last executing test programs:

5m20.982546583s ago: executing program 0 (id=337):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

5m20.89390778s ago: executing program 0 (id=339):
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2008800, &(0x7f0000000080), 0x1, 0x649, &(0x7f0000000100)="$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")

5m20.764263501s ago: executing program 0 (id=341):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)

5m20.611862832s ago: executing program 0 (id=343):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

5m20.161868895s ago: executing program 0 (id=348):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x9, 0x1, 'hash\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008000)

5m19.384828027s ago: executing program 0 (id=353):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg$sock(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000019c0)="36803af5806110a523b522e53111d0dc869eae0d98df00b5c09e698e3525a15d05863bd9d028ffb0abcddb4311332a5bfeafb18c0d1c173df4f0045aa1195e4eee48f6811621c2badd90513e93925f5e5a4ed162c8c7dde3b19e68da16c6212f5b68ca53f0b76f978a45f3e686af8b9d9a9f052746fcd173ac3ba4840407d05e59cc573d5aef22bc2f046606d23a0b3ff57251bbb8fcf4cdd9e3332134dd128edce967c31e44aab1b97c467a87f961595d571c7cb815ca667ede5d65334d111fb07ee0a1559637a4356850a5838765587771e4c5995fc87fb6a9ae5cb89ea092396a8607b842dc2410f50ea5d56bdd7dc437f7e8cc57d6efb48573d2e90111f1afb40e3d1cb3df506cd376705e426c3988cba791f2a44a8f696b395ffe178ee7d7dfe5dceea4b564dae10852d1c13f2df5cb0ffef8d44f95df645137731896cb69a0c1c82b2c3ea55f87ae997a2d77f951a00df6145a048f504f751f635f0816db1c651e667865292ab0f7ac532a7e28bd2f62a0ba1274c55ed3caf2176eab1602da50f915ac663adc14f8a695e84d6cf51ec89a7f5996b9bb5d872b2a72a9df03797226341116d0f069e3f585ec8c81b65e6896db947e13b729867104afadee39425a59512de78bc62fd8f3720ae280d86fa8cd8410e2eca53ad30941fcd8199e0701d9b5fb08d96f133bfdb4749df45579d64410a2839c0a376d45288adb35b85403977110918a6d525fc4ec707fedd5c31c67483bd5ed0470eeabd9923c9b8129acd74e4f2b94c8dee072480727d9ac84a0a5c587c9887dd68611110e55c1357d9b8abf38f26830ddbc7f201581c9d7e336ea22b20d7b7a6a3f822431daae7a8b968e5725ff28457335a631343c8eb48a29fefd672d25c7933e2cd1f48783aef90833c8b9c21f933917dc2642c9aac6b4665d162cea5b2ae16f9abff4373cb5eca0debb4214734a0d9c1abd8ad0032ed5db3bee11f4c86e5944fabca71be7ea81b2584d4a2c0958ab0f0d20904d488e3e6aa15522a093c66bb4dcfa42693c4c30ad03bda6cc11f10b40a5444d3bce8cf0c3b9d5aac8e2bca3356fdac6e679ddbd3df588bb543c1851b1f43f89e3398dd5d0bbad3c761069cbb79211fe90306cb56571fe7fdf0a55551572333febb30c65ee453716cee23e763b9810e99a6144328c59e8a2abd97e8c7b5c7cee8b1af92d6567e19527a6eda4afa6813207307ee621529d01037a4ef0db9dc5906a6279211d8833a2b469947ed334bec01b146e9a6618a2b3cc0706cfe610ed11217d4fbef80007184fa283e5718bf5bc0e334b887c928955d249e2d97beac737ed88ddc2e2b539bfd264c2bf2c007ac5a0ac1f94f342b3533a1e78650597243bcfd9174d216c6bc2108bdd239d267ccca64f22de387f4dbc5d7da8bf1249c548ae5f5a15ca2c5c535f", 0x3f7}, {&(0x7f0000000900)='X', 0x1}], 0x2}}], 0x1, 0x200050c0)

5m19.1486717s ago: executing program 32 (id=353):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg$sock(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000019c0)="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", 0x3f7}, {&(0x7f0000000900)='X', 0x1}], 0x2}}], 0x1, 0x200050c0)

4m56.348137354s ago: executing program 3 (id=553):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r1})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x4, 0x7, 0xff, 0xc, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x700, 0x10, 0x9, 0x5}})

4m56.02186409s ago: executing program 3 (id=554):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b000000000000002143ce554b6df654cb0173677c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7af5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c69aeb79e259488e089b1c59bc6fca826d38a7b3229ccd5b1bde01e63f1edd3c0f933e5c02936de55f2a4ee254bbe8aed1d2260c977", 0xe1}], 0x1}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20)

4m55.894393864s ago: executing program 3 (id=555):
syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c240202030202508000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010920009301050725010003480f090402000001020000090402010101ff0000090582"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})

4m54.334593124s ago: executing program 3 (id=567):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0xd2023, &(0x7f00000001c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0)

4m54.251081887s ago: executing program 3 (id=568):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1004, 0x0)
unshare(0x22020400)

4m53.899442051s ago: executing program 3 (id=569):
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d"], 0x0)

4m53.658105805s ago: executing program 33 (id=569):
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d"], 0x0)

4m22.439394255s ago: executing program 2 (id=876):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x1d, 0x2, 0x6)
r3 = socket$inet6(0xa, 0x3, 0x5)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
socket$kcm(0xa, 0x2, 0x3a)
r5 = dup3(r4, r3, 0x0)
setsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
sendmmsg$inet6(r5, &(0x7f0000001580)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000008"], 0x18}}], 0x1, 0x0)
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x48c8, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4448, &(0x7f00000047c0)="$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")

4m21.417199974s ago: executing program 2 (id=887):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080), 0x4}, {&(0x7f0000000a00)=""/201, 0xcf}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000001400)=""/114, 0x6a}, {&(0x7f0000001280)=""/207, 0xfe}, {&(0x7f0000001680)=""/194}, {&(0x7f0000001200)=""/95}, {&(0x7f0000001380)=""/28, 0x2e}], 0x6)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

4m21.233419653s ago: executing program 2 (id=892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

4m21.162163202s ago: executing program 2 (id=894):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000080)={[{@bh}]}, 0x2, 0x44a, &(0x7f0000000880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0)

4m21.064256729s ago: executing program 2 (id=897):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1)

4m20.803691399s ago: executing program 2 (id=902):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

4m20.424038697s ago: executing program 34 (id=902):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

2m24.341717345s ago: executing program 4 (id=2140):
r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2m24.291876283s ago: executing program 4 (id=2141):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="725992158b64a2b67e9ebe76c718", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

2m24.291456113s ago: executing program 4 (id=2142):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000007000000010000000000000e0200000000000000010000000040000c00000000002e2e"], 0x0, 0x3b}, 0x28)

2m24.212415181s ago: executing program 4 (id=2143):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x901)

2m24.212131015s ago: executing program 4 (id=2144):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xf010000})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5, 0x40}, 0x8)
sched_setaffinity(r0, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000280)=0x2)
close(0x3)

2m23.86955416s ago: executing program 4 (id=2146):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)

2m23.35104124s ago: executing program 35 (id=2146):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)

42.719667509s ago: executing program 6 (id=3165):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac01, 0xfac05, 0xfac04, 0x0]}]]}, 0x3c}}, 0x0)

42.613977086s ago: executing program 6 (id=3168):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f00000002c0)={[{@undelete}, {@umask={'umask', 0x3d, 0x6}}, {@adinicb}, {@dmode}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@gid}, {}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0xc76, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)

42.553977986s ago: executing program 6 (id=3169):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r0})

42.46959912s ago: executing program 6 (id=3170):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file1\x00', 0xc00, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x1, 0x6207, &(0x7f0000012500)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

42.180812262s ago: executing program 6 (id=3174):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)

41.63023641s ago: executing program 6 (id=3176):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

41.524590692s ago: executing program 36 (id=3176):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

11.220506223s ago: executing program 7 (id=3558):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000140)={'wg2\x00', @local})

11.158369584s ago: executing program 7 (id=3561):
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

11.048706845s ago: executing program 7 (id=3562):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

11.04842081s ago: executing program 7 (id=3563):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

10.944733627s ago: executing program 7 (id=3564):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711235000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10.649707839s ago: executing program 7 (id=3567):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200)

10.592597015s ago: executing program 37 (id=3567):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200)

1.931474434s ago: executing program 1 (id=3685):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x8050)

1.84763778s ago: executing program 1 (id=3686):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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")
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x20000000)
syslog(0x4, 0xffffffffffffffff, 0x1000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='fscache_active\x00', 0xffffffffffffffff, 0x0, 0x68c}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff", @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500"/51], 0x60}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804)

1.767672594s ago: executing program 1 (id=3689):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}]}], {0x14}}, 0x98}}, 0x0)

1.71772434s ago: executing program 1 (id=3692):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0xffffffff, 0x7, 0x7, 0x2, 0x3})

578.824735ms ago: executing program 8 (id=3712):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0))
creat(&(0x7f0000000140)='./bus/file0\x00', 0x20)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000000)='./bus/file0\x00', r0, &(0x7f0000000200)='./file1\x00', 0x2)

578.603678ms ago: executing program 5 (id=3713):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)

537.513961ms ago: executing program 5 (id=3714):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100", @ANYRESDEC=0x0], 0x1c}}, 0x0)

475.357779ms ago: executing program 8 (id=3715):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x3, &(0x7f0000000680)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x2c, 0x2, 0x1, 0x3}, {0x6, 0xd5, 0x9, 0x5}]})

475.232973ms ago: executing program 5 (id=3716):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0xa4}}, 0x0)

418.548803ms ago: executing program 5 (id=3717):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

418.399384ms ago: executing program 8 (id=3718):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x4}}, 0x2e)

339.978179ms ago: executing program 5 (id=3719):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x3fff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0)

339.784865ms ago: executing program 8 (id=3720):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x68, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x33e2}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)

259.796044ms ago: executing program 8 (id=3721):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})

259.658186ms ago: executing program 8 (id=3722):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x290, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x9d, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0xff, 0x5, 0x1, {0x22, 0x80b}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc9, 0x1, 0x2}}}}}]}}]}}, 0x0)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0)

259.324301ms ago: executing program 5 (id=3723):
r0 = socket(0x23, 0x5, 0x0)
listen(r0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x0)

69.642643ms ago: executing program 1 (id=3724):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0)

0s ago: executing program 1 (id=3725):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)

kernel console output (not intermixed with test programs):

