last executing test programs:

5m54.064240523s ago: executing program 1 (id=369):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r2, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14)

5m53.969344527s ago: executing program 1 (id=370):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x473dd62ed4d51c62, &(0x7f0000ab3000/0x3000)=nil)

5m53.894853947s ago: executing program 1 (id=371):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x2, @pix={0xfffffffd, 0x25, 0x47425247, 0x8, 0x101, 0x3, 0x7}})

5m53.842284758s ago: executing program 1 (id=372):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)

5m53.841986598s ago: executing program 1 (id=373):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x7fff, 0x1e00, 0x387, 0x8, 0x0, "23f51ecf00", 0xfffffffc, 0x9})

5m53.552851304s ago: executing program 1 (id=374):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe7f5, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

5m53.443084567s ago: executing program 32 (id=374):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe7f5, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

3m45.366556081s ago: executing program 0 (id=1998):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0x401, 0xc, 0x9, 0xfff, 0x5c95239c, 0x5, 0x3bf, 0x802, 0x1600, 0x1, 0x20000001, 0x9, 0xe1cb, 0x6, 0x0, 0x400, 0x195, 0x6, 0x0, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]})

3m45.271933849s ago: executing program 0 (id=1999):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248)
syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)

3m44.701652484s ago: executing program 0 (id=2003):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2})
fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd})

3m44.701023473s ago: executing program 0 (id=2005):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x2)

3m44.595256558s ago: executing program 0 (id=2007):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff0a03076804268c989e14f088", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3m44.431221996s ago: executing program 0 (id=2010):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

3m44.305447331s ago: executing program 33 (id=2010):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

3m0.70844975s ago: executing program 3 (id=2487):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

3m0.495771913s ago: executing program 3 (id=2488):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x2, 0x0)
capset(0x0, &(0x7f0000000080)={0x0, 0x2})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[], 0x30}, 0x40)

2m59.561745921s ago: executing program 3 (id=2498):
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setuid(r0)
setuid(r0)

2m59.362899796s ago: executing program 3 (id=2499):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0)
mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)

2m59.267489811s ago: executing program 3 (id=2500):
r0 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000003dc0)={0x1d, @empty, 0x4e20, 0x0, 'dh\x00', 0x0, 0x3, 0x30}, 0x2c)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='rpc_pipefs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffff6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, 0x0)

2m59.067333899s ago: executing program 3 (id=2501):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x8048040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={<r2=>r1, 0x8}, &(0x7f00000000c0)=0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000840000000200000006000802ff00000008000000", @ANYRES32=r2], 0x20, 0x20044811}], 0x1, 0x240408d4)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a40)={r2}, &(0x7f00000008c0)=0x8)

2m58.964339947s ago: executing program 34 (id=2501):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x8048040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={<r2=>r1, 0x8}, &(0x7f00000000c0)=0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000840000000200000006000802ff00000008000000", @ANYRES32=r2], 0x20, 0x20044811}], 0x1, 0x240408d4)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a40)={r2}, &(0x7f00000008c0)=0x8)

389.968416ms ago: executing program 5 (id=4596):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000000)=""/38, &(0x7f00000000c0)=0x26)

319.906314ms ago: executing program 4 (id=4598):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x18)

319.687386ms ago: executing program 5 (id=4599):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c000480480001"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800)

319.345232ms ago: executing program 2 (id=4600):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@del={0xe0, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x200}}, 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850)

251.184413ms ago: executing program 4 (id=4601):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002d30040010001a800800058004000a80040007"], 0x30}}, 0x0)

250.89141ms ago: executing program 5 (id=4602):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0)
madvise(&(0x7f0000167000/0x7000)=nil, 0x7000, 0x9)

250.605573ms ago: executing program 2 (id=4603):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa3, 0x20042)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0x4, @pix={0x0, 0x47, 0x31384142, 0x0, 0xfffffffd, 0x0, 0x3, 0xfeedcafe, 0x3, 0x8, 0x0, 0x1}})

198.934004ms ago: executing program 5 (id=4604):
syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="72705f73697a653d303030303030303130303030303030342c72705f73697a653d30303030303030303030383537333135373234372c72705f73697a653d30303030303030303030300200000000000000392c7063723d30303030303030303030303030303030303049322c00"], 0xff, 0x257, &(0x7f0000000300)="$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")

198.57201ms ago: executing program 4 (id=4605):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x44, r2, 0x11, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20004014)

198.179036ms ago: executing program 2 (id=4606):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)

155.001039ms ago: executing program 2 (id=4607):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0)

154.283673ms ago: executing program 4 (id=4608):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x9aef}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x2f}, 0x94)

149.552184ms ago: executing program 5 (id=4609):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xe}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000006600b9da"], 0x34}}, 0x4008044)

141.035487ms ago: executing program 2 (id=4610):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

68.598497ms ago: executing program 4 (id=4611):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x28001, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000500)={0x2, "fa02c80a3a1e9d4b9aaf000000008d6762e69b5b7638dd031dd7504fe5809639"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000003c0)={0x7, "689a3d043526cfa01f8ef0a3b4c785233d7a7fa23e1b2e2fc578df6874d5e1fd"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000400)={0x5, "1421587cd13a3538e86d8779dedc271facbd7616c4864fc05b0acf3a60da6c08"})

383.636µs ago: executing program 5 (id=4612):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/31, 0x13}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

181.323µs ago: executing program 2 (id=4613):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
sendfile(r3, r3, 0x0, 0xb)

0s ago: executing program 4 (id=4614):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$bt_hci(r1, 0x11c, 0x4, &(0x7f0000002080)=""/4104, &(0x7f0000000040)=0x1008)

kernel console output (not intermixed with test programs):

