last executing test programs:

1m56.425724382s ago: executing program 2 (id=251):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x800, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)

1m55.839055016s ago: executing program 2 (id=257):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)

1m55.484344746s ago: executing program 2 (id=260):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'})
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040effff2820"], 0x7)

1m55.248321791s ago: executing program 2 (id=262):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1m53.973442763s ago: executing program 2 (id=273):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1})
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04f20b20"], 0x7)

1m53.349768748s ago: executing program 2 (id=278):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x2d, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x9}}, 0x20)

1m53.041488626s ago: executing program 32 (id=278):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x2d, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x9}}, 0x20)

12.345594502s ago: executing program 4 (id=812):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x1}, 0x8)

12.044339439s ago: executing program 4 (id=813):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='dev_mnt/zram0\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='\x00', 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11.748303177s ago: executing program 4 (id=816):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)="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", 0x1ae}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76b", 0x81}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

11.518398603s ago: executing program 4 (id=819):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x14, 0xc49, &(0x7f0000001cc0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x143142, 0x120)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

10.787055581s ago: executing program 4 (id=826):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
bpf$PROG_LOAD(0x25, 0x0, 0x0)

10.076130869s ago: executing program 4 (id=832):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1)

9.453061444s ago: executing program 33 (id=832):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1)

8.204880246s ago: executing program 1 (id=838):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10)

7.772383386s ago: executing program 1 (id=842):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
writev(r0, &(0x7f0000006280)=[{&(0x7f00000041c0)="d2cf43", 0x3}], 0x1)

6.580309276s ago: executing program 1 (id=848):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xbfb3)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r1 = syz_open_pts(r0, 0x101000)
dup3(r1, r0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)

6.058196369s ago: executing program 1 (id=849):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x10683, &(0x7f0000011040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x103200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020)

4.244257334s ago: executing program 0 (id=857):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x39, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

4.03183069s ago: executing program 0 (id=859):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000400)={0xfffffff, 0x401, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x4, '\x00', @p_u32=0x0}})
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.356416876s ago: executing program 5 (id=863):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b0001"], 0x10c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005"], 0x7c}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

3.290694598s ago: executing program 3 (id=864):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
exit(0x7ffd)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1043, 0x0)

3.069205574s ago: executing program 5 (id=865):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0]}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000000875a0000040000000100000000000000", @ANYRES32=r0], 0x50)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="0203000920020000ff0e00000000000002000900100000009d09000000000000030006000000000002000000e0000002000000000000000002000100000004d300000503010000c0030005003c00000002000000ac141400000000000000000005001a0020010000000000000000000000000000ff0200000000000000000000000000011d0000000102080000800000ee3fbec9e0cba133f73ad299ee34924bb6b5c04db2a97c180d06c141adabeaa25c5ee4137122f693be294184847f7d563c13823746e4251def213156c092a66441d2697b70d242dd373ce5466db1e3233022b28735c1f63b6f94cd9a3dc02ed595ab0f4920ba149f9e2b776a673cba6fd1b1a0b7afc324c7415f9f10bc0e1b9be3ecdd4ee2dafc8920be27da28fd485d760193bfd14753cfeda8980e9d7b5d309e7135f18873dec0e1aac30a5e0fb3e76837c966d2beb0a6ca532718688b10d1522993460d48e51400a4db815306c563cd51273f67fc2b5f354bd2f9b5399f98d22e303c2d7a73be0710637c0ba3ab300cff9eaaf1308e0993b337ca704b62a06332c76baf4146cc34343f935bdde85add31c6f41057628282e78bff38e1afe16c2de8da167421a725c57c3018248b7ddef4538a0486aaac0fac9a0d6f1128da0c93736f1f690a226c4576c07d139e011e88769db1963d7006505155656da5f0001f15cf7f98a3f19ac5dfa9a9f46abec62127968c754599bfb172a7c232f4036a42dd16b4e8be8269f62df816406b3168c4e731d572422201f89d4508222bb22a35326a3cc5249d2f0c30c949678a10c9a89e496fdde1b9d0d435806e9e7b87e1867922c6fa0edb4a1354039d6d24ee6208c43d657ef8c4037ac83d97b40e35514ad749bd7532becf06a9cb74e5fcca8eaf30563a3dffb41a9972a373f27c30184e1b0b2aec02af308904cebfa1f0e10a293353707fd5712dfd5eb6f71cea4603a2e7285c11dc4810897a1fff4698fb7c411a5655271a80e1d56fd43ee43cdd49ae6b4382a4e074f6f2f2054e42b865ae13f819a2be2c58cf0acb03c9e3988d41dc51566953ca34abd8ea4089f7b95ba5c06cc879fcb1b0f75c068c549397c61dab3599b9830903c20135f7263f893116ec7a24fada06ada39a4ded8abca5ac03d2405804184f7a5fe73f0af7ec465bd5dcbc682c33009331fca66e8a783c20bbd9f1be03847d80e5473e9cbd280d4d38813e29e5eac24f3be9241011b908076d6419af18620819822a55f03adf118437e50aa89111441f6768154747d1169a3cc3a1b8ca19fee05fdda3d1b226dae467e2b5eecada92cc0257a26c5ad073420a9d6f409b5694d616087eb2bcbd80b7982be14f2487711294e38330599fde6b29ad7e47d0c8e5219145517a78e91448dde7585d7310ad74282dbd6350b1e21c97757ea85be98a618d0f9d27e0b23e76be07d062aeccd54c1c36d8222139d925898e9b833c9ba3d676738c1fb0df1175ba70353a20633019af5c0ea4084f1a95c5895c998d04fd72f31a5aca0128bdc4357970f2ef428956cab03ca4789cdc467beaac3c00cf249b5910a55062f4370341e3707e34481d3c3157ee01cfb22c778f1697f311a46c2c4568e13a517ceb71ccc1722c195b850a111f705d1365913cb9694f476eb6ae732b97325faed2e2df43db0d1096abd3ceb5955e126f2eaebc6ae1057be9d8b6dddf575a40d97ebed64bcfdbd5bf941a9750de451566cbf3d1026f749fc4574641183daff715556a6d1a5a04b885cf7d00ba04e8c56df4192d97f8f3834975bfdd7d2cfc7d054192ed45cac9ef27305ab75eebc59543caf84218a62f2d748b14e5d69756d869ba345567a4e4f0aa561c85ace548ca03ecbd5a2325b3b8df00d8260ba2625ce7c0b4c8a9bea3ff57ba5dcc7cbe1d24ae9ab5ffa186d0d945b976342eb4f0c69c31f88207e7b22638b27f1cf75f9cfae3fabb54af777d29023d4cdf3d674f154158e34264093b92cd185210c792566bf7f729ee440d1a764569d5e4f1512a674959c1671876d27c7a6e4adf6fd205bdd7ebf29db8349a1195132cb816f3311b3a7d7be73da80aea65ab27f1c603676bf9e2869817a276f437c8ad9cc2a5ce80f578502bb70d1806b00877ada92e84f7c82bf0a731bc13ced283b0dddd5ed59bec47d881104ce6be5edc42c2359f99564d79839c8ab50b6445bb0670c0dd9d8253c482906df9f554b4e59da8c959c7af7748255e03e5ebb5b98f78adcafd60c1b418359a427c8227c88c740053c906b20ecadc4b3e2766fee8e21cebdc1ae6fdd6ec10730671e97fa51b06936a07d712ff75578210a36aeec1dc89f690847e4cdaf56f75c5e4b29d8d3256fc3c4c0c58645beea9ccc1a3c897cb8a452a215d5894b5bb5e68b4ff09b8cebfa0952ef5a20426a03c51c4b3d34b9f0aa3ef152268b10eee348129b3ce59b24f5e1005f501cd67f50bfdd59c1c8ed2d86d5aa83eb9e7e454525a89cf8f4fbdd2bfbc3303e1e686b40a94075486bc5e7ca345dc8d32c9aa0b34823ecca97aa65265723b7044c99a04436315c7d09614b9211990df72d50c4fce6b668acbf95f53574f06f3044e47958500e299baacfb27b5e67850dc05e1b540b8089e7085378f33b2b3c2ceb5cd45cd933600cc9c886a722d50470bf3a0b7221607168d2f439a7bd7a1b02ac8cf2f2819369e5d0aba01dc2ac0df41cc33cbbf26f5931445dd6135dcd94e8239974f939b789d919d6558629e9ea9f3181824976770c0fb83f598070447460bf249b45ce5388d45c32f03ee5585f492d4fda9a72404eaec85cbbb02038c0f06636c639dabfe52b50ca6918dc5601a365ab0aa591439686934e1e39fffb01435b010d3985f74ff14f925a1c310e69a4d3ba7edcc816783cff5063eec754b99651ebb48c3681c4f61bca75f6859a456abc2458142ec6e002d7cbe06802581fcd9555ba46671e25ac293a6fc16fc1d87e87c9e724c9218e849c223a9d1e36b6f1908f588e7fcccd671f435146d92874eae168d4f561a7af45ea8de4aa011c6a79484773c42d7226c5b4936b45b59752404ee4a609c220f8b5343a763ca36f2705689f191cfa511aa4da4be8b2b333c9a029a6f3292101e9f651e1266ab2ca551b7bdf56462bfcd6fa9dd9fe07421ea451df802bdbbceceb83360c9c36df52c97f3072b7fb94a8ef3acc80ec14b8682d9eafbd2e228825e9cdfe762a2cedad1b87f92485a771bb701ff35bf260dc15d08a8ea6c6f3b4d5f7eb8e3b8c536f106899f73dbe43f91343ace6fffaa2e0197b44b730cefcaed1ceba9140c05706e4fa52313b7507f18888b8f00542b6029633ae3bea9aeffef4072a97f6566b84900ff6d6f30a80754e79fa5a83fc6efad719e38c413290b26c9755117469b87a903cc18491ad1b26ce14a8a7362006430f1387ca0d446a8a861ed65bb9d8d03614c79724b84cf607ebbc9374f6a5d494286ce75383f314ad743822f8534f23ddef60b4fd0e03dc6c810ea3ced898493fc73b0455774187b6ad55b9fec781bb715d2140ded272bd7f16d2cc2ed61a6ed2ed46d6327d3eaa5afdea3388a2a449d25d40413824b667da120ef3a453fc5416c83c5d197b6e0c2e7dbb385f4cdc62a550768fbf29fc85474daa441e8e6a61abce6985d9c1d8308437c21c09a2a02aeba119e17b8d7aa9bc93fd1f750a69acbd08885ffd4bd1165b880f2c070e3f32b113d99ebf491420e74ef556bcf2129769ee44d3a155dfd2a6ed7b794ace72b3b3a46d6bcf30dd79228752a32f876aff52bffaf8e5dcb5cbd206c0fc64979e326e52ccb8ed8453ab88a0224800cb7b48a21e935f510bdd1627967058c5af93b41b5b1a0d76bc1262d16aeb5776599a184c52da521dd1f365740bc6e931b38299659a30835bc94b7ef9dd631a5d5a1d3742c39d603584dc44de77dc16f6a502bdcdf9e2af755b8a28fb7592c48f7155677dabfd79e82b4dd769b40850d4cabebf2e6be3a82c7fc19a09056849125d541e8159a2561feb05a97222c0e040bab549c4754d9a0881bd7cd973628eacf5b76883094fb9aea9aff2df9651fb95af274749d880817482f342c1dba80277f96f0b4881ae6845763cd8f6df2a8392494581b7c2783c115f99c8f5fa9a6269457152dd3ee914ac9e3d7c4af131f3f3efee61e44d123c245ae4a7445acfb0f1a74d90c8a2010893786442af9fcaca3e67270fd8b2056a426b9c52549180daecb20e8e8b253ea64ea94cc4cf68c00ccbe00214b889145ee3caed1a2388a47e1f51c9c5a88921fa909033d5f518a3bed4263a435c1a6ac218728ae4309b0b411dac79a6e63ae14633786037ad33a88b17ce953356de60ea77fc07ba686867d7396d13ee765970392f7df778376ebf67109408d57ba29a7128829874c044eeefb66b2998370b5b8007373c186ac3a6fb31413f99b5d35a77ee65017a04de89f64f91f34e1f7625a9fce29f11c07d04075f445c145bcf115d82320b8416a11349020cbaf140115851fde9802df0b806940519605d03f72064921747ea004810a70e5d9c9b7a6c9d0f880571303f5376c6bf20ea0eb4a230b051b7a94b81a4f687bc50fe90fe2d85b6c0224e333fc00adb995f75c222f890fde71c127f5c221bef8436df64d4b3720a3b9986bf20f4851905bd94282865320f7ef44bbc861750b48a4f7eec51ef69cbddf588a28aa0e3d0e0a16084f2004857f245db41a2888b1ed4b1e6e18621307ebc6b517bb62f51999abc067988a6eccc027aecf155aa791cb12dcb5ba91902dff604d766fc9"], 0x1100}, 0x1, 0x7}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1, 0x0, 0x8000000}, 0x27)