000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.008785][ T5854] udevd[5854]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  333.020880][ T8326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.061958][ T5854] udevd[5854]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  333.226585][T13448] syz.6.2785 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  333.695419][T13467] netlink: 'syz.6.2794': attribute type 5 has an invalid length.
[  333.841732][T13469] loop1: detected capacity change from 0 to 32768
[  333.852187][T13469] ERROR: (device loop1): dbAlloc: the hint is outside the map
[  333.852187][T13469] 
[  333.862402][ T5854] udevd[5854]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system
[  333.872454][T11185] read_mapping_page failed!
[  333.875501][ T5854] udevd[5854]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system
[  333.876509][T11185] ERROR: (device loop1): txCommit: 
[  333.876509][T11185] 
[  333.885326][T11185] jfs_write_inode: jfs_commit_inode failed!
[  334.259503][ T5844] Bluetooth: hci2: unexpected event for opcode 0x0c7b
[  334.434480][T13483] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  334.672960][ T5855] printk: udevd: 22 output lines suppressed due to ratelimiting
[  334.759967][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2809'.
[  334.765683][T13502] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2809'.
[  334.769566][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2809'.
[  334.773844][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2809'.
[  335.531087][T13519] loop5: detected capacity change from 0 to 1024
[  335.798882][T13519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.938602][ T8326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.976999][T13530] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2819'.
[  336.112447][T13532] loop1: detected capacity change from 0 to 32768
[  336.115335][T13532] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2821 (13532)
[  336.122227][T13532] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  336.125736][T13532] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  336.129090][T13532] BTRFS info (device loop1): using free-space-tree
[  336.160086][T13532] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  336.211464][ T5845] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  336.246264][ T5886] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  336.406548][ T5886] usb 6-1: Using ep0 maxpacket: 32
[  336.411778][ T5886] usb 6-1: config 0 has an invalid interface number: 36 but max is 0
[  336.417751][ T5886] usb 6-1: config 0 has no interface number 0
[  336.435527][T13555] loop6: detected capacity change from 0 to 512
[  336.449563][T13555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  336.456671][ T5886] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4
[  336.466345][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.469858][ T5886] usb 6-1: Product: syz
[  336.472338][ T5886] usb 6-1: Manufacturer: syz
[  336.488132][T13555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  336.493783][ T5886] usb 6-1: SerialNumber: syz
[  336.497778][ T5886] usb 6-1: config 0 descriptor??
[  336.500392][T13555] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.533720][T13555] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  336.538400][T13555] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  336.542774][T13555] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2825: Failed to acquire dquot type 0
[  336.587168][T11630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  336.711211][ T5886] cx82310_eth 6-1:0.36: probe with driver cx82310_eth failed with error -71
[  336.717399][ T5886] cxacru 6-1:0.36: usbatm_usb_probe: bind failed: -19!
[  336.725121][ T5886] usb 6-1: USB disconnect, device number 33
[  336.873637][   T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  337.033444][   T10] usb 7-1: Using ep0 maxpacket: 16
[  337.037373][   T10] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.042020][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  337.047365][   T10] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  337.051160][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.057321][   T10] usb 7-1: config 0 descriptor??
[  337.471838][   T10] corsair 0003:1B1C:1B34.0019: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.6-1/input0
[  337.563470][ T5928] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  337.667920][ T5915] usb 7-1: USB disconnect, device number 10
[  337.715293][ T5928] usb 2-1: config 8 has an invalid interface number: 223 but max is 0
[  337.718864][ T5928] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  337.722555][ T5928] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  337.726740][ T5928] usb 2-1: config 8 has no interface number 0
[  337.729553][ T5928] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  337.734165][ T5928] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  337.742099][ T5928] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  337.745700][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.748507][ T5928] usb 2-1: Product: syz
[  337.750039][ T5928] usb 2-1: Manufacturer: syz
[  337.751678][ T5928] usb 2-1: SerialNumber: syz
[  337.962392][ T5928] usb 2-1: USB disconnect, device number 42
[  338.196927][T13570] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  338.265354][ T5928] IPVS: starting estimator thread 0...
[  338.353490][T13574] IPVS: using max 81 ests per chain, 194400 per kthread
[  338.424760][T13576] loop6: detected capacity change from 0 to 32768
[  338.455841][T13576] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io
[  338.455854][T13576]   allowing incompatible features above 0.0: (unknown version)
[  338.455859][T13576]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  338.469882][T13576] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  338.473497][T13576] bcachefs (loop6): recovering from clean shutdown, journal seq 10
[  338.477192][T13576] bcachefs (loop6): Version upgrade required:
[  338.477192][T13576] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  338.477192][T13576] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  338.477192][T13576]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  338.507722][ T5915] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  338.511190][T13576] bcachefs (loop6): dropping and reconstructing all alloc info
[  338.529159][T13576] bcachefs (loop6): accounting_read... done
[  338.535303][T13576] bcachefs (loop6): alloc_read... done
[  338.537361][T13576] bcachefs (loop6): snapshots_read... done
[  338.539726][T13576] bcachefs (loop6): done starting filesystem
[  338.571855][T11630] bcachefs (loop6): shutting down
[  338.586157][T11630] bcachefs (loop6): shutdown complete
[  338.664795][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  338.669008][ T5915] usb 6-1: config 0 has no interfaces?
[  338.671165][ T5915] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  338.674744][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.679054][ T5915] usb 6-1: config 0 descriptor??
[  338.773486][ T5928] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  338.890761][  T792] usb 6-1: USB disconnect, device number 34
[  338.923659][ T5928] usb 2-1: Using ep0 maxpacket: 16
[  338.927630][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.932200][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.936483][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0
[  338.939473][ T5928] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  338.943284][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.949772][ T5928] usb 2-1: config 0 descriptor??
[  339.360230][ T5928] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  339.363095][ T5928] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  339.366963][ T5928] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  339.369816][ T5928] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  339.372695][ T5928] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  339.376622][ T5928] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  339.379433][ T5928] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  339.382233][ T5928] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  339.385285][ T5928] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  339.388252][ T5928] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  339.391580][ T5928] kye 0003:0458:0138.001A: unexpected long global item
[  339.395538][ T5928] kye 0003:0458:0138.001A: parse failed
[  339.397974][ T5928] kye 0003:0458:0138.001A: probe with driver kye failed with error -22
[  339.559810][ T5915] usb 2-1: USB disconnect, device number 43
[  339.568800][T13597] loop6: detected capacity change from 0 to 256
[  339.590146][T13597] FAT-fs (loop6): Directory bread(block 64) failed
[  339.593004][T13597] FAT-fs (loop6): Directory bread(block 65) failed
[  339.597034][T13597] FAT-fs (loop6): Directory bread(block 66) failed
[  339.599951][T13597] FAT-fs (loop6): Directory bread(block 67) failed
[  339.602751][T13597] FAT-fs (loop6): Directory bread(block 68) failed
[  339.606720][T13597] FAT-fs (loop6): Directory bread(block 69) failed
[  339.609463][T13597] FAT-fs (loop6): Directory bread(block 70) failed
[  339.612358][T13597] FAT-fs (loop6): Directory bread(block 71) failed
[  339.615863][T13597] FAT-fs (loop6): Directory bread(block 72) failed
[  339.619833][T13597] FAT-fs (loop6): Directory bread(block 73) failed
[  339.801389][T13616] netlink: 'syz.5.2848': attribute type 25 has an invalid length.
[  339.872062][T13626] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4.
[  340.125845][T13644] loop5: detected capacity change from 0 to 40427
[  340.129195][T13644] f2fs: Bad value for 'resgid'
[  340.131191][T13644] f2fs: Bad value for 'resgid'
[  340.489400][T13674] loop5: detected capacity change from 0 to 1024
[  340.492513][T13674] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data
[  340.523686][ T5928] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  340.713457][T13676] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  340.716491][T13676] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  340.720218][T13676] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  340.764207][T13676] fuse: Bad value for 'fd'
[  340.867227][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short
[  340.870763][ T5928] usb 2-1: config 192 has an invalid interface number: 142 but max is 0
[  340.873835][ T5928] usb 2-1: config 192 has no interface number 0
[  340.876092][ T5928] usb 2-1: config 192 interface 142 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  340.876767][T13678] loop6: detected capacity change from 0 to 2048
[  340.879853][ T5928] usb 2-1: config 192 interface 142 has no altsetting 0
[  340.881841][ T5928] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=1e.52
[  340.888277][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.889350][T13678] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  340.891031][ T5928] usb 2-1: Product: syz
[  340.891038][ T5928] usb 2-1: Manufacturer: syz
[  340.891043][ T5928] usb 2-1: SerialNumber: syz
[  340.909204][T13679] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  341.104309][ T5928] s2255 2-1:192.142: Could not find bulk-in endpoint
[  341.107311][ T5928] Sensoray 2255 driver load failed: 0xfffffff4
[  341.109993][ T5928] s2255 2-1:192.142: probe with driver s2255 failed with error -12
[  341.116604][ T5928] usb 2-1: USB disconnect, device number 44
[  341.133766][T13681] loop6: detected capacity change from 0 to 32768
[  341.173185][T13681] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_target=invalid device 79,nojournal_transaction_names
[  341.173197][T13681]   allowing incompatible features above 0.0: (unknown version)
[  341.173202][T13681]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  341.188368][T13681] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  341.191165][T13681] bcachefs (loop6): initializing new filesystem
[  341.199669][T13681] bcachefs (loop6): going read-write
[  341.206620][T13681] bcachefs (loop6): marking superblocks
[  341.228072][T13681] bcachefs (loop6): initializing freespace
[  341.234834][T13681] bcachefs (loop6): done initializing freespace
[  341.241892][T13681] bcachefs (loop6): reading snapshots table
[  341.245105][T13681] bcachefs (loop6): reading snapshots done
[  341.270397][T13681] bcachefs (loop6): done starting filesystem
[  341.296888][   T33] audit: type=1800 audit(1755256102.233:102): pid=13681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2877" name="file1" dev="loop6" ino=4098 res=0 errno=0
[  341.575710][T13701] loop5: detected capacity change from 0 to 512
[  341.578361][T13701] EXT4-fs: Ignoring removed bh option
[  341.582550][T13701] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  341.596913][T13701] EXT4-fs (loop5): 1 truncate cleaned up
[  341.600444][T13701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.268475][T13710] loop1: detected capacity change from 0 to 32768
[  342.272292][T13710] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt
[  342.272292][T13710] 
[  342.276052][T13710] ERROR: (device loop1): remounting filesystem as read-only
[  342.278568][T13710] xtLookup: xtSearch returned -5
[  342.280963][T13710] read_mapping_page failed!
[  342.282988][T13710] jfs_mount: diMount(ipaimap2) failed, rc = -5
[  342.287834][T13710] Mount JFS Failure: -5
[  342.290955][T13710] jfs_mount failed w/return code = -5
[  342.502163][ T8326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.532879][T13717] netlink: 'syz.5.2888': attribute type 1 has an invalid length.
[  342.671923][T11630] bcachefs (loop6): shutting down
[  342.692248][T11630] bcachefs (loop6): going read-only
[  342.703551][T11630] bcachefs (loop6): finished waiting for writes to stop
[  342.732133][T11630] bcachefs (loop6): flushing journal and stopping allocators, journal seq 63
[  342.783140][T11630] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 65
[  342.789344][T11630] bcachefs (loop6): clean shutdown complete, journal seq 66
[  342.793015][T11630] bcachefs (loop6): marking filesystem clean
[  342.812071][T11630] bcachefs (loop6): shutdown complete
[  342.970400][T13739] loop1: detected capacity change from 0 to 512
[  342.988025][T13739] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2898: bad orphan inode 15
[  342.992044][T13739] ext4_test_bit(bit=14, block=5) = 0
[  342.996989][T13739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.015407][ T5928] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  343.022166][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.105306][T13746] loop1: detected capacity change from 0 to 512
[  343.108971][T13746] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  343.128756][T13746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  343.136025][T13746] ext4 filesystem being mounted at /921/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.167990][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  343.190522][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short
[  343.206049][ T5928] usb 6-1: not running at top speed; connect to a high speed hub
[  343.210590][ T5928] usb 6-1: config 4 has an invalid interface number: 32 but max is 0
[  343.214864][ T5928] usb 6-1: config 4 has no interface number 0
[  343.225399][ T5928] usb 6-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  343.228491][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.231435][ T5928] usb 6-1: Product: syz
[  343.233155][ T5928] usb 6-1: Manufacturer: syz
[  343.241523][ T5928] usb 6-1: SerialNumber: syz
[  343.348222][T13750] loop1: detected capacity change from 0 to 32768
[  343.351307][T13750] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2902 (13750)
[  343.357841][T13750] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  343.361250][T13750] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  343.364266][T13750] BTRFS info (device loop1): using free-space-tree
[  343.401945][ T5845] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  343.473814][ T5928] usb 6-1: Found UVC 0.02 device syz (17dc:0202)
[  343.483554][ T5928] usb 6-1: No valid video chain found.
[  343.487310][ T5928] usb 6-1: USB disconnect, device number 35
[  343.801824][T13773] loop1: detected capacity change from 0 to 32768
[  343.805363][T13773] (syz.1.2906,13773,0):ocfs2_initialize_super:2087 ERROR: couldn't mount because of unsupported optional features (4).
[  343.809408][T13773] (syz.1.2906,13773,0):ocfs2_fill_super:1177 ERROR: status = -22
[  344.030649][T13785] sch_fq: defrate 4294967295 ignored.
[  344.313504][T13589] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  344.353646][ T5928] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  344.356964][ T5899] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  344.467806][T13589] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  344.471636][T13589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.476681][T13589] usb 6-1: Product: syz
[  344.478399][T13589] usb 6-1: Manufacturer: syz
[  344.480470][T13589] usb 6-1: SerialNumber: syz
[  344.486033][T13589] usb 6-1: config 0 descriptor??
[  344.490794][T13589] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  344.496949][T13589] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  344.503174][T13589] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  344.510996][ T5899] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  344.515629][ T5928] usb 2-1: config index 0 descriptor too short (expected 65069, got 45)
[  344.519192][ T5928] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  344.525868][ T5899] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  344.529830][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  344.536101][ T5928] usb 2-1: config 0 has no interfaces?
[  344.538650][ T5928] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  344.542699][ T5899] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  344.546544][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.551146][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  344.555744][ T5928] usb 2-1: config 0 descriptor??
[  344.558022][ T5899] usb 7-1: SerialNumber: syz
[  344.699316][   T51] usb 6-1: USB disconnect, device number 36