 using dummy_hcd
[  272.352960][ T5997] usb 3-1: Using ep0 maxpacket: 16
[  272.358151][ T5997] usb 3-1: config 0 has an invalid interface number: 4 but max is 0
[  272.364392][   T47] usb 5-1: device descriptor read/64, error -71
[  272.367227][ T5997] usb 3-1: config 0 has no interface number 0
[  272.369661][ T5997] usb 3-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  272.374151][ T5997] usb 3-1: config 0 interface 4 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  272.380606][ T5997] usb 3-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=7e.46
[  272.385038][ T5997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.388554][ T5997] usb 3-1: Product: syz
[  272.390276][ T5997] usb 3-1: Manufacturer: syz
[  272.393702][ T5997] usb 3-1: SerialNumber: syz
[  272.397958][ T5997] usb 3-1: config 0 descriptor??
[  272.404740][T11595] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  272.407632][T11595] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  272.414910][ T5997] HFC-S_USB 3-1:0.4: probe with driver HFC-S_USB failed with error -5
[  272.492668][   T47] usb usb5-port1: attempt power cycle
[  272.621856][  T794] usb 3-1: USB disconnect, device number 28
[  272.852113][   T47] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  272.873375][   T47] usb 5-1: device descriptor read/8, error -71
[  273.112160][   T47] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  273.132855][   T47] usb 5-1: device descriptor read/8, error -71
[  273.252881][   T47] usb usb5-port1: unable to enumerate USB device
[  273.797934][T11629] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  273.801267][T11629] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  273.810395][T11629] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  273.814150][T11629] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  273.926302][T11642] cgroup: name respecified
[  274.114251][T11646] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  274.148422][T11638] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  274.151123][T11638] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  274.162171][T11638] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  274.164824][T11638] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  274.187328][T11648] blk_print_req_error: 5 callbacks suppressed
[  274.187339][T11648] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  274.193901][T11648] EXT4-fs (loop3): unable to read superblock
[  274.198768][   T33] audit: type=1800 audit(1758677801.518:35): pid=11648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2436" name="file1" dev="tmpfs" ino=3288 res=0 errno=0
[  274.358141][T11660] input: syz1 as /devices/virtual/input/input15
[  274.466640][T11665] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2446'.
[  274.470307][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'.
[  274.478014][T11665] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2446'.
[  274.481443][T11665] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2446'.
[  274.486305][T11665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2446'.
[  274.644792][ T9437] Bluetooth: hci3: Frame reassembly failed (-90)
[  274.942116][   T47] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  275.103971][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.107740][   T47] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  275.110930][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.116867][   T47] usb 4-1: config 0 descriptor??
[  275.528025][   T47] steelseries 0003:1038:12B6.000D: reserved main item tag 0xd
[  275.531238][   T47] steelseries 0003:1038:12B6.000D: item fetching failed at offset 6/7
[  275.536210][   T47] steelseries 0003:1038:12B6.000D: probe with driver steelseries failed with error -22
[  275.732593][ T6114] usb 4-1: USB disconnect, device number 25
[  275.921646][T11704] syz_tun: refused to change device tx_queue_len
[  275.925424][T11704] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  276.223428][T11710] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  276.226798][T11710] I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  276.230470][T11710] Mount JFS Failure: -5
[  276.233495][T11710] jfs_mount failed w/return code = -5
[  276.291188][T11712] Bluetooth: hci0: unsupported parameter 32
[  276.298405][T11712] Bluetooth: hci0: invalid len left 4, exp >= 67
[  276.424063][   T33] audit: type=1326 audit(1758677803.748:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.3.2472" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a878ec29 code=0x7ffc0000
[  276.432388][   T33] audit: type=1326 audit(1758677803.748:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.3.2472" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a878ec29 code=0x7ffc0000
[  276.452287][   T33] audit: type=1326 audit(1758677803.758:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.3.2472" exe="/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f30a878ec29 code=0x7ffc0000
[  276.460453][   T33] audit: type=1326 audit(1758677803.758:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.3.2472" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a878ec29 code=0x7ffc0000
[  276.479127][   T33] audit: type=1326 audit(1758677803.758:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.3.2472" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a878ec29 code=0x7ffc0000
[  276.632171][ T5950] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  276.740649][T11731] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  276.763671][T11731] EXT4-fs (loop4): unable to read superblock
[  277.079826][T11743] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  277.084118][T11743] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  277.515739][T11759] netlink: 'syz.3.2487': attribute type 39 has an invalid length.
[  278.612138][   T47] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  278.800895][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[  278.812825][   T47] usb 3-1: config 4 has an invalid interface number: 180 but max is 0
[  278.821705][   T47] usb 3-1: config 4 has no interface number 0
[  278.832704][   T47] usb 3-1: config 4 interface 180 has no altsetting 0
[  278.879226][   T47] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=eb.29
[  278.882560][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.885840][   T47] usb 3-1: Product: syz
[  278.889867][   T47] usb 3-1: Manufacturer: syz
[  278.891630][   T47] usb 3-1: SerialNumber: syz
[  279.115648][   T47] qmi_wwan 3-1:4.180: probe with driver qmi_wwan failed with error -22
[  279.131747][   T47] usb 3-1: USB disconnect, device number 29
[  279.515300][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  279.519593][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  279.526505][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  279.531863][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  279.545514][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  280.498343][T11797] chnl_net:caif_netlink_parms(): no params data found
[  280.894919][T11817] ubi31: attaching mtd0
[  280.907585][T11817] ubi31: scanning is finished
[  280.910833][T11817] ubi31: empty MTD device detected
[  281.242988][T11797] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.245781][T11797] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.248924][T11797] bridge_slave_0: entered allmulticast mode
[  281.254074][T11797] bridge_slave_0: entered promiscuous mode
[  281.265513][T11797] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.268092][T11797] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.273097][T11797] bridge_slave_1: entered allmulticast mode
[  281.280209][T11797] bridge_slave_1: entered promiscuous mode
[  281.393614][T11817] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  281.396928][T11817] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  281.399791][T11817] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  281.403284][T11817] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  281.406107][T11817] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  281.408621][T11817] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  281.413959][T11817] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3034250552
[  281.417540][T11817] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  281.423400][T11819] ubi31: background thread "ubi_bgt31d" started, PID 11819
[  281.426355][T11797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.454556][T11797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.557209][T11797] team0: Port device team_slave_0 added
[  281.569079][T11797] team0: Port device team_slave_1 added
[  281.599797][ T5950] Bluetooth: hci0: command tx timeout
[  281.677087][T11797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.680114][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  281.696495][T11797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.815753][T11797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.818766][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  281.885051][T11797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.209247][T11797] hsr_slave_0: entered promiscuous mode
[  282.215733][T11797] hsr_slave_1: entered promiscuous mode
[  282.231761][T11797] debugfs: 'hsr0' already exists in 'hsr'
[  282.235467][T11797] Cannot create hsr debugfs directory
[  282.819005][T11797] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  282.853935][T11797] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  282.873198][T11797] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  282.891691][T11797] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  283.066815][T11797] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.082161][T11797] 8021q: adding VLAN 0 to HW filter on device team0
[  283.090204][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.092924][ T9419] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.107314][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.110530][ T9419] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.245784][T11797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.369908][T11797] veth0_vlan: entered promiscuous mode
[  283.372474][ T6114] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  283.381463][T11797] veth1_vlan: entered promiscuous mode
[  283.404325][T11797] veth0_macvtap: entered promiscuous mode
[  283.408851][T11797] veth1_macvtap: entered promiscuous mode
[  283.419812][T11797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.428957][T11797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.436992][ T5713] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.440835][ T5713] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.446433][ T5713] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.453329][ T5713] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.522212][ T6114] usb 5-1: Using ep0 maxpacket: 8
[  283.525966][ T6114] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  283.534362][ T6114] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54
[  283.537318][ T6114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.539934][ T6114] usb 5-1: Product: syz
[  283.552148][ T9410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.555243][ T9410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.558397][ T6114] usb 5-1: Manufacturer: syz
[  283.560302][ T6114] usb 5-1: SerialNumber: syz
[  283.571512][ T6114] usb 5-1: config 0 descriptor??
[  283.591517][ T6114] usb 5-1: invalid MIDI EP
[  283.601747][ T6114] usb 5-1: snd-bcd2000: error during probing
[  283.606151][ T6114] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  283.611288][ T9410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.615773][ T9410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.685669][ T5950] Bluetooth: hci0: command tx timeout
[  283.801919][ T6114] usb 5-1: USB disconnect, device number 15
[  284.613494][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2522'.
[  284.624428][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2522'.
[  284.953164][ T5997] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  285.112476][ T5997] usb 5-1: Using ep0 maxpacket: 16
[  285.120293][ T5997] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  285.124455][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.128039][ T5997] usb 5-1: Product: syz
[  285.130092][ T5997] usb 5-1: Manufacturer: syz
[  285.132508][ T5997] usb 5-1: SerialNumber: syz
[  285.139146][ T5997] usb 5-1: config 0 descriptor??
[  285.145171][ T5997] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  285.549553][ T5997] usb 5-1: clie_3_5_startup: get interface number bad return length: 0
[  285.558395][ T5997] visor 5-1:0.0: probe with driver visor failed with error -5
[  285.729179][T11896] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  285.733430][T11896] hfsplus: unable to find HFS+ superblock
[  285.754644][ T5950] Bluetooth: hci0: command tx timeout
[  285.763399][ T6114] usb 5-1: USB disconnect, device number 16
[  285.956588][T11905] vlan2: entered promiscuous mode
[  285.958589][T11905] bond0: entered promiscuous mode
[  285.960586][T11905] bond_slave_0: entered promiscuous mode
[  285.963968][T11905] bond_slave_1: entered promiscuous mode
[  285.977441][T11906] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  285.999052][T11906] bridge_slave_0: left allmulticast mode
[  286.001354][T11906] bridge_slave_0: left promiscuous mode
[  286.013636][T11906] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.035543][T11906] bridge_slave_1: left allmulticast mode
[  286.037784][T11906] bridge_slave_1: left promiscuous mode
[  286.043614][T11906] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.054252][T11906] bond0: (slave bond_slave_0): Releasing backup interface
[  286.064594][T11906] bond0: (slave bond_slave_1): Releasing backup interface
[  286.087379][T11906] team0: Port device team_slave_0 removed
[  286.102489][T11906] team0: Port device team_slave_1 removed
[  286.107650][T11906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.110427][T11906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.118390][T11906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.122393][T11906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.126237][T11906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  286.148441][  T794] !yz!: Port: 1 Link DOWN
[  286.204312][T11913] overlayfs: overlapping lowerdir path
[  286.393835][T11925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2546'.
[  286.431284][T11926] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  286.436386][T11926] cramfs: wrong magic
[  286.776937][T11948] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136)
[  286.780713][T11948] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  286.866530][T11944] bcachefs: bch2_fs_parse_param() Error parsing option compression: option_value
[  286.882236][ T5996] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  287.032253][ T5996] usb 5-1: Using ep0 maxpacket: 32
[  287.036106][ T5996] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  287.046278][ T5996] usb 5-1: config 0 has no interface number 0
[  287.055525][ T5996] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  287.059086][ T5996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.097523][ T5996] usb 5-1: Product: syz
[  287.099299][ T5996] usb 5-1: Manufacturer: syz
[  287.101185][ T5996] usb 5-1: SerialNumber: syz
[  287.106217][ T5996] usb 5-1: config 0 descriptor??
[  287.114010][ T5996] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  287.219896][T11970] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2566'.
[  287.239518][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2566'.
[  287.244292][T11970] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2566'.
[  287.248455][T11970] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2566'.
[  287.272921][T11972] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.275906][T11972] FAT-fs (loop5): unable to read boot sector
[  287.334172][ T5996] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  287.361172][ T5996] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  287.729428][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  287.734234][ T5996] usb 5-1: USB disconnect, device number 17
[  287.745571][ T5996] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  287.754751][ T5996] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  287.762193][ T5996] quatech2 5-1:0.51: device disconnected
[  287.830356][T11988] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  287.837697][T11988] EXT4-fs (loop5): unable to read superblock
[  287.953755][T11989] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.958035][T11989] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32
[  288.922391][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  289.106402][   T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  289.110304][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  289.117067][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  289.120579][   T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  289.126598][   T10] usb 5-1: Product: syz
[  289.128286][   T10] usb 5-1: Manufacturer: syz
[  289.130127][   T10] usb 5-1: SerialNumber: syz
[  289.134899][   T10] usb 5-1: config 0 descriptor??
[  289.141796][   T10] usb 5-1: selecting invalid altsetting 0
[  289.417905][   T10] usb 5-1: USB disconnect, device number 18
[  289.972376][  T794] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  290.132233][  T794] usb 6-1: Using ep0 maxpacket: 8
[  290.138918][  T794] usb 6-1: unable to get BOS descriptor or descriptor too short
