: schedule remote query interval to 100 msecs.
[  409.633223][   T95] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[  409.740986][   T95] dvb-usb: bulk message failed: -22 (2/0)
[  409.749874][   T95] dvb-usb: error while querying for an remote control event.
[  409.793817][   T95] usb 5-1: USB disconnect, device number 13
[  409.871945][   T95] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[  410.130158][   T24] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[  410.282183][   T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  410.285589][   T24] usb 4-1: config 179 has no interface number 0
[  410.288367][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  410.296585][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  410.310323][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  410.320253][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  410.325060][T11835] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  410.337375][   T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  410.351658][   T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  410.358662][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.377189][T14566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  410.388609][   T24] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  410.404447][   T24] xpad 4-1:179.65: probe with driver xpad failed with error -90
[  410.492590][T11835] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  410.500277][T11835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  410.504108][T11835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  410.520843][T11835] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  410.524354][T11835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.526963][T11835] usb 3-1: Product: syz
[  410.538742][T11835] usb 3-1: Manufacturer: syz
[  410.540907][T11835] usb 3-1: SerialNumber: syz
[  410.545628][T11835] usb 3-1: config 0 descriptor??
[  410.557252][T11835] iguanair 3-1:0.0: probe with driver iguanair failed with error -12
[  410.609582][   T95] usb 4-1: USB disconnect, device number 14
[  410.639384][T14570] loop4: detected capacity change from 0 to 32768
[  410.645715][T14570] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3344 (14570)
[  410.657668][T14570] BTRFS info (device loop4 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  410.675060][T14570] BTRFS info (device loop4 state S): using crc32c (crc32c-lib) checksum algorithm
[  410.678430][T14570] BTRFS info (device loop4 state S): using free-space-tree
[  410.721014][   T68] BTRFS warning (device loop4 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x4e035593 level 0, ignored
[  410.735667][ T1234] BTRFS warning (device loop4 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  410.742092][   T68] BTRFS warning (device loop4 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x48746f3c level 0, ignored
[  410.749482][ T1234] BTRFS warning (device loop4 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x49206b5e level 0, ignored
[  410.764249][T11835] usb 3-1: USB disconnect, device number 66
[  410.773190][T14570] BTRFS info (device loop4 state S): bdev /dev/loop4 errs: wr 0, rd 0, flush 0, corrupt 7, gen 0
[  410.814083][   T68] BTRFS warning (device loop4 state S): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x9b2456e4 level 0, ignored
[  410.859083][T13259] BTRFS info (device loop4 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  411.220347][T11835] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  411.371744][T11835] usb 5-1: Using ep0 maxpacket: 8
[  411.383745][T11835] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  411.387170][T11835] usb 5-1: config 179 has no interface number 0
[  411.390486][T11835] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  411.395079][T11835] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  411.395774][T14596] loop3: detected capacity change from 0 to 2048
[  411.399459][T11835] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  411.406982][T11835] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  411.412099][T11835] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  411.432531][T11835] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  411.436176][T11835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.443492][ T5858] udevd[5858]: incorrect nilfs2 checksum on /dev/loop3
[  411.448886][T14596] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  411.456365][T14588] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  411.462824][T14596] NILFS (loop3): mounting unchecked fs
[  411.477983][ T6041] udevd[6041]: incorrect nilfs2 checksum on /dev/loop3
[  411.504678][T14596] NILFS (loop3): recovery complete
[  411.514707][T14601] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  411.869833][   T10] usb 5-1: USB disconnect, device number 14
[  411.870543][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  411.877088][    C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending?
[  411.979609][T11835] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input35
[  412.404731][T14613] sp0: Synchronizing with TNC
[  412.476520][T14613] Falling back ldisc for ttyS3.
[  412.995761][T14640] loop4: detected capacity change from 0 to 1024
[  413.463176][T14653] loop4: detected capacity change from 0 to 1024
[  413.822645][T14658] program syz.2.3374 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  414.265404][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  415.120180][T11835] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  415.271808][T11835] usb 3-1: Using ep0 maxpacket: 32
[  415.276603][T11835] usb 3-1: unable to get BOS descriptor or descriptor too short
[  415.286644][T11835] usb 3-1: config 7 has an invalid interface number: 69 but max is 0
[  415.289727][T11835] usb 3-1: config 7 has no interface number 0
[  415.295302][T11835] usb 3-1: config 7 interface 69 has no altsetting 0
[  415.320347][T11835] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=a5.97
[  415.326490][T11835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.332784][T11835] usb 3-1: Product: syz
[  415.334251][T11835] usb 3-1: Manufacturer: syz
[  415.336013][T11835] usb 3-1: SerialNumber: syz
[  415.337774][T14680] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  415.337852][T14680] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  415.337949][T14680] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  415.360508][T14680] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  415.363749][T14680] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  415.368944][T14680] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  415.373333][T14680] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  415.376117][T14680] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  415.379000][T14680] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  415.382689][T14680] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  415.385523][T14680] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  415.388409][T14680] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  415.589449][T11835] kvaser_usb 3-1:7.69: error -ENODEV: Cannot get usb endpoint(s)
[  415.604992][T11835] usb 3-1: USB disconnect, device number 67
[  415.840604][   T95] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  416.002425][   T95] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.008769][   T95] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  416.013590][   T95] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  416.018413][   T95] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.027033][   T95] usb 4-1: config 0 descriptor??
[  416.447871][   T95] arvo 0003:1E7D:30D4.0028: unknown main item tag 0x0
[  416.458588][   T95] arvo 0003:1E7D:30D4.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  416.854313][T11835] usb 4-1: USB disconnect, device number 15
[  417.464149][T14731] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3403'.
[  417.637080][T14750] loop3: detected capacity change from 0 to 512
[  417.742916][T14744] loop4: detected capacity change from 0 to 32768
[  417.841044][T14750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.152438][T12950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.268132][T14789] loop3: detected capacity change from 0 to 4096
[  419.297529][T14789] NILFS (loop3): invalid segment: Checksum error in segment payload
[  419.303862][T14789] NILFS (loop3): trying rollback from an earlier position
[  419.331242][T14789] NILFS (loop3): recovery complete
[  419.338444][T14794] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  421.112711][   T95] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  421.570727][   T95] usb 5-1: Using ep0 maxpacket: 8
[  421.577847][   T95] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  421.581474][   T95] usb 5-1: config 179 has no interface number 0
[  421.584118][   T95] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  421.588771][   T95] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  421.594669][   T95] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  421.600143][   T95] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  421.605109][   T95] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  421.610655][   T95] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  421.614320][   T95] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.621445][T14813] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  421.627254][   T95] xpad 5-1:179.65: probe with driver xpad failed with error -5
[  421.629982][T14819] comedi comedi2: reset error (fatal)
[  421.845353][   T95] usb 5-1: USB disconnect, device number 15
[  422.569621][T14835] loop3: detected capacity change from 0 to 32768
[  422.581715][T14835] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  422.632951][T12950] ocfs2: Unmounting device (7,3) on (node local)
[  423.460600][ T5910] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  423.665840][ T5910] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  423.679486][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.684232][ T5910] usb 4-1: Product: syz
[  423.686021][ T5910] usb 4-1: Manufacturer: syz
[  423.690190][ T5910] usb 4-1: SerialNumber: syz
[  423.708791][ T5910] usb 4-1: config 0 descriptor??
[  423.725363][ T5910] ch341 4-1:0.0: ch341-uart converter detected
[  423.988440][T14874] loop4: detected capacity change from 0 to 32768
[  423.992765][T14874] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3459 (14874)
[  423.998097][T14874] BTRFS error: failed to open device for path /dev/loop4 with flags 0x23: -13
[  424.457508][T14883] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3462'.
[  424.472259][T14883] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  424.941579][ T5910] usb 4-1: failed to send control message: -71
[  424.944072][ T5910] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  424.949042][ T5910] usb 4-1: USB disconnect, device number 16
[  424.958475][ T5910] ch341 4-1:0.0: device disconnected
[  425.542179][T14919] syz.2.3481: attempt to access beyond end of device
[  425.542179][T14919] loop2: rw=0, sector=92, nr_sectors = 4 limit=0
[  425.552544][T14922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3479'.
[  425.641513][T14928] loop3: detected capacity change from 0 to 512
[  425.718489][T14932] sctp: [Deprecated]: syz.2.3486 (pid 14932) Use of int in max_burst socket option deprecated.
[  425.718489][T14932] Use struct sctp_assoc_value instead
[  425.897724][T14930] loop4: detected capacity change from 0 to 32768
[  426.120369][ T5910] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  426.351417][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  426.366709][ T5910] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  426.391000][ T5910] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  426.404593][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.453180][ T5910] usb 4-1: config 0 descriptor??
[  426.870940][T11835] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  427.046568][T11835] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.055666][T11835] usb 3-1: config 0 interface 0 has no altsetting 0
[  427.058488][T11835] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  427.064309][T11835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.069328][ T5910] Bluetooth: Can't get version to change to load ram patch err
[  427.070741][T14954] netlink: 'syz.4.3496': attribute type 10 has an invalid length.
[  427.077186][T11835] usb 3-1: config 0 descriptor??
[  427.078976][ T5910] Bluetooth: Loading sysconfig file failed
[  427.085253][ T5910] ath3k 4-1:0.0: probe with driver ath3k failed with error -32
[  427.093012][ T5910] usb 4-1: USB disconnect, device number 17
[  427.099406][T14954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.114149][T14954] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  427.508629][T14962] loop4: detected capacity change from 0 to 40427
[  427.514950][T11835] apple 0003:05AC:027A.0029: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0
[  427.652573][T14964] loop4: detected capacity change from 0 to 256
[  427.708404][    T9] usb 3-1: USB disconnect, device number 68
[  427.917353][T14979] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3509'.
[  427.924334][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.927346][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.935319][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.938151][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.983323][T14979] bond0: (slave batadv0): Releasing backup interface
[  428.422353][T15000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3517'.