2.788370781s ago: executing program 5 (id=866):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0)
write(r0, &(0x7f0000001740)='Fs', 0x2)

2.487021768s ago: executing program 5 (id=867):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
unshare(0x2020600)
ioctl$int_in(r2, 0x5452, &(0x7f00000003c0)=0x7)
tee(r0, r3, 0x4e, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file1'}, 0xb)

2.160550236s ago: executing program 5 (id=868):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

1.984260631s ago: executing program 1 (id=869):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

1.947074722s ago: executing program 3 (id=870):
r0 = fsopen(&(0x7f0000000480)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x5)
fchdir(r1)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x49)
lseek(r2, 0x9, 0x1)

1.815819775s ago: executing program 5 (id=871):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)

1.60192849s ago: executing program 0 (id=872):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000002180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "361db3", 0x0, 0x2b, 0x0, @local, @mcast2}}}}, 0x0)

1.272387799s ago: executing program 3 (id=873):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.115656972s ago: executing program 0 (id=874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r2}, 0xc)

1.110847252s ago: executing program 3 (id=875):
r0 = syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x580)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x804)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}})

748.349852ms ago: executing program 0 (id=876):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
io_setup(0x7, &(0x7f0000000280)=<r2=>0x0)
connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x0, 0x800000000001, 0xffff, r0, 0x0}])

562.494746ms ago: executing program 3 (id=877):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@deltclass={0x24, 0x29, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {0x8, 0xffe4}, {0xfff3, 0xc}}}, 0x24}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)

207.603135ms ago: executing program 0 (id=878):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
r2 = dup3(r1, r0, 0x80000)
write$vhost_msg(r2, &(0x7f0000000440)={0x1, {0x0, 0x0, 0x0, 0x1, 0x3}}, 0x44)

4.31421ms ago: executing program 1 (id=879):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./configfs\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./configfs\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000000)='./configfs\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='usb_gadget/g1/configs/c.1/mass_storage.0\x00', 0x0)
rmdir(&(0x7f00000000c0)='usb_gadget/g1/functions/mass_storage.0\x00')

0s ago: executing program 3 (id=880):
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = creat(&(0x7f0000000040)='./file1\x00', 0x108)
r2 = fanotify_init(0xf00, 0x1)
fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0)
fallocate(r0, 0x0, 0x1000000, 0x3)

kernel console output (not intermixed with test programs):

 IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.905626][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.917499][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.948571][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.956506][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.965728][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.975104][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.983862][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.991769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.000275][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.013275][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.033847][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.045640][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.061764][ T4273] device veth0_macvtap entered promiscuous mode
[   72.072568][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.081682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.091759][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.100921][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.109729][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.134995][ T4273] device veth1_macvtap entered promiscuous mode
[   72.153894][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.163864][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.179947][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.192804][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.205237][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.254277][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.281695][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.295361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.305833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.321555][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.332364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.345030][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.355480][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.364127][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.388978][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.402933][ T4274] device veth0_vlan entered promiscuous mode
[   72.413299][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.422314][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.438286][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.448134][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.458290][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.467135][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.494793][ T4274] device veth1_vlan entered promiscuous mode
[   72.503536][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.512339][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.521014][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.531212][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.538975][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.546447][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.554959][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.570167][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.579169][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.595805][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.603864][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.613858][ T4272] device veth0_vlan entered promiscuous mode
[   72.634741][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.644683][ T4275] device veth0_vlan entered promiscuous mode
[   72.678288][ T4272] device veth1_vlan entered promiscuous mode
[   72.701901][ T4275] device veth1_vlan entered promiscuous mode
[   72.729027][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.756625][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.794710][ T4274] device veth0_macvtap entered promiscuous mode
[   72.847037][ T4274] device veth1_macvtap entered promiscuous mode
[   72.869186][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.881718][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.893151][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.906686][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.933987][ T4275] device veth0_macvtap entered promiscuous mode
[   72.941830][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.953751][ T4272] device veth0_macvtap entered promiscuous mode
[   72.960261][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.973562][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.988861][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.003695][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.012638][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.030309][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.043048][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.054397][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.078779][ T4272] device veth1_macvtap entered promiscuous mode
[   73.089868][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.100863][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.109437][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.119092][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.129658][ T4275] device veth1_macvtap entered promiscuous mode
[   73.139594][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.155486][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.172610][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.195913][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.210876][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.225478][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.242998][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.267182][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.278611][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.289705][ T4288] Bluetooth: hci0: command 0x040f tx timeout
[   73.289713][   T49] Bluetooth: hci4: command 0x040f tx timeout
[   73.295934][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.298353][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.330416][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.339543][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.351791][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.359278][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.368512][ T4288] Bluetooth: hci2: command 0x040f tx timeout
[   73.369196][   T49] Bluetooth: hci1: command 0x040f tx timeout
[   73.374630][ T4288] Bluetooth: hci3: command 0x040f tx timeout
[   73.388035][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.397233][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.409096][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.420229][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.430337][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.440846][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.453191][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.463884][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.475129][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.487189][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.497267][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.506009][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.514377][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.523301][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.540497][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.551072][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.560985][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.571602][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.584811][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.599148][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.615097][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.625217][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.636161][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.646056][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.656522][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.668589][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.696733][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.706145][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.716015][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.725464][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.734367][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.743515][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.757619][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.766341][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.776098][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.785073][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.799150][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.809874][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.819617][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.828490][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.949221][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.966071][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.975397][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.983797][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.037763][ T4276] device veth0_vlan entered promiscuous mode
[   74.075602][ T4276] device veth1_vlan entered promiscuous mode
[   74.083135][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.103211][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.128119][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.136375][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.145793][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.173628][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.174781][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.189966][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.203877][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.211582][ T4355] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   74.237459][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.245328][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.254173][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.263624][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.273727][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.299904][ T4276] device veth0_macvtap entered promiscuous mode
[   74.311274][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.316979][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.324938][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.335380][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.336453][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.370852][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.383079][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.391400][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.402993][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.418841][ T4355] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[   74.436010][ T4276] device veth1_macvtap entered promiscuous mode
[   74.443073][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.485400][ T4355] usb 3-1: Product: syz
[   74.493081][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.524356][ T4355] usb 3-1: Manufacturer: syz
[   74.529446][ T4355] usb 3-1: SerialNumber: syz