[  290.157608][  T794] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  290.161736][  T794] usb 6-1: config 1 interface 0 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  290.168364][  T794] usb 6-1: config 1 interface 0 has no altsetting 0
[  290.173529][  T794] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  290.177012][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.180115][  T794] usb 6-1: Product: syz
[  290.181833][  T794] usb 6-1: Manufacturer: syz
[  290.184630][  T794] usb 6-1: SerialNumber: syz
[  290.243481][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2598'.
[  290.432727][  T794] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  290.456894][  T794] usb 6-1: USB disconnect, device number 2
[  290.633304][ T5997] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  290.812924][ T5997] usb 3-1: Using ep0 maxpacket: 16
[  290.817488][ T5997] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  290.829486][ T5997] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  290.835651][ T5997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.839031][ T5997] usb 3-1: Product: syz
[  290.840879][ T5997] usb 3-1: Manufacturer: syz
[  290.844369][ T5997] usb 3-1: SerialNumber: syz
[  290.854488][ T5997] usb 3-1: config 0 descriptor??
[  290.864375][ T5997] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  290.869576][ T5997] usb 3-1: Detected FT232R
[  291.769188][ T5997] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  291.779835][ T5997] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  291.786129][ T5997] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  291.807060][ T5997] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  291.824992][ T5997] usb 3-1: USB disconnect, device number 30
[  291.838928][ T5997] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  291.859393][ T5997] ftdi_sio 3-1:0.0: device disconnected
[  292.057391][T12053] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  292.062109][T12053] XFS (loop5): SB validate failed with error -5.
[  292.113673][   T33] audit: type=1804 audit(1758677819.428:41): pid=12065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2606" name="file0" dev="ramfs" ino=27240 res=1 errno=0
[  292.852512][ T5996] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  292.900848][T12077] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  293.020934][ T5996] usb 6-1: Using ep0 maxpacket: 16
[  293.045028][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.048719][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.070639][ T5996] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  293.076980][ T5996] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  293.080441][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.089889][ T5996] usb 6-1: config 0 descriptor??
[  293.553770][ T5996] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000E/input/input16
[  293.574380][T12089] evm: overlay not supported
[  293.579391][ T5996] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  293.751686][   T47] usb 6-1: USB disconnect, device number 3
[  293.892743][T12116] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  293.895941][T12116] EXT4-fs (loop4): unable to read superblock
[  293.905366][T12116] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  293.909072][T12116] FAT-fs (loop4): unable to read boot sector
[  294.177536][T12118] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1
[  294.181367][T12118] SQUASHFS error: Failed to read block 0x0: -5
[  294.183963][T12118] unable to read squashfs_super_block
[  294.675150][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'.
[  295.227060][T12154] new mount options do not match the existing superblock, will be ignored
[  295.542873][ T5996] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  295.694028][ T5996] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  295.697674][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.704161][ T5996] usb 5-1: config 0 descriptor??
[  295.708980][ T5996] cp210x 5-1:0.0: cp210x converter detected
[  295.738093][   T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  295.892339][   T47] usb 6-1: Using ep0 maxpacket: 32
[  295.897167][   T47] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  295.901003][   T47] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  295.907886][   T47] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26
[  295.919216][   T47] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  295.923284][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  295.926424][   T47] usb 6-1: SerialNumber: syz
[  295.931785][T12160] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  295.935300][T12160] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  296.280440][T12164] netlink: 'syz.2.2651': attribute type 1 has an invalid length.
[  296.284217][T12164] netlink: 'syz.2.2651': attribute type 2 has an invalid length.
[  296.324836][   T47] usb 6-1: USB disconnect, device number 4
[  296.611269][ T5996] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  296.617593][ T5996] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  296.621553][T12164] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  296.626085][T12164] XFS (loop2): SB validate failed with error -5.
[  296.641238][ T5996] usb 5-1: cp210x converter now attached to ttyUSB0
[  296.678998][ T5996] usb 5-1: USB disconnect, device number 19
[  296.687118][ T5996] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  296.690764][ T5996] cp210x 5-1:0.0: device disconnected
[  297.349555][T12190] /dev/nullb0: Can't open blockdev
[  297.792870][T12194] NILFS (loop2): device size too small
[  298.635091][ T5950] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  298.638061][ T5950] Bluetooth: hci0: Injecting HCI hardware error event
[  298.643627][ T5950] Bluetooth: hci0: hardware error 0x00
[  298.816366][T12217] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2
[  298.824908][T12217] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0/file1
[  300.049578][T12251] autofs: Bad value for 'fd'
[  300.152237][ T5996] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  300.292189][ T6114] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  300.302158][ T5996] usb 6-1: Using ep0 maxpacket: 32
[  300.306253][ T5996] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  300.309754][ T5996] usb 6-1: config 0 has no interface number 0
[  300.312542][ T5996] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  300.316389][ T5996] usb 6-1: config 0 interface 196 has no altsetting 0
[  300.321870][ T5996] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  300.325518][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.328643][ T5996] usb 6-1: Product: syz
[  300.330555][ T5996] usb 6-1: Manufacturer: syz
[  300.332598][ T5996] usb 6-1: SerialNumber: syz
[  300.340066][ T5996] usb 6-1: config 0 descriptor??
[  300.343283][T12244] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  300.412183][   T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  300.442276][ T6114] usb 5-1: Using ep0 maxpacket: 16
[  300.447960][ T6114] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.452409][ T6114] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.456404][ T6114] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  300.463464][ T6114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.470336][ T6114] usb 5-1: config 0 descriptor??
[  300.556753][ T5996] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  300.562115][   T10] usb 3-1: Using ep0 maxpacket: 32
[  300.565694][ T5996] ipheth 6-1:0.196: probe with driver ipheth failed with error -71
[  300.570380][   T10] usb 3-1: config 14 has an invalid interface number: 137 but max is 3
[  300.579205][   T10] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  300.585970][   T10] usb 3-1: config 14 has 2 interfaces, different from the descriptor's value: 4
[  300.590863][   T10] usb 3-1: config 14 has no interface number 1
[  300.593863][ T5996] usb 6-1: USB disconnect, device number 5
[  300.599240][   T10] usb 3-1: config 14 interface 137 has no altsetting 0
[  300.609430][   T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a
[  300.615535][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.618868][   T10] usb 3-1: Product: syz
[  300.620679][   T10] usb 3-1: Manufacturer: syz
[  300.622746][   T10] usb 3-1: SerialNumber: syz
[  300.712217][ T5950] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  300.845108][   T10] ati_remote2 3-1:14.0: ati_remote2_probe(): interface 0 must have an endpoint
[  300.851895][   T10] usb 3-1: USB disconnect, device number 31
[  300.886880][ T6114] hid (null): report_id 0 is invalid
[  301.086741][ T6114] usb 5-1: string descriptor 0 read error: -71
[  301.118192][ T6114] usb 5-1: Max retries (5) exceeded reading string descriptor 200
[  301.121397][ T6114] letsketch 0003:6161:4D15.000F: probe with driver letsketch failed with error -32
[  301.128547][ T6114] usb 5-1: USB disconnect, device number 20
[  301.454422][T12271] netlink: 'syz.2.2696': attribute type 4 has an invalid length.
[  301.502138][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2697'.
[  302.394665][T12293] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  302.398623][T12293] bcachefs (/dev/loop2): error reading default superblock: IO error: -5
[  302.404709][T12293] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  302.408532][T12293] bcachefs (/dev/loop2): error reading superblock: IO error: -5
[  302.415346][T12293] bcachefs: bch2_fs_get_tree() error: EIO
[  302.790740][T12291] delete_channel: no stack
[  302.870894][   T10] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  303.035680][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.040034][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  303.048005][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  303.053704][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.057617][   T10] usb 5-1: Product: syz
[  303.059744][   T10] usb 5-1: Manufacturer: syz
[  303.062327][   T10] usb 5-1: SerialNumber: syz
[  303.291441][   T10] usb 5-1: 0:2 : does not exist
[  303.299475][   T10] usb 5-1: unit 0 not found!
[  303.332725][   T10] usb 5-1: USB disconnect, device number 21
[  303.681649][T12315] sctp: [Deprecated]: syz.5.2714 (pid 12315) Use of struct sctp_assoc_value in delayed_ack socket option.
[  303.681649][T12315] Use struct sctp_sack_info instead
[  303.981612][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'.
[  304.482293][T12332] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  304.484733][T12332] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  304.487550][T12332] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  304.490167][T12332] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  304.541342][T12341] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2727'.
[  304.562387][T12341] netlink: 'syz.5.2727': attribute type 7 has an invalid length.
[  304.562431][T12341] netlink: 'syz.5.2727': attribute type 8 has an invalid length.
[  304.562438][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2727'.
[  305.194819][T12367] NILFS (loop4): device size too small
[  305.225326][T12365] ntfs3(loop5): try to read out of volume at offset 0x0
[  305.232579][T12365] overlayfs: overlapping lowerdir path
[  305.867618][   T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  306.035853][   T10] usb 5-1: config 0 has no interfaces?
[  306.040954][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  306.045325][   T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  306.048794][   T10] usb 5-1: Product: syz
[  306.050742][   T10] usb 5-1: Manufacturer: syz
[  306.053380][   T10] usb 5-1: SerialNumber: syz
[  306.058294][   T10] usb 5-1: config 0 descriptor??
[  306.304220][   T10] usb 5-1: USB disconnect, device number 22
[  306.852166][   T10] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  306.947756][T12418] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  306.950856][T12418] FAT-fs (loop4): unable to read boot sector
[  306.972699][T12420] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  307.015515][   T10] usb 6-1: No LPM exit latency info found, disabling LPM.
[  307.019126][   T10] usb 6-1: config 1 interface 0 altsetting 26 endpoint 0x1 is Bulk; changing to Interrupt
[  307.022717][   T10] usb 6-1: config 1 interface 0 has no altsetting 0
[  307.030433][   T10] usb 6-1: string descriptor 0 read error: -22
[  307.032872][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  307.043183][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.050368][T12402] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  307.121435][T12429] netlink: 'syz.2.2768': attribute type 4 has an invalid length.
[  307.125055][T12429] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.2768'.
[  307.265222][   T10] usb 6-1: USB disconnect, device number 6
[  307.611899][T12447] overlayfs: failed to clone upperpath
[  307.929282][T12453] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  307.944882][T12453] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32
[  307.999026][T12457] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2782'.
[  308.002257][T12457] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2782'.
[  308.006152][T12457] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2782'.
[  308.010352][T12457] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2782'.
[  308.112550][T12464] sp0: Synchronizing with TNC
[  308.452705][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  308.617040][   T10] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  308.626110][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.628959][   T10] usb 6-1: Product: syz
[  308.630675][   T10] usb 6-1: Manufacturer: syz
[  308.633789][   T10] usb 6-1: SerialNumber: syz
[  308.637373][   T10] usb 6-1: config 0 descriptor??
[  308.647370][   T10] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 007
[  309.059518][   T10]  (null): failure reading functionality
[  309.070066][   T10] i2c i2c-2: connected i2c-tiny-usb device
[  309.167042][T12500] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  309.170980][T12500] EXT4-fs (loop4): unable to read superblock
[  309.275305][   T47] usb 6-1: USB disconnect, device number 7
[  309.407397][T12511] cifs: Bad value for 'port'
[  310.153639][   T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  310.315299][   T10] usb 6-1: config 11 has an invalid interface number: 62 but max is 0
[  310.321916][   T10] usb 6-1: config 11 has no interface number 0
[  310.333682][   T10] usb 6-1: New USB device found, idVendor=22b8, idProduct=2d9a, bcdDevice=bf.dc
[  310.337061][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.340452][   T10] usb 6-1: Product: syz
[  310.346530][   T10] usb 6-1: Manufacturer: syz
[  310.352591][   T10] usb 6-1: SerialNumber: syz
[  310.626135][   T10] hub 6-1:11.62: bad descriptor, ignoring hub
[  310.628303][   T10] hub 6-1:11.62: probe with driver hub failed with error -5
[  310.675354][   T10] usb 6-1: USB disconnect, device number 8
[  310.729101][T12542] atomic_op ffff88803e526998 conn xmit_atomic 0000000000000000
[  311.320215][T12547] JFS: discard option not supported on device
[  311.323503][T12547] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  311.327198][T12547] I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  311.330705][T12547] Mount JFS Failure: -5
[  311.333660][T12547] jfs_mount failed w/return code = -5
[  311.474437][ T5996] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  311.636073][ T5996] usb 6-1: Using ep0 maxpacket: 8
[  311.643895][ T5996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.648059][ T5996] usb 6-1: config 0 interface 0 has no altsetting 0
[  311.656690][ T5996] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  311.660866][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.669565][ T5996] usb 6-1: Product: syz
[  311.671436][ T5996] usb 6-1: Manufacturer: syz
[  311.682466][ T5996] usb 6-1: SerialNumber: syz
[  311.710130][ T5996] usb 6-1: config 0 descriptor??
[  311.737253][ T5996] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found
[  312.071906][ T5996] snd_usb_toneport 6-1:0.0: cannot get proper max packet size
[  312.075866][ T5996] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected
[  312.084088][ T5996] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  312.321559][   T47] usb 6-1: USB disconnect, device number 9
[  312.429459][T12564] Process accounting resumed
[  312.806604][T12582] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  312.810374][T12582] hpfs: hpfs_map_sector(): read error
[  312.826661][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'.
[  312.920747][T12590] comedi comedi0: aio_iiro_16: I/O port conflict (0xee,8)
[  312.967405][T12592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17
[  313.005288][T12596] overlayfs: missing 'lowerdir'
[  313.036663][T12594] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  313.108904][T12599] NILFS (loop5): device size too small
[  313.122775][T12599]  nullb0: [POWERTEC] p1 p2 p3
[  313.127673][T12599] nullb0: p1 start 876098047 is beyond EOD, truncated
[  313.130434][T12599] nullb0: p2 start 4084244785 is beyond EOD, truncated
[  313.142472][T12599] nullb0: p3 start 1240541814 is beyond EOD, truncated
[  313.440937][T12606] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  313.445501][T12606] I/O error, dev loop5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  313.448777][T12606] Mount JFS Failure: -5
[  313.450199][T12606] jfs_mount failed w/return code = -5
[  314.238580][T12609] xfs: Unknown parameter 'noikeep'