[  428.577894][T15010] loop3: detected capacity change from 0 to 2048
[  428.628259][T15010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.642357][T15010] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.3523: reserved inode found cleared - inode=1
[  428.695374][T12950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.009898][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  429.170745][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  429.174694][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  429.180902][    T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  429.184374][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  429.188348][    T9] usb 4-1: SerialNumber: syz
[  429.422594][    T9] usb 4-1: 0:2 : does not exist
[  429.460819][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  429.501294][    T9] usb 4-1: USB disconnect, device number 18
[  429.556660][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  429.833145][T15050] input: syz1 as /devices/virtual/input/input36
[  430.062548][T15060] netfs: Couldn't get user pages (rc=-14)
[  430.620634][   T95] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  430.774599][   T95] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  430.782959][   T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.848000][   T95] usb 3-1: config 0 descriptor??
[  430.867573][   T95] pwc: Philips SPC 900NC USB webcam detected.
[  431.092336][   T95] pwc: Failed to set LED on/off time (-71)
[  431.103652][   T95] pwc: send_video_command error -71
[  431.113896][   T95] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  431.127949][   T95] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  431.326352][   T95] usb 3-1: USB disconnect, device number 69
[  432.745716][T15081] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  432.749273][T15081] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  432.916680][T15081] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  432.940144][T15081] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  433.422481][T15146] netlink: 'syz.3.3570': attribute type 1 has an invalid length.
[  433.425696][T15146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.980817][T15176] netlink: 'syz.2.3578': attribute type 1 has an invalid length.
[  433.984079][T15176] netlink: 'syz.2.3578': attribute type 1 has an invalid length.
[  433.988909][T15176] netlink: 'syz.2.3578': attribute type 1 has an invalid length.
[  433.993080][T15176] block nbd0: shutting down sockets
[  434.260837][T15186] kernel read not supported for file /   (pid: 15186 comm: syz.4.3580)
[  434.266045][   T33] audit: type=1800 audit(434.129:89): pid=15186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3580" name=200120 dev="mqueue" ino=37193 res=0 errno=0
[  434.456842][T15194] fuse: blksize only supported for fuseblk
[  434.493305][T15196] autofs: Bad value for 'fd'
[  434.970227][   T95] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  435.080132][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  435.130141][   T95] usb 5-1: Using ep0 maxpacket: 8
[  435.136784][   T95] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  435.141343][   T95] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.144670][   T95] usb 5-1: Product: syz
[  435.146472][   T95] usb 5-1: Manufacturer: syz
[  435.148400][   T95] usb 5-1: SerialNumber: syz
[  435.159359][   T95] usb 5-1: config 0 descriptor??
[  435.165226][   T95] gspca_main: se401-2.14.0 probing 047d:5003
[  435.240180][   T10] usb 4-1: Using ep0 maxpacket: 32
[  435.245638][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.250609][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.254707][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  435.258450][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.267406][   T10] usb 4-1: config 0 descriptor??
[  435.275036][   T10] hub 4-1:0.0: USB hub found
[  435.477516][   T10] hub 4-1:0.0: 1 port detected
[  435.568461][   T95] gspca_se401: Wrong descriptor type
[  435.773041][   T95] usb 5-1: USB disconnect, device number 16
[  436.090893][   T95] hub 4-1:0.0: activate --> -90
[  436.150290][   T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  436.319841][   T10] usb 3-1: Using ep0 maxpacket: 32
[  436.324018][T15220] loop4: detected capacity change from 0 to 8
[  436.333743][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  436.336982][T15220] SQUASHFS error: xz decompression failed, data probably corrupt
[  436.343172][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  436.344866][T15220] SQUASHFS error: Failed to read block 0x108: -5
[  436.347451][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  436.354229][T15220] SQUASHFS error: Unable to read metadata cache entry [106]
[  436.357321][T15220] SQUASHFS error: Unable to read inode 0x0
[  436.385277][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  436.396250][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  436.404622][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.407813][   T10] usb 3-1: Product: syz
[  436.409563][   T10] usb 3-1: Manufacturer: syz
[  436.412106][   T10] usb 3-1: SerialNumber: syz
[  436.434586][   T10] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  436.437469][   T10] cdc_ncm 3-1:1.0: bind() failure
[  436.475165][T15222] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3597'.
[  436.496299][   T24] usb 4-1: USB disconnect, device number 19
[  436.594508][T15227] loop4: detected capacity change from 0 to 512
[  436.630979][ T5910] usb 3-1: USB disconnect, device number 70
[  436.632654][T15229] netlink: 'syz.4.3600': attribute type 1 has an invalid length.
[  436.638453][T15229] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3600'.
[  437.086937][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'.
[  437.090342][T11835] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  437.105833][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'.
[  437.251799][T11835] usb 5-1: Using ep0 maxpacket: 16
[  437.259053][T11835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  437.270790][T11835] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  437.287312][T11835] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  437.308314][T11835] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  437.313376][T15255] netlink: 'syz.3.3613': attribute type 2 has an invalid length.
[  437.319642][T11835] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  437.325288][T11835] usb 5-1: config 1 interface 0 has no altsetting 0
[  437.332008][T11835] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  437.335791][T11835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.371881][T11835] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  437.568931][T11835] scsi host6: usb-storage 5-1:1.0
[  437.808873][T11835] usb 5-1: USB disconnect, device number 17
[  438.346844][T15276] loop3: detected capacity change from 0 to 2048
[  438.377202][T15276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.390229][T15276] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  438.409343][T15276] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.3621: bit already cleared for inode 15
[  438.483934][T15287] netlink: 'syz.4.3625': attribute type 2 has an invalid length.
[  438.523271][T12950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.595854][T15289] netlink: 'syz.4.3627': attribute type 11 has an invalid length.
[  438.723345][T15299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3631'.
[  438.798809][T15301] loop4: detected capacity change from 0 to 4096
[  438.889986][   T95] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  438.909744][T15309] loop4: detected capacity change from 0 to 128
[  439.129935][   T95] usb 3-1: Using ep0 maxpacket: 32
[  439.137541][   T95] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  439.143810][   T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  439.148999][   T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  439.153152][   T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  439.157986][   T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  439.222386][   T95] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  439.237451][   T95] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.251293][   T95] usb 3-1: Product: syz
[  439.256308][   T95] usb 3-1: Manufacturer: syz
[  439.262170][   T95] usb 3-1: SerialNumber: syz
[  439.339163][   T95] usb 3-1: config 0 descriptor??
[  439.765809][   T95] iforce 3-1:0.0: usb_submit_urb failed: -32
[  439.768562][   T95] input input38: Device does not respond to id packet M
[  439.772531][   T95] iforce 3-1:0.0: usb_submit_urb failed: -32
[  439.775437][   T95] input input38: Device does not respond to id packet P
[  439.779257][   T95] iforce 3-1:0.0: usb_submit_urb failed: -32
[  439.786539][   T95] input input38: Device does not respond to id packet B
[  439.906413][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  439.909102][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  439.990961][   T95] iforce 3-1:0.0: usb_submit_urb failed: -71
[  439.995145][   T95] iforce 3-1:0.0: usb_submit_urb failed: -71
[  439.999325][   T95] iforce 3-1:0.0: usb_submit_urb failed: -71
[  440.004660][   T95] iforce 3-1:0.0: usb_submit_urb failed: -71
[  440.009238][   T95] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38
[  440.041984][   T95] usb 3-1: USB disconnect, device number 71
[  440.210109][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  440.369962][   T10] usb 4-1: Using ep0 maxpacket: 8
[  440.378121][   T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  440.384617][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.387873][   T10] usb 4-1: Product: syz
[  440.389561][   T10] usb 4-1: Manufacturer: syz
[  440.391973][   T10] usb 4-1: SerialNumber: syz
[  440.408344][   T10] usb 4-1: config 0 descriptor??
[  440.660927][   T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  441.491795][T15345] loop4: detected capacity change from 0 to 256
[  441.494674][T15345] exfat: Deprecated parameter 'utf8'
[  441.767795][   T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  441.785014][   T10] usb 4-1: USB disconnect, device number 20
[  442.200354][T11835] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  442.350176][T11835] usb 3-1: Using ep0 maxpacket: 8
[  442.353756][T11835] usb 3-1: unable to get BOS descriptor or descriptor too short
[  442.361015][T11835] usb 3-1: config 6 has an invalid interface number: 70 but max is 0
[  442.364204][T11835] usb 3-1: config 6 has no interface number 0
[  442.366639][T11835] usb 3-1: config 6 interface 70 altsetting 118 has an endpoint descriptor with address 0x29, changing to 0x9
[  442.374328][T11835] usb 3-1: config 6 interface 70 altsetting 118 endpoint 0x9 has invalid wMaxPacketSize 0
[  442.378264][T11835] usb 3-1: config 6 interface 70 has no altsetting 0
[  442.380159][    T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  442.386437][T11835] usb 3-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=63.7b
[  442.391712][T11835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.396994][T11835] usb 3-1: Product: syz
[  442.398697][T11835] usb 3-1: Manufacturer: syz
[  442.401065][T11835] usb 3-1: SerialNumber: syz
[  442.552618][    T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  442.557606][    T9] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3
[  442.562558][    T9] usb 5-1: config 220 interface 0 has no altsetting 0
[  442.569378][    T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  442.573809][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.576436][    T9] usb 5-1: Product: syz
[  442.577685][    T9] usb 5-1: Manufacturer: syz
[  442.579188][    T9] usb 5-1: SerialNumber: syz
[  442.642559][T11835] HFC-S_USB 3-1:6.70: probe with driver HFC-S_USB failed with error -5
[  442.662038][T11835] usb 3-1: USB disconnect, device number 72
[  442.808678][    T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  442.813218][    T9] usb 5-1: No valid video chain found.
[  442.822325][    T9] usb 5-1: USB disconnect, device number 18
[  443.150064][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  443.326089][   T10] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.339967][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  443.342895][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  443.346685][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.377644][   T10] usb 4-1: config 0 descriptor??
[  443.803344][   T10] magicmouse 0003:05AC:0269.002A: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0
[  443.920084][   T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  443.999366][   T10] usb 4-1: USB disconnect, device number 21
[  444.072314][   T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  444.077083][   T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  444.083116][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  444.086852][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.095859][T15397] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  444.103189][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  444.320911][   T24] usb 3-1: USB disconnect, device number 73
[  444.342221][T15399] loop4: detected capacity change from 0 to 1024
[  444.345367][T15399] EXT4-fs: Ignoring removed oldalloc option
[  444.347738][T15399] EXT4-fs: Ignoring removed orlov option
[  444.546215][T15405] loop4: detected capacity change from 0 to 1024
[  444.628326][T15409] Bluetooth: MGMT ver 1.23
[  444.942102][   T24] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  445.127919][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.141846][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  445.159491][   T24] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  445.186766][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.254795][   T24] usb 4-1: config 0 descriptor??