[   74.537687][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.573295][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.573426][ T4359] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.584314][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.637349][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.660784][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.681772][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.702549][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.740936][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.768802][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.778486][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.802032][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.842418][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.865174][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.875906][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.898304][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.917451][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.928446][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.940191][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.956893][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.001294][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.005895][ T4355] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[   75.013190][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.029067][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.146939][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.155721][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.179303][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.190963][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.417777][ T4288] Bluetooth: hci0: command 0x0419 tx timeout
[   75.418011][ T4286] Bluetooth: hci4: command 0x0419 tx timeout
[   75.449219][   T49] Bluetooth: hci2: command 0x0419 tx timeout
[   75.455559][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[   75.463569][ T4288] Bluetooth: hci3: command 0x0419 tx timeout
[   76.516821][    C0] sched: RT throttling activated
[   76.525769][ T4372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.556472][ T4372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.556864][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   77.576858][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   77.586847][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   77.596845][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   77.606843][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   77.616844][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   77.626841][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   77.636837][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   77.646853][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   77.656858][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   78.076953][ T4319] usb 3-1: USB disconnect, device number 2
[   78.148405][ T4319] usblp0: removed
[   79.704684][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.767851][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.859943][ T4384] device syzkaller0 entered promiscuous mode
[   79.895424][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.665711][ T4421] xt_CT: No such helper "netbios-ns"
[   85.333662][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.343290][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.360455][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.378352][ T4441] wlan0 speed is unknown, defaulting to 1000
[   85.384672][ T4441] wlan0 speed is unknown, defaulting to 1000
[   85.392856][ T4441] wlan0 speed is unknown, defaulting to 1000
[   85.403608][ T4441] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   85.417018][ T4441] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   85.443936][ T4441] wlan0 speed is unknown, defaulting to 1000
[   85.455800][ T4441] wlan0 speed is unknown, defaulting to 1000
[   85.462789][ T4441] wlan0 speed is unknown, defaulting to 1000
[   85.470828][ T4441] wlan0 speed is unknown, defaulting to 1000
[   85.488220][ T4441] wlan0 speed is unknown, defaulting to 1000
[   86.730937][  T129] cfg80211: failed to load regulatory.db
[   88.464807][ T4446] loop3: detected capacity change from 0 to 512
[   88.633313][ T4446] EXT4-fs: error -4 creating inode table initialization thread
[   88.780338][ T4446] EXT4-fs (loop3): mount failed
[   93.624244][ T4355] libceph: connect (1)[c::]:6789 error -101
[   93.657526][ T4355] libceph: mon0 (1)[c::]:6789 connect error
[   93.927049][ T4491] Invalid ELF header magic: != ELF
[   95.141207][ T4354] libceph: connect (1)[c::]:6789 error -101
[   95.159376][ T4480] ceph: No mds server is up or the cluster is laggy
[   95.330115][ T4354] libceph: mon0 (1)[c::]:6789 connect error
[   99.371991][ T4517] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  100.755034][ T4528] loop3: detected capacity change from 0 to 128
[  101.032208][ T4531] device syzkaller0 entered promiscuous mode
[  101.610400][ T4544] Zero length message leads to an empty skb
[  102.687000][ T4552] loop4: detected capacity change from 0 to 4096
[  102.797526][ T4552] ntfs3: loop4: failed to replay log file. Can't mount rw!
[  105.927957][ T4574] loop0: detected capacity change from 0 to 131072
[  105.960288][ T4574] F2FS-fs (loop0): invalid crc value
[  106.083192][ T4576] input: syz1 as /devices/virtual/input/input6
[  106.132271][ T4574] F2FS-fs (loop0): Found nat_bits in checkpoint
[  106.172835][ T4574] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  106.209589][ T4574] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  107.457110][ T4592] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  107.868323][ T4585] se_dev->se_dev_ptr already set for storage object
[  107.952338][ T4597] device syzkaller0 entered promiscuous mode
[  108.184234][   T26] audit: type=1800 audit(1785523886.452:2): pid=4590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.50" name="alua_tg_pt_offline" dev="configfs" ino=35400 res=0 errno=0
[  108.279293][ T4601] UBIFS error (pid: 4601): cannot open "(null)", error -22
[  109.089075][ T4611] loop1: detected capacity change from 0 to 32768
[  109.250522][ T4616] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER'
[  110.044762][ T4614] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  110.051661][ T4614] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  110.061915][ T4614] vhci_hcd vhci_hcd.0: Device attached
[  110.084576][ T4615] vhci_hcd: connection closed
[  110.088755][ T4404] vhci_hcd: stop threads
[  110.520123][ T4404] vhci_hcd: release socket
[  110.535516][ T4404] vhci_hcd: disconnect device
[  110.601184][ T4277] usb 42-1: enqueue for inactive port 0
[  110.867334][ T4611] loop3: detected capacity change from 0 to 32768
[  111.754762][ T4277] usb usb42-port1: attempt power cycle
[  112.607875][ T4611] block device autoloading is deprecated and will be removed.
[  112.888470][ T4277] usb usb42-port1: unable to enumerate USB device
[  112.905917][ T4642] loop0: detected capacity change from 0 to 32768
[  113.808249][ T4642] loop1: detected capacity change from 0 to 32768
[  114.174524][ T4641] loop4: detected capacity change from 0 to 1764
[  114.231556][ T4641] iso9660: Corrupted directory entry in block 14 of inode 1920
[  114.620904][ T4642] md/raid:md0: not clean -- starting background reconstruction
[  114.629063][ T4642] md/raid:md0: invalid chunk size 0
[  114.634321][ T4642] md: pers->run() failed ...
[  114.714882][ T4657] binder: 4653:4657 ioctl 400c620e 200000003b00 returned -22
[  114.732806][ T4657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.65'.
[  115.619515][ T4662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'.
[  116.087592][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.969921][ T4673] futex_wake_op: syz.3.69 tries to shift op by 144; fix this program
[  117.119440][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[  117.435252][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.735197][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.751759][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.762028][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.771204][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.789629][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.798391][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.807080][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.815581][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.834204][ T4716] loop2: detected capacity change from 0 to 512
[  120.849748][ T4716] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  120.857489][ T4716] UDF-fs: Scanning with blocksize 512 failed
[  120.865366][ T4716] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  120.873012][ T4716] UDF-fs: Scanning with blocksize 1024 failed
[  120.880091][ T4716] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  120.887594][ T4716] UDF-fs: Scanning with blocksize 2048 failed
[  120.895419][ T4716] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  120.910601][ T4716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.202936][ T4393] net_ratelimit: 49 callbacks suppressed
[  121.202954][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.933262][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.087397][ T4452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.247591][  T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.298137][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.048224][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.191082][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.027307][ T4762] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  126.033901][ T4762] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  126.041975][ T4762] vhci_hcd vhci_hcd.0: Device attached
[  126.150280][ T4763] vhci_hcd: connection closed
[  126.154521][   T47] vhci_hcd: stop threads
[  126.174688][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.202639][   T47] vhci_hcd: release socket
[  126.258068][   T47] vhci_hcd: disconnect device
[  127.597480][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.606586][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.301749][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'.
[  128.376638][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'.
[  128.846430][ T4792] netlink: 'syz.1.95': attribute type 4 has an invalid length.
[  129.158263][  T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.209959][ T4793] netlink: 'syz.1.95': attribute type 4 has an invalid length.
[  129.236777][ T4787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.96'.
[  129.294335][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.638426][ T4288] Bluetooth: hci2: unexpected subevent 0x0e length: 5 < 15
[  129.979134][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.235442][  T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.819940][ T4825] loop4: detected capacity change from 0 to 8
[  130.834086][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.861934][ T4825] SQUASHFS error: zlib decompression failed, data probably corrupt
[  130.871186][ T4825] SQUASHFS error: Failed to read block 0x9b: -5
[  130.883031][ T4825] SQUASHFS error: Unable to read metadata cache entry [99]
[  130.890640][ T4825] SQUASHFS error: Unable to read inode 0x127
[  131.041340][ T4823] loop2: detected capacity change from 0 to 4096
[  131.140462][ T4823] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  131.364034][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.687441][ T4839] process 'syz.1.108' launched './file0' with NULL argv: empty string added
[  132.457551][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.535138][ T4288] Bluetooth: hci0: Invalid connection link type handle 0x00c9
[  133.400505][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  133.406962][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.579684][  T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.861193][ T4288] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  133.920495][ T4876] loop2: detected capacity change from 0 to 128