[  314.337350][T12621] ntfs3(loop4): try to read out of volume at offset 0x0
[  314.427275][T12633] netlink: 'syz.2.2863': attribute type 39 has an invalid length.
[  314.442496][T12629] ntfs3(loop4): try to read out of volume at offset 0x0
[  314.938477][T12651] overlayfs: failed to clone upperpath
[  314.998212][T12652] overlayfs: failed to clone upperpath
[  315.315372][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2876'.
[  315.689259][T12685] fuse: Unknown parameter 'f)XK1~Ue+:pD`OOD*v270x0000000000000007'
[  315.926482][T12691] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.948632][T12691] FAT-fs (loop4): unable to read boot sector
[  316.194427][T12694] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  316.207661][T12694] EXT4-fs (loop4): unable to read superblock
[  316.689939][T12700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2892'.
[  317.038859][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  317.041568][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  317.728408][T12723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2903'.
[  318.504634][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2926'.
[  319.138152][T12783] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  319.141910][T12783] (syz.5.2931,12783,0):ocfs2_get_sector:1714 ERROR: status = -5
[  319.147757][T12783] (syz.5.2931,12783,0):ocfs2_sb_probe:753 ERROR: status = -5
[  319.151017][T12783] (syz.5.2931,12783,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  319.154982][T12783] (syz.5.2931,12783,0):ocfs2_fill_super:1177 ERROR: status = -5
[  319.795503][T12837] exfat: Deprecated parameter 'utf8'
[  319.797633][T12837] exfat: Unknown parameter 'iocharseC'
[  319.800880][T12837] Invalid source name
[  319.837483][T12839] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  319.840708][T12839] EXT4-fs (loop5): unable to read superblock
[  319.982226][T12846] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2958'.
[  320.205585][T12854] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  320.209558][T12854] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  320.352114][ T5997] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  320.504557][ T5997] usb 6-1: Using ep0 maxpacket: 32
[  320.525562][ T5997] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  320.529298][ T5997] usb 6-1: config 0 has no interface number 0
[  320.531888][ T5997] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.537136][ T5997] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.546239][ T5997] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  320.549868][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.565710][ T5997] usb 6-1: config 0 descriptor??
[  320.981540][ T5997] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[  320.984559][ T5997] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[  321.175887][ T5997] ft260 0003:0403:6030.0010: chip code: 6424 8183
[  321.470553][ T5997] ft260 0003:0403:6030.0010: uart interface is not supported
[  321.681042][ T5997] usb 6-1: USB disconnect, device number 10
[  322.592206][   T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  322.744366][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  322.748312][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  322.758061][   T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  322.758147][T12922] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2991'.
[  322.761707][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  322.766871][T12922] netlink: 'syz.4.2991': attribute type 1 has an invalid length.
[  322.770561][   T10] usb 6-1: SerialNumber: syz
[  322.772851][T12922] netlink: 'syz.4.2991': attribute type 2 has an invalid length.
[  322.780304][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2991'.
[  322.994690][   T10] usb 6-1: 0:2 : does not exist
[  322.996792][   T10] usb 6-1: unit 5: unexpected type 0x03
[  323.019884][   T10] usb 6-1: USB disconnect, device number 11
[  323.049879][T11527] udevd[11527]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  323.817287][   T33] audit: type=1326 audit(1758677851.138:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.4.2996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  323.834813][   T33] audit: type=1326 audit(1758677851.138:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.4.2996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  323.860207][   T33] audit: type=1326 audit(1758677851.148:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.4.2996" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  323.906984][   T33] audit: type=1326 audit(1758677851.148:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.4.2996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  323.918797][   T33] audit: type=1326 audit(1758677851.148:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.4.2996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  325.244498][T12959] syz_tun: entered allmulticast mode
[  325.248331][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'.
[  325.347012][T12959] syz_tun (unregistering): left allmulticast mode
[  325.640203][T12974] ufs: You didn't specify the type of your ufs filesystem
[  325.640203][T12974] 
[  325.640203][T12974] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  325.640203][T12974] 
[  325.640203][T12974] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  325.654827][T12974] ufs: ufstype=old is supported read-only
[  325.660699][T12974] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.343356][T12992] overlayfs: missing 'workdir'
[  329.092102][   T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  329.292169][   T10] usb 5-1: Using ep0 maxpacket: 32
[  329.297852][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.304717][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.310380][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  329.316128][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.324812][   T10] usb 5-1: config 0 descriptor??
[  329.351080][   T10] hub 5-1:0.0: USB hub found
[  329.535488][T13053] input: syz1 as /devices/virtual/input/input18
[  329.580458][   T10] hub 5-1:0.0: 31 ports detected
[  329.583395][   T10] hub 5-1:0.0: insufficient power available to use all downstream ports
[  329.781262][   T10] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  329.785764][   T10] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  329.791671][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  329.797003][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  329.812563][   T10] usb 5-1: USB disconnect, device number 23
[  330.524967][T13068] trusted_key: encrypted_key: insufficient parameters specified
[  330.893326][T13078] netlink: 'syz.5.3053': attribute type 14 has an invalid length.
[  331.219166][   T47] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  331.372223][   T47] usb 6-1: Using ep0 maxpacket: 8
[  331.383564][   T47] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  331.387096][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.390117][   T47] usb 6-1: Product: syz
[  331.402558][   T47] usb 6-1: Manufacturer: syz
[  331.405700][   T47] usb 6-1: SerialNumber: syz
[  331.411489][   T47] usb 6-1: config 0 descriptor??
[  331.418745][   T47] gspca_main: se401-2.14.0 probing 047d:5003
[  331.588918][T13118] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3072'.
[  331.831804][   T47] gspca_se401: Bayer format not supported!
[  332.037862][ T6114] usb 6-1: USB disconnect, device number 12
[  332.040640][T13116] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  332.045102][T13116] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  332.048507][T13116] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  332.054618][T13116] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  332.332829][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3081'.
[  332.970564][T13148] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3085'.
[  333.252169][ T6114] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  333.414299][ T6114] usb 6-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  333.418135][ T6114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.427798][ T6114] usb 6-1: config 0 descriptor??
[  333.590796][T13194] exFAT-fs (loop4): mounting with "discard" option, but the device does not support discard
[  333.598877][T13194] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  333.604779][T13194] exFAT-fs (loop4): unable to read boot sector
[  333.607381][T13194] exFAT-fs (loop4): failed to read boot sector
[  333.609899][T13194] exFAT-fs (loop4): failed to recognize exfat type
[  333.841618][ T6114] hid (null): report_id 0 is invalid
[  334.041822][ T6114] usb 6-1: string descriptor 0 read error: -71
[  334.047431][ T6114] uclogic 0003:5543:3031.0011: failed retrieving string descriptor #200: -71
[  334.050712][ T6114] uclogic 0003:5543:3031.0011: failed retrieving pen parameters: -71
[  334.054423][ T6114] uclogic 0003:5543:3031.0011: failed probing pen v2 parameters: -71
[  334.057465][ T6114] uclogic 0003:5543:3031.0011: failed probing parameters: -71
[  334.060156][ T6114] uclogic 0003:5543:3031.0011: probe with driver uclogic failed with error -71
[  334.066134][ T6114] usb 6-1: USB disconnect, device number 13
[  334.261157][T13209] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3114'.
[  334.264208][T13209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3114'.
[  334.267300][T13209] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3114'.
[  334.825024][T13220] NILFS (loop4): device size too small
[  335.690276][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3132'.
[  335.799798][T13256] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  335.803747][T13256] EXT4-fs (loop5): unable to read superblock
[  336.236374][T13269] netlink: 'syz.2.3141': attribute type 5 has an invalid length.
[  336.265852][T13271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3142'.
[  336.270366][T13271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3142'.
[  336.274277][T13271] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3142'.
[  336.642258][ T6114] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  336.746261][T13287] __nla_validate_parse: 1 callbacks suppressed
[  336.746275][T13287] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3150'.
[  336.792319][ T6114] usb 5-1: Using ep0 maxpacket: 32
[  336.797352][ T6114] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  336.801151][ T6114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.807393][ T6114] usb 5-1: config 0 descriptor??
[  336.821832][ T6114] gspca_main: sunplus-2.14.0 probing 041e:400b
[  336.859316][   T10] kernel write not supported for file /387/clear_refs (pid: 10 comm: kworker/0:1)
[  337.626060][ T6114] gspca_sunplus: reg_w_riv err -71
[  337.629097][ T6114] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  337.634123][ T6114] usb 5-1: USB disconnect, device number 24
[  338.052162][   T47] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  338.212491][   T47] usb 6-1: Using ep0 maxpacket: 32
[  338.217007][   T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  338.220949][   T47] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  338.227850][   T47] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  338.231534][   T47] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  338.235871][   T47] usb 6-1: Product: syz
[  338.237489][   T47] usb 6-1: Manufacturer: syz
[  338.239293][   T47] usb 6-1: SerialNumber: syz
[  338.245113][   T47] usb 6-1: config 0 descriptor??
[  338.443008][ T6114] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  338.612251][ T6114] usb 5-1: Using ep0 maxpacket: 32
[  338.615609][ T6114] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  338.622874][ T6114] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  338.629118][   T47] usb 6-1: USB disconnect, device number 14
[  338.632206][ T6114] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  338.640488][ T6114] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  338.650170][ T6114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.661896][ T6114] usb 5-1: config 0 descriptor??
[  338.665741][T13313] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  338.675301][ T6114] hub 5-1:0.0: USB hub found
[  338.875877][ T6114] hub 5-1:0.0: 11 ports detected
[  338.877883][ T6114] hub 5-1:0.0: insufficient power available to use all downstream ports
[  339.077327][ T6114] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  339.079973][ T6114] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  339.088496][ T6114] usbhid 5-1:0.0: can't add hid device: -71
[  339.090973][ T6114] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  339.132856][ T6114] usb 5-1: USB disconnect, device number 25
[  339.432593][   T47] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  339.582216][   T47] usb 6-1: Using ep0 maxpacket: 16
[  339.594372][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.599014][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.608732][   T47] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  339.614908][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.624321][   T47] usb 6-1: config 0 descriptor??
[  340.046318][   T47] bigben 0003:146B:0902.0012: unexpected rdesc, please submit for review
[  340.049941][   T47] bigben 0003:146B:0902.0012: unknown main item tag 0x3
[  340.054985][   T47] bigben 0003:146B:0902.0012: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.5-1/input0
[  340.058862][   T47] bigben 0003:146B:0902.0012: missing HID_OUTPUT_REPORT 0
[  340.061453][   T47] bigben 0003:146B:0902.0012: no output report found
[  340.408190][ T6114] usb 6-1: USB disconnect, device number 15
[  340.588790][T13363] overlayfs: failed to clone upperpath
[  340.599707][T13363] overlayfs: failed to clone upperpath
[  340.990070][ T6114] IPVS: starting estimator thread 0...
[  341.083809][T13390] IPVS: using max 41 ests per chain, 98400 per kthread
[  341.097265][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3204'.
[  341.570522][T13420] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3212'.
[  341.596456][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3213'.
[  342.835593][T13446] netlink: 'syz.4.3225': attribute type 21 has an invalid length.
[  342.838240][T13446] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3225'.
[  342.841309][T13446] netlink: 'syz.4.3225': attribute type 4 has an invalid length.
[  342.862121][T13446] netlink: 'syz.4.3225': attribute type 3 has an invalid length.
[  342.867958][T13446] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3225'.
[  343.245790][T13469] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  343.292587][T13469] cramfs: wrong magic
[  344.129480][T13480] Dead loop on virtual device ipvlan1, fix it urgently!
[  344.136693][T13482] atomic_op ffff888028797198 conn xmit_atomic 0000000000000000
[  345.296634][T13508] Bluetooth: MGMT ver 1.23
[  345.401373][T13517] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3256'.
[  345.682285][T13535] wg1: entered promiscuous mode
[  345.683997][T13535] wg1: entered allmulticast mode
[  345.906154][T13541] delete_channel: no stack
[  346.409828][T13550] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3272'.
[  346.460523][T13552] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  346.618100][T13558] netlink: 'syz.2.3276': attribute type 4 has an invalid length.
[  347.169644][T13548] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  347.173711][T13548] XFS (loop5): SB validate failed with error -5.
[  347.443577][T13597] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.446613][T13597] FAT-fs (loop5): unable to read boot sector
[  347.812471][ T6114] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  347.982434][ T6114] usb 5-1: Using ep0 maxpacket: 32
[  348.019052][ T6114] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  348.035157][ T6114] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  348.050493][ T6114] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  348.061729][ T6114] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  348.081244][ T6114] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  348.089722][ T6114] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  348.094740][ T6114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.097696][ T6114] usb 5-1: Product: syz
[  348.099158][ T6114] usb 5-1: Manufacturer: syz
[  348.101053][ T6114] usb 5-1: SerialNumber: syz
[  348.105723][ T6114] usb 5-1: config 0 descriptor??
[  348.523487][T13626] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3303'.
[  348.528203][ T6114] iforce 5-1:0.0: usb_submit_urb failed: -32
[  348.530569][ T6114] input input21: Device does not respond to id packet M
[  348.541640][ T6114] iforce 5-1:0.0: usb_submit_urb failed: -32
[  348.544502][ T6114] input input21: Device does not respond to id packet P
[  348.547291][ T6114] iforce 5-1:0.0: usb_submit_urb failed: -32
[  348.549613][ T6114] input input21: Device does not respond to id packet B
[  348.756402][ T6114] iforce 5-1:0.0: usb_submit_urb failed: -71
[  348.772645][ T6114] iforce 5-1:0.0: usb_submit_urb failed: -71
[  348.775188][ T6114] iforce 5-1:0.0: usb_submit_urb failed: -71
[  348.779482][ T6114] iforce 5-1:0.0: usb_submit_urb failed: -71
[  348.788346][ T6114] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21
[  348.835746][ T6114] usb 5-1: USB disconnect, device number 26
[  349.907597][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3315'.
[  350.585572][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3332'.