[  344.764551][ T5886] usb 2-1: USB disconnect, device number 45
[  344.776624][ T5899] usb 7-1: 0:2 : does not exist
[  344.778868][ T5899] usb 7-1: unit 31 not found!
[  344.790336][ T5899] usb 7-1: USB disconnect, device number 11
[  345.511384][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2922'.
[  345.611113][T13815] loop5: detected capacity change from 0 to 128
[  345.671820][T13817] 9pnet_fd: p9_fd_create_unix (13817): problem connecting socket: ./bus: -1
[  346.655669][ T5886] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  346.665009][T13837] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2935'.
[  346.711574][T13843] loop6: detected capacity change from 0 to 164
[  346.719840][T13843] ISOFS: unable to read i-node block
[  346.722262][T13843] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  346.767782][T13845] loop6: detected capacity change from 0 to 512
[  346.771534][T13845] EXT4-fs (loop6): unsupported inode size: 269
[  346.775519][T13845] EXT4-fs (loop6): blocksize: 1024
[  346.813577][ T5886] usb 2-1: Using ep0 maxpacket: 16
[  346.821030][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.825920][ T5886] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[  346.832792][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.838537][ T5886] usb 2-1: config 0 descriptor??
[  346.943427][ T5899] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  347.005581][T13857] loop6: detected capacity change from 0 to 256
[  347.009592][T13857] FAT-fs (loop6): bogus number of FAT sectors
[  347.012215][T13857] FAT-fs (loop6): Can't find a valid FAT filesystem
[  347.110908][ T5899] usb 6-1: config index 0 descriptor too short (expected 32786, got 18)
[  347.118407][ T5899] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  347.132470][ T5899] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0
[  347.135951][ T5899] usb 6-1: Manufacturer: syz
[  347.139654][ T5899] usb 6-1: config 0 descriptor??
[  347.146308][ T5899] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  347.150068][ T5899] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  347.209830][T13867] loop6: detected capacity change from 0 to 1024
[  347.212324][T13867] EXT4-fs: Ignoring removed nobh option
[  347.214424][T13867] EXT4-fs: Ignoring removed bh option
[  347.230587][T13867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.249333][ T5886] aquacomputer_d5next 0003:0C70:F00E.001B: hidraw0: USB HID v0.83 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0
[  347.249493][T11630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.292722][T13872] loop6: detected capacity change from 0 to 1024
[  347.298840][T13872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  347.343709][ T5899] usb 6-1: USB disconnect, device number 37
[  347.346585][ T5899] ftdi_sio 6-1:0.0: device disconnected
[  347.447822][T13589] usb 2-1: USB disconnect, device number 46
[  347.536625][T13879] loop6: detected capacity change from 0 to 512
[  347.539631][T13879] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  347.546579][T13879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102]
[  347.549613][T13879] EXT4-fs (loop6): orphan cleanup on readonly fs
[  347.552775][T13879] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 33619980: comm syz.6.2954: invalid block
[  347.559189][T13879] EXT4-fs (loop6): Remounting filesystem read-only
[  347.563873][T13879] EXT4-fs (loop6): 1 truncate cleaned up
[  347.568985][T13879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  347.577980][T13879] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.2954: dx entry: limit 0 != root limit 125
[  347.582934][T13879] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2954: Corrupt directory, running e2fsck is recommended
[  347.600450][T13879] block device autoloading is deprecated and will be removed.
[  347.625004][T11630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  347.965973][T13589] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  348.038282][T13890] loop1: detected capacity change from 0 to 4096
[  348.042412][T13890] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  348.050150][T13890] ntfs3(loop1): ino=3, mi_enum_attr
[  348.117686][T13589] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.122051][T13589] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  348.130571][T13589] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  348.136052][T13589] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.141445][T13589] usb 7-1: config 0 descriptor??
[  348.563229][T13589] lenovo 0003:17EF:60EE.001C: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.6-1/input0
[  348.721871][T13894] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  348.760193][T13589] lenovo 0003:17EF:60EE.001C: Failed to switch middle button: -71
[  348.772927][T13589] lenovo 0003:17EF:60EE.001C: Fn-lock setting failed: -71
[  348.778012][T13589] lenovo 0003:17EF:60EE.001C: Sensitivity setting failed: -71
[  348.786919][T13589] usb 7-1: USB disconnect, device number 12
[  348.837717][T13904] loop1: detected capacity change from 0 to 4096
[  348.839020][T13906] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2967'.
[  348.844529][T13904] EXT4-fs (loop1): Test dummy encryption mode enabled
[  348.849117][T13904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.883958][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.057623][T13909] infiniband syz0: set down
[  349.060368][T13909] infiniband syz0: added bond_slave_1
[  349.098708][T13909] RDS/IB: syz0: added
[  349.101189][T13909] smc: adding ib device syz0 with port count 1
[  349.106748][T13909] smc:    ib device syz0 port 1 has pnetid 
[  349.138967][T13911] loop5: detected capacity change from 0 to 32768
[  349.144552][T13911] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2969 (13911)
[  349.152239][T13911] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  349.157840][T13911] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  349.161647][T13911] BTRFS info (device loop5): using free-space-tree
[  349.212379][ T8326] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  349.378385][T13929] loop6: detected capacity change from 0 to 1024
[  349.394273][T13929] hfsplus: bad catalog entry type
[  349.416663][T12977] hfsplus: b-tree write err: -5, ino 4
[  349.709648][T13940] loop5: detected capacity change from 0 to 128
[  349.716102][T13940] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  349.720634][T13940] ext4 filesystem being mounted at /663/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  349.745636][ T8326] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  349.795315][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2977'.
[  349.902688][T13954] netlink: 'syz.6.2981': attribute type 11 has an invalid length.
[  350.173537][ T5886] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  350.293565][   T51] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  350.323483][ T5886] usb 6-1: Using ep0 maxpacket: 8
[  350.327330][ T5886] usb 6-1: config 0 has an invalid interface number: 74 but max is 0
[  350.330696][ T5886] usb 6-1: config 0 has no interface number 0
[  350.337532][ T5886] usb 6-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=e2.e8
[  350.341802][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.348300][ T5886] usb 6-1: Product: syz
[  350.350038][ T5886] usb 6-1: Manufacturer: syz
[  350.352019][ T5886] usb 6-1: SerialNumber: syz
[  350.356481][ T5886] usb 6-1: config 0 descriptor??
[  350.468567][   T51] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.478685][   T51] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.482799][   T51] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  350.501027][   T51] usb 7-1: New USB device found, idVendor=0b05, idProduct=1854, bcdDevice= 0.00
[  350.505937][   T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.512573][   T51] usb 7-1: config 0 descriptor??
[  350.569621][ T5886] usb 6-1: NDI device with a latency value of 1
[  350.572814][ T5886] ftdi_sio 6-1:0.74: FTDI USB Serial Device converter detected
[  350.584797][ T5886] ftdi_sio ttyUSB0: unknown device type: 0xe2e8
[  350.590188][ T5886] usb 6-1: USB disconnect, device number 38
[  350.598897][ T5886] ftdi_sio 6-1:0.74: device disconnected
[  350.612936][T13973] loop1: detected capacity change from 0 to 4096
[  350.617907][T13973] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  350.625804][T13973] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  350.628867][T13973] ntfs3(loop1): Failed to load $MFT (-2).
[  350.823193][T13975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2991'.
[  350.944241][   T51] asus 0003:0B05:1854.001D: hidraw0: USB HID v0.80 Device [HID 0b05:1854] on usb-dummy_hcd.6-1/input0
[  350.953040][   T51] asus 0003:0B05:1854.001D: Asus input not registered
[  350.967054][   T51] asus 0003:0B05:1854.001D: probe with driver asus failed with error -12
[  351.147508][   T51] usb 7-1: USB disconnect, device number 13
[  351.413495][ T5899] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  351.479965][T13990] loop1: detected capacity change from 0 to 256
[  351.491847][T13990] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  351.512396][   T33] audit: type=1800 audit(1755256112.443:103): pid=13990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2998" name="bus" dev="loop1" ino=1048658 res=0 errno=0
[  351.568909][ T5899] usb 6-1: unable to get BOS descriptor or descriptor too short
[  351.573833][ T5899] usb 6-1: config 4 has an invalid interface number: 4 but max is 0
[  351.577259][ T5899] usb 6-1: config 4 has no interface number 0
[  351.579898][ T5899] usb 6-1: config 4 interface 4 has no altsetting 0
[  351.587726][ T5899] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=53.4f
[  351.591590][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.603587][ T5899] usb 6-1: Product: syz
[  351.605457][ T5899] usb 6-1: Manufacturer: syz
[  351.609903][ T5899] usb 6-1: SerialNumber: syz
[  351.837043][ T5899] sierra 6-1:4.4: Sierra USB modem converter detected
[  351.844524][ T5899] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[  351.849432][ T5899] usb 6-1: USB disconnect, device number 39
[  351.858241][ T5899] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  351.860264][T14002] loop6: detected capacity change from 0 to 256
[  351.862194][ T5899] sierra 6-1:4.4: device disconnected
[  351.885713][T14002] FAT-fs (loop6): Directory bread(block 64) failed
[  351.888526][T14002] FAT-fs (loop6): Directory bread(block 65) failed
[  351.891296][T14002] FAT-fs (loop6): Directory bread(block 66) failed
[  351.897547][T14002] FAT-fs (loop6): Directory bread(block 67) failed
[  351.900400][T14002] FAT-fs (loop6): Directory bread(block 68) failed
[  351.903205][T14002] FAT-fs (loop6): Directory bread(block 69) failed
[  351.907818][T14002] FAT-fs (loop6): Directory bread(block 70) failed
[  351.910582][T14002] FAT-fs (loop6): Directory bread(block 71) failed
[  351.916120][T14002] FAT-fs (loop6): Directory bread(block 72) failed
[  351.918945][T14002] FAT-fs (loop6): Directory bread(block 73) failed
[  352.698000][T14025] loop5: detected capacity change from 0 to 16
[  352.700426][T14025] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  353.304630][T14027] loop5: detected capacity change from 0 to 131072
[  353.307995][T14027] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  353.311092][T14027] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  353.316672][T14027] F2FS-fs (loop5): invalid crc value
[  353.350161][T14027] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  353.357009][T14027] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  353.359794][T14027] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  353.458212][T14047] netlink: 'syz.6.3022': attribute type 1 has an invalid length.
[  353.461551][T14047] netlink: 'syz.6.3022': attribute type 2 has an invalid length.
[  353.485777][T14047] netlink: 'syz.6.3022': attribute type 1 has an invalid length.
[  353.493438][T14047] netlink: 'syz.6.3022': attribute type 2 has an invalid length.
[  353.516994][   T51] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  353.601144][T14051] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  353.623156][T14051] macvtap1: entered allmulticast mode
[  353.633502][T14051] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  353.654192][T14051] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[  353.657279][T14051] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  353.664212][   T51] usb 2-1: Using ep0 maxpacket: 16
[  353.669423][   T51] usb 2-1: config 8 has an invalid interface number: 39 but max is 0
[  353.675640][   T51] usb 2-1: config 8 has no interface number 0
[  353.680692][   T51] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  353.696213][   T51] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[  353.702736][   T51] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0
[  353.713565][   T51] usb 2-1: config 8 interface 39 has no altsetting 0
[  353.744758][   T51] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[  353.749420][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.752808][   T51] usb 2-1: Product: syz
[  353.758462][   T51] usb 2-1: Manufacturer: syz
[  353.760461][   T51] usb 2-1: SerialNumber: syz
[  353.810586][T14055] loop6: detected capacity change from 0 to 128
[  353.819581][T14055] FAT-fs (loop6): Directory bread(block 11554) failed
[  353.822524][T14055] FAT-fs (loop6): Directory bread(block 11555) failed
[  353.826509][T14055] FAT-fs (loop6): Directory bread(block 11556) failed
[  353.829470][T14055] FAT-fs (loop6): Directory bread(block 11557) failed
[  353.832365][T14055] FAT-fs (loop6): Directory bread(block 11558) failed
[  353.840738][T14055] FAT-fs (loop6): Directory bread(block 11559) failed
[  353.845055][T14055] FAT-fs (loop6): Directory bread(block 11560) failed
[  353.848098][T14055] FAT-fs (loop6): Directory bread(block 11561) failed
[  353.852283][T14055] FAT-fs (loop6): Directory bread(block 11562) failed
[  353.857988][T14055] FAT-fs (loop6): Directory bread(block 11563) failed
[  353.925108][T14057] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  353.996028][   T51] ipheth 2-1:8.39: ipheth_get_macaddr: usb_control_msg: -71
[  353.999750][   T51] ipheth 2-1:8.39: probe with driver ipheth failed with error -71
[  354.009372][   T51] usb 2-1: USB disconnect, device number 47
[  354.623030][T14070] loop6: detected capacity change from 0 to 4096
[  354.641983][T14073] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  354.843539][   T51] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  355.119013][   T51] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  355.122829][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.126464][   T51] usb 2-1: Product: syz
[  355.128426][   T51] usb 2-1: Manufacturer: syz
[  355.131126][   T51] usb 2-1: SerialNumber: syz
[  355.135502][   T51] usb 2-1: config 0 descriptor??
[  355.628764][   T51] hso 2-1:0.0: Failed to find BULK IN ep
[  355.633873][   T51] usb-storage 2-1:0.0: USB Mass Storage device detected
[  355.716560][   T51] usb 2-1: USB disconnect, device number 48
[  356.595237][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3047'.
[  356.609692][T14106] ipvlan2: entered promiscuous mode
[  356.855387][T14120] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3054'.
[  356.858396][T14120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3054'.
[  356.862055][T14120] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3054'.
[  357.011573][T14125] loop5: detected capacity change from 0 to 32768
[  357.015962][T14125] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3056 (14125)
[  357.026704][T14125] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  357.034894][T14125] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  357.043483][T14125] BTRFS info (device loop5): using free-space-tree
[  357.073536][ T5886] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  357.096460][   T33] audit: type=1800 audit(1755256118.033:104): pid=14125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3056" name="file1" dev="loop5" ino=263 res=0 errno=0
[  357.124562][T14127] loop6: detected capacity change from 0 to 32768
[  357.125149][ T8326] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  357.127854][T14127] XFS: ikeep mount option is deprecated.
[  357.141857][T14127] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  357.188856][T14127] XFS (loop6): Ending clean mount
[  357.277651][ T5886] usb 2-1: config 0 has no interfaces?
[  357.307374][ T5886] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  357.311217][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  357.326171][ T5886] usb 2-1: Product: syz
[  357.328086][ T5886] usb 2-1: Manufacturer: syz
[  357.357124][ T5886] usb 2-1: config 0 descriptor??
[  357.386462][T11630] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  357.539604][T14156] ALSA: mixer_oss: invalid OSS volume 'T'
[  357.569208][ T5928] usb 2-1: USB disconnect, device number 49
[  357.626473][T14160] loop6: detected capacity change from 0 to 512
[  357.629956][T14160] EXT4-fs: Ignoring removed mblk_io_submit option
[  357.633469][T14160] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  357.652043][T14160] EXT4-fs (loop6): 1 truncate cleaned up
[  357.655893][T14160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.765856][T11630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.850837][T14166] loop6: detected capacity change from 0 to 512
[  357.859449][T14166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.938603][T14168] netlink: 'syz.6.3064': attribute type 4 has an invalid length.
[  358.132968][ T5845] block device autoloading is deprecated and will be removed.
[  358.431677][T11630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.454330][T14186] netlink: 'syz.5.3073': attribute type 3 has an invalid length.
[  358.457500][T14186] netlink: 766 bytes leftover after parsing attributes in process `syz.5.3073'.
[  358.597667][ T5886] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  358.703152][T14195] loop5: detected capacity change from 0 to 2048
[  358.742155][T14195] Alternate GPT is invalid, using primary GPT.
[  358.745423][T14195]  loop5: p2 p3 p7