[  133.950984][ T4876] VFS: could not find a valid V7 on loop2.
[  133.985285][ T4354] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  134.083129][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.094077][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.200143][ T4354] usb 2-1: Using ep0 maxpacket: 8
[  134.207949][ T4354] usb 2-1: unable to get BOS descriptor or descriptor too short
[  134.247948][ T4354] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.278430][ T4354] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024
[  134.319983][ T4354] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40
[  134.401205][ T4354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.425138][ T4354] usb 2-1: Product: syz
[  134.429374][ T4354] usb 2-1: Manufacturer: syz
[  134.446591][ T4894] loop4: detected capacity change from 0 to 128
[  134.462866][ T4354] usb 2-1: SerialNumber: syz
[  134.520223][ T4894] =======================================================
[  134.520223][ T4894] WARNING: The mand mount option has been deprecated and
[  134.520223][ T4894]          and is ignored by this kernel. Remove the mand
[  134.520223][ T4894]          option from the mount to silence this warning.
[  134.520223][ T4894] =======================================================
[  134.687884][  T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.718467][ T4354] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  134.869247][ T4354] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  135.023686][ T4288] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  135.032370][ T4288] Bluetooth: hci0: Injecting HCI hardware error event
[  135.041855][   T49] Bluetooth: hci0: hardware error 0x00
[  135.194379][ T4354] usb 2-1: USB disconnect, device number 2
[  135.344952][ T4288] Bluetooth: hci2: unknown advertising packet type: 0x1a
[  135.509397][ T4927] loop4: detected capacity change from 0 to 4096
[  135.564838][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.581191][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  135.588051][ T4927] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  135.597498][ T4636] udevd[4636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  135.606290][  T129] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  135.686495][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.792255][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.878982][  T129] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  135.930140][  T129] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3
[  135.982490][  T129] usb 3-1: config 220 interface 0 has no altsetting 0
[  135.996145][  T129] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  136.027885][  T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.151237][  T129] usb 3-1: Product: syz
[  136.304748][  T129] usb 3-1: Manufacturer: syz
[  136.430012][  T129] usb 3-1: SerialNumber: syz
[  136.903757][ T4288] Bluetooth: hci0: unexpected cc 0x0c57 length: 26 < 33
[  136.910856][ T4288] Bluetooth: hci0: unexpected event for opcode 0x0c57
[  136.945987][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.976000][  T129] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  137.020351][  T129] usb 3-1: No valid video chain found.
[  137.071576][  T129] usb 3-1: USB disconnect, device number 3
[  137.134338][ T4288] Bluetooth: hci0: unexpected event for opcode 0x0c38
[  137.335116][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.340737][   T49] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  138.108154][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.161419][ T4954] loop4: detected capacity change from 0 to 32768
[  138.213979][   T49] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3
[  138.237998][ T4954] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  138.302500][  T129] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  138.310471][ T4954] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  138.330765][   T49] Bluetooth: hci3: Dropping invalid advertising data
[  138.338467][   T49] Bluetooth: hci3: Malformed LE Event: 0x02
[  138.493109][ T4954] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  138.510048][  T129] usb 3-1: unable to get BOS descriptor or descriptor too short
[  138.532340][  T129] usb 3-1: not running at top speed; connect to a high speed hub
[  138.553920][    T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  138.574746][    T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  138.582333][  T129] usb 3-1: config index 0 descriptor too short (expected 16411, got 27)
[  138.629265][  T129] usb 3-1: config 4 has an invalid interface number: 79 but max is 0
[  138.676785][  T129] usb 3-1: config 4 has no interface number 0
[  138.706982][  T129] usb 3-1: config 4 interface 79 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0
[  138.752026][  T129] usb 3-1: config 4 interface 79 has no altsetting 0
[  138.774902][  T129] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e3.b7
[  138.795063][  T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.820394][  T129] usb 3-1: Product: syz
[  138.824627][  T129] usb 3-1: Manufacturer: syz
[  138.849331][    T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 256ms
[  138.851455][  T129] usb 3-1: SerialNumber: syz
[  138.890847][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.892739][    T7] gfs2: fsid=syz:syz.0: jid=0: Done
[  138.936458][ T4954] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  139.153720][  T129] viperboard 3-1:4.79: version 0.00 found at bus 003 address 004
[  139.202149][  T129] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  139.221787][  T129] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  139.232222][ T4354] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  139.275326][  T129] usb 3-1: USB disconnect, device number 4
[  139.328803][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.392637][   T49] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  139.401446][   T49] Bluetooth: hci1: Injecting HCI hardware error event
[  139.411590][   T49] Bluetooth: hci1: hardware error 0x00
[  139.455199][ T4354] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  139.476307][ T4354] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  139.491556][ T4322] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  139.531692][ T4354] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  139.567881][ T4354] usb 1-1: config 220 has no interface number 2
[  139.602377][ T4354] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  139.659657][ T4354] usb 1-1: config 220 interface 0 has no altsetting 0
[  139.666617][ T4354] usb 1-1: config 220 interface 76 has no altsetting 0
[  139.680122][ T4354] usb 1-1: config 220 interface 1 has no altsetting 0
[  139.696033][ T4322] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  139.707851][ T4354] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  139.727028][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.737650][ T4354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.755966][ T4322] usb 2-1: Product: syz
[  139.759708][ T4354] usb 1-1: Product: syz
[  139.763129][ T4322] usb 2-1: Manufacturer: syz
[  139.764600][ T4354] usb 1-1: Manufacturer: syz
[  139.782142][ T4322] usb 2-1: SerialNumber: syz
[  139.787893][ T4354] usb 1-1: SerialNumber: syz
[  139.810202][ T4322] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  140.046397][ T4354] usb 1-1: selecting invalid altsetting 0
[  140.076063][ T4354] usb 1-1: selecting invalid altsetting 0
[  140.082575][ T4322] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  140.088119][ T4354] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  140.119115][ T4354] usb 1-1: No valid video chain found.
[  140.151368][ T4288] Bluetooth: hci4: command 0x0406 tx timeout
[  140.186387][ T4354] usb 1-1: selecting invalid altsetting 0
[  140.192197][ T4354] usbtest: probe of 1-1:220.1 failed with error -22
[  140.212528][ T4354] usb 1-1: USB disconnect, device number 2
[  140.412900][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.475203][ T4452] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  140.517116][ T5049] loop4: detected capacity change from 0 to 16
[  140.535307][ T4393] usb 2-1: USB disconnect, device number 3
[  140.540346][ T5049] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  140.708801][ T4452] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.755948][ T4452] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  140.819036][ T4452] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  140.851080][ T4452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.878805][ T4452] usb 3-1: Product: syz
[  140.883036][ T4452] usb 3-1: Manufacturer: syz
[  140.887657][ T4452] usb 3-1: SerialNumber: syz
[  140.921928][ T4286] Bluetooth: hci2: command 0x2016 tx timeout
[  140.926260][ T4452] usb-storage 3-1:1.0: USB Mass Storage device detected
[  140.969337][ T4452] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  140.986184][ T4452] scsi host1: usb-storage 3-1:1.0
[  141.147218][  T129] usb 3-1: USB disconnect, device number 5
[  141.257993][ T5071] capability: warning: `syz.0.189' uses 32-bit capabilities (legacy support in use)
[  141.272217][ T4322] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  141.295347][ T4322] ath9k_htc: Failed to initialize the device
[  141.303831][ T4393] usb 2-1: ath9k_htc: USB layer deinitialized
[  141.525039][  T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.607086][   T49] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  141.668833][ T4284] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  141.830385][ T5090] loop2: detected capacity change from 0 to 16
[  141.902055][ T5090] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  141.924104][ T4284] usb 5-1: config 150 has an invalid interface number: 204 but max is 1
[  141.955757][ T4284] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  141.988264][ T4284] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 2
[  142.009835][ T4284] usb 5-1: config 150 has no interface number 0
[  142.036184][ T4284] usb 5-1: config 150 interface 204 has no altsetting 0
[  142.087823][ T4284] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  142.123894][ T4284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.153418][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.160536][ T4284] usb 5-1: Product: syz
[  142.167058][ T4284] usb 5-1: Manufacturer: syz
[  142.208626][ T4284] usb 5-1: SerialNumber: syz
[  143.343476][  T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.373731][ T4452] usb 5-1: USB disconnect, device number 2
[  144.382889][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.474575][ T4284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.515959][   T49] Bluetooth: hci2: command 0x0406 tx timeout
[  144.682300][  T129] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  144.917322][  T129] usb 2-1: Using ep0 maxpacket: 8
[  144.931327][  T129] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  144.965137][  T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.997522][  T129] usb 2-1: Product: syz
[  145.001831][  T129] usb 2-1: Manufacturer: syz
[  145.039035][  T129] usb 2-1: SerialNumber: syz
[  145.060333][ T5115] loop4: detected capacity change from 0 to 32768
[  145.086355][  T129] usb 2-1: config 0 descriptor??
[  145.092011][ T4452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.172373][  T129] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244)
[  145.263761][ T5115] XFS (loop4): Mounting V5 Filesystem
[  145.366756][ T5115] XFS (loop4): Ending clean mount
[  145.393624][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.443237][ T5142] loop2: detected capacity change from 0 to 256