[  351.012417][ T6114] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  351.165580][ T6114] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  351.168320][ T6114] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.180981][ T6114] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  351.191663][ T6114] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  351.200363][ T6114] usb 5-1: Manufacturer: syz
[  351.210355][ T6114] usb 5-1: config 0 descriptor??
[  351.292139][ T6114] rc_core: IR keymap rc-hauppauge not found
[  351.302621][ T6114] Registered IR keymap rc-empty
[  351.306696][ T6114] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  351.318631][ T6114] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22
[  351.632172][    C0] igorplugusb 5-1:0.0: receive overflow, at least 13 lost
[  351.722857][   T33] audit: type=1326 audit(1758677879.048:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.2.3350" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71e78ec29 code=0x7fc00000
[  351.833739][   T47] usb 5-1: USB disconnect, device number 27
[  352.344992][   T33] audit: type=1326 audit(1758677879.668:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.2.3350" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff71e78ec29 code=0x7fc00000
[  352.413766][T13747] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3352'.
[  352.494383][T13751] netlink: 'syz.2.3354': attribute type 5 has an invalid length.
[  352.873056][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  353.649414][T13767] btrfs: Unknown parameter 'ref_verify'
[  354.212140][ T5996] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  354.413047][ T5996] usb 6-1: Using ep0 maxpacket: 16
[  354.422871][ T5996] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[  354.426231][ T5996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  354.430229][ T5996] usb 6-1: config 0 has no interface number 0
[  354.433507][ T5996] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  354.437649][ T5996] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  354.529027][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3373'.
[  354.532611][T13798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3373'.
[  354.807526][ T5996] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  354.811376][ T5996] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147
[  354.818171][ T5996] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  354.822817][ T5996] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  354.825968][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.834170][ T5996] usb 6-1: config 0 descriptor??
[  354.842862][T13792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  354.846852][T13792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  354.870754][ T5996] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  355.100587][   T47] usb 6-1: USB disconnect, device number 16
[  355.449136][T13804] ntfs3(loop4): try to read out of volume at offset 0x0
[  355.711581][   T33] audit: type=1326 audit(1758677883.028:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.4.3382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  355.719620][   T33] audit: type=1326 audit(1758677883.038:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.4.3382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  355.732604][   T33] audit: type=1326 audit(1758677883.038:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.4.3382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  355.741152][   T33] audit: type=1326 audit(1758677883.038:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.4.3382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  355.750462][   T33] audit: type=1326 audit(1758677883.048:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.4.3382" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  355.761925][   T33] audit: type=1326 audit(1758677883.048:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.4.3382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  355.771589][   T33] audit: type=1326 audit(1758677883.048:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.4.3382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  355.785101][   T33] audit: type=1326 audit(1758677883.048:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.4.3382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcc98ec29 code=0x7ffc0000
[  355.822835][T13822] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  355.826730][T13822] EXT4-fs (loop5): unable to read superblock
[  355.949978][T13835] netlink: 71 bytes leftover after parsing attributes in process `syz.5.3391'.
[  357.381136][T13877] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3409'.
[  357.406373][T13877] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3409'.
[  357.623550][ T5997] Dead loop on virtual device ipvlan1, fix it urgently!
[  357.929170][T13892] delete_channel: no stack
[  358.757292][ T5997] Dead loop on virtual device ipvlan1, fix it urgently!
[  359.055802][T13913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3426'.
[  360.846705][T13957] iso9660: Unknown parameter '>N&#z8Z}5trnCogBRFcBڕݝ"jxn'
[  361.071274][T13961] EXT4-fs: Ignoring removed oldalloc option
[  361.076784][T13961] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  361.086769][T13961] EXT4-fs (loop5): unable to read superblock
[  361.706316][T13990] ntfs3(loop4): try to read out of volume at offset 0x0
[  362.182778][ T6114] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  362.342118][ T6114] usb 5-1: Using ep0 maxpacket: 8
[  362.353061][ T6114] usb 5-1: config 150 has an invalid interface number: 204 but max is 0
[  362.356577][ T6114] usb 5-1: config 150 has no interface number 0
[  362.361313][ T6114] usb 5-1: config 150 interface 204 has no altsetting 0
[  362.374600][ T6114] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  362.378273][ T6114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.381618][ T6114] usb 5-1: Product: syz
[  362.384079][ T6114] usb 5-1: Manufacturer: syz
[  362.386093][ T6114] usb 5-1: SerialNumber: syz
[  362.807613][ T6114] usb 5-1: USB disconnect, device number 28
[  363.102105][ T5996] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  363.263207][ T5996] usb 6-1: Using ep0 maxpacket: 16
[  363.268120][ T5996] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  363.271470][ T5996] usb 6-1: config 0 has no interface number 0
[  363.274173][ T5996] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  363.278473][ T5996] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  363.284568][ T5996] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  363.288195][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  363.291379][ T5996] usb 6-1: Product: syz
[  363.293525][ T5996] usb 6-1: SerialNumber: syz
[  363.298609][ T5996] usb 6-1: config 0 descriptor??
[  363.305101][ T5996] cm109 6-1:0.8: invalid payload size 0, expected 4
[  363.312745][ T5996] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input23
[  363.557525][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  363.557637][ T5997] usb 6-1: USB disconnect, device number 17
[  363.560727][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  363.574747][ T5997] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  364.346800][T14058] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  364.435066][T14062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3489'.
[  368.662175][   T24] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  368.815171][   T24] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  368.817937][   T24] usb 6-1: config 0 has no interface number 0
[  368.823839][   T24] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  368.826974][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.835272][   T24] usb 6-1: Product: syz
[  368.836982][   T24] usb 6-1: Manufacturer: syz
[  368.838799][   T24] usb 6-1: SerialNumber: syz
[  368.865160][   T24] usb 6-1: config 0 descriptor??
[  369.204592][ T5950] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260
[  369.204634][ T5950] Bluetooth: hci2: Malformed Event: 0x2f
[  369.675019][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3524'.
[  369.843889][   T24] asix 6-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x48
[  369.852599][ T5240] Bluetooth: hci2: unexpected event for opcode 0x080e
[  370.050168][ T6114] usb 6-1: USB disconnect, device number 18
[  370.956488][T14179] netlink: 'syz.5.3538': attribute type 10 has an invalid length.
[  371.126158][T14201] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  371.319481][T14198] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  371.323371][T14198] bcachefs (/dev/loop4): error reading default superblock: IO error: -5
[  371.326705][T14198] I/O error, dev loop4, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  371.330313][T14198] bcachefs (/dev/loop4): error reading superblock: IO error: -5
[  371.333754][T14198] bcachefs: bch2_fs_get_tree() error: EIO
[  371.356164][T14198] nilfs2: Unknown parameter '?4)6c،Gw~(o2~AT\HI Ӷ
[  371.356164][T14198] ca+	9WTHkMCˣ/'bw'j	3(jȡOƝw%ϜwDJDOkȋఌp%ua-&'
[  371.432215][ T5240] Bluetooth: hci1: command 0x0405 tx timeout
[  372.072868][ T5989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.179036][ T5989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.279896][ T5989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.381666][ T5989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.577759][T14220] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.581580][T14220] (syz.5.3559,14220,1):ocfs2_get_sector:1714 ERROR: status = -5
[  372.602268][T14220] (syz.5.3559,14220,1):ocfs2_sb_probe:753 ERROR: status = -5
[  372.604831][T14220] (syz.5.3559,14220,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  372.607664][T14220] (syz.5.3559,14220,1):ocfs2_fill_super:1177 ERROR: status = -5
[  373.118518][ T5989] bridge_slave_1: left allmulticast mode
[  373.123669][ T5989] bridge_slave_1: left promiscuous mode
[  373.131262][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.157215][ T5989] bridge_slave_0: left allmulticast mode
[  373.163484][ T5989] bridge_slave_0: left promiscuous mode
[  373.168102][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.734571][T14251] netlink: 'syz.4.3570': attribute type 1 has an invalid length.
[  374.017789][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  374.027780][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.034238][ T5989] bond0 (unregistering): Released all slaves
[  374.044535][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3571'.
[  374.048242][T14253] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3571'.
[  374.376562][T14271] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  374.379684][T14271] hfsplus: unable to find HFS+ superblock
[  374.551537][ T5989] hsr_slave_0: left promiscuous mode
[  374.560142][ T5989] hsr_slave_1: left promiscuous mode
[  374.563112][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.569191][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.577382][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.583041][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  374.622902][ T5989] veth1_macvtap: left promiscuous mode
[  374.625233][ T5989] veth0_macvtap: left promiscuous mode
[  374.628432][ T5989] veth1_vlan: left promiscuous mode
[  374.630732][ T5989] veth0_vlan: left promiscuous mode
[  375.214762][ T5989] team0 (unregistering): Port device team_slave_1 removed
[  375.256708][ T5989] team0 (unregistering): Port device team_slave_0 removed
[  375.955737][T14312] netem: change failed
[  376.709370][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3596'.
[  377.624400][T14381] exFAT-fs (loop4): mounting with "discard" option, but the device does not support discard
[  377.627819][T14381] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  377.630905][T14381] exFAT-fs (loop4): unable to read boot sector
[  377.633497][T14381] exFAT-fs (loop4): failed to read boot sector
[  377.635446][T14381] exFAT-fs (loop4): failed to recognize exfat type
[  377.988825][T14417] delete_channel: no stack
[  377.990832][T14415] delete_channel: no stack
[  378.402605][ T5997] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  378.478058][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.481256][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  378.676037][ T5997] usb 6-1: unable to get BOS descriptor or descriptor too short
[  378.680422][ T5997] usb 6-1: not running at top speed; connect to a high speed hub
[  378.685567][ T5997] usb 6-1: config 4 has an invalid interface number: 111 but max is 0
[  378.688921][ T5997] usb 6-1: config 4 has no interface number 0
[  378.692795][ T5997] usb 6-1: config 4 interface 111 has no altsetting 0
[  378.698069][ T5997] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99
[  378.701731][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.705492][ T5997] usb 6-1: Product: syz
[  378.707659][ T5997] usb 6-1: Manufacturer: syz
[  378.709699][ T5997] usb 6-1: SerialNumber: syz
[  378.928246][ T5997] pvrusb2: Hardware description: Terratec Grabster AV400
[  378.930504][ T5997] pvrusb2: **********
[  378.931875][ T5997] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  378.945281][ T5997] pvrusb2: Important functionality might not be entirely working.
[  378.961618][ T5997] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  378.973632][ T5997] pvrusb2: **********
[  378.980123][ T5997] usb 6-1: selecting invalid altsetting 0
[  378.985631][ T5997] usb 6-1: USB disconnect, device number 19
[  378.991234][ T5997] pvrusb2: Device being rendered inoperable
[  379.195467][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'.
[  379.832205][ T5997] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  379.985028][ T5997] usb 6-1: Using ep0 maxpacket: 8
[  379.989443][ T5997] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  379.994425][ T5997] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  380.000703][ T5997] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40
[  380.004005][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.006533][ T5997] usb 6-1: Product: syz
[  380.007983][ T5997] usb 6-1: Manufacturer: syz
[  380.009673][ T5997] usb 6-1: SerialNumber: syz
[  380.237420][ T5997] usb 6-1: USB disconnect, device number 20
[  382.944702][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3661'.
[  382.947641][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3661'.
[  382.951379][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3661'.
[  382.956509][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3661'.
[  383.152630][ T5996] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  383.278549][T14513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3669'.
[  383.302340][ T5996] usb 5-1: Using ep0 maxpacket: 16
[  383.307012][ T5996] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  383.310336][ T5996] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  383.322636][ T5996] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  383.329807][ T5996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.335903][ T5996] usb 5-1: Product: syz
[  383.341543][ T5996] usb 5-1: Manufacturer: syz
[  383.345008][ T5996] usb 5-1: SerialNumber: syz
[  383.493622][T14525] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3675'.
[  383.558350][ T5996] usb 5-1: 0:2 : does not exist
[  383.566725][ T5996] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  383.581244][ T5996] usb 5-1: USB disconnect, device number 29
[  383.605589][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  384.487305][T14542] squashfs: Unknown parameter 'euid>00000000000000060928/2㝆~?]'
[  384.811275][T14542] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  384.859632][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  384.859652][   T33] audit: type=1326 audit(1758677912.178:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14532 comm="syz.2.3677" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71e78ec29 code=0x7fc00000
[  385.027550][T14555] EXT4-fs: Ignoring removed bh option
[  385.030240][T14555] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  385.036362][T14555] EXT4-fs (loop5): unable to read superblock
[  385.205825][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3687'.
[  388.240715][T14607] netlink: 'syz.4.3702': attribute type 1 has an invalid length.
[  389.565928][T14648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3716'.
[  390.207369][T14669] Bluetooth: (null): Invalid header checksum
[  390.280530][T14671] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  390.411261][T14677] syzkaller1: tun_chr_ioctl cmd 1074025677
[  390.415418][T14677] syzkaller1: linktype set to 0
[  391.962733][ T5982] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  392.127085][ T5982] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  392.130555][ T5982] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  392.136542][ T5982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  392.140225][ T5982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  392.144686][ T5982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  392.185545][ T5982] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  392.189235][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  392.192853][ T5982] usb 5-1: Product: syz
[  392.195059][ T5982] usb 5-1: Manufacturer: syz
[  392.219289][ T5982] cdc_wdm 5-1:1.0: skipping garbage
[  392.221500][ T5982] cdc_wdm 5-1:1.0: skipping garbage
[  392.246386][ T5982] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  392.248914][ T5982] cdc_wdm 5-1:1.0: Unknown control protocol