[  358.766462][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.771001][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  358.783503][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  358.790360][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  358.803496][ T5886] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  358.806778][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.814860][ T5886] usb 2-1: config 0 descriptor??
[  359.011586][T14199] loop6: detected capacity change from 0 to 32768
[  359.021074][T14199] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  359.032374][ T5886] usb 2-1: USB disconnect, device number 50
[  359.040407][T14199] XFS (loop6): Ending clean mount
[  359.048813][T14199] XFS (loop6): Quotacheck needed: Please wait.
[  359.087048][T14199] XFS (loop6): Quotacheck: Done.
[  359.089005][T14219] mkiss: ax0: crc mode is auto.
[  359.124441][T11630] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  359.868491][T14244] loop6: detected capacity change from 0 to 4096
[  359.897599][T14244] NILFS (loop6): invalid segment: Checksum error in segment payload
[  359.900329][T14244] NILFS (loop6): trying rollback from an earlier position
[  359.934060][T14244] NILFS (loop6): recovery complete
[  359.950354][T14251] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  360.383995][ T5928] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  360.546033][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.551253][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.557812][ T5928] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  360.561145][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.568829][ T5928] usb 2-1: config 0 descriptor??
[  360.671758][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3103'.
[  360.884046][T14272] loop5: detected capacity change from 0 to 4096
[  360.886895][T14272] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  360.897420][T14272] ntfs3(loop5): Failed to initialize $Secure (-22).
[  360.940492][T14276] loop6: detected capacity change from 0 to 8
[  360.958362][T14276] cramfs: Error -5 while decompressing!
[  360.962885][T14276] cramfs: ffffffff99beb628(26)->ffff8880313ef000(4096)
[  360.966385][T14276] cramfs: Error -5 while decompressing!
[  360.968820][T14276] cramfs: ffffffff99beb642(26)->ffff888036294000(4096)
[  360.971778][T14276] cramfs: Error -3 while decompressing!
[  360.971827][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3110'.
[  360.974817][T14276] cramfs: ffffffff99beb65c(16)->ffff888036290000(4096)
[  360.980828][T14276] cramfs: Error -5 while decompressing!
[  360.982712][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3110'.
[  360.983264][T14276] cramfs: ffffffff99beb628(26)->ffff8880313ef000(4096)
[  360.995408][ T5928] hid_parser_main: 74 callbacks suppressed
[  360.995424][ T5928] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0
[  361.010371][ T5928] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  361.091268][ T5844] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  361.194099][ T5928] cp2112 0003:10C4:EA90.001E: Part Number: 0x00 Device Version: 0x00
[  361.202882][T14291] loop6: detected capacity change from 0 to 8192
[  361.397714][ T5928] cp2112 0003:10C4:EA90.001E: error requesting SMBus config
[  361.401880][ T5928] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -71
[  361.409406][ T5928] usb 2-1: USB disconnect, device number 51
[  361.602186][T14299] loop6: detected capacity change from 0 to 32768
[  361.785135][T14305] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3122'.
[  362.506180][T14329] loop1: detected capacity change from 0 to 32768
[  362.550782][T14329] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  362.555463][T14329] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  362.592215][T14329] XFS (loop1): Ending clean mount
[  362.609793][T14329] XFS (loop1): Quotacheck needed: Please wait.
[  362.671001][T14329] XFS (loop1): Quotacheck: Done.
[  362.739988][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  363.269078][T14341] loop1: detected capacity change from 0 to 32768
[  363.284843][T14341] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  363.766862][T14368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3148'.
[  363.968150][  T791] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  363.993951][ T5886] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  364.027588][T14380] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3154'.
[  364.140442][  T791] usb 7-1: Using ep0 maxpacket: 32
[  364.148256][  T791] usb 7-1: config 2 has an invalid interface number: 86 but max is 0
[  364.153046][  T791] usb 7-1: config 2 has no interface number 0
[  364.155941][ T5886] usb 2-1: Using ep0 maxpacket: 32
[  364.162874][  T791] usb 7-1: config 2 interface 86 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024
[  364.168288][  T791] usb 7-1: New USB device found, idVendor=1b3d, idProduct=018f, bcdDevice=92.aa
[  364.172426][  T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.176983][ T5886] usb 2-1: config 4 has an invalid interface number: 228 but max is 0
[  364.181383][ T5886] usb 2-1: config 4 has no interface number 0
[  364.188345][T14363] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  364.191357][ T5886] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  364.198206][ T5886] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0
[  364.202466][ T5886] usb 2-1: config 4 interface 228 has no altsetting 0
[  364.208268][ T5886] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  364.212120][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  364.215603][ T5886] usb 2-1: Product: syz
[  364.217106][ T5886] usb 2-1: Manufacturer: syz
[  364.218932][ T5886] usb 2-1: SerialNumber: syz
[  364.401322][  T791] usb 7-1: string descriptor 0 read error: -71
[  364.403485][ T5928] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  364.405861][  T791] ftdi_sio 7-1:2.86: FTDI USB Serial Device converter detected
[  364.412148][  T791] ftdi_sio ttyUSB0: unknown device type: 0x92aa
[  364.422987][  T791] usb 7-1: USB disconnect, device number 14
[  364.434471][  T791] ftdi_sio 7-1:2.86: device disconnected
[  364.457830][ T5886] usb 2-1: USB disconnect, device number 52
[  364.554216][ T5928] usb 6-1: Using ep0 maxpacket: 32
[  364.558434][ T5928] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  364.561834][ T5928] usb 6-1: config 0 has no interface number 0
[  364.567434][ T5928] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  364.571248][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.575036][ T5928] usb 6-1: Product: syz
[  364.576838][ T5928] usb 6-1: Manufacturer: syz
[  364.578958][ T5928] usb 6-1: SerialNumber: syz
[  364.583860][ T5928] usb 6-1: config 0 descriptor??
[  364.588038][ T5928] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  364.795450][ T5928] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  364.802778][ T5928] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  365.084557][   T33] audit: type=1400 audit(1755256126.013:105): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14393 comm="syz.1.3161"
[  365.177597][T14388] loop6: detected capacity change from 0 to 32768
[  365.192365][T14388] 
[  365.192365][T14388]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  365.192365][T14388] 
[  365.193260][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  365.200561][ T5928] usb 6-1: USB disconnect, device number 40
[  365.210524][ T5928] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  365.222311][ T5928] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  365.227835][ T5928] quatech2 6-1:0.51: device disconnected
[  365.426652][T14399] 
[  365.426652][T14399]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  365.426652][T14399] 
[  365.431369][T14399] 
[  365.431369][T14399]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  365.431369][T14399] 
[  365.490253][  T115] 
[  365.490253][  T115]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  365.490253][  T115] 
[  365.604030][T11630] 
[  365.604030][T11630]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  365.604030][T11630] 
[  365.608575][T11630] 
[  365.608575][T11630]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  365.608575][T11630] 
[  365.798341][T14407] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  365.801982][T14407] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  365.857596][T14410] loop6: detected capacity change from 0 to 2048
[  365.862044][T14410] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  365.874409][T14410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  365.881594][   T33] audit: type=1800 audit(1755256126.813:106): pid=14410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3168" name="file1" dev="loop6" ino=1367 res=0 errno=0
[  365.910703][   T33] audit: type=1804 audit(1755256126.843:107): pid=14410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3168" name="/newroot/355/file0/file1" dev="loop6" ino=1367 res=1 errno=0
[  366.015954][T14417] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  366.083727][ T5886] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  366.219254][T14415] loop6: detected capacity change from 0 to 32768
[  366.233427][ T5886] usb 6-1: Using ep0 maxpacket: 32
[  366.237226][ T5886] usb 6-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  366.241773][ T5886] usb 6-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32
[  366.246173][ T5886] usb 6-1: config 1 interface 0 altsetting 254 bulk endpoint 0x3 has invalid maxpacket 16
[  366.255973][ T5886] usb 6-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  366.260819][ T5886] usb 6-1: config 1 interface 0 has no altsetting 0
[  366.270014][T11630] add_index: next_index = 0.  Resetting!
[  366.270312][ T5886] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  366.280702][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  366.282960][T11630] non-latin1 character 0x3ff found in JFS file name
[  366.284069][ T5886] usb 6-1: SerialNumber: syz
[  366.286861][T11630] mount with iocharset=utf8 to access
[  366.294039][T14411] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  366.296984][T14411] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  366.300811][ T5886] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  366.308578][T11630] read_mapping_page failed!
[  366.310630][T11630] ERROR: (device loop6): txCommit: 
[  366.310630][T11630] 
[  366.310755][ T5886] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12
[  366.314358][T11630] ERROR: (device loop6): remounting filesystem as read-only
[  366.421358][T14421] loop1: detected capacity change from 0 to 40427
[  366.429458][T14421] F2FS-fs (loop1): invalid crc value
[  366.478410][T14421] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  366.482711][T14421] F2FS-fs (loop1): Start checkpoint disabled!
[  366.487109][T14421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  366.519075][ T5899] usb 6-1: USB disconnect, device number 41
[  367.187545][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  367.195041][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  367.199439][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  367.203205][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  367.207163][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  367.370710][T14444] loop5: detected capacity change from 0 to 2048
[  367.436468][T14444]  loop5: p1 < > p4 < >
[  367.557033][T14450] loop5: detected capacity change from 0 to 1764
[  367.566780][T14434] chnl_net:caif_netlink_parms(): no params data found
[  367.669798][T14455] syzkaller1: entered promiscuous mode
[  367.672197][T14455] syzkaller1: entered allmulticast mode
[  367.718396][T14434] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.721252][T14434] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.726372][T14434] bridge_slave_0: entered allmulticast mode
[  367.729844][T14434] bridge_slave_0: entered promiscuous mode
[  367.738843][T14434] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.741672][T14434] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.763572][T14434] bridge_slave_1: entered allmulticast mode
[  367.767609][T14434] bridge_slave_1: entered promiscuous mode
[  367.820415][T14434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.834185][T14434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.890318][T14434] team0: Port device team_slave_0 added
[  367.896326][T14434] team0: Port device team_slave_1 added
[  367.965875][T14434] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.968488][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.980558][T14434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.989395][T14434] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.992450][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.002831][T14434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.047958][T14464] loop1: detected capacity change from 0 to 32768
[  368.057612][T14464] JBD2: Ignoring recovery information on journal
[  368.077029][T14434] hsr_slave_0: entered promiscuous mode
[  368.082344][T14434] hsr_slave_1: entered promiscuous mode
[  368.094408][T14434] debugfs: 'hsr0' already exists in 'hsr'
[  368.096695][T14434] Cannot create hsr debugfs directory
[  368.105073][T14464] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  368.131005][T14464] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  368.141532][T14464] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  368.148859][T14464] OCFS2: File system is now read-only.
[  368.151211][T14464] (syz.1.3191,14464,0):ocfs2_search_chain:1817 ERROR: status = -30
[  368.159483][T14464] (syz.1.3191,14464,0):ocfs2_search_chain:1940 ERROR: status = -30
[  368.162922][T14464] (syz.1.3191,14464,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  368.169789][T14464] (syz.1.3191,14464,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  368.174598][T14464] (syz.1.3191,14464,0):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  368.179362][T14464] (syz.1.3191,14464,0):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  368.182982][T14464] (syz.1.3191,14464,0):ocfs2_block_group_alloc_contig:437 ERROR: status = -30
[  368.188319][T14464] (syz.1.3191,14464,0):ocfs2_block_group_alloc:711 ERROR: status = -30
[  368.191945][T14464] (syz.1.3191,14464,0):ocfs2_block_group_alloc:764 ERROR: status = -30
[  368.197739][T14464] (syz.1.3191,14464,0):ocfs2_reserve_suballoc_bits:839 ERROR: status = -30
[  368.202204][T14464] (syz.1.3191,14464,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30
[  368.208451][T14464] (syz.1.3191,14464,0):ocfs2_reserve_new_metadata_blocks:996 ERROR: status = -30
[  368.212528][T14464] (syz.1.3191,14464,0):ocfs2_reserve_new_metadata_blocks:1019 ERROR: status = -30
[  368.218894][T14464] (syz.1.3191,14464,0):ocfs2_expand_inline_dir:2847 ERROR: status = -30
[  368.222511][T14464] (syz.1.3191,14464,0):ocfs2_extend_dir:3211 ERROR: status = -30
[  368.232246][T14464] (syz.1.3191,14464,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30
[  368.240929][T14464] (syz.1.3191,14464,0):ocfs2_symlink:1879 ERROR: status = -30
[  368.247817][T14464] (syz.1.3191,14464,0):ocfs2_symlink:2080 ERROR: status = -30
[  368.283713][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  368.383983][T14434] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  368.392878][T14434] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  368.414997][T14434] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  368.429880][T14434] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  368.516556][T14434] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.537191][T14434] 8021q: adding VLAN 0 to HW filter on device team0
[  368.547168][T11183] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.549559][T11183] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.558321][T14497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3203'.
[  368.563366][T11183] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.566166][T11183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.747669][T14434] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.907223][T14434] veth0_vlan: entered promiscuous mode
[  368.915617][T14434] veth1_vlan: entered promiscuous mode
[  368.938871][T14434] veth0_macvtap: entered promiscuous mode
[  368.950775][T14434] veth1_macvtap: entered promiscuous mode
[  368.962796][T14434] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.970248][T14434] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.982261][ T5877] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.989497][ T5877] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.992381][ T5877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.010507][ T5877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.078131][T12976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.080993][T12976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.102171][T11185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.106143][T11185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.273821][ T5852] Bluetooth: hci0: command tx timeout
[  369.394452][T14540] loop7: detected capacity change from 0 to 1024
[  369.473643][   T51] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  369.529316][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3219'.
[  369.536435][   T33] audit: type=1800 audit(1755256130.473:108): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3218" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=35001 res=0 errno=0
[  369.552355][T14546] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  369.623535][   T51] usb 6-1: Using ep0 maxpacket: 16
[  369.628706][   T51] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  369.638564][   T51] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  369.646774][   T51] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  369.650534][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.656160][   T51] usb 6-1: Product: syz
[  369.657798][   T51] usb 6-1: Manufacturer: syz
[  369.659603][   T51] usb 6-1: SerialNumber: syz
[  369.717404][   T33] audit: type=1326 audit(1755256130.653:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.1.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41abd8ebe9 code=0x7ffc0000