[  445.778778][   T24] uclogic 0003:5543:0003.002B: unknown main item tag 0x0
[  445.788009][   T24] uclogic 0003:5543:0003.002B: unknown main item tag 0x0
[  445.801350][   T24] uclogic 0003:5543:0003.002B: unknown main item tag 0x0
[  445.804518][   T24] uclogic 0003:5543:0003.002B: unknown main item tag 0x0
[  445.807544][   T24] uclogic 0003:5543:0003.002B: unknown main item tag 0x0
[  445.833022][   T24] uclogic 0003:5543:0003.002B: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.3-1/input0
[  445.948522][   T10] usb 4-1: USB disconnect, device number 22
[  446.212993][T15435] netlink: 'syz.4.3689': attribute type 62 has an invalid length.
[  446.532549][   T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  446.600240][T11835] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  446.680850][   T24] usb 3-1: Using ep0 maxpacket: 16
[  446.691028][   T24] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  446.694336][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  446.698451][   T24] usb 3-1: config 0 has no interface number 0
[  446.706561][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  446.711064][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.714409][   T24] usb 3-1: Product: syz
[  446.716212][   T24] usb 3-1: Manufacturer: syz
[  446.730241][   T24] usb 3-1: SerialNumber: syz
[  446.734870][   T24] usb 3-1: config 0 descriptor??
[  446.762443][T11835] usb 5-1: not running at top speed; connect to a high speed hub
[  446.766957][T11835] usb 5-1: config 2 has an invalid interface number: 33 but max is 0
[  446.771023][T11835] usb 5-1: config 2 has no interface number 0
[  446.774563][T11835] usb 5-1: config 2 interface 33 has no altsetting 0
[  446.781353][T11835] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02
[  446.785237][T11835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.788376][T11835] usb 5-1: Product: syz
[  446.790936][T11835] usb 5-1: Manufacturer: syz
[  446.792694][T11835] usb 5-1: SerialNumber: syz
[  446.948178][    T9] usb 3-1: USB disconnect, device number 74
[  446.990204][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  447.008628][T11835] go7007 5-1:2.33: probe with driver go7007 failed with error -12
[  447.013389][T11835] usb 5-1: USB disconnect, device number 19
[  447.139907][   T10] usb 4-1: Using ep0 maxpacket: 16
[  447.146887][   T10] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  447.150553][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.155151][   T10] usb 4-1: Product: syz
[  447.156825][   T10] usb 4-1: Manufacturer: syz
[  447.158662][   T10] usb 4-1: SerialNumber: syz
[  447.164187][   T10] usb 4-1: config 0 descriptor??
[  447.172549][   T10] hub 4-1:0.0: bad descriptor, ignoring hub
[  447.174432][   T10] hub 4-1:0.0: probe with driver hub failed with error -5
[  447.480199][   T10] usb 4-1: USB disconnect, device number 23
[  447.584780][T15465] loop4: detected capacity change from 0 to 512
[  447.594602][T15465] EXT4-fs: Ignoring removed i_version option
[  447.596981][T15465] EXT4-fs: Ignoring removed nobh option
[  447.718301][T15469] Bluetooth: Invalid esc byte 0x02
[  447.720559][T11835] usb 3-1: new full-speed USB device number 75 using dummy_hcd
[  447.872618][T11835] usb 3-1: config 0 has an invalid interface number: 60 but max is 0
[  447.876432][T11835] usb 3-1: config 0 has no interface number 0
[  447.879267][   T33] audit: type=1326 audit(2000000010.270:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.4.3710" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff50f98ebe9 code=0x0
[  447.890003][T11835] usb 3-1: config 0 interface 60 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 1023
[  447.898525][T11835] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11
[  447.904916][T11835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.912317][T11835] usb 3-1: config 0 descriptor??
[  447.921327][T11835] ftdi_sio 3-1:0.60: FTDI USB Serial Device converter detected
[  447.927990][T11835] usb 3-1: Detected SIO
[  447.935092][T11835] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  448.119299][T11835] usb 3-1: USB disconnect, device number 75
[  448.126723][T11835] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  448.132293][T11835] ftdi_sio 3-1:0.60: device disconnected
[  448.770514][  T792] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  448.777713][  T792] hid-generic 0000:0000:0000.002C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  448.843090][T15507] loop3: detected capacity change from 0 to 512
[  448.883594][T15507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.891493][T15507] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  448.919020][T12950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.943086][T11835] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  449.100280][T11835] usb 3-1: Using ep0 maxpacket: 16
[  449.104207][T11835] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  449.108841][T15515] loop4: detected capacity change from 0 to 4096
[  449.130279][T11835] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  449.142913][T11835] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  449.150806][T11835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.153566][T11835] usb 3-1: Product: syz
[  449.155031][T11835] usb 3-1: Manufacturer: syz
[  449.160714][T11835] usb 3-1: SerialNumber: syz
[  449.372813][T11835] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  449.385521][T11835] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  449.397722][T11835] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[  449.426602][T11835] usb 3-1: USB disconnect, device number 76
[  449.482405][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  449.565771][T15529] 9pnet_virtio: no channels available for device 
[  449.570909][ T5910] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  449.731782][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  449.759031][ T5910] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  449.770597][ T5910] usb 5-1: config 0 has no interface number 0
[  449.782924][ T5910] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  449.812457][ T5910] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  449.825369][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.838584][ T5910] usb 5-1: Product: syz
[  449.847203][ T5910] usb 5-1: Manufacturer: syz
[  449.853450][ T5910] usb 5-1: SerialNumber: syz
[  449.864438][ T5910] usb 5-1: config 0 descriptor??
[  449.873805][ T5910] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  449.895375][ T5910] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -2
[  449.924374][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  450.083995][ T5910] usb 5-1: USB disconnect, device number 20
[  450.520930][   T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  450.671024][   T10] usb 4-1: Using ep0 maxpacket: 32
[  450.674733][T15540] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3737'.
[  450.675535][   T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  450.684355][   T10] usb 4-1: config 0 has no interface number 0
[  450.686887][   T10] usb 4-1: config 0 interface 184 has no altsetting 0
[  450.693092][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  450.700527][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.706611][   T10] usb 4-1: Product: syz
[  450.710887][   T10] usb 4-1: Manufacturer: syz
[  450.715288][   T10] usb 4-1: SerialNumber: syz
[  450.725046][   T10] usb 4-1: config 0 descriptor??
[  450.734851][   T10] smsc75xx v1.0.0
[  450.937884][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  450.948472][   T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  450.959587][   T10] usb 4-1: USB disconnect, device number 24
[  451.222320][   T95] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  451.234573][T15566] loop4: detected capacity change from 0 to 512
[  451.392027][   T95] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  451.399882][   T95] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.404326][   T95] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30
[  451.408521][   T95] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217
[  451.413887][   T95] usb 3-1: config 1 interface 1 has no altsetting 0
[  451.418832][   T95] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  451.423604][   T95] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.426895][   T95] usb 3-1: Product: syz
[  451.428613][   T95] usb 3-1: Manufacturer: syz
[  451.430632][   T95] usb 3-1: SerialNumber: syz
[  451.443872][   T95] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[  451.478203][T15572] loop4: detected capacity change from 0 to 512
[  451.621980][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3755'.
[  451.646613][   T10] usb 3-1: USB disconnect, device number 77
[  451.711715][T15584] netlink: 'syz.3.3758': attribute type 13 has an invalid length.
[  451.758486][   T33] audit: type=1326 audit(2000000014.150:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.4.3759" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff50f98ebe9 code=0x0
[  452.089569][   T10] kernel write not supported for file /binder/transactions (pid: 10 comm: kworker/0:1)
[  452.360376][ T5910] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  452.512674][ T5910] usb 4-1: Using ep0 maxpacket: 16
[  452.523775][ T5910] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  452.527790][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.534823][ T5910] usb 4-1: Product: syz
[  452.536816][ T5910] usb 4-1: Manufacturer: syz
[  452.538959][ T5910] usb 4-1: SerialNumber: syz
[  452.552549][ T5910] r8152-cfgselector 4-1: Unknown version 0x0000
[  452.554802][ T5910] r8152-cfgselector 4-1: config 0 descriptor??
[  452.894219][T15633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3782'.
[  452.897101][T15633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3782'.
[  452.975471][   T10] r8152-cfgselector 4-1: USB disconnect, device number 25
[  453.010357][T15631] loop4: detected capacity change from 0 to 32768
[  453.519203][T15655] loop3: detected capacity change from 0 to 1024
[  453.528425][T15655] hfsplus: failed to load root directory
[  453.707406][T15651] loop4: detected capacity change from 0 to 32768
[  453.729471][T15659] loop3: detected capacity change from 0 to 512
[  453.808218][T15659] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  453.841777][T15659] EXT4-fs (loop3): 1 truncate cleaned up
[  453.845321][T15659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.914430][T12950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.159439][T15686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3805'.
[  454.162695][T15688] syz.3.3806: attempt to access beyond end of device
[  454.162695][T15688] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0
[  454.237791][T15690] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  454.240398][T15690] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  454.249626][T15690] vhci_hcd vhci_hcd.0: Device attached
[  454.258407][T15691] vhci_hcd: connection closed
[  454.261481][ T5923] vhci_hcd: stop threads
[  454.265266][ T5923] vhci_hcd: release socket
[  454.267048][ T5923] vhci_hcd: disconnect device
[  454.530020][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  454.680029][    T9] usb 4-1: Using ep0 maxpacket: 8
[  454.685175][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  454.689487][    T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  454.693816][    T9] usb 4-1: config 1 has no interface number 1
[  454.696432][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  454.702489][    T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  454.709212][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  454.714663][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.718134][    T9] usb 4-1: Product: syz
[  454.720609][    T9] usb 4-1: Manufacturer: syz
[  454.722513][    T9] usb 4-1: SerialNumber: syz
[  454.955671][    T9] usb 4-1: 2:1: cannot set freq 15828157 to ep 0x82
[  454.981996][    T9] usb 4-1: USB disconnect, device number 26
[  455.170383][   T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  455.201236][T15710] loop4: detected capacity change from 0 to 256
[  455.204839][T15710] exfat: Unknown parameter ''
[  455.324623][   T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  455.328171][   T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  455.333820][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  455.337325][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  455.344722][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  455.351445][   T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  455.355526][   T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  455.358705][   T10] usb 3-1: Product: syz
[  455.365146][   T10] usb 3-1: Manufacturer: syz
[  455.376356][   T10] cdc_wdm 3-1:1.0: skipping garbage
[  455.379387][   T10] cdc_wdm 3-1:1.0: skipping garbage
[  455.413077][   T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  455.415544][   T10] cdc_wdm 3-1:1.0: Unknown control protocol
[  455.817708][T15714] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  455.903493][T15716] loop3: detected capacity change from 0 to 2048
[  455.917493][T15716] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  456.004545][T15718] loop3: detected capacity change from 0 to 128
[  456.250446][ T5909] usb 3-1: USB disconnect, device number 78
[  457.525576][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3856'.