[  392.328347][T14722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.964898][T14746] Invalid source name
[  392.966648][T14746] UBIFS error (pid: 14746): cannot open "./file0", error -22
[  392.995326][ T5982] usb 5-1: USB disconnect, device number 30
[  393.162727][T14754] macvlan0: entered promiscuous mode
[  393.168737][T14754] netlink: 'syz.5.3763': attribute type 1 has an invalid length.
[  393.173318][T14754] netlink: 'syz.5.3763': attribute type 2 has an invalid length.
[  393.225671][T14756] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3764'.
[  393.615433][T14781] delete_channel: no stack
[  393.617433][T14781] delete_channel: no stack
[  393.647398][  T794] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  393.812297][  T794] usb 6-1: Using ep0 maxpacket: 16
[  393.816367][  T794] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[  393.821066][  T794] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  393.830175][  T794] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  393.840728][  T794] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  393.844377][  T794] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  393.848600][  T794] usb 6-1: config 0 has no interface number 0
[  393.852448][  T794] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  393.857749][  T794] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  393.861929][  T794] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  393.866876][  T794] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  393.872728][  T794] usb 6-1: config 0 interface 125 has no altsetting 0
[  393.875649][  T794] usb 6-1: config 0 interface 125 has no altsetting 2
[  393.880854][  T794] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  393.885302][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.890194][  T794] usb 6-1: Product: syz
[  393.892315][  T794] usb 6-1: Manufacturer: syz
[  393.894357][  T794] usb 6-1: SerialNumber: syz
[  393.899241][  T794] usb 6-1: config 0 descriptor??
[  393.910635][  T794] usb 6-1: selecting invalid altsetting 2
[  395.242941][T14815] /dev/nullb0: Can't lookup blockdev
[  395.249551][  T794] get_1284_register timeout
[  395.275840][    C1] usb 6-1: async_complete: urb error -104
[  395.280290][  T794] uss720 6-1:0.125: probe with driver uss720 failed with error -5
[  395.653876][T14825] RDS: rds_bind could not find a transport for fc01::4, load rds_tcp or rds_rdma?
[  396.420413][ T5997] usb 6-1: USB disconnect, device number 21
[  396.771876][T14862] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[  396.775768][T14862] ref_ctr increment failed for inode: 0xaf7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881104835c0
[  396.804683][   T33] audit: type=1804 audit(1758677924.068:64): pid=14862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3804" name="/newroot/540/file0" dev="tmpfs" ino=2807 res=1 errno=0
[  397.027268][T14873] ntfs3(loop5): try to read out of volume at offset 0x0
[  397.837706][T14895] overlayfs: failed to clone upperpath
[  398.102432][T14904] syzkaller1: entered promiscuous mode
[  398.107119][T14904] syzkaller1: entered allmulticast mode
[  398.820974][T14894] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  398.830427][T14894] XFS (loop5): SB validate failed with error -5.
[  399.254070][T14925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3835'.
[  399.702400][ T5982] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  399.853357][ T5982] usb 5-1: Using ep0 maxpacket: 32
[  399.862462][ T5982] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[  399.865266][ T5982] usb 5-1: config 0 has no interface number 0
[  399.882819][ T5982] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  399.894837][ T5982] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  399.915596][ T5982] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  399.919083][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.924004][ T5982] usb 5-1: Product: syz
[  399.925568][ T5982] usb 5-1: Manufacturer: syz
[  399.927237][ T5982] usb 5-1: SerialNumber: syz
[  399.934861][ T5982] usb 5-1: config 0 descriptor??
[  399.939518][T14939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  399.954209][T14939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  399.973021][ T5982] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  400.298941][ T5982] usb 5-1: USB disconnect, device number 31
[  401.186384][T14956] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  401.190077][T14956] EXT4-fs (loop4): unable to read superblock
[  401.646852][T14978] overlayfs: failed to clone upperpath
[  401.660644][T14980] dvmrp0: entered allmulticast mode
[  401.712373][ T5982] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  401.862405][ T5982] usb 5-1: Using ep0 maxpacket: 8
[  401.868108][ T5982] usb 5-1: unable to get BOS descriptor or descriptor too short
[  401.876247][ T5982] usb 5-1: config 3 has an invalid interface number: 35 but max is 0
[  401.879085][ T5982] usb 5-1: config 3 has no interface number 0
[  401.887528][ T5982] usb 5-1: config 3 interface 35 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024
[  401.890786][ T5982] usb 5-1: config 3 interface 35 has no altsetting 0
[  402.018060][ T5982] usb 5-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=57.12
[  402.021866][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.024739][ T5982] usb 5-1: Product: syz
[  402.026608][ T5982] usb 5-1: Manufacturer: syz
[  402.029056][ T5982] usb 5-1: SerialNumber: syz
[  402.036630][T14968] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  402.263377][ T5982] usb 5-1: bad CDC descriptors
[  402.287036][ T5982] usb 5-1: USB disconnect, device number 32
[  403.311065][T14999] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  403.316369][T14999] FAT-fs (loop5): unable to read boot sector
[  405.207497][T15072] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  405.210862][T15072] EXT4-fs (loop4): unable to read superblock
[  405.248206][T15074] ip6gretap1: entered allmulticast mode
[  405.290949][   T33] audit: type=1804 audit(1758677932.608:65): pid=15076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3900" name="/newroot/574/file0" dev="tmpfs" ino=2981 res=1 errno=0
[  405.499681][   T33] audit: type=1326 audit(1758677932.818:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15044 comm="syz.2.3886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71e78ec29 code=0x7fc00000
[  405.682889][   T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  405.833005][   T10] usb 5-1: Using ep0 maxpacket: 8
[  405.838926][   T10] usb 5-1: config 128 has an invalid interface number: 25 but max is 0
[  405.843070][   T10] usb 5-1: config 128 has no interface number 0
[  405.855648][   T10] usb 5-1: New USB device found, idVendor=0cf2, idProduct=76f6, bcdDevice=9b.f5
[  405.859608][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.863479][   T10] usb 5-1: Product: syz
[  405.864838][   T10] usb 5-1: Manufacturer: syz
[  405.866418][   T10] usb 5-1: SerialNumber: syz
[  405.881215][   T10] usb-storage 5-1:128.25: USB Mass Storage device detected
[  405.912193][  T794] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  406.083085][ T5997] usb 5-1: USB disconnect, device number 33
[  406.092765][  T794] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[  406.095979][  T794] usb 6-1: config 0 has no interface number 0
[  406.098446][  T794] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  406.114657][  T794] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  406.123151][  T794] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  406.126874][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.130049][  T794] usb 6-1: Product: syz
[  406.131727][  T794] usb 6-1: Manufacturer: syz
[  406.136904][  T794] usb 6-1: SerialNumber: syz
[  406.146110][  T794] usb 6-1: config 0 descriptor??
[  406.148887][T15100] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  406.156612][  T794] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  406.170202][  T794] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  406.561577][ T5997] usb 6-1: USB disconnect, device number 22
[  406.571423][ T5997] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  406.578602][ T5997] cyberjack 6-1:0.69: device disconnected
[  408.109564][T15173] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  408.113814][T15173] FAT-fs (loop4): unable to read boot sector
[  408.475028][T15175] ntfs3(loop5): try to read out of volume at offset 0x0
[  408.573962][T15189] netlink: 'syz.5.3952': attribute type 12 has an invalid length.
[  408.899656][T15202] Dead loop on virtual device ipvlan1, fix it urgently!
[  408.904013][T15202] Dead loop on virtual device ipvlan1, fix it urgently!
[  409.085214][T15212] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  410.364108][T15267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3985'.
[  410.620155][T15241] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  412.099843][   T33] audit: type=1326 audit(1758677939.418:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15285 comm="syz.2.3992" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff71e78ec29 code=0x0
[  412.175574][T15289] sctp: [Deprecated]: syz.4.3993 (pid 15289) Use of int in max_burst socket option.
[  412.175574][T15289] Use struct sctp_assoc_value instead
[  412.283179][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'.
[  412.288078][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'.
[  412.291756][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'.
[  412.296567][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'.
[  412.299783][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'.
[  412.304651][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'.
[  412.307917][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'.
[  412.311303][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'.
[  412.315541][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'.
[  412.396602][T15299] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  412.400980][T15299] EXT4-fs (loop5): unable to read superblock
[  413.419524][T15318] netlink: 'syz.2.4006': attribute type 2 has an invalid length.
[  414.085093][   T33] audit: type=1400 audit(1758677941.408:68): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=15334 comm="syz.4.4013"
[  414.376451][T15339] netlink: 'syz.4.4014': attribute type 4 has an invalid length.
[  415.165475][T15361] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  415.172526][T15361] MINIX-fs: unable to read superblock
[  415.854129][T15395] __nla_validate_parse: 45 callbacks suppressed
[  415.854146][T15395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4040'.
[  416.073064][T15410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4045'.
[  416.366465][T15442] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  416.369827][T15442] EXT4-fs (loop5): unable to read superblock
[  416.414948][T15448] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4062'.
[  416.418052][T15448] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4062'.
[  416.506110][T15458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4067'.
[  417.144063][ T6114] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  417.178754][T15481] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  417.292157][ T6114] usb 6-1: Using ep0 maxpacket: 8
[  417.303018][ T6114] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  417.306783][ T6114] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.316371][ T6114] usb 6-1: Product: syz
[  417.318272][ T6114] usb 6-1: Manufacturer: syz
[  417.320037][ T6114] usb 6-1: SerialNumber: syz
[  417.325320][ T6114] usb 6-1: config 0 descriptor??
[  417.335478][ T6114] radioshark2 6-1:0.0: Invalid radioSHARK2 device
[  417.337750][ T6114] radioshark2 6-1:0.0: probe with driver radioshark2 failed with error -22
[  417.341359][ T6114] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  417.539264][  T794] usb 6-1: USB disconnect, device number 23
[  417.824644][T15506] exfat: Deprecated parameter 'utf8'
[  417.827264][T15506] exfat: Deprecated parameter 'utf8'
[  417.829626][T15506] exfat: Deprecated parameter 'namecase'
[  417.832687][T15506] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  417.837512][T15506] exFAT-fs (loop4): unable to read boot sector
[  417.840210][T15506] exFAT-fs (loop4): failed to read boot sector
[  417.843082][T15506] exFAT-fs (loop4): failed to recognize exfat type
[  417.939340][T15510] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  417.944224][T15510] exFAT-fs (loop4): unable to read boot sector
[  417.946889][T15510] exFAT-fs (loop4): failed to read boot sector
[  417.949572][T15510] exFAT-fs (loop4): failed to recognize exfat type
[  418.965450][T15539] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  418.969368][T15539] hfsplus: unable to find HFS+ superblock
[  419.037448][T15545] overlayfs: failed to clone upperpath
[  419.067768][T15547] TCP: TCP_TX_DELAY enabled
[  419.093499][T15549] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4109'.
[  419.335359][T15567] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (65)
[  419.521513][T15577] ntfs3(loop4): try to read out of volume at offset 0x0
[  420.431636][T15582] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  420.443527][T15599] sctp: [Deprecated]: syz.2.4133 (pid 15599) Use of int in max_burst socket option deprecated.
[  420.443527][T15599] Use struct sctp_assoc_value instead
[  421.507048][T15619] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  421.510869][T15619] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32
[  421.741733][T15631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4142'.
[  422.219503][T15642] IPv6: sit1: Disabled Multicast RS
[  422.323599][T15646] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  422.327535][T15646] EXT4-fs (loop4): unable to read superblock
[  422.423679][T15653] erofs (device loop4): cannot find valid erofs superblock
[  422.835125][T15669] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  423.312190][ T6114] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  423.418958][T15685] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  423.422898][T15685] hfsplus: unable to find HFS+ superblock
[  423.451579][T15685] EXT4-fs: Ignoring removed nomblk_io_submit option
[  423.455605][T15685] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  423.459365][T15685] EXT4-fs (loop4): unable to read superblock
[  423.462180][ T6114] usb 6-1: Using ep0 maxpacket: 32
[  423.467504][ T6114] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  423.471202][ T6114] usb 6-1: config 0 has no interface number 0
[  423.477191][ T6114] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  423.480887][ T6114] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.484553][ T6114] usb 6-1: Product: syz
[  423.486373][ T6114] usb 6-1: Manufacturer: syz
[  423.488283][ T6114] usb 6-1: SerialNumber: syz
[  423.494309][ T6114] usb 6-1: config 0 descriptor??
[  423.504866][ T6114] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  423.757223][ T6114] usb 6-1: qt2_setup_urbs - submit read urb failed -8
[  423.760853][ T6114] quatech2 6-1:0.51: probe with driver quatech2 failed with error -8
[  424.000107][ T6114] usb 6-1: USB disconnect, device number 24
[  425.043463][T15712] IPVS: length: 69 != 8
[  425.514831][   T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  425.672213][   T10] usb 6-1: Using ep0 maxpacket: 16
[  425.678330][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  425.687021][   T10] usb 6-1: config 1 has an invalid interface number: 231 but max is 0
[  425.690189][   T10] usb 6-1: config 1 has no interface number 0
[  425.693753][   T10] usb 6-1: config 1 interface 231 has no altsetting 0
[  425.700995][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5
[  425.708682][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.712785][   T10] usb 6-1: Product: syz
[  425.714642][   T10] usb 6-1: Manufacturer: syz
[  425.719041][   T10] usb 6-1: SerialNumber: syz
[  425.822895][T15733] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4192'.
[  425.863745][T15735] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4193'.
[  425.867066][T15735] openvswitch: netlink: Message has 512 unknown bytes.
[  425.952270][   T10] usbtest 6-1:1.231: couldn't get endpoints, -71
[  425.959683][   T10] usbtest 6-1:1.231: probe with driver usbtest failed with error -71
[  425.982539][   T10] usb 6-1: USB disconnect, device number 25
[  426.043947][T15747] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4198'.
[  426.047640][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4198'.
[  426.193475][T15760] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  426.241953][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4207'.
[  426.246969][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4207'.
[  426.250542][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4207'.
[  426.258958][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4207'.
[  426.264653][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4207'.
[  426.288777][T15766] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  426.310948][T15766] SQUASHFS error: Failed to read block 0x0: -5
[  426.314473][T15766] unable to read squashfs_super_block
[  426.334642][T15766] comedi comedi3: comedi_config --init_data is deprecated
[  426.346129][T15766] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  426.349948][T15766] FAT-fs (loop4): unable to read boot sector
[  426.732291][   T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  426.892275][   T10] usb 5-1: Using ep0 maxpacket: 32