[  369.729225][   T33] audit: type=1326 audit(1755256130.653:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.1.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41abd8ebe9 code=0x7ffc0000
[  369.744835][   T33] audit: type=1326 audit(1755256130.653:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.1.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41abd8ebe9 code=0x7ffc0000
[  369.751422][T14560] loop1: detected capacity change from 0 to 512
[  369.760349][T14560] EXT4-fs: Invalid journal IO priority (must be 0-7)
[  369.768727][   T33] audit: type=1326 audit(1755256130.653:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.1.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41abd8ebe9 code=0x7ffc0000
[  369.785748][   T33] audit: type=1326 audit(1755256130.653:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.1.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41abd8ebe9 code=0x7ffc0000
[  369.797809][   T33] audit: type=1326 audit(1755256130.653:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.1.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f41abd8ebe9 code=0x7ffc0000
[  369.871795][   T51] usb 6-1: 0:2 : does not exist
[  369.883774][ T5915] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  369.892131][   T51] usb 6-1: USB disconnect, device number 42
[  369.939886][T14566] input: syz0 as /devices/virtual/input/input27
[  370.053551][ T5915] usb 8-1: Using ep0 maxpacket: 32
[  370.058378][ T5915] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  370.062536][ T5915] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  370.067635][ T5915] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26
[  370.074539][ T5915] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  370.078435][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  370.081665][ T5915] usb 8-1: SerialNumber: syz
[  370.091209][T14552] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  370.095131][T14552] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  370.307782][ T5915] usb 8-1: USB disconnect, device number 2
[  370.581476][T14571] loop5: detected capacity change from 0 to 32768
[  370.591692][T14571] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  370.623502][   T33] kauditd_printk_skb: 8 callbacks suppressed
[  370.623616][   T33] audit: type=1800 audit(1755256131.553:123): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3231" name="file1" dev="loop5" ino=17059 res=0 errno=0
[  370.680356][ T8326] ocfs2: Unmounting device (7,5) on (node local)
[  371.233563][  T792] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  371.353591][ T5852] Bluetooth: hci0: command tx timeout
[  371.383404][  T792] usb 2-1: Using ep0 maxpacket: 32
[  371.396350][  T792] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  371.399777][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.402879][  T792] usb 2-1: Product: syz
[  371.406452][  T792] usb 2-1: Manufacturer: syz
[  371.408368][  T792] usb 2-1: SerialNumber: syz
[  371.424596][  T792] usb 2-1: config 0 descriptor??
[  371.428933][  T792] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  372.037113][  T792] gspca_ov534_9: reg_w failed -71
[  372.336262][T14608] loop7: detected capacity change from 0 to 32768
[  372.353959][T14608] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  372.368723][T14608] XFS (loop7): Ending clean mount
[  372.375905][T14608] XFS (loop7): syz.7.3248 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  372.399914][T14434] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  372.476950][  T792] gspca_ov534_9: Unknown sensor 0000
[  372.477060][  T792] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  372.498254][  T792] usb 2-1: USB disconnect, device number 53
[  372.738362][T14628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3252'.
[  373.233647][   T51] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  373.413631][   T51] usb 2-1: Using ep0 maxpacket: 32
[  373.422393][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.432383][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  373.437197][ T5852] Bluetooth: hci0: command tx timeout
[  373.445842][   T51] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  373.449615][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.455818][   T51] usb 2-1: config 0 descriptor??
[  373.499637][T14640] loop5: detected capacity change from 0 to 32768
[  373.756418][   T33] audit: type=1400 audit(1755256134.693:124): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=14645 comm="syz.5.3261"
[  373.881565][T14658] loop7: detected capacity change from 0 to 128
[  373.889113][T14658] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  373.897305][T14658] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  373.972940][T14664] loop5: detected capacity change from 0 to 2048
[  373.975000][T14434] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  373.977888][T14664] UDF-fs: warning (device loop5): udf_fill_super: No fileset found
[  374.019944][T14666] loop7: detected capacity change from 0 to 256
[  374.027336][T14666] exfat: Bad value for 'uid'
[  374.029478][T14666] exfat: Bad value for 'uid'
[  374.131166][   T51] ft260 0003:0403:6030.001F: failed to retrieve chip version
[  374.135156][   T51] ft260 0003:0403:6030.001F: probe with driver ft260 failed with error -71
[  374.141165][   T51] usb 2-1: USB disconnect, device number 54
[  374.164734][T14666] loop7: detected capacity change from 0 to 32768
[  374.167279][T14666] JFS: Invalid value of umask
[  374.283794][ T5899] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[  374.436305][ T5899] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  374.438984][ T5899] usb 6-1: config 6 has no interface number 0
[  374.441130][ T5899] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  374.444571][ T5899] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  374.448439][ T5899] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  374.453583][ T5899] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  374.456608][ T5899] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  374.459932][ T5899] usb 6-1: Product: syz
[  374.461466][ T5899] usb 6-1: Manufacturer: syz
[  374.463041][ T5899] usb 6-1: SerialNumber: syz
[  374.468244][ T5899] hso 6-1:6.2: Failed to find INT IN ep
[  374.672504][ T5886] usb 6-1: USB disconnect, device number 43
[  374.787716][T14692] loop1: detected capacity change from 0 to 2048
[  374.794965][T14692] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  374.981783][T14694] loop1: detected capacity change from 0 to 40427
[  374.985388][T14694] F2FS-fs (loop1): build fault injection rate: 14
[  374.988049][T14694] F2FS-fs (loop1): build fault injection type: 0xe
[  374.991786][T14694] F2FS-fs (loop1): invalid crc value
[  374.995398][T14694] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  374.999758][T14694] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4462/0x6ff0
[  375.002975][T14694] F2FS-fs (loop1): Failed to initialize F2FS node manager (-12)
[  375.201518][T14698] loop1: detected capacity change from 0 to 8192
[  375.484513][T14702] loop5: detected capacity change from 0 to 32768
[  375.488672][T14702] bcachefs (/dev/loop5): error validating superblock: Invalid option errors: too big (max 4)
[  375.493263][T14702] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big
[  375.514057][ T5852] Bluetooth: hci0: command tx timeout
[  375.603796][ T5899] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[  375.770728][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  375.778090][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.782568][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  375.789964][ T5899] usb 2-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00
[  375.797654][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.820469][ T5899] usb 2-1: config 0 descriptor??
[  376.563407][T13589] usb 2-1: USB disconnect, device number 55
[  377.124984][T12985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.128871][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.628534][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3296'.
[  377.688574][T14733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.692129][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.895096][T14736] loop5: detected capacity change from 0 to 32768
[  377.953539][   T51] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  378.103563][   T51] usb 2-1: Using ep0 maxpacket: 32
[  378.111253][   T51] usb 2-1: config 1 has an invalid interface number: 236 but max is 0
[  378.111731][T14736] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  378.115591][   T51] usb 2-1: config 1 has no interface number 0
[  378.124222][T14736]   allowing incompatible features above 0.0: (unknown version)
[  378.127782][   T51] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  378.129049][T14736]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  378.132740][   T51] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  378.137397][T14736]   with devices loop5
[  378.141976][   T51] usb 2-1: config 1 interface 236 has no altsetting 0
[  378.143141][T14736] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  378.148491][   T51] usb 2-1: config 1 has an invalid interface number: 236 but max is 0
[  378.148738][T14736] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  378.152291][   T51] usb 2-1: config 1 has no interface number 0
[  378.159232][   T51] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  378.159977][T14736] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  378.163223][   T51] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  378.171163][   T51] usb 2-1: config 1 interface 236 has no altsetting 0
[  378.175503][T14736] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  378.182269][   T51] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  378.183549][T14736] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  378.187216][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.190709][T14736] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  378.190864][   T51] usb 2-1: Product: syz
[  378.195121][T14736] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  378.195837][   T51] usb 2-1: Manufacturer: syz
[  378.198454][T14736] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  378.200096][   T51] usb 2-1: SerialNumber: syz
[  378.211893][   T51] ti_usb_3410_5052 2-1:1.236: TI USB 5052 2 port adapter converter detected
[  378.241630][T14736] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  378.299070][T14736] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown by ioctl type 0emergency read only at seq 2
[  378.353893][  T792] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  378.359404][ T8326] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  378.360341][  T792] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  378.373580][  T792] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 2
[  378.377405][  T792] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 2
[  378.381523][  T792] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): unclean shutdown complete, journal seq 2
[  378.393106][  T792] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done going read-only, filesystem not clean
[  378.404666][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.404778][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.460911][ T8326] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  378.506444][  T792] usb 2-1: USB disconnect, device number 56
[  379.723590][T13589] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  379.732498][T14761] loop1: detected capacity change from 0 to 131072
[  379.735990][T14761] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  379.738588][T14761] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  379.742897][T14761] F2FS-fs (loop1): invalid crc value
[  379.772172][T14761] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  379.776252][T14761] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  379.778638][T14761] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  379.883449][T13589] usb 8-1: Using ep0 maxpacket: 16
[  379.886723][T13589] usb 8-1: config 0 has an invalid interface number: 126 but max is 0
[  379.889952][T13589] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  379.894323][T13589] usb 8-1: config 0 has no interface number 0
[  379.896875][T13589] usb 8-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  379.901138][T13589] usb 8-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  379.904935][T13589] usb 8-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  379.908767][T13589] usb 8-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  379.912222][T13589] usb 8-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  379.926462][T13589] usb 8-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  379.929514][T13589] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.935612][T13589] usb 8-1: config 0 descriptor??
[  379.938125][T14773] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  379.942375][T13589] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  380.196850][   T51] usb 8-1: USB disconnect, device number 3
[  380.272411][T14779] loop5: detected capacity change from 0 to 4096
[  380.276226][T14781] netlink: 'syz.1.3315': attribute type 1 has an invalid length.
[  380.279632][T14781] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3315'.
[  380.298128][T14779] ntfs3(loop5): $Secure::$SII is corrupted.
[  380.300214][T14779] ntfs3(loop5): Failed to initialize $Secure (-22).
[  380.491108][T14783] loop5: detected capacity change from 0 to 32768
[  380.500113][T14783] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  380.521802][T14783] XFS (loop5): Ending clean mount
[  380.573660][ T8326] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  380.684754][T14797] loop1: detected capacity change from 0 to 32768
[  380.708217][T14797] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  380.771561][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  380.955691][T13589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.969362][T14827] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3333'.
[  381.007376][T14833] input: syz0 as /devices/virtual/input/input28
[  381.123639][  T792] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  381.185909][T14851] loop7: detected capacity change from 0 to 1024
[  381.274311][  T792] usb 2-1: Using ep0 maxpacket: 16
[  381.278348][  T792] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  381.283228][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  381.290096][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 42580, setting to 1024
[  381.295931][  T792] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  381.299711][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.305748][  T792] usb 2-1: config 0 descriptor??
[  381.308549][T14815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  381.312853][  T792] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -12
[  381.323556][T13589] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  381.473564][T13589] usb 6-1: Using ep0 maxpacket: 8
[  381.477839][T13589] usb 6-1: unable to get BOS descriptor or descriptor too short
[  381.482365][T13589] usb 6-1: config 0 has no interfaces?
[  381.486994][T13589] usb 6-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c
[  381.489974][T13589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.492822][T13589] usb 6-1: Product: syz
[  381.494821][T13589] usb 6-1: Manufacturer: syz
[  381.496476][T13589] usb 6-1: SerialNumber: syz
[  381.499731][T13589] apple-mfi-fastcharge 6-1: config 0 descriptor??
[  381.519970][ T5915] usb 2-1: USB disconnect, device number 57
[  381.710569][T13589] apple-mfi-fastcharge 6-1: USB disconnect, device number 44
[  382.066994][T14859] loop1: detected capacity change from 0 to 128
[  382.070645][T14859] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  382.076707][T14859] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  382.199254][T14865] loop7: detected capacity change from 0 to 4096
[  382.249948][T14869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.253895][T14869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.256927][T14869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.259757][T14869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.263154][T14869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.267487][T14869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.270196][T14869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.274914][T14868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.469344][T14891] loop1: detected capacity change from 0 to 256
[  382.475623][T14891] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  382.480128][T14891] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  382.488140][T14891] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  382.565766][T14894] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3365'.
[  382.603452][T13589] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  382.711574][T14900] loop5: detected capacity change from 0 to 256
[  382.753898][T13589] usb 8-1: Using ep0 maxpacket: 8
[  382.759249][T13589] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  382.759653][T14902] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3368'.
[  382.762692][T13589] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.785919][T13589] pvrusb2: Hardware description: Terratec Grabster AV400
[  382.788399][T13589] pvrusb2: **********
[  382.789743][T13589] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  382.793254][T13589] pvrusb2: Important functionality might not be entirely working.
[  382.798553][T13589] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  382.802570][T13589] pvrusb2: **********
[  382.823434][  T792] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  382.973389][  T792] usb 2-1: Using ep0 maxpacket: 16
[  382.977674][  T792] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  382.980498][  T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  382.991564][  T792] usb 2-1: config 0 has no interface number 0
[  382.998909][ T2396] pvrusb2: Invalid write control endpoint