[  457.530277][   T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  457.680162][   T10] usb 4-1: Using ep0 maxpacket: 32
[  457.684374][   T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  457.698132][   T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  457.702260][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  457.706749][ T5909] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  457.711084][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  457.715389][   T10] usb 4-1: config 1 has no interface number 0
[  457.718813][   T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  457.722769][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.732623][   T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  457.859982][ T5909] usb 3-1: Using ep0 maxpacket: 16
[  457.864329][T15797] loop4: detected capacity change from 0 to 32768
[  457.865378][ T5909] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  457.875342][ T5909] usb 3-1: config 0 has no interface number 0
[  457.877820][ T5909] usb 3-1: config 0 interface 48 has no altsetting 0
[  457.889969][ T5909] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  457.893800][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.896904][ T5909] usb 3-1: Product: syz
[  457.898623][ T5909] usb 3-1: Manufacturer: syz
[  457.901317][ T5909] usb 3-1: SerialNumber: syz
[  457.909681][ T5909] usb 3-1: config 0 descriptor??
[  457.942630][   T10] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[  457.950959][   T10] snd_usb_pod 4-1:1.1: invalid control EP
[  457.953310][   T10] snd_usb_pod 4-1:1.1: cannot start listening: -22
[  457.956513][   T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  457.970476][   T10] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22
[  458.047083][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3859'.
[  458.139312][   T10] usb 3-1: USB disconnect, device number 79
[  458.176409][   T95] usb 4-1: USB disconnect, device number 27
[  458.178616][T15805] ieee802154 phy0 wpan0: encryption failed: -22
[  458.520285][  T792] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  458.673234][  T792] usb 5-1: config 0 has an invalid interface number: 176 but max is 2
[  458.697751][  T792] usb 5-1: config 0 has an invalid interface number: 3 but max is 2
[  458.703600][  T792] usb 5-1: config 0 has no interface number 0
[  458.713860][  T792] usb 5-1: config 0 has no interface number 1
[  458.716352][  T792] usb 5-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30
[  458.729061][  T792] usb 5-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  458.737974][  T792] usb 5-1: config 0 interface 3 has no altsetting 0
[  458.748097][  T792] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  458.751663][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.756715][  T792] usb 5-1: config 0 descriptor??
[  458.969711][  T792] usb 5-1: Could not set interface, error -71
[  458.970978][T15813] loop3: detected capacity change from 0 to 32768
[  458.975972][  T792] usb 5-1: selecting invalid altsetting 0
[  458.982992][  T792] usb 5-1: Could not set interface, error -22
[  458.984690][T15813] btrfs: Deprecated parameter 'usebackuproot'
[  458.987046][  T792] usb 5-1: USB disconnect, device number 21
[  458.991824][T15813] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  458.997035][T15813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3865 (15813)
[  459.016022][T15813] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  459.019297][T15813] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  459.026168][T15813] BTRFS info (device loop3): using free-space-tree
[  459.047552][ T1090] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  459.056353][T15813] BTRFS warning (device loop3): couldn't read tree root
[  459.060024][T15813] BTRFS warning (device loop3): try to load backup roots slot 1
[  459.063639][ T3632] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  459.068266][T15813] BTRFS warning (device loop3): couldn't read tree root
[  459.072814][T15813] BTRFS warning (device loop3): try to load backup roots slot 2
[  459.075637][   T68] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  459.082731][T15813] BTRFS warning (device loop3): couldn't read tree root
[  459.085357][T15813] BTRFS warning (device loop3): try to load backup roots slot 3
[  459.091449][   T95] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  459.095382][T15813] BTRFS info (device loop3): rebuilding free space tree
[  459.106161][T15813] BTRFS info (device loop3): checking UUID tree
[  459.217705][T12950] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  459.265658][   T95] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  459.269209][   T95] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  459.296046][   T95] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  459.299282][   T95] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  459.308807][   T95] usb 3-1: Manufacturer: syz
[  459.318969][   T95] usb 3-1: config 0 descriptor??
[  459.327175][   T95] igorplugusb 3-1:0.0: incorrect number of endpoints
[  459.538375][ T5909] usb 3-1: USB disconnect, device number 80
[  459.937163][T15846] loop4: detected capacity change from 0 to 32768
[  459.945617][T15846] bcachefs (/dev/loop4): error reading superblock: error opening /dev/loop4: EACCES
[  459.950111][T15846] bcachefs: bch2_fs_get_tree() error: EACCES
[  460.008463][T15848] loop4: detected capacity change from 0 to 1024
[  460.434983][T15867] loop4: detected capacity change from 0 to 512
[  460.607953][T15873] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3883'.
[  460.612317][T15873] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3883'.
[  461.395440][T15888] deleting an unspecified loop device is not supported.
[  462.009969][   T95] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  462.179953][   T95] usb 3-1: Using ep0 maxpacket: 32
[  462.190286][   T95] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  462.198146][   T95] usb 3-1: config 0 has no interface number 0
[  462.209525][   T95] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  462.218730][   T95] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.228892][   T95] usb 3-1: Product: syz
[  462.230832][   T95] usb 3-1: Manufacturer: syz
[  462.232514][   T95] usb 3-1: SerialNumber: syz
[  462.242927][   T95] usb 3-1: config 0 descriptor??
[  462.258283][   T95] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  462.267044][   T95] usb 3-1: selecting invalid altsetting 1
[  462.269566][   T95] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  462.284415][   T95] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  462.289172][   T95] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  462.293265][   T95] usb 3-1: media controller created
[  462.353235][   T95] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  462.682212][   T95] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  462.747357][   T95] usb 3-1: USB disconnect, device number 81
[  463.512447][T15948] loop4: detected capacity change from 0 to 256
[  464.196296][T15953] loop3: detected capacity change from 0 to 32768
[  464.210802][T15953] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3921 (15953)
[  464.234837][T15953] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  464.238067][T15953] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  464.241400][T15953] BTRFS info (device loop3): using free-space-tree
[  464.366319][T12950] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  464.530959][   T95] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  464.702679][   T95] usb 3-1: Using ep0 maxpacket: 8
[  464.712120][   T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  464.719489][   T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  464.736445][   T95] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  464.741080][   T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  464.744780][   T95] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  464.748231][   T95] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  464.754319][   T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.762907][   T95] usb 3-1: config 0 descriptor??
[  464.765793][T15967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  465.047642][T15999] netlink: 'syz.3.3933': attribute type 1 has an invalid length.
[  465.051384][T15999] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3933'.
[  465.224210][ T5910] usb 3-1: USB disconnect, device number 82
[  465.226640][ T5864] Bluetooth: hci3: Opcode 0x0c03 failed: -19
[  465.874572][T16006] loop3: detected capacity change from 0 to 32768
[  466.063738][T16006] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  466.063770][T16006]   allowing incompatible features above 0.0: (unknown version)
[  466.063781][T16006]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  466.081917][T16006] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  466.085141][T16006] bcachefs (loop3): initializing new filesystem
[  466.095229][T16006] bcachefs (loop3): going read-write
[  466.103743][T16006] bcachefs (loop3): marking superblocks
[  466.113303][T16006] bcachefs (loop3): initializing freespace
[  466.119242][T16006] bcachefs (loop3): done initializing freespace
[  466.123879][T16006] bcachefs (loop3): reading snapshots table
[  466.126354][T16006] bcachefs (loop3): reading snapshots done
[  466.183053][T16006] bcachefs (loop3): done starting filesystem
[  466.330445][  T792] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  466.611092][  T792] usb 5-1: Using ep0 maxpacket: 16
[  466.663625][  T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  466.676838][  T792] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  466.680998][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.684534][  T792] usb 5-1: Product: syz
[  466.686348][  T792] usb 5-1: Manufacturer: syz
[  466.691571][  T792] usb 5-1: SerialNumber: syz
[  466.701297][  T792] usb 5-1: config 0 descriptor??
[  466.715542][  T792] hub 5-1:0.0: bad descriptor, ignoring hub
[  466.718042][  T792] hub 5-1:0.0: probe with driver hub failed with error -5
[  466.726099][  T792] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  466.749338][T12950] bcachefs (loop3): shutting down
[  466.753240][T12950] bcachefs (loop3): going read-only
[  466.757532][  T792] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2
[  466.760086][T12950] bcachefs (loop3): finished waiting for writes to stop
[  466.771671][T12950] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  466.806941][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  466.828715][T12950] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  466.836407][T12950] bcachefs (loop3): clean shutdown complete, journal seq 4
[  466.842771][T12950] bcachefs (loop3): marking filesystem clean
[  466.872430][T12950] bcachefs (loop3): shutdown complete
[  467.020744][  T792] usb 5-1: USB disconnect, device number 22
[  468.674216][T16037] loop3: detected capacity change from 0 to 32768
[  468.683615][T16037] (syz.3.3943,16037,1):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  468.683651][T16037] (syz.3.3943,16037,1):ocfs2_check_volume:2432 ERROR: status = -27
[  468.693393][T16037] (syz.3.3943,16037,1):ocfs2_mount_volume:1764 ERROR: status = -27
[  468.699350][T16037] (syz.3.3943,16037,1):ocfs2_fill_super:1177 ERROR: status = -27
[  468.722424][T16039] loop4: detected capacity change from 0 to 32768
[  468.735168][T16039] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3944 (16039)
[  468.747332][T16039] BTRFS error: failed to open device for path /dev/loop4 with flags 0x23: -13
[  469.786558][T16078] loop3: detected capacity change from 0 to 128
[  469.797262][T16078] qnx6: unable to set blocksize
[  470.070351][  T792] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  470.222952][  T792] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  470.228091][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.233358][  T792] usb 4-1: config 0 descriptor??