[  426.896773][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  426.900302][   T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 183, using maximum allowed: 30
[  426.904697][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 183
[  426.909668][   T10] usb 5-1: config 0 interface 0 has no altsetting 1
[  426.913908][   T10] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  426.917522][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  426.921216][   T10] usb 5-1: SerialNumber: syz
[  426.927284][   T10] usb 5-1: config 0 descriptor??
[  426.934919][   T10] usb-storage 5-1:0.0: USB Mass Storage device detected
[  426.941227][   T10] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  427.142889][   T10] usb 5-1: USB disconnect, device number 34
[  427.732182][  T794] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  427.764458][T15803] __nla_validate_parse: 44 callbacks suppressed
[  427.764477][T15803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4224'.
[  427.886724][  T794] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  427.890611][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.897139][  T794] usb 6-1: Product: syz
[  427.899048][  T794] usb 6-1: Manufacturer: syz
[  427.901103][  T794] usb 6-1: SerialNumber: syz
[  427.911562][  T794] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  427.926414][   T47] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  428.057280][T15811] block device autoloading is deprecated and will be removed.
[  428.446687][ T6114] usb 6-1: USB disconnect, device number 26
[  428.808130][T15825] Bluetooth: hci0: invalid length 0, exp 2 for type 6
[  428.954418][   T47] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  428.957444][   T47] ath9k_htc: Failed to initialize the device
[  429.096717][ T6114] usb 6-1: ath9k_htc: USB layer deinitialized
[  429.827350][T15847] batadv_slave_1: entered promiscuous mode
[  429.830297][T15846] batadv_slave_1: left promiscuous mode
[  429.977377][T15833] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  429.980575][T15833] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  429.984519][T15833] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  429.987703][T15833] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  430.588804][T15861] sctp: [Deprecated]: syz.4.4249 (pid 15861) Use of struct sctp_assoc_value in delayed_ack socket option.
[  430.588804][T15861] Use struct sctp_sack_info instead
[  431.698046][T15891] ntfs3(loop5): try to read out of volume at offset 0x0
[  431.959128][   T24] hid-generic 0008:0006:0007.0013: unknown main item tag 0x0
[  431.967003][   T24] hid-generic 0008:0006:0007.0013: unknown main item tag 0x0
[  431.969545][   T24] hid-generic 0008:0006:0007.0013: unknown main item tag 0x0
[  431.971941][   T24] hid-generic 0008:0006:0007.0013: unknown main item tag 0x0
[  431.976638][   T24] hid-generic 0008:0006:0007.0013: unknown main item tag 0x0
[  431.979291][   T24] hid-generic 0008:0006:0007.0013: unknown main item tag 0x0
[  431.981770][   T24] hid-generic 0008:0006:0007.0013: unknown main item tag 0x0
[  431.984752][   T24] hid-generic 0008:0006:0007.0013: unknown main item tag 0x0
[  431.987404][   T24] hid-generic 0008:0006:0007.0013: unknown main item tag 0x0
[  431.992474][   T24] hid-generic 0008:0006:0007.0013: unknown main item tag 0x0
[  432.008772][   T24] hid-generic 0008:0006:0007.0013: hidraw0: <UNKNOWN> HID v0.0b Device [syz1] on syz1
[  432.145003][T15924] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  433.670993][T15934] bpf: Bad value for 'uid'
[  433.848072][T15946] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4286'.
[  433.953125][   T10] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  433.959138][T15956] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  433.963470][T15956] exFAT-fs (loop5): unable to read boot sector
[  433.965814][T15956] exFAT-fs (loop5): failed to read boot sector
[  433.968305][T15956] exFAT-fs (loop5): failed to recognize exfat type
[  434.068844][T15959] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  434.077005][T15959] MINIX-fs: unable to read superblock
[  434.121696][   T10] usb 5-1: config 8 has an invalid interface number: 177 but max is 0
[  434.143732][   T10] usb 5-1: config 8 has no interface number 0
[  434.146478][   T10] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xFB, changing to 0x8B
[  434.151260][   T10] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8B has invalid maxpacket 1023, setting to 64
[  434.167121][   T10] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  434.171236][   T10] usb 5-1: config 8 interface 177 has no altsetting 0
[  434.174847][   T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  434.178616][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.188810][T15938] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  434.471470][   T10] usb 5-1: string descriptor 0 read error: -71
[  434.481715][   T10] ir_toy 5-1:8.177: required endpoints not found
[  434.494889][   T10] usb 5-1: USB disconnect, device number 35
[  435.129096][T15967] netlink: 'syz.4.4295': attribute type 10 has an invalid length.
[  435.134121][T15967] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.138672][T15967] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.582135][   T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  435.763854][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.768204][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.772259][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  435.777061][   T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  435.780932][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.814370][   T10] usb 5-1: config 0 descriptor??
[  436.271209][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4304'.
[  436.507251][   T10] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd
[  436.529901][   T10] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  437.094999][ T5240] Bluetooth: hci1: command 0x0405 tx timeout
[  437.208764][   T10] usb 5-1: USB disconnect, device number 36
[  437.415831][T16009] exfat: Deprecated parameter 'utf8'
[  437.418214][T16009] exFAT-fs (loop5): mounting with "discard" option, but the device does not support discard
[  437.424414][T16009] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  437.430099][T16009] exFAT-fs (loop5): unable to read boot sector
[  437.442800][T16009] exFAT-fs (loop5): failed to read boot sector
[  437.445729][T16009] exFAT-fs (loop5): failed to recognize exfat type
[  437.657708][T16022] netlink: 'syz.5.4319': attribute type 11 has an invalid length.
[  437.698070][T16024] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4320'.
[  438.132214][   T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  438.282110][   T10] usb 5-1: Using ep0 maxpacket: 32
[  438.285874][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.290329][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.296367][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  438.303200][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.307993][   T10] usb 5-1: config 0 descriptor??
[  438.317424][   T10] hub 5-1:0.0: USB hub found
[  438.423992][T16043] 9pnet_fd: Insufficient options for proto=fd
[  438.522119][   T10] hub 5-1:0.0: 1 port detected
[  438.945752][   T10] usb 5-1: USB disconnect, device number 37
[  439.342192][   T47] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  439.505143][   T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  439.509048][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  439.513509][   T47] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  439.517378][   T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  439.522953][   T47] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  439.526550][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.540188][   T47] usb 6-1: config 0 descriptor??
[  439.544863][   T47] hdpvr 6-1:0.0: Could not find bulk-in endpoint
[  439.546825][   T47] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12
[  439.755828][   T47] usb 6-1: USB disconnect, device number 27
[  439.917859][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  439.922890][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  441.799080][T16115] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  441.803275][T16115] EXT4-fs (loop4): unable to read superblock
[  442.042155][T16121] netlink: 'syz.5.4362': attribute type 6 has an invalid length.
[  442.072779][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4363'.
[  442.104185][  T794] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  442.262176][  T794] usb 5-1: Using ep0 maxpacket: 8
[  442.267346][  T794] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  442.270570][  T794] usb 5-1: config 179 has no interface number 0
[  442.274508][  T794] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  442.278993][  T794] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  442.283889][  T794] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  442.302475][  T794] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  442.306909][  T794] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  442.313129][  T794] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  442.316727][  T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.334335][T16119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  442.355774][T16133] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4367'.
[  442.404787][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4369'.
[  442.408448][T16136] netlink: 'syz.2.4369': attribute type 30 has an invalid length.
[  442.424105][ T5989] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  442.431456][ T5989] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  442.437106][ T5989] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  442.440883][ T5989] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  442.590666][   T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input26
[  442.622572][  T794] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  442.763307][   T24] usb 5-1: USB disconnect, device number 38
[  442.765260][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  442.765286][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  442.803946][  T794] usb 6-1: config 150 has an invalid interface number: 204 but max is 2
[  442.806917][  T794] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  442.810041][  T794] usb 6-1: config 150 has no interface number 0
[  442.824050][  T794] usb 6-1: config 150 interface 204 has no altsetting 0
[  442.828639][  T794] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  442.831487][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.836782][  T794] usb 6-1: Product: syz
[  442.838237][  T794] usb 6-1: Manufacturer: syz
[  442.839621][  T794] usb 6-1: SerialNumber: syz
[  443.069803][  T794] xr_serial 6-1:150.204: skipping garbage
[  443.071649][  T794] xr_serial 6-1:150.204: xr_serial converter detected
[  443.446793][T16160] ntfs3(loop4): try to read out of volume at offset 0x0
[  443.549691][T16168] netlink: 'syz.2.4383': attribute type 8 has an invalid length.
[  443.888271][  T794] usb 6-1: xr_serial converter now attached to ttyUSB0
[  444.099251][  T794] usb 6-1: USB disconnect, device number 28
[  444.105542][  T794] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  444.109806][  T794] xr_serial 6-1:150.204: device disconnected
[  444.212283][T16202] netlink: 868 bytes leftover after parsing attributes in process `syz.4.4399'.
[  444.254062][T15251] Bluetooth: hci2: unexpected event for opcode 0x0c46
[  444.414696][T16215] overlayfs: failed to clone upperpath
[  445.133183][T16237] 9pnet: p9_errstr2errno: server reported unknown error @L	O!L+
[  445.757968][T16263] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4427'.
[  445.844860][ T5989] tipc: Subscription rejected, illegal request
[  445.885805][T16269] erofs (device loop4): cannot find valid erofs superblock
[  445.992338][ T6114] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  446.232379][ T6114] usb 6-1: Using ep0 maxpacket: 8
[  446.237868][ T6114] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  446.241742][ T6114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.253265][ T6114] usb 6-1: config 0 descriptor??
[  446.362677][   T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  446.515756][   T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  446.518693][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.521947][   T24] usb 5-1: Product: syz
[  446.524254][   T24] usb 5-1: Manufacturer: syz
[  446.525768][   T24] usb 5-1: SerialNumber: syz
[  446.533005][ T6114] usb 6-1: string descriptor 0 read error: -71
[  446.535789][ T6114] uvcvideo 6-1:0.0: Found UVC 0.00 device <unnamed> (2833:0201)
[  446.538519][ T6114] uvcvideo 6-1:0.0: No valid video chain found.
[  446.538755][   T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  446.541754][ T6114] usb 6-1: USB disconnect, device number 29
[  446.570091][T16274] Dead loop on virtual device ipvlan1, fix it urgently!
[  446.599728][  T794] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  446.666048][T16278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4433'.
[  447.891934][  T794] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  447.896418][  T794] ath9k_htc: Failed to initialize the device
[  447.929811][  T794] usb 5-1: ath9k_htc: USB layer deinitialized
[  448.051160][   T47] usb 5-1: USB disconnect, device number 39
[  448.333490][T16337] netlink: 'syz.2.4460': attribute type 8 has an invalid length.
[  448.476473][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4462'.
[  448.668760][T16356] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  448.672696][T16356] FAT-fs (loop4): unable to read boot sector
[  448.727769][T16358] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  448.731507][T16358] SQUASHFS error: Failed to read block 0x0: -5
[  448.748939][T16358] unable to read squashfs_super_block
[  449.332390][ T6114] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[  449.518123][ T6114] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  449.521524][ T6114] usb 5-1: config 0 has no interface number 0
[  449.534100][ T6114] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  449.538879][ T6114] usb 5-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0x6D, changing to 0xD
[  449.554859][ T6114] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0xD has invalid maxpacket 14309, setting to 64
[  449.559561][ T6114] usb 5-1: config 0 interface 2 has no altsetting 0
[  449.574578][ T6114] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  449.578247][ T6114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.581527][ T6114] usb 5-1: Product: syz
[  449.588652][ T6114] usb 5-1: Manufacturer: syz
[  449.590700][ T6114] usb 5-1: SerialNumber: syz
[  449.595842][ T6114] usb 5-1: config 0 descriptor??
[  449.598667][T16358] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  449.604301][T16358] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  449.825044][ T6114] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  449.829942][ T6114] usb 5-1: invalid MIDI in EP 0
[  449.893248][ T6114] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22
[  449.904065][ T6114] usb 5-1: USB disconnect, device number 40
[  449.973807][T16403] udevd[16403]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  450.189934][ T5989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  450.242138][   T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  450.274313][ T5989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  450.330207][ T5989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  450.387201][ T5989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  450.395937][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.403680][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  450.407403][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  450.412600][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  450.415888][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.420393][   T10] usb 6-1: config 0 descriptor??
[  450.496011][ T5989] bridge_slave_1: left allmulticast mode
[  450.498277][ T5989] bridge_slave_1: left promiscuous mode
[  450.501186][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.508800][ T5989] bridge_slave_0: left allmulticast mode
[  450.511052][ T5989] bridge_slave_0: left promiscuous mode
[  450.513517][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.678869][T16417] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  450.683592][T16417] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32
[  450.761937][ T5989] team0: Port device geneve1 removed
[  450.846801][   T10] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  451.058708][ T5989] bond0 (unregistering): (slave 77): Releasing backup interface
[  451.065213][ T5989] bond0 (unregistering): (slave c@0): Releasing backup interface
[  451.069919][ T5989] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  451.075717][ T5989] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  451.092508][ T5989] bond0 (unregistering): Released all slaves
[  451.123814][  T794] usb 6-1: USB disconnect, device number 30
[  451.270060][ T5989] bond1 (unregistering): Released all slaves
[  451.595872][ T5982] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  451.762086][ T5982] usb 5-1: Using ep0 maxpacket: 16
[  451.768659][ T5982] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  451.771841][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.778876][ T5989] hsr_slave_0: left promiscuous mode