[  383.007297][  T792] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  383.010523][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.013212][  T792] usb 2-1: Product: syz
[  383.014741][  T792] usb 2-1: Manufacturer: syz
[  383.016966][  T792] usb 2-1: SerialNumber: syz
[  383.020174][  T792] usb 2-1: config 0 descriptor??
[  383.021843][ T2396] pvrusb2: Invalid write control endpoint
[  383.021911][ T2396] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  383.021920][ T2396] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  383.026957][  T792] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[  383.031321][ T2396] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  383.036853][  T792] usb 2-1: No valid video chain found.
[  383.040553][ T2396] pvrusb2: Device being rendered inoperable
[  383.050617][ T2396] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  383.054150][ T2396] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  383.059519][ T2396] pvrusb2: Attached sub-driver cx25840
[  383.061999][ T2396] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  383.067445][ T2396] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  383.201519][  T792] usb 8-1: USB disconnect, device number 4
[  383.231969][T14526] usb 2-1: USB disconnect, device number 58
[  383.243486][   T51] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  383.398447][   T51] usb 6-1: config 135 has an invalid interface number: 230 but max is 0
[  383.402064][   T51] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  383.406538][   T51] usb 6-1: config 135 has no interface number 0
[  383.409279][   T51] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  383.417237][   T51] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  383.421054][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.424675][   T51] usb 6-1: Product: syz
[  383.426524][   T51] usb 6-1: Manufacturer: syz
[  383.428508][   T51] usb 6-1: SerialNumber: syz
[  383.435409][   T51] usb 6-1: Found UVC 0.00 device syz (18ec:3288)
[  383.438155][   T51] usb 6-1: No valid video chain found.
[  383.645546][   T51] usb 6-1: USB disconnect, device number 45
[  383.757914][T14917] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3375'.
[  383.791286][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3377'.
[  383.794770][T14921] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3377'.
[  383.854786][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3381'.
[  384.157344][T12978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.160516][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.563662][   T51] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  384.717917][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  384.722301][   T51] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  384.726653][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  384.732277][   T51] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  384.738964][   T51] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  384.742770][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.753734][   T51] usb 2-1: config 0 descriptor??
[  384.975355][   T51] hdpvr 2-1:0.0: firmware version 0x8 dated )˟=J+noKܐo5foɠObL
[  385.175740][   T51] hdpvr 2-1:0.0: device init failed
[  385.178015][   T51] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  385.191423][   T51] usb 2-1: USB disconnect, device number 59
[  385.718907][T14977] program syz.7.3402 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  385.796475][T14984] nr0: tun_chr_ioctl cmd 1074554389
[  385.900668][T15001] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3416'.
[  385.936644][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3416'.
[  386.086632][T15022] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3425'.
[  386.421582][T15044] loop7: detected capacity change from 0 to 8
[  386.469539][T15044] SQUASHFS error: zlib decompression failed, data probably corrupt
[  386.477137][T15044] SQUASHFS error: Failed to read block 0x9b: -5
[  386.483045][T15044] SQUASHFS error: Unable to read metadata cache entry [99]
[  386.491836][T15044] SQUASHFS error: Unable to read inode 0x127
[  386.563488][ T5915] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  386.700319][   T51] hid-generic 0005:16C0:5505.0021: item fetching failed at offset 0/2
[  386.705999][   T51] hid-generic 0005:16C0:5505.0021: probe with driver hid-generic failed with error -22
[  386.723488][ T5915] usb 6-1: Using ep0 maxpacket: 8
[  386.735723][ T5915] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  386.739004][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.742413][ T5915] usb 6-1: Product: syz
[  386.744500][ T5915] usb 6-1: Manufacturer: syz
[  386.746497][ T5915] usb 6-1: SerialNumber: syz
[  386.751566][ T5915] usb 6-1: config 0 descriptor??
[  386.756381][ T5915] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  386.759864][ T5915] usb 6-1: setting power ON
[  386.761836][ T5915] dvb-usb: bulk message failed: -22 (2/0)
[  386.770640][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  386.776172][ T5915] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  386.780357][ T5915] usb 6-1: media controller created
[  386.804555][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  386.915607][ T5915] usb 6-1: selecting invalid altsetting 6
[  386.919875][ T5915] usb 6-1: digital interface selection failed (-22)
[  386.922700][ T5915] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  386.932088][ T5915] usb 6-1: setting power OFF
[  386.934586][ T5915] dvb-usb: bulk message failed: -22 (2/0)
[  386.939243][ T5915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  386.943221][ T5915] (NULL device *): no alternate interface
[  386.966304][ T5915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  386.973119][ T5915] usb 6-1: USB disconnect, device number 46
[  387.659892][T15082] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3451'.
[  387.798611][T15090] net_ratelimit: 3 callbacks suppressed
[  387.798627][T15090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.809710][T15090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.813207][T15090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.816639][T15090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.820123][T15090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.829642][T15089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.010447][T15100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  388.130412][T15095] loop7: detected capacity change from 0 to 32768
[  388.157913][T15095] ERROR: (device loop7): dbAllocAG: unable to allocate blocks
[  388.157913][T15095] 
[  388.162956][T15095] jfs_create: dtInsert returned -EIO
[  388.167290][T15095] ERROR: (device loop7): jfs_create: 
[  388.167290][T15095] 
[  388.280058][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3463'.
[  388.286343][T15106] xfrm1: entered promiscuous mode
[  388.290829][T15106] xfrm1: entered allmulticast mode
[  388.497372][T15110] syzkaller0: entered promiscuous mode
[  388.504626][T15110] syzkaller0: entered allmulticast mode
[  388.933481][ T5928] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  389.103854][T15119] cgroup: Invalid name
[  389.115651][ T5928] usb 2-1: Using ep0 maxpacket: 16
[  389.120588][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  389.133452][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  389.143408][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  389.147554][ T5928] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  389.160509][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  389.186460][ T5928] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  389.190381][ T5928] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  389.195460][ T5928] usb 2-1: Manufacturer: syz
[  389.199442][ T5928] usb 2-1: config 0 descriptor??
[  389.456067][ T5928] rc_core: IR keymap rc-hauppauge not found
[  389.458110][ T5928] Registered IR keymap rc-empty
[  389.460036][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.486877][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.515337][ T5928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  389.520930][ T5928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30
[  389.539552][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.566636][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.595779][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.638806][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.665463][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.684204][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.714933][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.745522][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.775270][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.794687][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  389.827410][ T5928] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  389.830612][ T5928] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  389.860670][ T5915] usb 2-1: USB disconnect, device number 60
[  389.916535][T11185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.920074][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.559221][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.401153][T15136] ip_vti0: Master is either lo or non-ether device
[  391.598066][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3476'.
[  392.697302][T15148] loop7: detected capacity change from 0 to 32768
[  392.941136][T15181] loop5: detected capacity change from 0 to 128
[  392.946749][T15181] EXT4-fs: Ignoring removed nomblk_io_submit option
[  392.950861][T15181] EXT4-fs: Ignoring removed nomblk_io_submit option
[  392.963521][T15181] EXT4-fs (loop5): Test dummy encryption mode enabled
[  392.981127][T15181] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  392.993643][T15181] ext4 filesystem being mounted at /851/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  393.031304][T15191] loop7: detected capacity change from 0 to 256
[  393.040220][T15191] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d)
[  393.041954][ T8326] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  393.124987][T15185] loop1: detected capacity change from 0 to 32768
[  393.259803][T15185] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  393.282786][T15185] XFS (loop1): Ending clean mount
[  393.285947][T15185] XFS (loop1): Quotacheck needed: Please wait.
[  393.322869][T15185] XFS (loop1): Quotacheck: Done.
[  393.368331][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  393.534855][ T5928] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  393.684098][ T5928] usb 6-1: Using ep0 maxpacket: 16
[  393.689330][ T5928] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  393.693093][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.696628][ T5928] usb 6-1: Product: syz
[  393.698365][ T5928] usb 6-1: Manufacturer: syz
[  393.700219][ T5928] usb 6-1: SerialNumber: syz
[  393.703201][ T5928] usb 6-1: config 0 descriptor??
[  393.707847][ T5928] visor 6-1:0.0: Sony Clie 3.5 converter detected
[  393.913175][ T5928] usb 6-1: clie_3_5_startup: get config number bad return length: 0
[  393.916148][ T5928] visor 6-1:0.0: probe with driver visor failed with error -5
[  394.117934][ T5928] usb 6-1: USB disconnect, device number 47
[  394.428466][T15223] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3507'.
[  394.479179][T15225] loop1: detected capacity change from 0 to 1024
[  394.498729][T15225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.513787][T15225] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.3508: bit already cleared for inode 15
[  394.536362][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.803579][ T5852] Bluetooth: hci0: command tx timeout
[  394.809759][T15241] loop1: detected capacity change from 0 to 32768
[  394.818045][T15241] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  394.826593][T15241] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #0
[  394.833954][T15241] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  394.838580][T15241] OCFS2: File system is now read-only.
[  394.840962][T15241] (syz.1.3514,15241,0):ocfs2_search_chain:1817 ERROR: status = -30
[  394.845163][T15241] (syz.1.3514,15241,0):ocfs2_search_chain:1940 ERROR: status = -30
[  394.848570][T15241] (syz.1.3514,15241,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  394.852224][T15241] (syz.1.3514,15241,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  394.856100][T15241] (syz.1.3514,15241,0):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  394.859545][T15241] (syz.1.3514,15241,0):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  394.863000][T15241] (syz.1.3514,15241,0):ocfs2_mknod_locked:641 ERROR: status = -30
[  394.867464][T15241] (syz.1.3514,15241,0):ocfs2_mknod:388 ERROR: status = -30
[  394.870840][T15241] (syz.1.3514,15241,0):ocfs2_mknod:505 ERROR: status = -30
[  394.876503][T15241] (syz.1.3514,15241,0):ocfs2_create:678 ERROR: status = -30
[  394.907014][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  394.944137][ T5915] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  394.954872][T11183] net_ratelimit: 371 callbacks suppressed
[  394.954881][T11183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.960183][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.126132][ T5915] usb 6-1: Using ep0 maxpacket: 16
[  395.138076][ T5915] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  395.142092][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.149258][ T5915] usb 6-1: Product: syz
[  395.151097][ T5915] usb 6-1: Manufacturer: syz
[  395.153137][ T5915] usb 6-1: SerialNumber: syz
[  395.158751][ T5915] usb 6-1: config 0 descriptor??
[  395.162979][ T5915] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  395.169627][ T5915] usb 6-1: Detected FT232H
[  395.263532][   T51] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  395.368749][ T5915] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  395.429612][   T51] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  395.432816][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.440194][   T51] usb 2-1: config 0 descriptor??
[  395.444307][   T51] usb 2-1: bad CDC descriptors
[  395.653939][  T792] usb 2-1: USB disconnect, device number 61
[  395.792762][ T5915] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  395.986299][ T5915] usb 6-1: USB disconnect, device number 48
[  395.998069][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  396.001953][ T5915] ftdi_sio 6-1:0.0: device disconnected
[  396.076739][T15269] loop7: detected capacity change from 0 to 1024
[  396.250314][T15275] loop1: detected capacity change from 0 to 2048
[  396.266434][T15275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.275708][T15275] EXT4-fs (loop1): shut down requested (2)
[  396.292108][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.536489][T15283] loop5: detected capacity change from 0 to 256
[  396.539971][T15283] exfat: Deprecated parameter 'utf8'
[  396.547697][T15283] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  396.645636][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3534'.
[  396.870985][T11180] hfsplus: b-tree write err: -5, ino 4
[  396.978765][T15308] netlink: 'syz.7.3544': attribute type 5 has an invalid length.
[  397.095893][T15323] loop5: detected capacity change from 0 to 256
[  397.266149][T15339] loop1: detected capacity change from 0 to 512
[  397.266760][T15338] : renamed from wg2 (while UP)
[  397.271832][T15339] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  397.329782][T15343] syz.7.3561: attempt to access beyond end of device
[  397.329782][T15343] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[  397.338671][T15343] hpfs: hpfs_map_sector(): read error
[  397.413810][T15335] loop5: detected capacity change from 0 to 32768
[  397.420459][T15335] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  397.451872][T15335] XFS (loop5): Ending clean mount
[  397.461065][T15335] XFS (loop5): Quotacheck needed: Please wait.
[  397.464431][T15355] loop7: detected capacity change from 0 to 512
[  397.467808][T15355] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  397.480387][T15355] EXT4-fs (loop7): 1 truncate cleaned up
[  397.487393][T15355] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.505138][T15335] XFS (loop5): Quotacheck: Done.
[  397.531457][T14434] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /134/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  397.543793][T14434] EXT4-fs (loop7): Remounting filesystem read-only
[  397.571201][ T8326] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  397.573982][   T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  397.754112][   T10] usb 2-1: Using ep0 maxpacket: 32
[  397.757614][   T10] usb 2-1: config 0 has an invalid interface number: 37 but max is 1
[  397.760360][   T10] usb 2-1: config 0 has no interface number 1
[  397.766123][   T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3
[  397.769329][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.771949][   T10] usb 2-1: Product: syz
[  397.779783][   T10] usb 2-1: Manufacturer: syz
[  397.781367][   T10] usb 2-1: SerialNumber: syz
[  397.787306][T14434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.792250][   T10] usb 2-1: config 0 descriptor??
[  398.017249][ T5915] usb 2-1: USB disconnect, device number 62
[  398.079078][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  398.108261][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  398.119266][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  398.123409][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  398.126456][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  398.356100][T15367] chnl_net:caif_netlink_parms(): no params data found
[  398.428810][T15367] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.432027][T15367] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.435322][T15367] bridge_slave_0: entered allmulticast mode
[  398.439089][T15367] bridge_slave_0: entered promiscuous mode
[  398.449283][T15367] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.452481][T15367] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.456136][T15367] bridge_slave_1: entered allmulticast mode
[  398.459589][T15367] bridge_slave_1: entered promiscuous mode