[  470.259955][   T95] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  470.410092][   T95] usb 5-1: Using ep0 maxpacket: 16
[  470.413678][   T95] usb 5-1: config 8 has an invalid interface number: 206 but max is 0
[  470.416497][   T95] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  470.420833][   T95] usb 5-1: config 8 has no interface number 0
[  470.423457][   T95] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  470.427352][   T95] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  470.432042][   T95] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  470.446407][   T95] usb 5-1: config 8 interface 206 has no altsetting 0
[  470.454702][   T95] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  470.457688][   T95] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.460708][   T95] usb 5-1: Product: syz
[  470.462086][   T95] usb 5-1: Manufacturer: syz
[  470.463773][   T95] usb 5-1: SerialNumber: syz
[  470.654448][  T792] viewsonic 0003:2133:0018.002D: unknown main item tag 0x0
[  470.657614][  T792] viewsonic 0003:2133:0018.002D: item fetching failed at offset 3/5
[  470.667322][  T792] viewsonic 0003:2133:0018.002D: probe with driver viewsonic failed with error -22
[  470.678659][   T95] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected
[  470.691006][   T95] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  470.695443][   T95] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  470.712005][   T95] usb 5-1: USB disconnect, device number 23
[  470.724549][   T95] garmin_gps 5-1:8.206: device disconnected
[  471.230446][  T792] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  471.383886][  T792] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  471.389389][  T792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  471.397336][  T792] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  471.410491][  T792] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.418615][  T792] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.426596][  T792] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  471.433362][  T792] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  471.436664][  T792] usb 3-1: Product: syz
[  471.438511][  T792] usb 3-1: Manufacturer: syz
[  471.454614][  T792] cdc_wdm 3-1:1.0: skipping garbage
[  471.457022][  T792] cdc_wdm 3-1:1.0: skipping garbage
[  471.467890][  T792] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  471.471788][  T792] cdc_wdm 3-1:1.0: Unknown control protocol
[  471.624788][T16111] loop4: detected capacity change from 0 to 32768
[  471.687576][T16100] cdc_wdm 3-1:1.0: Error submitting int urb - -90
[  471.694961][   T10] usb 3-1: USB disconnect, device number 83
[  472.230001][   T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  472.386321][   T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  472.390489][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.393713][   T10] usb 5-1: Product: syz
[  472.395461][   T10] usb 5-1: Manufacturer: syz
[  472.397332][   T10] usb 5-1: SerialNumber: syz
[  472.407896][   T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  472.452977][   T95] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  472.510389][ T5909] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  472.669947][ T5909] usb 3-1: Using ep0 maxpacket: 16
[  472.674714][ T5909] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  472.678126][ T5909] usb 3-1: config 0 has no interface number 0
[  472.685216][ T5909] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  472.689055][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.692886][ T5909] usb 3-1: Product: syz
[  472.694885][ T5909] usb 3-1: Manufacturer: syz
[  472.696866][ T5909] usb 3-1: SerialNumber: syz
[  472.703481][ T5909] usb 3-1: config 0 descriptor??
[  472.711103][ T5909] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  472.855539][  T792] usb 4-1: USB disconnect, device number 28
[  472.869679][T11835] usb 5-1: USB disconnect, device number 24
[  472.875726][    C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending?
[  473.190344][  T792] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  473.346558][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.351801][  T792] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  473.355576][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.368327][  T792] usb 4-1: config 0 descriptor??
[  473.500224][   T95] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  473.505606][   T95] ath9k_htc: Failed to initialize the device
[  473.510012][T11835] usb 5-1: ath9k_htc: USB layer deinitialized
[  473.797766][  T792] dragonrise 0003:0079:0006.002E: item fetching failed at offset 5/7
[  473.806991][  T792] dragonrise 0003:0079:0006.002E: parse failed
[  473.811108][  T792] dragonrise 0003:0079:0006.002E: probe with driver dragonrise failed with error -22
[  473.919612][ T5909] gspca_spca1528: reg_w err -71
[  473.922127][ T5909] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  473.932797][ T5909] usb 3-1: USB disconnect, device number 84
[  473.975195][T16144] loop4: detected capacity change from 0 to 256
[  474.002726][  T792] usb 4-1: USB disconnect, device number 29
[  474.522151][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3991'.
[  474.966365][T16170] binder: 16169:16170 ioctl 541b 0 returned -22
[  474.994749][T16160] loop3: detected capacity change from 0 to 32768
[  475.147330][T16160] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  475.147364][T16160]   allowing incompatible features above 0.0: (unknown version)
[  475.147375][T16160]   features: 
[  475.162447][T16160] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  475.165647][T16160] bcachefs (loop3): initializing new filesystem
[  475.176579][T16160] bcachefs (loop3): going read-write
[  475.192986][T16160] bcachefs (loop3): marking superblocks
[  475.236033][T16160] bcachefs (loop3): initializing freespace
[  475.275238][T16160] bcachefs (loop3): done initializing freespace
[  475.285211][T16160] bcachefs (loop3): reading snapshots table
[  475.287230][T16160] bcachefs (loop3): reading snapshots done
[  475.400292][T16160] bcachefs (loop3): done starting filesystem
[  475.569053][T16160] bcachefs (loop3): shutdown by ioctl type 1emergency read only at seq 2
[  475.573521][   T95] bcachefs (loop3): going read-only
[  475.573586][   T95] bcachefs (loop3): finished waiting for writes to stop
[  475.592572][   T95] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  475.592651][   T95] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 2
[  475.596429][   T95] bcachefs (loop3): unclean shutdown complete, journal seq 2
[  475.613166][   T95] bcachefs (loop3): done going read-only, filesystem not clean
[  475.642017][T16189] loop4: detected capacity change from 0 to 8192
[  475.721273][T12950] bcachefs (loop3): shutting down
[  475.768245][T12950] bcachefs (loop3): shutdown complete
[  475.941313][   T95] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  476.169597][T16203] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  476.305803][   T95] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  476.309109][   T95] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  476.312618][   T95] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.317139][   T95] usb 5-1: config 0 descriptor??
[  476.748751][   T95] greenasia 0003:0E8F:0012.002F: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0
[  476.819168][   T95] greenasia 0003:0E8F:0012.002F: no inputs found
[  476.947694][T11835] usb 5-1: USB disconnect, device number 25
[  477.277889][T16210] kernel profiling enabled (shift: 9)
[  478.885536][T16231] nfs4: Bad value for 'source'
[  479.138853][T16245] loop4: detected capacity change from 0 to 2048
[  479.253859][T16250] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4032'.
[  479.280378][T16250] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4032'.
[  479.310518][T16250] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4032'.
[  479.590330][T11835] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  479.748981][T11835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  479.754306][T11835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  479.762926][T11835] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  479.766908][T11835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.773637][T11835] usb 5-1: config 0 descriptor??
[  480.044323][T11835] usbhid 5-1:0.0: can't add hid device: -71
[  480.052511][T11835] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  480.068718][T11835] usb 5-1: USB disconnect, device number 26
[  480.257415][T16274] tipc: Started in network mode
[  480.259721][T16274] tipc: Node identity 4, cluster identity 4711
[  480.276113][T16274] tipc: Node number set to 4
[  480.520066][T11835] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  480.670259][T11835] usb 5-1: Using ep0 maxpacket: 32
[  480.680071][T11835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  480.684514][T11835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  480.692466][T11835] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  480.700686][T11835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.708744][T11835] usb 5-1: config 0 descriptor??
[  480.737807][T11835] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  480.751840][T11835] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  480.946013][T16259] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90
[  480.963796][  T792] usb 5-1: USB disconnect, device number 27
[  480.981417][  T792] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  481.048607][T16278] loop3: detected capacity change from 0 to 32768
[  481.054767][T16278] XFS: ikeep mount option is deprecated.
[  481.089503][T16278] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  481.120106][T16278] XFS (loop3): Ending clean mount
[  481.125023][T16278] XFS (loop3): Quotacheck needed: Please wait.
[  481.176504][T16278] XFS (loop3): Quotacheck: Done.
[  481.229292][T12950] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  481.571073][T16307] loop3: detected capacity change from 0 to 1024
[  481.597853][T16307] hfsplus: Bad value for 'umask'
[  481.697850][T16307] loop3: detected capacity change from 0 to 2048
[  481.719499][T16314] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  481.759698][T16314] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  481.766981][T16314] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  481.772530][T16314] Remounting filesystem read-only
[  482.049942][T16318] loop4: detected capacity change from 0 to 128
[  482.058282][T16318] adfs: Bad value for 'uid'
[  482.060281][T16318] adfs: Bad value for 'uid'
[  482.539475][T16316] loop4: detected capacity change from 0 to 1024
[  482.554057][T16316] loop4: detected capacity change from 0 to 128
[  483.739075][T12950] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  483.898394][T16340] loop4: detected capacity change from 0 to 128
[  483.942804][   T33] audit: type=1326 audit(2000000046.330:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16341 comm="syz.3.4067" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7a238ebe9 code=0x0
[  484.022111][T16348] tap0: tun_chr_ioctl cmd 1074025677
[  484.024591][T16348] tap0: linktype set to 780
[  484.479915][   T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  484.632875][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.638527][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  484.642033][   T10] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  484.645698][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.655587][   T10] usb 5-1: config 0 descriptor??
[  485.088553][   T10] hid-thrustmaster 0003:044F:B65D.0030: collection stack underflow
[  485.093026][   T10] hid-thrustmaster 0003:044F:B65D.0030: item 0 4 0 12 parsing failed
[  485.097147][   T10] hid-thrustmaster 0003:044F:B65D.0030: parse failed with error -22
[  485.101188][   T10] hid-thrustmaster 0003:044F:B65D.0030: probe with driver hid-thrustmaster failed with error -22
[  485.341917][T11835] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  485.470024][   T10] usb 5-1: USB disconnect, device number 28
[  485.610232][T11835] usb 3-1: Using ep0 maxpacket: 8
[  485.614711][T11835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.618940][T11835] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  485.625190][T11835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.632689][T11835] usb 3-1: config 0 descriptor??