[  451.781775][ T5982] usb 5-1: Product: syz
[  451.781810][ T5989] hsr_slave_1: left promiscuous mode
[  451.784065][ T5982] usb 5-1: Manufacturer: syz
[  451.784079][ T5982] usb 5-1: SerialNumber: syz
[  451.793821][ T5982] usb 5-1: config 0 descriptor??
[  451.801445][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.808462][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.014874][ T5982] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  452.030396][ T5982] usb 5-1: USB disconnect, device number 41
[  452.652210][ T6114] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  452.717042][T16468] ntfs3(loop4): try to read out of volume at offset 0x0
[  452.822109][ T6114] usb 6-1: Using ep0 maxpacket: 8
[  452.825798][ T6114] usb 6-1: config 0 has an invalid interface number: 200 but max is 0
[  452.830428][ T6114] usb 6-1: config 0 has no interface number 0
[  452.833583][ T6114] usb 6-1: config 0 interface 200 has no altsetting 0
[  452.838554][ T6114] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  452.843075][ T6114] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.846578][ T6114] usb 6-1: Product: syz
[  452.846961][ T5989] team0 (unregistering): Port device team_slave_1 removed
[  452.848425][ T6114] usb 6-1: Manufacturer: syz
[  452.854450][ T6114] usb 6-1: SerialNumber: syz
[  452.858897][ T6114] usb 6-1: config 0 descriptor??
[  452.893902][ T5989] team0 (unregistering): Port device team_slave_0 removed
[  452.992625][   T10] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  453.020343][T16472] overlayfs: failed to clone upperpath
[  453.105421][ T6114] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input27
[  453.121484][ T6114] usb 6-1: USB disconnect, device number 31
[  453.165064][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  453.170486][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  453.178083][   T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  453.182634][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.189470][   T10] usb 5-1: config 0 descriptor??
[  453.418473][ T5989] team0 (unregistering): Port device dummy0 removed
[  453.626688][   T10] isku 0003:1E7D:319C.0016: item fetching failed at offset 6/7
[  453.638471][   T10] isku 0003:1E7D:319C.0016: parse failed
[  453.640915][   T10] isku 0003:1E7D:319C.0016: probe with driver isku failed with error -22
[  453.844958][   T10] usb 5-1: USB disconnect, device number 42
[  453.991193][ T5989] IPVS: stop unused estimator thread 0...
[  454.238620][T16511] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  454.878438][T16553] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  455.009420][T16563] netlink: 'syz.4.4548': attribute type 1 has an invalid length.
[  455.018317][   T10] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  455.022715][T16563] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4548'.
[  455.026817][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4548'.
[  455.184644][   T10] usb 6-1: config 0 has an invalid interface number: 200 but max is 0
[  455.187951][   T10] usb 6-1: config 0 has no interface number 0
[  455.190405][   T10] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  455.200837][   T10] usb 6-1: config 0 interface 200 has no altsetting 0
[  455.207554][   T10] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  455.211128][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.214445][   T10] usb 6-1: Product: syz
[  455.216153][   T10] usb 6-1: Manufacturer: syz
[  455.218047][   T10] usb 6-1: SerialNumber: syz
[  455.223658][   T10] usb 6-1: config 0 descriptor??
[  455.476073][   T10] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input28
[  455.493020][   T10] usb 6-1: USB disconnect, device number 32
[  456.513161][T16586] btrfs: Unknown parameter 'ref_verify'
[  456.809144][T16611] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4569'.
[  457.904469][T16678] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4599'.
[  457.910873][T16678] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4599'.
[  457.916898][T16678] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4599'.
[  458.038430][T16692] jffs2: rp_size unrepresentable
[  458.162150][T16704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4609'.
[  458.247368][T16710] ==================================================================
[  458.250598][T16710] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0
[  458.253987][T16710] Read of size 8 at addr ffff8881079b4288 by task syz.4.4614/16710
[  458.257924][T16710] 
[  458.259350][T16710] CPU: 1 UID: 0 PID: 16710 Comm: syz.4.4614 Not tainted syzkaller #0 PREEMPT(full) 
[  458.259370][T16710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.259382][T16710] Call Trace:
[  458.259389][T16710]  <TASK>
[  458.259398][T16710]  dump_stack_lvl+0x189/0x250
[  458.259432][T16710]  ? __kasan_check_byte+0x12/0x40
[  458.259451][T16710]  ? __pfx_dump_stack_lvl+0x10/0x10
[  458.259470][T16710]  ? lock_release+0x4b/0x3e0
[  458.259494][T16710]  ? __virt_addr_valid+0x4a5/0x5c0
[  458.259512][T16710]  print_report+0xca/0x240
[  458.259527][T16710]  ? change_page_attr_set_clr+0x625/0xfc0
[  458.259545][T16710]  kasan_report+0x118/0x150
[  458.259561][T16710]  ? change_page_attr_set_clr+0x625/0xfc0
[  458.259589][T16710]  change_page_attr_set_clr+0x625/0xfc0
[  458.259612][T16710]  ? __pfx_change_page_attr_set_clr+0x10/0x10
[  458.259632][T16710]  ? __pfx_pagerange_is_ram_callback+0x10/0x10
[  458.259652][T16710]  ? memtype_reserve+0x874/0xb30
[  458.259672][T16710]  ? __pfx___ww_mutex_lock+0x10/0x10
[  458.259688][T16710]  _set_pages_array+0x145/0x270
[  458.259711][T16710]  drm_gem_shmem_get_pages_locked+0x2d0/0x440
[  458.259730][T16710]  ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10
[  458.259748][T16710]  ? ww_mutex_lock+0x3f/0x1c0
[  458.259764][T16710]  drm_gem_shmem_mmap+0x193/0x460
[  458.259782][T16710]  drm_gem_mmap_obj+0x18a/0x4e0
[  458.259803][T16710]  drm_gem_mmap+0x384/0x640
[  458.259821][T16710]  ? __pfx_drm_gem_mmap+0x10/0x10
[  458.259839][T16710]  ? __mas_set_range+0x12f/0x3c0
[  458.259860][T16710]  mmap_region+0x1434/0x1c70
[  458.259882][T16710]  ? __pfx_mmap_region+0x10/0x10
[  458.259898][T16710]  ? __schedule+0x17ae/0x4cc0
[  458.259941][T16710]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  458.259968][T16710]  ? bpf_lsm_mmap_addr+0x9/0x20
[  458.259985][T16710]  ? security_mmap_addr+0x71/0x270
[  458.260000][T16710]  ? shmem_mapping+0xd/0x50
[  458.260026][T16710]  ? memfd_check_seals_mmap+0xc5/0x200
[  458.260047][T16710]  do_mmap+0xc45/0x10d0
[  458.260073][T16710]  ? __pfx_do_mmap+0x10/0x10
[  458.260089][T16710]  ? down_write_killable+0x178/0x230
[  458.260107][T16710]  ? __pfx_down_write_killable+0x10/0x10
[  458.260122][T16710]  ? common_file_perm+0x1b5/0x230
[  458.260143][T16710]  vm_mmap_pgoff+0x2a6/0x4d0
[  458.260163][T16710]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  458.260180][T16710]  ? __fget_files+0x2a/0x420
[  458.260196][T16710]  ? __fget_files+0x2a/0x420
[  458.260209][T16710]  ? __fget_files+0x2a/0x420
[  458.260225][T16710]  ksys_mmap_pgoff+0x51f/0x760
[  458.260246][T16710]  do_syscall_64+0xfa/0xfa0
[  458.260259][T16710]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.260272][T16710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.260287][T16710]  ? exc_page_fault+0xab/0x100
[  458.260298][T16710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.260311][T16710] RIP: 0033:0x7f8fcc98ec29
[  458.260369][T16710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.260396][T16710] RSP: 002b:00007f8fcabf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  458.260417][T16710] RAX: ffffffffffffffda RBX: 00007f8fccbd5fa0 RCX: 00007f8fcc98ec29
[  458.260429][T16710] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000
[  458.260440][T16710] RBP: 00007f8fcca11e41 R08: 0000000000000003 R09: 0000000100000000
[  458.260451][T16710] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[  458.260461][T16710] R13: 00007f8fccbd6038 R14: 00007f8fccbd5fa0 R15: 00007fffcae77068
[  458.260479][T16710]  </TASK>
[  458.260485][T16710] 
[  458.396910][T16710] Allocated by task 16710:
[  458.398704][T16710]  kasan_save_track+0x3e/0x80
[  458.400651][T16710]  __kasan_kmalloc+0x93/0xb0
[  458.402526][T16710]  __kvmalloc_node_noprof+0x5cd/0x910
[  458.404724][T16710]  drm_gem_get_pages+0x166/0xa20
[  458.406739][T16710]  drm_gem_shmem_get_pages_locked+0x201/0x440
[  458.409205][T16710]  drm_gem_shmem_mmap+0x193/0x460
[  458.411264][T16710]  drm_gem_mmap_obj+0x18a/0x4e0
[  458.413284][T16710]  drm_gem_mmap+0x384/0x640
[  458.415089][T16710]  mmap_region+0x1434/0x1c70
[  458.416926][T16710]  do_mmap+0xc45/0x10d0
[  458.418605][T16710]  vm_mmap_pgoff+0x2a6/0x4d0
[  458.420518][T16710]  ksys_mmap_pgoff+0x51f/0x760
[  458.422487][T16710]  do_syscall_64+0xfa/0xfa0
[  458.424354][T16710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.426732][T16710] 
[  458.427723][T16710] The buggy address belongs to the object at ffff8881079b4200
[  458.427723][T16710]  which belongs to the cache kmalloc-192 of size 192
[  458.433247][T16710] The buggy address is located 0 bytes to the right of
[  458.433247][T16710]  allocated 136-byte region [ffff8881079b4200, ffff8881079b4288)
[  458.438924][T16710] 
[  458.439924][T16710] The buggy address belongs to the physical page:
[  458.442514][T16710] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1079b4
[  458.446042][T16710] ksm flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  458.449127][T16710] page_type: f5(slab)
[  458.450796][T16710] raw: 057ff00000000000 ffff88801a8413c0 ffffea00041e1100 dead000000000003
[  458.454234][T16710] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  458.457684][T16710] page dumped because: kasan: bad access detected
[  458.460499][T16710] page_owner tracks the page as allocated
[  458.462854][T16710] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 794, tgid 794 (kworker/1:2), ts 14422521115, free_ts 7115655074
[  458.470135][T16710]  post_alloc_hook+0x240/0x2a0
[  458.472187][T16710]  get_page_from_freelist+0x21e4/0x22c0
[  458.474396][T16710]  __alloc_frozen_pages_noprof+0x181/0x370
[  458.476729][T16710]  alloc_pages_mpol+0x232/0x4a0
[  458.478721][T16710]  allocate_slab+0x96/0x3a0
[  458.480580][T16710]  ___slab_alloc+0xe94/0x1920
[  458.482502][T16710]  __slab_alloc+0x65/0x100
[  458.484320][T16710]  __kmalloc_noprof+0x471/0x7f0
[  458.486231][T16710]  usb_alloc_urb+0x46/0x150
[  458.488036][T16710]  usb_control_msg+0x118/0x3e0
[  458.489973][T16710]  hub_ext_port_status+0x116/0x820
[  458.492015][T16710]  hub_activate+0x77d/0x1a70
[  458.493838][T16710]  process_scheduled_works+0xae1/0x17b0
[  458.496064][T16710]  worker_thread+0x8a0/0xda0
[  458.497875][T16710]  kthread+0x711/0x8a0
[  458.499531][T16710]  ret_from_fork+0x4bc/0x870
[  458.501459][T16710] page last free pid 10 tgid 10 stack trace:
[  458.503816][T16710]  __free_frozen_pages+0xbc4/0xd30
[  458.505846][T16710]  vfree+0x25a/0x400
[  458.507420][T16710]  delayed_vfree_work+0x55/0x80
[  458.509357][T16710]  process_scheduled_works+0xae1/0x17b0
[  458.511622][T16710]  worker_thread+0x8a0/0xda0
[  458.513562][T16710]  kthread+0x711/0x8a0
[  458.515208][T16710]  ret_from_fork+0x4bc/0x870
[  458.517106][T16710]  ret_from_fork_asm+0x1a/0x30
[  458.519044][T16710] 
[  458.520030][T16710] Memory state around the buggy address:
[  458.522271][T16710]  ffff8881079b4180: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc
[  458.525499][T16710]  ffff8881079b4200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  458.528724][T16710] >ffff8881079b4280: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  458.531806][T16710]                       ^
[  458.533513][T16710]  ffff8881079b4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  458.536654][T16710]  ffff8881079b4380: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  458.539804][T16710] ==================================================================
[  458.547927][T16710] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  458.550842][T16710] CPU: 0 UID: 0 PID: 16710 Comm: syz.4.4614 Not tainted syzkaller #0 PREEMPT(full) 
[  458.554556][T16710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.558443][T16710] Call Trace:
[  458.559774][T16710]  <TASK>
[  458.560966][T16710]  dump_stack_lvl+0x99/0x250
[  458.562845][T16710]  ? __asan_memcpy+0x40/0x70
[  458.564705][T16710]  ? __pfx_dump_stack_lvl+0x10/0x10
[  458.566771][T16710]  ? __pfx__printk+0x10/0x10
[  458.568626][T16710]  vpanic+0x237/0x6d0
[  458.570239][T16710]  ? __pfx_vpanic+0x10/0x10
[  458.572065][T16710]  ? preempt_schedule+0xae/0xc0
[  458.573988][T16710]  ? __pfx_preempt_schedule+0x10/0x10
[  458.576233][T16710]  panic+0xb9/0xc0
[  458.577798][T16710]  ? __pfx_panic+0x10/0x10
[  458.579616][T16710]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  458.582017][T16710]  ? change_page_attr_set_clr+0x625/0xfc0
[  458.584259][T16710]  check_panic_on_warn+0x89/0xb0
[  458.586268][T16710]  ? change_page_attr_set_clr+0x625/0xfc0
[  458.588476][T16710]  end_report+0x78/0x160
[  458.590135][T16710]  kasan_report+0x129/0x150
[  458.591935][T16710]  ? change_page_attr_set_clr+0x625/0xfc0
[  458.594373][T16710]  change_page_attr_set_clr+0x625/0xfc0
[  458.596586][T16710]  ? __pfx_change_page_attr_set_clr+0x10/0x10
[  458.598999][T16710]  ? __pfx_pagerange_is_ram_callback+0x10/0x10
[  458.601459][T16710]  ? memtype_reserve+0x874/0xb30
[  458.603452][T16710]  ? __pfx___ww_mutex_lock+0x10/0x10
[  458.605578][T16710]  _set_pages_array+0x145/0x270
[  458.607542][T16710]  drm_gem_shmem_get_pages_locked+0x2d0/0x440
[  458.609974][T16710]  ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10
[  458.612615][T16710]  ? ww_mutex_lock+0x3f/0x1c0
[  458.614497][T16710]  drm_gem_shmem_mmap+0x193/0x460
[  458.616517][T16710]  drm_gem_mmap_obj+0x18a/0x4e0
[  458.618489][T16710]  drm_gem_mmap+0x384/0x640
[  458.620319][T16710]  ? __pfx_drm_gem_mmap+0x10/0x10
[  458.622325][T16710]  ? __mas_set_range+0x12f/0x3c0
[  458.624326][T16710]  mmap_region+0x1434/0x1c70
[  458.626175][T16710]  ? __pfx_mmap_region+0x10/0x10
[  458.628173][T16710]  ? __schedule+0x17ae/0x4cc0
[  458.630079][T16710]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  458.632687][T16710]  ? bpf_lsm_mmap_addr+0x9/0x20
[  458.634665][T16710]  ? security_mmap_addr+0x71/0x270
[  458.636698][T16710]  ? shmem_mapping+0xd/0x50
[  458.638542][T16710]  ? memfd_check_seals_mmap+0xc5/0x200
[  458.640763][T16710]  do_mmap+0xc45/0x10d0
[  458.642469][T16710]  ? __pfx_do_mmap+0x10/0x10
[  458.644385][T16710]  ? down_write_killable+0x178/0x230
[  458.646523][T16710]  ? __pfx_down_write_killable+0x10/0x10
[  458.648629][T16710]  ? common_file_perm+0x1b5/0x230
[  458.650208][T16710]  vm_mmap_pgoff+0x2a6/0x4d0
[  458.651823][T16710]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  458.653463][T16710]  ? __fget_files+0x2a/0x420
[  458.655152][T16710]  ? __fget_files+0x2a/0x420
[  458.657025][T16710]  ? __fget_files+0x2a/0x420
[  458.658888][T16710]  ksys_mmap_pgoff+0x51f/0x760
[  458.660824][T16710]  do_syscall_64+0xfa/0xfa0
[  458.662662][T16710]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.664799][T16710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.667134][T16710]  ? exc_page_fault+0xab/0x100
[  458.668780][T16710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.670815][T16710] RIP: 0033:0x7f8fcc98ec29
[  458.672529][T16710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.680014][T16710] RSP: 002b:00007f8fcabf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  458.683167][T16710] RAX: ffffffffffffffda RBX: 00007f8fccbd5fa0 RCX: 00007f8fcc98ec29
[  458.686206][T16710] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000
[  458.689385][T16710] RBP: 00007f8fcca11e41 R08: 0000000000000003 R09: 0000000100000000
[  458.692425][T16710] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[  458.695408][T16710] R13: 00007f8fccbd6038 R14: 00007f8fccbd5fa0 R15: 00007fffcae77068
[  458.697705][T16710]  </TASK>
[  458.699304][T16710] Kernel Offset: disabled
[  458.700789][T16710] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:39:45  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff82010cba RBX=1ffffd400015b648 RCX=ffff8880227f3a00 RDX=0000000000000002
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffea0000adb240 RSP=ffffc90002f876d0
R8 =ffffea0000adb247 R9 =1ffffd400015b648 R10=dffffc0000000000 R11=fffff9400015b649
R12=0000000000000000 R13=dffffc0000000000 R14=ffffea0000adb248 R15=0000000000000000
RIP=ffffffff81bfde27 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff71f6176c0 ffffffff 00c00000
GS =0000 ffff8880b83dd000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30c22ff8 CR3=00000001183a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff71e9a7498 00007ff71e9a7470 XMM03=00007ff71e9a74a8 00007ff71e9a74a0
XMM04=00007ff71f50d100 00007ff71e9a7460 XMM05=00007ff71e9a7478 00007ff71e9a74c0
XMM06=00007ff71e9a74b8 00007ff71e9a74b0 XMM07=00007ff71e9a74a8 00007ff71e9a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007ff71e812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000001921c RDI=000000000001921d RBP=00000000000003f8 RSP=ffffc90002f96bf0
R8 =ffff888107c98237 R9 =1ffff11020f93046 R10=dffffc0000000000 R11=ffffffff85547070
R12=dffffc0000000000 R13=ffffffff99d388e9 R14=ffffffff9a02d140 R15=0000000000000000
RIP=ffffffff855470ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8fcabf66c0 ffffffff 00c00000
GS =0000 ffff8881a39dd000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c240018 CR3=000000010d8b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f8fcca12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