[  145.451867][ T4452] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  145.538050][ T4276] XFS (loop4): Unmounting Filesystem
[  145.621912][  T129] radio-usb-si4713: probe of 2-1:0.0 failed with error -71
[  145.639250][  T129] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  145.652770][  T129] usb 2-1: USB disconnect, device number 4
[  145.661952][ T4452] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  145.670494][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.674279][ T4452] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.691438][ T4452] usb 1-1: Product: syz
[  145.716834][ T4452] usb 1-1: Manufacturer: syz
[  145.726688][ T4452] usb 1-1: SerialNumber: syz
[  145.767767][ T4452] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  145.825109][ T4452] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  146.019897][ T5150] loop2: detected capacity change from 0 to 2048
[  146.102851][ T5150] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.307477][ T4354] usb 1-1: USB disconnect, device number 3
[  146.332690][ T5159] loop4: detected capacity change from 0 to 256
[  146.459388][ T5162] loop2: detected capacity change from 0 to 8
[  146.871607][ T4284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.946722][ T5177] comedi comedi0: Minor 47 could not be opened
[  146.953842][ T4393] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  146.990332][ T4452] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  147.008243][ T4452] ath9k_htc: Failed to initialize the device
[  147.030179][ T4354] usb 1-1: ath9k_htc: USB layer deinitialized
[  147.043807][  T129] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  147.176630][ T4393] usb 2-1: Using ep0 maxpacket: 8
[  147.183587][ T4393] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  147.216495][ T4393] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  147.235967][ T4393] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  147.257458][  T129] usb 3-1: Using ep0 maxpacket: 32
[  147.271996][ T4393] usb 2-1: Product: syz
[  147.276577][  T129] usb 3-1: unable to get BOS descriptor or descriptor too short
[  147.289532][ T4393] usb 2-1: Manufacturer: syz
[  147.294218][ T4393] usb 2-1: SerialNumber: syz
[  147.301183][  T129] usb 3-1: unable to read config index 0 descriptor/start: -71
[  147.308842][  T129] usb 3-1: can't read configurations, error -71
[  147.437791][ T5175] loop4: detected capacity change from 0 to 32768
[  147.550260][ T5175] JBD2: Ignoring recovery information on journal
[  147.554789][ T4393] usb 2-1: Invalid connection information received from device
[  147.640209][ T5175] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  147.716046][ T5175] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[  147.784920][ T4393] usb 2-1: USB disconnect, device number 5
[  147.797058][ T5175] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  147.833935][ T5175] OCFS2: File system is now read-only.
[  147.852301][ T5175] (syz.4.234,5175,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  147.877569][ T5175] (syz.4.234,5175,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  147.908790][ T5175] (syz.4.234,5175,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  147.910458][ T5175] (syz.4.234,5175,0):ocfs2_block_group_alloc_contig:455 ERROR: status = -30
[  147.910503][ T5175] (syz.4.234,5175,0):ocfs2_block_group_alloc:727 ERROR: status = -30
[  147.910667][ T5175] (syz.4.234,5175,0):ocfs2_block_group_alloc:780 ERROR: status = -30
[  147.910743][ T5175] (syz.4.234,5175,0):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30
[  147.910763][ T5175] (syz.4.234,5175,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30
[  147.910783][ T5175] (syz.4.234,5175,0):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30
[  147.910978][ T5175] (syz.4.234,5175,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30
[  147.911059][ T5175] (syz.4.234,5175,0):ocfs2_init_xattr_set_ctxt:3284 ERROR: status = -30
[  147.911078][ T5175] (syz.4.234,5175,0):ocfs2_xattr_set:3641 ERROR: status = -30
[  148.028442][ T4276] ocfs2: Unmounting device (7,4) on (node local)
[  148.030920][ T4284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.582057][ T5216] loop4: detected capacity change from 0 to 512
[  148.622763][ T5216] EXT4-fs: Ignoring removed nobh option
[  148.628674][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.706215][ T5216] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  148.801721][ T5216] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.253: attempt to clear invalid blocks 1 len 1
[  148.946679][ T5216] EXT4-fs (loop4): Remounting filesystem read-only
[  148.978569][ T5216] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  149.018473][ T5216] EXT4-fs (loop4): Remounting filesystem read-only
[  149.018868][ T5216] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.253: invalid indirect mapped block 1819239214 (level 0)
[  149.020583][ T5216] EXT4-fs (loop4): Remounting filesystem read-only
[  149.020614][ T5216] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.253: invalid indirect mapped block 1819239214 (level 1)
[  149.020937][ T5216] EXT4-fs (loop4): Remounting filesystem read-only
[  149.032447][ T5216] EXT4-fs (loop4): 1 truncate cleaned up
[  149.032502][ T5216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  149.128079][  T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.193739][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  149.412867][ T5232] loop4: detected capacity change from 0 to 512
[  149.557501][ T5236] loop2: detected capacity change from 0 to 512
[  149.587535][ T5232] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103)
[  149.640748][ T5232] FAT-fs (loop4): Filesystem has been set read-only
[  149.648398][ T5236] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.262: inode #1: comm syz.2.262: iget: illegal inode #
[  149.673869][ T5232] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000103)
[  149.724729][ T5236] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.262: error while reading EA inode 1 err=-117
[  149.795938][ T5236] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  149.831271][ T5236] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.262: inode #1: comm syz.2.262: iget: illegal inode #
[  149.906291][ T5236] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.262: error while reading EA inode 1 err=-117
[  149.933503][   T49] Bluetooth: Unexpected start frame (len 16)
[  149.939674][   T49] Bluetooth: Frame is too long (len 16, expected len 4)
[  149.957648][ T5236] EXT4-fs (loop2): 1 orphan inode deleted
[  149.980578][ T5236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  150.071556][ T5249] loop4: detected capacity change from 0 to 1024
[  150.643090][  T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.678785][ T5249] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  150.702351][ T5249] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  150.721943][ T5249] EXT4-fs (loop4): orphan cleanup on readonly fs
[  150.771022][ T4273] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  150.799524][ T5249] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.266: Inode bitmap for bg 0 marked uninitialized
[  150.837867][ T4273] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216
[  150.861115][ T5249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  150.895990][ T4273] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216
[  151.008171][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  151.245358][ T5261] bridge0: port 3(netdevsim0) entered blocking state
[  151.258255][ T5261] bridge0: port 3(netdevsim0) entered disabled state
[  151.288531][ T5261] device netdevsim0 entered promiscuous mode
[  151.315191][ T5261] bridge0: port 3(netdevsim0) entered blocking state
[  151.322525][ T5261] bridge0: port 3(netdevsim0) entered forwarding state
[  151.343161][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  151.591382][ T4371] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.668533][ T5269] tmpfs: Bad value for 'mpol'
[  151.714278][ T4371] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.261707][ T4319] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  152.262441][ T4354] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  153.060061][ T4319] usb 1-1: Using ep0 maxpacket: 8
[  153.065126][ T4354] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11
[  153.089641][ T4319] usb 1-1: config 0 interface 0 has no altsetting 0
[  153.105210][ T4319] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  153.114775][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.122927][ T4319] usb 1-1: Product: syz
[  153.130756][ T4319] usb 1-1: Manufacturer: syz
[  153.136834][ T4319] usb 1-1: SerialNumber: syz
[  153.137829][ T4354] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  153.171920][ T4319] usb 1-1: config 0 descriptor??
[  153.174567][ T4371] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.181756][ T4319] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  153.301183][ T4354] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  153.387034][ T4354] usb 2-1: Manufacturer: syz
[  153.430286][ T4319] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  153.444895][ T4354] usb 2-1: SerialNumber: syz
[  153.450580][ T4319] snd_usb_toneport: probe of 1-1:0.0 failed with error -22
[  153.575017][ T4371] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.660147][ T4452] usb 1-1: USB disconnect, device number 4
[  153.705487][ T4354] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[  153.726175][ T4354] usb 2-1: USB disconnect, device number 6
[  153.954570][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  153.965234][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  153.974068][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  153.993866][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.010634][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  154.020197][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  154.326532][ T5278] wlan0 speed is unknown, defaulting to 1000
[  154.391843][ T5289] loop4: detected capacity change from 0 to 8
[  154.486531][ T5292] tipc: Can't bind to reserved service type 2
[  154.872445][ T5298] netlink: 'syz.3.287': attribute type 8 has an invalid length.
[  155.067574][ T5278] chnl_net:caif_netlink_parms(): no params data found
[  155.115941][ T4354] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  155.801805][ T4354] usb 5-1: config index 0 descriptor too short (expected 1572, got 36)
[  155.820776][ T4354] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.844524][ T4354] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  155.862388][ T4354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.881381][ T4354] usb 5-1: Product: syz
[  155.885614][ T4354] usb 5-1: Manufacturer: syz
[  155.890348][ T4354] usb 5-1: SerialNumber: syz
[  155.918732][ T4354] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7
[  156.001754][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.086230][ T5278] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.111478][ T5278] device bridge_slave_0 entered promiscuous mode
[  156.125217][ T3623] bcm5974 5-1:1.0: could not read from device
[  156.141527][ T4354] bcm5974 5-1:1.0: could not read from device
[  156.183807][ T3623] bcm5974 5-1:1.0: could not read from device
[  156.212014][ T4354] input: failed to attach handler mousedev to device input7, error: -5
[  156.238129][   T49] Bluetooth: hci1: command 0x0409 tx timeout
[  156.302084][ T3623] bcm5974 5-1:1.0: could not read from device
[  156.358721][ T4354] usb 5-1: USB disconnect, device number 3