[  398.481511][T15367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.486817][T15367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.506774][T15367] team0: Port device team_slave_0 added
[  398.509990][T15367] team0: Port device team_slave_1 added
[  398.542122][T15367] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.545771][T15367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.557236][T15367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.569262][T15367] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.572249][T15367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.585137][T15367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.636331][T15367] hsr_slave_0: entered promiscuous mode
[  398.639112][T15367] hsr_slave_1: entered promiscuous mode
[  398.641495][T15367] debugfs: 'hsr0' already exists in 'hsr'
[  398.644196][T15367] Cannot create hsr debugfs directory
[  398.825024][T15367] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  398.834509][T15367] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  398.839926][T15367] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  398.859831][T15367] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  398.875247][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.875389][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.918874][T15396] loop5: detected capacity change from 0 to 8
[  399.010886][T15367] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.035664][T15367] 8021q: adding VLAN 0 to HW filter on device team0
[  399.049296][T11180] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.052433][T11180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.072237][T11180] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.075387][T11180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.220985][T15412] loop5: detected capacity change from 0 to 64
[  399.228035][T15412] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  399.292543][T15367] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.451223][T15367] veth0_vlan: entered promiscuous mode
[  399.461525][T15367] veth1_vlan: entered promiscuous mode
[  399.479917][T15367] veth0_macvtap: entered promiscuous mode
[  399.486119][T15367] veth1_macvtap: entered promiscuous mode
[  399.497832][T15367] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.505785][T15367] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.512729][ T5858] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.518951][T11752] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.527455][T11752] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.535288][T11752] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.581250][ T5928] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  399.584779][   T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  399.617413][T11185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.620750][T11185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.651805][T12976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.656701][T12976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.754329][   T10] usb 2-1: Using ep0 maxpacket: 16
[  399.756576][ T5928] usb 6-1: Using ep0 maxpacket: 8
[  399.762789][   T10] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[  399.767825][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0
[  399.771384][   T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  399.779124][   T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  399.785737][ T5928] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  399.791938][   T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  399.798519][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.802464][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  399.805849][ T5928] usb 6-1: Product: syz
[  399.807825][   T10] usb 2-1: config 0 has no interface number 0
[  399.810472][   T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  399.816718][ T5928] usb 6-1: Manufacturer: syz
[  399.818663][ T5928] usb 6-1: SerialNumber: syz
[  399.823812][ T5928] usb 6-1: config 0 descriptor??
[  399.828534][   T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  399.832925][   T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  399.845139][ T5928] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found
[  399.848888][   T10] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  399.863534][   T10] usb 2-1: config 0 interface 125 has no altsetting 0
[  399.866673][   T10] usb 2-1: config 0 interface 125 has no altsetting 2
[  399.872405][   T10] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  399.879943][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.882772][   T10] usb 2-1: Product: syz
[  399.888716][   T10] usb 2-1: Manufacturer: syz
[  399.890840][   T10] usb 2-1: SerialNumber: syz
[  399.898907][   T10] usb 2-1: config 0 descriptor??
[  399.904932][   T10] usb 2-1: selecting invalid altsetting 2
[  400.043776][ T5928] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected
[  400.048689][ T5928] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  400.106047][    C0] usb 2-1: async_complete: urb error -71
[  400.108403][    C0] usb 2-1: async_complete: urb error -71
[  400.110727][    C0] usb 2-1: async_complete: urb error -71
[  400.113035][    C0] usb 2-1: async_complete: urb error -71
[  400.118155][   T10] get_1284_register: usb error -71
[  400.120318][   T10] uss720 2-1:0.125: probe with driver uss720 failed with error -71
[  400.126948][   T10] usb 2-1: USB disconnect, device number 63
[  400.156071][ T5844] Bluetooth: hci0: command tx timeout
[  400.159857][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.245364][T14526] usb 6-1: USB disconnect, device number 49
[  400.802669][T12976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.806530][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.087450][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  401.250307][   T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a
[  401.254896][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.262842][   T10] usb 9-1: config 0 descriptor??
[  401.276984][   T10] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input31
[  401.317174][T15481] loop5: detected capacity change from 0 to 512
[  401.326029][T15481] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3610: corrupted in-inode xattr: invalid ea_ino
[  401.330722][T15481] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3610: couldn't read orphan inode 15 (err -117)
[  401.336210][T15481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  401.357404][ T8326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.478180][T14526] usb 9-1: USB disconnect, device number 2
[  401.546739][T15492] loop5: detected capacity change from 0 to 128
[  401.549905][T15492] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  401.554442][T15492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  401.727643][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3617'.
[  402.277894][ T5844] Bluetooth: hci0: command tx timeout
[  402.292647][T15512] loop8: detected capacity change from 0 to 2048
[  402.312611][T15512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  402.329809][T15512] overlayfs: upper fs needs to support d_type.
[  402.335794][T15512] overlayfs: cleanup of 'work/#3d' failed (-2)
[  402.754917][T15512] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  402.763531][T15512] overlayfs: failed to set xattr on upper
[  402.766176][T15512] overlayfs: ...falling back to redirect_dir=nofollow.
[  402.773708][T15512] overlayfs: ...falling back to index=off.
[  402.777527][T15512] overlayfs: ...falling back to uuid=null.
[  402.780441][T15512] overlayfs: conflicting lowerdir path
[  402.839925][T15522] netlink: 'syz.5.3627': attribute type 1 has an invalid length.
[  402.950490][T15520] loop8: detected capacity change from 0 to 32768
[  402.956715][T15520] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  402.971359][T15520] XFS (loop8): Ending clean mount
[  403.095358][T15538] netlink: 'syz.5.3629': attribute type 1 has an invalid length.
[  403.115344][T15538] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3629'.
[  403.126023][T15367] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  403.237320][T15547] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3633'.
[  403.475082][T15570] __vm_enough_memory: pid: 15570, comm: syz.5.3644, bytes: 4503599627366400 not enough memory for the allocation
[  404.231639][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.313823][ T5844] Bluetooth: hci0: command tx timeout
[  404.478476][T15599] loop1: detected capacity change from 0 to 32768
[  404.497413][T15599] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  404.511744][T15599] XFS (loop1): Ending clean mount
[  404.555153][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  404.915171][T15626] loop5: detected capacity change from 0 to 32768
[  404.918497][T15626] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3666 (15626)
[  404.926226][T15626] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  404.930716][T15626] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  404.934443][T15626] BTRFS info (device loop5): using free-space-tree
[  404.961767][T15626] BTRFS info (device loop5): rebuilding free space tree
[  405.064870][ T8326] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  405.082151][   T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  405.235597][   T10] usb 2-1: Using ep0 maxpacket: 16
[  405.239320][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  405.242958][   T10] usb 2-1: config 0 has no interface number 0
[  405.246248][   T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.250947][   T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.256773][   T10] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  405.260865][   T10] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  405.271375][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.278977][   T10] usb 2-1: config 0 descriptor??
[  405.341397][T15653] loop5: detected capacity change from 0 to 1024
[  405.346682][T15653] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  405.354305][T15653] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  405.358478][T15653] EXT4-fs (loop5): orphan cleanup on readonly fs
[  405.362108][T15653] Quota error (device loop5): v2_read_file_info: Can't read info structure
[  405.365492][T15653] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  405.370633][T15653] EXT4-fs (loop5): Cannot turn on quotas: error -5
[  405.382149][T15653] EXT4-fs (loop5): 1 truncate cleaned up
[  405.387869][T15653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  405.417086][ T8326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.506660][T15661] loop5: detected capacity change from 0 to 512
[  405.516116][T15661] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  405.524578][T15661] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  405.530014][T15661] System zones: 0-2, 18-18, 34-35
[  405.534579][T15661] EXT4-fs (loop5): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  405.657719][T15663] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set
[  405.707547][ T8326] EXT4-fs (loop5): unmounting filesystem 00000000-0700-0000-0000-000000000000.
[  405.841674][   T10] holtek_mouse 0003:04D9:A072.0022: unknown main item tag 0x0
[  405.844851][   T10] holtek_mouse 0003:04D9:A072.0022: unknown main item tag 0x0
[  405.847816][   T10] holtek_mouse 0003:04D9:A072.0022: unknown main item tag 0x0
[  405.850773][   T10] holtek_mouse 0003:04D9:A072.0022: unknown main item tag 0x0
[  405.859875][   T10] holtek_mouse 0003:04D9:A072.0022: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.1-1/input1
[  405.935204][ T5886] usb 2-1: USB disconnect, device number 64
[  405.994276][T15666] loop5: detected capacity change from 0 to 32768
[  406.393540][ T5844] Bluetooth: hci0: command tx timeout
[  406.563100][T15675] loop8: detected capacity change from 0 to 32768
[  406.565522][T11185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.568632][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.648236][T15688] loop1: detected capacity change from 0 to 16
[  406.665182][T15688] erofs (device loop1): mounted with root inode @ nid 36.
[  406.747852][T15692] batman_adv: batadv0: Adding interface: dummy0
[  406.751333][T15692] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.762248][T15692] batman_adv: batadv0: Interface activated: dummy0
[  406.798355][T15692] batadv0: mtu less than device minimum
[  406.801083][T15692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  406.805114][T15692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  406.809004][T15692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  406.812847][T15692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  406.816697][T15692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  406.821125][T15692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  406.825168][T15692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  406.876751][T15703] netlink: 196 bytes leftover after parsing attributes in process `syz.8.3694'.
[  406.880633][T15703] netlink: 196 bytes leftover after parsing attributes in process `syz.8.3694'.
[  406.886424][T15703] netlink: 19 bytes leftover after parsing attributes in process `syz.8.3694'.
[  406.920087][T15707] loop8: detected capacity change from 0 to 1024
[  406.951307][T12972] hfsplus: b-tree write err: -5, ino 4
[  407.044375][ T5886] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  407.119370][T15716] loop8: detected capacity change from 0 to 512
[  407.122053][T15716] EXT4-fs: Ignoring removed i_version option
[  407.124987][T15716] EXT4-fs: Ignoring removed nobh option
[  407.128055][T15716] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  407.138795][T15716] EXT4-fs (loop8): 1 truncate cleaned up
[  407.143750][T15716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  407.196814][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.202980][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.207513][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  407.212748][ T5886] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  407.216599][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.221646][ T5886] usb 2-1: config 0 descriptor??
[  407.325365][T15367] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.365390][T15720] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3699'.
[  407.380215][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3699'.
[  407.637456][ T5886] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  407.785976][T15736] netlink: 'syz.5.3707': attribute type 21 has an invalid length.
[  407.788620][T15736] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3707'.
[  407.840604][ T5899] usb 2-1: USB disconnect, device number 65
[  407.893067][T15747] loop8: detected capacity change from 0 to 1024
[  407.908375][T15747] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  407.943780][T15747] EXT4-fs error (device loop8): ext4_get_first_dir_block:3556: inode #11: comm syz.8.3712: directory missing '..'
[  407.973240][T15367] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.018460][   T33] audit: type=1326 audit(1755256168.953:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.8.3715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cd18ebe9 code=0x7ffc0000
[  408.031170][   T33] audit: type=1326 audit(1755256168.953:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.8.3715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cd18ebe9 code=0x7ffc0000
[  408.172518][T15765] netlink: 'syz.8.3720': attribute type 2 has an invalid length.
[  408.179257][T15765] netlink: 'syz.8.3720': attribute type 1 has an invalid length.
[  408.473712][ T5886] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  408.645311][ T5886] usb 9-1: Using ep0 maxpacket: 8
[  408.655365][ T5886] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 201, changing to 11
[  408.661497][ T5886] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  408.669634][ T5886] usb 9-1: config 1 interface 0 has no altsetting 0
[  408.676742][ T5886] usb 9-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.40
[  408.680729][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.689757][ T5886] usb 9-1: Product: syz
[  408.693156][ T5886] usb 9-1: Manufacturer: syz
[  408.698207][ T5886] usb 9-1: SerialNumber: syz
[  408.723656][ T5876] unregister_netdevice: waiting for lo to become free. Usage count = 2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  408.742772][ T5876] ref_tracker: netdev@ffff88802b7fe610 has 1/1 users at
[  408.742772][ T5876]      dst_init+0xd9/0x450
[  408.742772][ T5876]      dst_alloc+0x12a/0x170
[  408.742772][ T5876]      rt_dst_clone+0x52/0x680
[  408.742772][ T5876]      ip_mc_finish_output+0xec/0x250
[  408.742772][ T5876]      ip_mc_output+0x25c/0x590
[  408.742772][ T5876]      ip_send_skb+0x74/0x100
[  408.742772][ T5876]      udp_send_skb+0xaf1/0x14c0
[  408.742772][ T5876]      udp_sendmsg+0x195a/0x2170
[  408.742772][ T5876]      udpv6_sendmsg+0xbf0/0x24b0
[  408.742772][ T5876]      __sock_sendmsg+0xe5/0x270
[  408.742772][ T5876]      ____sys_sendmsg+0x52d/0x830
[  408.742772][ T5876]      ___sys_sendmsg+0x21f/0x2a0
[  408.742772][ T5876]      __sys_sendmmsg+0x227/0x430
[  408.742772][ T5876]      __x64_sys_sendmmsg+0xa0/0xc0
[  408.742772][ T5876]      do_syscall_64+0xfa/0x3b0
[  408.742772][ T5876]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.742772][ T5876] 
[  408.805003][T14526] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  408.988655][T14526] usb 2-1: device descriptor read/all, error -71
[  409.436561][ T5886] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input32
[  409.486391][ T5886] usb 9-1: USB disconnect, device number 3
[  412.315445][T11180] net_ratelimit: 16 callbacks suppressed
[  412.315461][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.321115][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.966041][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.969770][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.606509][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.084348][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.087776][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog

VM DIAGNOSIS:
11:09:29  Registers:
info registers vcpu 0

CPU#0
RAX=000000008f05b320 RBX=0000000000000001 RCX=00000000d3267c2c RDX=000000001400d378
RSI=00000000208f05b3 RDI=ffff888021b45640 RBP=0000000000000000 RSP=ffffc9000392f0f0
R8 =0000000000000000 R9 =ffffffff81f608bc R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=0000000083ceb49b R13=ffff888021b46130 R14=ffff888021b46158 R15=00000000161ad6a3
RIP=ffffffff819d66f6 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=fffffffffffffe70 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fca1e387498 00007fca1e387470 XMM03=00007fca1e3874a8 00007fca1e3874a0
XMM04=00007fca1eeed100 00007fca1e387460 XMM05=00007fca1e387478 00007fca1e3874c0
XMM06=00007fca1e3874b8 00007fca1e3874b0 XMM07=00007fca1e3874a8 00007fca1e3874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fca1e212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000020007 RBX=0000000000000003 RCX=0000000000000000 RDX=0000000000000000
RSI=ffff8881073de1a8 RDI=ffff8881073dd640 RBP=0000000000000000 RSP=ffffc90003207348
R8 =0000000000000000 R9 =ffffffff822e4087 R10=dffffc0000000000 R11=fffff94000227211
R12=000000005f732093 R13=ffff8881073de130 R14=ffff8881073de1a8 R15=82b5e6aab085605c
RIP=ffffffff819da433 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe89cae7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fe89bf876c3 00007fe89bf876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055557355a0e7 000055557355a070
XMM06=000055557355e884 000055557355e880 XMM07=08024bea0074656e 2d74736f68762f76
XMM08=65642f01ffffffff ffffffffe1081180 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