[  485.638554][T11835] gspca_main: vc032x-2.14.0 probing 046d:0892
[  486.065051][T16369] netlink: 'syz.4.4078': attribute type 4 has an invalid length.
[  486.081813][T16369] netlink: 'syz.4.4078': attribute type 4 has an invalid length.
[  486.476331][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4088'.
[  486.640978][T16398] netlink: 'syz.4.4092': attribute type 10 has an invalid length.
[  486.645117][T16398] vlan0: entered allmulticast mode
[  486.648245][T11835] gspca_vc032x: reg_r err -71
[  486.650405][T11835] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  486.655727][T16398] veth0_vlan: entered allmulticast mode
[  486.657717][T11835] usb 3-1: USB disconnect, device number 85
[  486.678727][T16398] team0: Port device vlan0 added
[  487.442080][T16408] loop3: detected capacity change from 0 to 32768
[  487.491485][T16408] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  487.499495][T16408] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  487.521797][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4098'.
[  487.533328][T16408] XFS (loop3): Ending clean mount
[  487.551284][T16423] xfrm1: entered promiscuous mode
[  487.553472][T16423] xfrm1: entered allmulticast mode
[  487.559539][T16408] XFS (loop3): Quotacheck needed: Please wait.
[  487.599713][T16408] XFS (loop3): Quotacheck: Done.
[  487.638982][T12950] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  488.261563][T11835] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  488.433495][T11835] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  488.437274][T11835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.445113][T11835] usb 3-1: Product: syz
[  488.450673][T11835] usb 3-1: Manufacturer: syz
[  488.456549][T11835] usb 3-1: SerialNumber: syz
[  488.457114][T16458] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4114'.
[  488.479401][T11835] usb 3-1: config 0 descriptor??
[  488.491772][T11835] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  488.563281][T16460] loop3: detected capacity change from 0 to 2048
[  488.567712][T16460] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  488.598562][T16461] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  488.609272][ T5858] udevd[5858]: incorrect nilfs2 checksum on /dev/loop3
[  488.625159][T16460] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952
[  488.632161][T16460] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[  488.658463][T16460] Remounting filesystem read-only
[  488.661713][T16460] NILFS (loop3): error -5 truncating bmap (ino=15)
[  488.689256][T12950] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  488.698075][T11835] sonixb 3-1:0.0: Error reading register 00: -71
[  488.725778][T11835] usb 3-1: USB disconnect, device number 86
[  488.999926][   T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  489.153465][   T10] usb 4-1: Using ep0 maxpacket: 32
[  489.160615][   T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  489.164228][   T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.173475][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  489.176292][   T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  489.178798][   T10] usb 4-1: Product: syz
[  489.181899][   T10] usb 4-1: Manufacturer: syz
[  489.207156][   T10] hub 4-1:4.0: USB hub found
[  489.432839][   T10] hub 4-1:4.0: 2 ports detected
[  489.554340][T16472] loop4: detected capacity change from 0 to 2048
[  489.832603][T16485] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  489.836707][T16485] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  490.140565][T11835] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  490.309572][T11835] usb 3-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22
[  490.318628][T11835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.328269][T11835] usb 3-1: config 0 descriptor??
[  490.337615][T11835] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0
[  490.413023][T16503] loop4: detected capacity change from 0 to 1024
[  490.549219][T11835] gspca_sn9c20x: Write register 1000 failed -71
[  490.557545][T11835] gspca_sn9c20x: Device initialization failed
[  490.563965][T11835] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  490.583196][T11835] usb 3-1: USB disconnect, device number 87
[  490.669077][   T10] hub 4-1:4.0: activate --> -90
[  491.081136][   T95] usb 4-1: USB disconnect, device number 30
[  491.132010][  T792] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0
[  491.150699][  T792] hid-generic 0000:0000:0000.0031: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  491.395979][T16524] loop4: detected capacity change from 0 to 32768
[  491.750542][T16543] loop4: detected capacity change from 0 to 512
[  491.773362][T16539] loop3: detected capacity change from 0 to 4096
[  491.778432][T16539] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  491.795747][T16539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  491.917093][T12950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.450201][   T95] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  492.599899][   T95] usb 5-1: Using ep0 maxpacket: 8
[  492.604628][   T95] usb 5-1: unable to get BOS descriptor or descriptor too short
[  492.612174][   T95] usb 5-1: config 2 has an invalid interface number: 179 but max is 0
[  492.620688][   T95] usb 5-1: config 2 has no interface number 0
[  492.623552][   T95] usb 5-1: config 2 interface 179 has no altsetting 0
[  492.632396][   T95] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b5.a8
[  492.636009][   T95] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.639194][   T95] usb 5-1: Product: syz
[  492.649982][   T95] usb 5-1: Manufacturer: syz
[  492.651919][   T95] usb 5-1: SerialNumber: syz
[  492.741811][T16580] loop3: detected capacity change from 0 to 32768
[  492.758795][T16580] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4168 (16580)
[  492.771127][T16580] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  492.775178][T16580] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  492.778182][T16580] BTRFS info (device loop3): using free-space-tree
[  492.868481][T12950] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  492.869441][   T95] cypress_cy7c63 5-1:2.179: Cypress CY7C63xxx device now attached
[  492.904426][   T95] usb 5-1: USB disconnect, device number 29
[  492.907857][   T95] cypress_cy7c63 5-1:2.179: Cypress CY7C63xxx device now disconnected
[  494.154415][T16632] netlink: 'syz.3.4184': attribute type 3 has an invalid length.
[  494.156848][T16632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4184'.
[  494.705769][T16648] loop3: detected capacity change from 0 to 40427
[  494.711034][T16648] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  494.724299][T16648] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  494.733366][T16648] F2FS-fs (loop3): invalid crc value
[  494.815142][T16648] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  494.820463][T16648] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  494.827580][T16648] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  494.839658][T16671] loop4: detected capacity change from 0 to 64
[  494.867976][T16648] syz.3.4192: attempt to access beyond end of device
[  494.867976][T16648] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  494.923827][T16648] syz.3.4192: attempt to access beyond end of device
[  494.923827][T16648] loop3: rw=2049, sector=77824, nr_sectors = 2048 limit=40427
[  494.933247][T16648] syz.3.4192: attempt to access beyond end of device
[  494.933247][T16648] loop3: rw=2049, sector=79872, nr_sectors = 520 limit=40427
[  494.993626][T12950] syz-executor: attempt to access beyond end of device
[  494.993626][T12950] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  494.998291][T12950] CPU: 1 UID: 0 PID: 12950 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  494.998307][T12950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  494.998313][T12950] Call Trace:
[  494.998318][T12950]  <TASK>
[  494.998323][T12950]  dump_stack_lvl+0x189/0x250
[  494.998341][T12950]  ? __pfx_dump_stack_lvl+0x10/0x10
[  494.998351][T12950]  ? __pfx_queue_work_on+0x10/0x10
[  494.998361][T12950]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  494.998374][T12950]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  494.998391][T12950]  f2fs_handle_critical_error+0x37c/0x540
[  494.998408][T12950]  f2fs_write_end_io+0x886/0xb60
[  494.998433][T12950]  __submit_merged_bio+0x27a/0x6a0
[  494.998444][T12950]  ? up_write+0x1c4/0x420
[  494.998458][T12950]  __submit_merged_write_cond+0x44c/0x530
[  494.998473][T12950]  f2fs_sync_node_pages+0x1479/0x15e0
[  494.998495][T12950]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  494.998544][T12950]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  494.998557][T12950]  ? up_write+0x1c4/0x420
[  494.998565][T12950]  ? do_raw_spin_unlock+0x4d/0x240
[  494.998578][T12950]  f2fs_write_checkpoint+0xe6f/0x1df0
[  494.998600][T12950]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  494.998635][T12950]  ? kill_f2fs_super+0x298/0x6c0
[  494.998646][T12950]  kill_f2fs_super+0x2c3/0x6c0
[  494.998658][T12950]  ? __pfx_kill_f2fs_super+0x10/0x10
[  494.998665][T12950]  ? radix_tree_delete_item+0x2b6/0x400
[  494.998683][T12950]  ? shrinker_free+0x2ce/0x3e0
[  494.998695][T12950]  deactivate_locked_super+0xbc/0x130
[  494.998707][T12950]  cleanup_mnt+0x425/0x4c0
[  494.998718][T12950]  ? lockdep_hardirqs_on+0x9c/0x150
[  494.998731][T12950]  task_work_run+0x1d4/0x260
[  494.998744][T12950]  ? __pfx_task_work_run+0x10/0x10
[  494.998753][T12950]  ? __x64_sys_umount+0x122/0x160
[  494.998767][T12950]  ? exit_to_user_mode_loop+0x40/0x110
[  494.998782][T12950]  exit_to_user_mode_loop+0xec/0x110
[  494.998793][T12950]  do_syscall_64+0x2bd/0x3b0
[  494.998804][T12950]  ? lockdep_hardirqs_on+0x9c/0x150
[  494.998813][T12950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.998821][T12950]  ? exc_page_fault+0x9f/0xf0
[  494.998833][T12950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.998840][T12950] RIP: 0033:0x7ff7a238ff17
[  494.998851][T12950] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  494.998858][T12950] RSP: 002b:00007fffb9dea4b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  494.998868][T12950] RAX: 0000000000000000 RBX: 00007ff7a2411c05 RCX: 00007ff7a238ff17
[  494.998874][T12950] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb9dea570
[  494.998879][T12950] RBP: 00007fffb9dea570 R08: 0000000000000000 R09: 0000000000000000
[  494.998884][T12950] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb9deb600
[  494.998889][T12950] R13: 00007ff7a2411c05 R14: 0000000000078ce1 R15: 00007fffb9deb640
[  494.998905][T12950]  </TASK>
[  494.998909][T12950] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  495.516509][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4209'.
[  495.520161][T16690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4209'.
[  495.523864][T16690] netlink: 'syz.3.4209': attribute type 13 has an invalid length.
[  495.526986][T16690] netlink: 'syz.3.4209': attribute type 14 has an invalid length.
[  495.702209][T16684] loop4: detected capacity change from 0 to 32768
[  495.713098][T16684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4207 (16684)
[  495.754947][T16684] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  495.758887][T16684] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  495.768967][T16684] BTRFS info (device loop4): using free-space-tree
[  495.884021][T13259] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  496.292638][T16733] netlink: 'syz.2.4222': attribute type 39 has an invalid length.