[  156.459293][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.500868][ T5278] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.509080][ T5278] device bridge_slave_1 entered promiscuous mode
[  156.644962][ T5278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.679833][ T5278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.711109][ T4930] udevd[4930]: Error opening device "/dev/input/event4": No such file or directory
[  156.721425][ T4930] udevd[4930]: Unable to EVIOCGABS device "/dev/input/event4"
[  156.745690][ T4930] udevd[4930]: Unable to EVIOCGABS device "/dev/input/event4"
[  156.783140][ T5335] AppArmor: change_hat: Invalid input 'hj'
[  156.783370][ T4930] udevd[4930]: Unable to EVIOCGABS device "/dev/input/event4"
[  156.875098][ T4930] udevd[4930]: Unable to EVIOCGABS device "/dev/input/event4"
[  157.111967][   T49] Bluetooth: hci3: Ignoring connect complete event for invalid link type
[  157.793493][ T5278] team0: Port device team_slave_0 added
[  157.833746][ T5278] team0: Port device team_slave_1 added
[  157.969746][ T5278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.007800][ T5278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.125210][ T5278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.446018][   T49] Bluetooth: hci1: command 0x041b tx timeout
[  158.563064][ T5278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.573310][ T5278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.686112][ T5278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.783810][ T5377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'.
[  159.056253][ T4371] device hsr_slave_0 left promiscuous mode
[  159.089604][ T4371] device hsr_slave_1 left promiscuous mode
[  159.340427][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.351293][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.595248][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.615171][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.639591][ T4371] device bridge_slave_1 left promiscuous mode
[  159.671838][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.715135][ T4371] device bridge_slave_0 left promiscuous mode
[  159.728989][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.897110][ T4371] device veth1_macvtap left promiscuous mode
[  160.572634][ T4371] device veth0_macvtap left promiscuous mode
[  160.602871][ T4371] device veth1_vlan left promiscuous mode
[  160.669247][   T49] Bluetooth: hci1: command 0x040f tx timeout
[  160.691056][ T4371] device veth0_vlan left promiscuous mode
[  162.893860][   T49] Bluetooth: hci1: command 0x0419 tx timeout
[  163.406325][ T4371] team0 (unregistering): Port device team_slave_1 removed
[  163.533668][ T4371] team0 (unregistering): Port device team_slave_0 removed
[  163.799731][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.971948][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.477416][ T4286] Bluetooth: Unexpected continuation frame (len 48)
[  164.806256][ T4371] bond0 (unregistering): Released all slaves
[  164.949236][ T5390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'.
[  164.970741][ T5430] tipc: Started in network mode
[  164.987766][ T5430] tipc: Node identity -, cluster identity 4711
[  165.032960][ T5278] device hsr_slave_0 entered promiscuous mode
[  165.170108][ T5278] device hsr_slave_1 entered promiscuous mode
[  165.613779][ T5455] netlink: 104 bytes leftover after parsing attributes in process `syz.3.346'.
[  165.983641][ T5278] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  166.045282][ T5278] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  166.089167][ T5278] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  166.150949][ T5278] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  166.449761][ T5447] loop4: detected capacity change from 0 to 32768
[  166.480951][ T5278] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.532652][ T5447] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.343 (5447)
[  166.605315][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.633836][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.686294][ T5278] 8021q: adding VLAN 0 to HW filter on device team0
[  166.743665][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.766274][ T5447] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  166.795367][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.834689][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.841912][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.853157][ T5447] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  166.930565][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  166.935512][ T5447] BTRFS info (device loop4): using free space tree
[  166.942772][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  166.988583][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  167.037905][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.045097][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.152738][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  167.254316][ T5447] BTRFS info (device loop4): enabling ssd optimizations
[  167.274104][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  167.411531][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  167.462750][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  167.535396][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  167.600895][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  167.647311][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  167.690131][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.896434][ T4276] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  167.902423][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  167.956011][ T5278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.974396][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  168.551775][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  168.596906][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.587553][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  169.608510][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  169.640032][ T5278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.135058][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'.
[  171.562694][ T5593] loop4: detected capacity change from 0 to 1024
[  171.652392][ T5596] futex_wake_op: syz.0.379 tries to shift op by 144; fix this program
[  172.510725][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  172.530586][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  172.650279][ T5278] device veth0_vlan entered promiscuous mode
[  172.657405][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  172.669748][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  172.696565][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  172.729691][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  172.763109][ T5604] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.383'.
[  172.770610][ T5608] loop2: detected capacity change from 0 to 32768
[  172.828208][ T5278] device veth1_vlan entered promiscuous mode
[  172.867992][ T5608] md: array md0 already has disks!
[  172.903310][ T5608] md: could not open device unknown-block(7,0).
[  172.936900][ T5608] md: error, md_import_device() returned -16
[  172.967233][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  173.061435][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  173.203546][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  173.407244][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  173.590441][ T5278] device veth0_macvtap entered promiscuous mode
[  173.663803][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  173.712365][ T5278] device veth1_macvtap entered promiscuous mode
[  173.921048][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.068652][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.161989][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.267341][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.354423][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.413660][ T5608] md/raid:md0: not clean -- starting background reconstruction
[  174.421363][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.442707][ T5608] md/raid:md0: invalid chunk size 0
[  174.447973][ T5608] md: pers->run() failed ...
[  174.505701][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.557530][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.596350][ T5278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.631238][ T5623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'.
[  174.668001][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'.
[  174.677339][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  174.700430][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.756550][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.774302][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.813067][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.870087][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.879955][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.976980][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.986899][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.059785][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.105585][ T5278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.172205][ T5278] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.181963][ T5278] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.190977][ T5278] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.199831][ T5278] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.222986][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  175.231779][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  176.759246][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'.
[  177.335317][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.360288][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.393218][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  177.538246][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.577553][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.716926][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  178.446464][ T5689] sctp: [Deprecated]: syz.0.408 (pid 5689) Use of int in max_burst socket option.
[  178.446464][ T5689] Use struct sctp_assoc_value instead
[  179.925804][ T5718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'.
[  180.520308][ T5721] md: array md0 already has disks!
[  180.526884][ T5721] md: could not open device unknown-block(7,0).
[  180.533294][ T5721] md: error, md_import_device() returned -16
[  180.543306][ T5721] md: could not open device unknown-block(7,1).
[  180.641843][ T5721] md: error, md_import_device() returned -16
[  180.982043][ T5726] md/raid:md0: not clean -- starting background reconstruction
[  180.993330][ T5726] md/raid:md0: invalid chunk size 0
[  181.004570][ T5726] md: pers->run() failed ...
[  181.794857][ T4320] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  182.020859][ T4320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  182.067599][ T4320] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00
[  182.121737][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.179624][ T4320] usb 2-1: config 0 descriptor??
[  183.198564][ T4320] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  183.267584][ T4320] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  183.301464][ T4320] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  183.341639][ T4320] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  184.101553][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'.
[  184.191181][ T5765] loop4: detected capacity change from 0 to 131072
[  184.202728][ T4320] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  184.212137][ T5765] F2FS-fs (loop4): invalid crc value