[  496.549352][T16752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4231'.
[  496.657880][T16756] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.4232'.
[  496.662306][T16756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4232'.
[  496.724078][T16757] ==================================================================
[  496.727174][T16757] BUG: KFENCE: use-after-free read in xfrm_alloc_spi+0x3b9/0xf30
[  496.727174][T16757] 
[  496.731132][T16757] Use-after-free read at 0xffff88813655c0c4 (in kfence-#173):
[  496.734075][T16757]  xfrm_alloc_spi+0x3b9/0xf30
[  496.737175][T16757]  xfrm_alloc_userspi+0x70b/0xc90
[  496.739172][T16757]  xfrm_user_rcv_msg+0x7a3/0xab0
[  496.741145][T16757]  netlink_rcv_skb+0x208/0x470
[  496.743077][T16757]  xfrm_netlink_rcv+0x79/0x90
[  496.745007][T16757]  netlink_unicast+0x82f/0x9e0
[  496.746981][T16757]  netlink_sendmsg+0x805/0xb30
[  496.748938][T16757]  __sock_sendmsg+0x21c/0x270
[  496.750879][T16757]  ____sys_sendmsg+0x505/0x830
[  496.752842][T16757]  ___sys_sendmsg+0x21f/0x2a0
[  496.754731][T16757]  __x64_sys_sendmsg+0x19b/0x260
[  496.756752][T16757]  do_syscall_64+0xfa/0x3b0
[  496.758618][T16757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.761016][T16757] 
[  496.762014][T16757] kfence-#173: 0xffff88813655c000-0xffff88813655c0ef, size=240, cache=skbuff_head_cache
[  496.762014][T16757] 
[  496.766800][T16757] allocated by task 16755 on cpu 1 at 496.710334s (0.056464s ago):
[  496.769913][T16757]  __alloc_skb+0x112/0x2d0
[  496.771744][T16757]  mrp_pdu_append_vecattr_event+0x238/0x1710
[  496.774157][T16757]  mrp_attr_event+0x164/0x350
[  496.776086][T16757]  mrp_join_timer+0x57/0x170
[  496.778006][T16757]  call_timer_fn+0x17e/0x5f0
[  496.779921][T16757]  __run_timer_base+0x61a/0x860
[  496.782181][T16757]  run_timer_softirq+0xb7/0x180
[  496.784105][T16757]  handle_softirqs+0x286/0x870
[  496.786039][T16757]  __irq_exit_rcu+0xca/0x1f0
[  496.787916][T16757]  irq_exit_rcu+0x9/0x30
[  496.789664][T16757]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  496.791912][T16757]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  496.794302][T16757]  _raw_spin_unlock_irqrestore+0xa8/0x110
[  496.796573][T16757]  __wake_up_common_lock+0x190/0x1f0
[  496.798591][T16757]  __unix_dgram_recvmsg+0x486/0xd60
[  496.800709][T16757]  sock_recvmsg_nosec+0x186/0x1c0
[  496.802752][T16757]  ____sys_recvmsg+0x3aa/0x460
[  496.804617][T16757]  ___sys_recvmsg+0x1b5/0x510
[  496.806195][T16757]  do_recvmmsg+0x307/0x770
[  496.807827][T16757]  __x64_sys_recvmmsg+0x190/0x240
[  496.810060][T16757]  do_syscall_64+0xfa/0x3b0
[  496.812043][T16757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.814641][T16757] 
[  496.815687][T16757] freed by task 16755 on cpu 1 at 496.710545s (0.105140s ago):
[  496.818926][T16757]  mrp_rcv+0x1476/0x17e0
[  496.820777][T16757]  __netif_receive_skb+0x164/0x380
[  496.822970][T16757]  process_backlog+0x60e/0x14f0
[  496.825070][T16757]  __napi_poll+0xc7/0x360
[  496.826962][T16757]  net_rx_action+0x707/0xe30
[  496.828875][T16757]  handle_softirqs+0x286/0x870
[  496.830474][T16757]  __irq_exit_rcu+0xca/0x1f0
[  496.831978][T16757]  irq_exit_rcu+0x9/0x30
[  496.833384][T16757]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  496.835206][T16757]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  496.837736][T16757]  _raw_spin_unlock_irqrestore+0xa8/0x110
[  496.839944][T16757]  __wake_up_common_lock+0x190/0x1f0
[  496.842198][T16757]  __unix_dgram_recvmsg+0x486/0xd60
[  496.844233][T16757]  sock_recvmsg_nosec+0x186/0x1c0
[  496.846404][T16757]  ____sys_recvmsg+0x3aa/0x460
[  496.848445][T16757]  ___sys_recvmsg+0x1b5/0x510
[  496.850342][T16757]  do_recvmmsg+0x307/0x770
[  496.851810][T16757]  __x64_sys_recvmmsg+0x190/0x240
[  496.853389][T16757]  do_syscall_64+0xfa/0x3b0
[  496.854888][T16757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.857427][T16757] 
[  496.858465][T16757] CPU: 0 UID: 0 PID: 16757 Comm: syz.3.4230 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  496.863481][T16757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  496.867425][T16757] RIP: 0010:xfrm_alloc_spi+0x3b9/0xf30
[  496.869348][T16757] Code: c1 08 c1 74 0a e8 27 30 9e f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9f 01 00 00 <8b> 1b 89 df 44 89 f6 e8 bb 31 9e f7 44 39 f3 0f 85 df 00 00 00 49
[  496.877249][T16757] RSP: 0018:ffffc90004d970e0 EFLAGS: 00010246
[  496.879187][T16757] RAX: 0000000000000000 RBX: ffff88813655c0c4 RCX: 0000000000080000
[  496.882009][T16757] RDX: ffffc90022ff0000 RSI: 0000000000000506 RDI: 0000000000000507
[  496.884691][T16757] RBP: ffffc90004d97230 R08: 0000000000000000 R09: ffffffff8a217a70
[  496.887268][T16757] R10: dffffc0000000000 R11: fffff520009b2e0c R12: dffffc0000000000
[  496.889782][T16757] R13: ffff88813655c000 R14: 0000000000000000 R15: ffffc90004d976a0
[  496.892498][T16757] FS:  00007ff7a31456c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  496.896220][T16757] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  496.899005][T16757] CR2: ffff88813655c0c4 CR3: 0000000034224000 CR4: 00000000000006f0
[  496.902541][T16757] Call Trace:
[  496.904039][T16757]  <TASK>
[  496.905357][T16757]  ? xfrm_alloc_spi+0x2a0/0xf30
[  496.907530][T16757]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  496.909805][T16757]  ? xfrm_find_acq+0x87/0xa0
[  496.911811][T16757]  xfrm_alloc_userspi+0x70b/0xc90
[  496.914022][T16757]  ? apparmor_capable+0x137/0x1b0
[  496.916227][T16757]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  496.918648][T16757]  ? __nla_parse+0x40/0x60
[  496.920628][T16757]  xfrm_user_rcv_msg+0x7a3/0xab0
[  496.922784][T16757]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  496.925078][T16757]  ? __pfx___mutex_trylock_common+0x10/0x10
[  496.927667][T16757]  ? rcu_is_watching+0x15/0xb0
[  496.929684][T16757]  ? trace_contention_end+0x39/0x120
[  496.931427][T16757]  ? __mutex_lock+0x335/0x1360
[  496.932912][T16757]  netlink_rcv_skb+0x208/0x470
[  496.934644][T16757]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  496.936497][T16757]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  496.938628][T16757]  ? netlink_deliver_tap+0x2e/0x1b0
[  496.940751][T16757]  xfrm_netlink_rcv+0x79/0x90
[  496.942615][T16757]  netlink_unicast+0x82f/0x9e0
[  496.944511][T16757]  ? __pfx_netlink_unicast+0x10/0x10
[  496.946607][T16757]  ? netlink_sendmsg+0x642/0xb30
[  496.948598][T16757]  ? skb_put+0x11b/0x210
[  496.950315][T16757]  netlink_sendmsg+0x805/0xb30
[  496.952265][T16757]  ? __pfx_netlink_sendmsg+0x10/0x10
[  496.954399][T16757]  ? aa_sock_msg_perm+0xf1/0x1d0
[  496.956353][T16757]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  496.958529][T16757]  ? __pfx_netlink_sendmsg+0x10/0x10
[  496.960616][T16757]  __sock_sendmsg+0x21c/0x270
[  496.962530][T16757]  ____sys_sendmsg+0x505/0x830
[  496.964384][T16757]  ? __pfx_____sys_sendmsg+0x10/0x10
[  496.966530][T16757]  ? import_iovec+0x74/0xa0
[  496.968384][T16757]  ___sys_sendmsg+0x21f/0x2a0
[  496.970271][T16757]  ? __pfx____sys_sendmsg+0x10/0x10
[  496.972284][T16757]  ? __fget_files+0x2a/0x420
[  496.974100][T16757]  ? __fget_files+0x3a0/0x420
[  496.975812][T16757]  __x64_sys_sendmsg+0x19b/0x260
[  496.977403][T16757]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  496.979546][T16757]  ? rcu_is_watching+0x15/0xb0
[  496.981506][T16757]  ? do_syscall_64+0xbe/0x3b0
[  496.983601][T16757]  do_syscall_64+0xfa/0x3b0
[  496.985504][T16757]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.987939][T16757]  ? asm_sysvec_call_function_single+0x1a/0x20
[  496.990472][T16757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.992874][T16757] RIP: 0033:0x7ff7a238ebe9
[  496.994704][T16757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  497.001550][T16757] RSP: 002b:00007ff7a3145038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.004636][T16757] RAX: ffffffffffffffda RBX: 00007ff7a25b6180 RCX: 00007ff7a238ebe9
[  497.007055][T16757] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005
[  497.009536][T16757] RBP: 00007ff7a2411e19 R08: 0000000000000000 R09: 0000000000000000
[  497.012013][T16757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  497.014478][T16757] R13: 00007ff7a25b6218 R14: 00007ff7a25b6180 R15: 00007fffb9deb228
[  497.016954][T16757]  </TASK>
[  497.017930][T16757] ==================================================================
[  497.020322][T16757] Kernel panic - not syncing: KFENCE: panic_on_warn set ...
[  497.023281][T16757] CPU: 0 UID: 0 PID: 16757 Comm: syz.3.4230 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  497.027089][T16757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  497.030250][T16757] Call Trace:
[  497.031305][T16757]  <TASK>
[  497.032250][T16757]  dump_stack_lvl+0x99/0x250
[  497.033760][T16757]  ? __asan_memcpy+0x40/0x70
[  497.035301][T16757]  ? __pfx_dump_stack_lvl+0x10/0x10
[  497.036881][T16757]  ? __pfx__printk+0x10/0x10
[  497.038383][T16757]  vpanic+0x281/0x750
[  497.039645][T16757]  ? __pfx_vpanic+0x10/0x10
[  497.041058][T16757]  ? is_bpf_text_address+0x292/0x2b0
[  497.042750][T16757]  panic+0xb9/0xc0
[  497.043991][T16757]  ? __pfx_panic+0x10/0x10
[  497.045420][T16757]  ? __pfx__printk+0x10/0x10
[  497.047112][T16757]  check_panic_on_warn+0x89/0xb0
[  497.048785][T16757]  kfence_report_error+0x748/0xa40
[  497.050420][T16757]  ? __pfx_kfence_report_error+0x10/0x10
[  497.052148][T16757]  ? xfrm_alloc_spi+0x3b9/0xf30
[  497.054028][T16757]  ? xfrm_alloc_userspi+0x70b/0xc90
[  497.056182][T16757]  ? xfrm_user_rcv_msg+0x7a3/0xab0
[  497.058264][T16757]  ? netlink_rcv_skb+0x208/0x470
[  497.060196][T16757]  ? xfrm_netlink_rcv+0x79/0x90
[  497.061746][T16757]  ? netlink_unicast+0x82f/0x9e0
[  497.063260][T16757]  ? netlink_sendmsg+0x805/0xb30
[  497.064756][T16757]  ? __sock_sendmsg+0x21c/0x270
[  497.066290][T16757]  ? ____sys_sendmsg+0x505/0x830
[  497.068236][T16757]  ? ___sys_sendmsg+0x21f/0x2a0
[  497.069927][T16757]  ? __x64_sys_sendmsg+0x19b/0x260
[  497.071913][T16757]  ? do_syscall_64+0xfa/0x3b0
[  497.073419][T16757]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.075420][T16757]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  497.077379][T16757]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  497.079390][T16757]  ? search_bpf_extables+0x26/0x3f0
[  497.081106][T16757]  kfence_handle_page_fault+0x358/0x4d0
[  497.082904][T16757]  page_fault_oops+0x19f/0xa10
[  497.084475][T16757]  ? lockdep_hardirqs_on+0x9c/0x150
[  497.086273][T16757]  ? __pfx_fixup_exception+0x10/0x10
[  497.088190][T16757]  ? __pfx_page_fault_oops+0x10/0x10
[  497.090334][T16757]  ? is_prefetch+0x403/0x640
[  497.092017][T16757]  ? trace_sched_exit_tp+0x36/0x110
[  497.094068][T16757]  ? __schedule+0x17ae/0x4cc0
[  497.095992][T16757]  ? __pfx_is_prefetch+0x10/0x10
[  497.098032][T16757]  __bad_area_nosemaphore+0x11a/0x780
[  497.100214][T16757]  ? look_up_lock_class+0x74/0x170
[  497.101994][T16757]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  497.104238][T16757]  ? spurious_kernel_fault+0x1c7/0x6b0
[  497.106230][T16757]  ? do_kern_addr_fault+0x30/0x80
[  497.108077][T16757]  exc_page_fault+0xc3/0xf0
[  497.109554][T16757]  asm_exc_page_fault+0x26/0x30
[  497.111089][T16757] RIP: 0010:xfrm_alloc_spi+0x3b9/0xf30
[  497.112827][T16757] Code: c1 08 c1 74 0a e8 27 30 9e f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9f 01 00 00 <8b> 1b 89 df 44 89 f6 e8 bb 31 9e f7 44 39 f3 0f 85 df 00 00 00 49
[  497.119894][T16757] RSP: 0018:ffffc90004d970e0 EFLAGS: 00010246
[  497.122259][T16757] RAX: 0000000000000000 RBX: ffff88813655c0c4 RCX: 0000000000080000
[  497.125114][T16757] RDX: ffffc90022ff0000 RSI: 0000000000000506 RDI: 0000000000000507
[  497.128362][T16757] RBP: ffffc90004d97230 R08: 0000000000000000 R09: ffffffff8a217a70
[  497.131522][T16757] R10: dffffc0000000000 R11: fffff520009b2e0c R12: dffffc0000000000
[  497.134072][T16757] R13: ffff88813655c000 R14: 0000000000000000 R15: ffffc90004d976a0
[  497.136708][T16757]  ? xfrm_alloc_spi+0x2a0/0xf30
[  497.138421][T16757]  ? xfrm_alloc_spi+0x2a0/0xf30
[  497.140235][T16757]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  497.142364][T16757]  ? xfrm_find_acq+0x87/0xa0
[  497.144257][T16757]  xfrm_alloc_userspi+0x70b/0xc90
[  497.146219][T16757]  ? apparmor_capable+0x137/0x1b0
[  497.147923][T16757]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  497.149693][T16757]  ? __nla_parse+0x40/0x60
[  497.151056][T16757]  xfrm_user_rcv_msg+0x7a3/0xab0
[  497.152545][T16757]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  497.154403][T16757]  ? __pfx___mutex_trylock_common+0x10/0x10
[  497.156198][T16757]  ? rcu_is_watching+0x15/0xb0
[  497.157685][T16757]  ? trace_contention_end+0x39/0x120
[  497.159662][T16757]  ? __mutex_lock+0x335/0x1360
[  497.161428][T16757]  netlink_rcv_skb+0x208/0x470
[  497.163206][T16757]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  497.165255][T16757]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  497.166890][T16757]  ? netlink_deliver_tap+0x2e/0x1b0
[  497.168787][T16757]  xfrm_netlink_rcv+0x79/0x90
[  497.170651][T16757]  netlink_unicast+0x82f/0x9e0
[  497.172544][T16757]  ? __pfx_netlink_unicast+0x10/0x10
[  497.174631][T16757]  ? netlink_sendmsg+0x642/0xb30
[  497.176560][T16757]  ? skb_put+0x11b/0x210
[  497.178134][T16757]  netlink_sendmsg+0x805/0xb30
[  497.180162][T16757]  ? __pfx_netlink_sendmsg+0x10/0x10
[  497.182225][T16757]  ? aa_sock_msg_perm+0xf1/0x1d0
[  497.184257][T16757]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  497.186441][T16757]  ? __pfx_netlink_sendmsg+0x10/0x10
[  497.188462][T16757]  __sock_sendmsg+0x21c/0x270
[  497.189967][T16757]  ____sys_sendmsg+0x505/0x830
[  497.191518][T16757]  ? __pfx_____sys_sendmsg+0x10/0x10
[  497.193174][T16757]  ? import_iovec+0x74/0xa0
[  497.194616][T16757]  ___sys_sendmsg+0x21f/0x2a0
[  497.196084][T16757]  ? __pfx____sys_sendmsg+0x10/0x10
[  497.197753][T16757]  ? __fget_files+0x2a/0x420
[  497.199250][T16757]  ? __fget_files+0x3a0/0x420
[  497.201168][T16757]  __x64_sys_sendmsg+0x19b/0x260
[  497.203182][T16757]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  497.204951][T16757]  ? rcu_is_watching+0x15/0xb0
[  497.206494][T16757]  ? do_syscall_64+0xbe/0x3b0
[  497.208135][T16757]  do_syscall_64+0xfa/0x3b0
[  497.209724][T16757]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.211671][T16757]  ? asm_sysvec_call_function_single+0x1a/0x20
[  497.213927][T16757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.216263][T16757] RIP: 0033:0x7ff7a238ebe9
[  497.218056][T16757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  497.225469][T16757] RSP: 002b:00007ff7a3145038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.228352][T16757] RAX: ffffffffffffffda RBX: 00007ff7a25b6180 RCX: 00007ff7a238ebe9
[  497.231076][T16757] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005
[  497.233507][T16757] RBP: 00007ff7a2411e19 R08: 0000000000000000 R09: 0000000000000000
[  497.235962][T16757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  497.238573][T16757] R13: 00007ff7a25b6218 R14: 00007ff7a25b6180 R15: 00007fffb9deb228
[  497.241740][T16757]  </TASK>
[  497.243480][T16757] Kernel Offset: disabled
[  497.245800][T16757] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:42:45  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000019c1 RDI=00000000000019c2 RBP=ffffffff99dee630 RSP=ffffc90004d96310
R8 =ffff8881072d0237 R9 =1ffff11020e5a046 R10=dffffc0000000000 R11=ffffffff854f08a0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f0917 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff7a31456c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffff88813655c0c4 CR3=0000000034224000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff7a2587498 00007ff7a2587470 XMM03=00007ff7a25874a8 00007ff7a25874a0
XMM04=00007ff7a30ed100 00007ff7a2587460 XMM05=00007ff7a2587478 00007ff7a25874c0
XMM06=00007ff7a25874b8 00007ff7a25874b0 XMM07=00007ff7a25874a8 00007ff7a25874a0
XMM08=0000000000000000 00007ff7a2412ee7 XMM09=0000000000000000 00007ff7a2412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=318e541744e74800 RDX=ffffc900227ee000
RSI=ffffffff8d9ca956 RDI=ffffffff8be33400 RBP=ffff8881069fc470 RSP=ffffc90004fcf558
R8 =ffff888127e3fbe7 R9 =1ffff11024fc7f7c R10=dffffc0000000000 R11=ffffed1024fc7f7d
R12=0000000000000000 R13=0000000000000000 R14=ffff888123e296d8 R15=ffff8881069fb980
RIP=ffffffff819d6d0c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff7a31666c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff51088ffc8 CR3=0000000034224000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff7a2587498 00007ff7a2587470 XMM03=00007ff7a25874a8 00007ff7a25874a0
XMM04=00007ff7a30ed100 00007ff7a2587460 XMM05=00007ff7a2587478 00007ff7a25874c0
XMM06=00007ff7a25874b8 00007ff7a25874b0 XMM07=00007ff7a25874a8 00007ff7a25874a0
XMM08=0000000000000000 00007ff7a2412ee7 XMM09=0000000000000000 00007ff7a2412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