[  184.217706][ T4320] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  184.225453][ T4320] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  184.233134][ T4320] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  184.240774][ T4320] holtek_mouse 0003:04D9:A070.0001: item fetching failed at offset 38/40
[  184.250189][ T4320] holtek_mouse 0003:04D9:A070.0001: hid parse failed: -22
[  184.258697][ T4320] holtek_mouse: probe of 0003:04D9:A070.0001 failed with error -22
[  184.269631][ T5765] F2FS-fs (loop4): Found nat_bits in checkpoint
[  184.307019][ T4320] usb 2-1: USB disconnect, device number 7
[  184.323223][ T5765] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  184.342167][ T5765] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  186.568962][ T5788] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  188.740367][ T5809] md: array md0 already has disks!
[  188.799669][ T5809] md: could not open device unknown-block(7,0).
[  188.847551][ T5809] md: error, md_import_device() returned -16
[  188.880017][ T5811] md: could not open device unknown-block(7,1).
[  188.931602][ T5811] md: error, md_import_device() returned -16
[  189.209304][ T5809] md/raid:md0: not clean -- starting background reconstruction
[  189.248548][ T5809] md/raid:md0: invalid chunk size 0
[  189.262505][ T5809] md: pers->run() failed ...
[  189.344538][ T4286] Bluetooth: hci2: Invalid connection link type handle 0x00c9
[  189.619536][ T4320] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  190.548072][ T4320] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  190.563711][ T4320] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.622918][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.711690][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0
[  190.777006][ T4320] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.847186][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.903950][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0
[  190.951446][ T4320] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.009319][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.061741][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0
[  191.094665][ T4320] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.105484][ T5851] Bluetooth: MGMT ver 1.22
[  191.123361][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.171322][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0
[  191.205245][ T4320] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.271053][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.330999][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0
[  191.348856][ T4320] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.357839][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.388126][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0
[  191.424804][ T4320] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.476266][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.517136][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0
[  191.570044][ T4320] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.600941][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.630262][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0
[  191.653451][ T4320] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  191.687715][ T4320] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  191.705985][ T4320] usb 5-1: Product: syz
[  191.731937][ T4320] usb 5-1: Manufacturer: syz
[  191.742715][ T4320] usb 5-1: SerialNumber: syz
[  191.784910][ T4320] usb 5-1: config 0 descriptor??
[  191.861572][ T4320] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  192.124644][    C0] usb 5-1: yurex_control_callback - control failed: -71
[  192.136504][ T4320] usb 5-1: USB disconnect, device number 4
[  192.158731][ T4320] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  195.539047][ T5924] netlink: 72 bytes leftover after parsing attributes in process `syz.5.469'.
[  195.582685][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.718664][ T4286] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  195.727541][ T4286] Bluetooth: hci1: Injecting HCI hardware error event
[  195.738751][   T49] Bluetooth: hci1: hardware error 0x00
[  195.892263][ T4286] Bluetooth: hci3: command 0x0406 tx timeout
[  197.287173][ T4286] Bluetooth: hci4: Dropping invalid advertising data
[  197.294539][ T4286] Bluetooth: hci4: Malformed LE Event: 0x02
[  197.353618][ T4393] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  197.470985][ T5969] loop4: detected capacity change from 0 to 128
[  197.512542][ T5969] VFS: could not find a valid V7 on loop4.
[  197.567347][ T4393] usb 6-1: Using ep0 maxpacket: 8
[  197.576240][ T4393] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  197.606478][ T4393] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  197.673078][ T4393] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  197.740341][ T4393] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  197.797679][ T4393] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  198.509516][ T4393] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  198.518925][ T4393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.536556][   T49] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  198.762646][ T4393] usb 6-1: GET_CAPABILITIES returned 0
[  198.770896][ T4393] usbtmc 6-1:16.0: can't read capabilities
[  199.074895][ T5954] usb 6-1: usbtmc_ioctl_clear_in_halt returned -32
[  199.096188][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  199.108570][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  199.407452][ T4322] usb 6-1: USB disconnect, device number 2
[  201.428048][ T6030] netlink: 'syz.5.504': attribute type 4 has an invalid length.
[  201.484331][ T6030] netlink: 'syz.5.504': attribute type 4 has an invalid length.
[  202.350416][ T6038] loop5: detected capacity change from 0 to 256
[  202.437494][ T4264] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  203.588846][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'.
[  203.791186][ T6069] program syz.4.515 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.071357][ T6086] loop5: detected capacity change from 0 to 32768
[  205.232586][ T6086] find_entry called with index >= next_index
[  205.268124][ T6086] find_entry called with index >= next_index
[  205.293572][ T6086] find_entry called with index >= next_index
[  205.310788][ T6129] Illegal XDP return value 4294967294 on prog  (id 39) dev N/A, expect packet loss!
[  205.317756][ T6086] find_entry called with index >= next_index
[  205.379363][ T6086] find_entry called with index >= next_index
[  205.399310][ T6086] add_index: next_index = 0.  Resetting!
[  205.421607][ T6086] find_entry called with index >= next_index
[  205.427670][ T6086] find_entry called with index >= next_index
[  205.459955][ T6086] find_entry called with index >= next_index
[  205.489280][ T6127] find_entry called with index >= next_index
[  205.495650][ T6127] find_entry called with index >= next_index
[  205.511110][ T6127] read_mapping_page failed!
[  205.516010][ T6127] ERROR: (device loop5): txCommit: 
[  205.516010][ T6127] 
[  205.526427][ T6127] ERROR: (device loop5): remounting filesystem as read-only
[  205.571299][ T4320] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  205.731836][ T4322] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  205.775638][ T4320] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  205.787871][ T4320] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[  205.798157][ T4320] usb 2-1: config 220 interface 0 has no altsetting 0
[  205.807299][ T4320] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  205.827621][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.839901][ T4320] usb 2-1: Product: syz
[  205.844557][ T4320] usb 2-1: Manufacturer: syz
[  205.849368][ T4320] usb 2-1: SerialNumber: syz
[  205.902588][ T4319] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  205.939893][ T4322] usb 5-1: unable to get BOS descriptor or descriptor too short
[  205.962245][ T4322] usb 5-1: not running at top speed; connect to a high speed hub
[  205.989210][ T4322] usb 5-1: config index 0 descriptor too short (expected 16411, got 27)
[  206.008590][ T4322] usb 5-1: config 4 has an invalid interface number: 79 but max is 0
[  206.041057][ T4322] usb 5-1: config 4 has no interface number 0
[  206.064868][ T4322] usb 5-1: config 4 interface 79 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0
[  206.084382][ T4320] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  206.088816][ T4322] usb 5-1: config 4 interface 79 has no altsetting 0
[  206.112428][ T4320] usb 2-1: No valid video chain found.
[  206.113488][ T4322] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e3.b7
[  206.120445][ T4320] usb 2-1: USB disconnect, device number 8
[  206.138955][ T4319] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  206.162528][ T4319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.189051][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.207260][ T4319] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.226986][ T4322] usb 5-1: Product: syz
[  206.231355][ T4322] usb 5-1: Manufacturer: syz
[  206.240061][ T4319] usb 1-1: config 0 interface 0 has no altsetting 0
[  206.252054][ T4322] usb 5-1: SerialNumber: syz
[  206.259392][ T4319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.279803][ T4319] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.326268][ T4319] usb 1-1: config 0 interface 0 has no altsetting 0
[  206.346569][ T4319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.359507][ T6154] netlink: 'syz.5.550': attribute type 16 has an invalid length.
[  206.366769][ T4319] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.387470][ T6154] netlink: 'syz.5.550': attribute type 17 has an invalid length.
[  206.396122][ T4319] usb 1-1: config 0 interface 0 has no altsetting 0
[  206.407855][ T4319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.424697][ T4319] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.436494][ T4319] usb 1-1: config 0 interface 0 has no altsetting 0
[  206.444800][ T4319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.452103][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  206.463810][ T4319] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.471911][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  206.487528][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  206.489261][ T4319] usb 1-1: config 0 interface 0 has no altsetting 0
[  206.507330][ T6154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  206.531911][ T4319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.541965][ T4322] viperboard 5-1:4.79: version 0.00 found at bus 005 address 005
[  206.557106][ T4319] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.592102][ T4322] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  206.609654][ T4319] usb 1-1: config 0 interface 0 has no altsetting 0
[  206.621565][ T4322] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  206.644611][ T4319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.666467][ T4319] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.701883][ T4322] usb 5-1: USB disconnect, device number 5
[  206.758368][ T4319] usb 1-1: config 0 interface 0 has no altsetting 0
[  206.803362][ T4319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.834538][ T4319] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.903536][ T4319] usb 1-1: config 0 interface 0 has no altsetting 0
[  206.938080][ T4319] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  206.972926][ T4319] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  207.024637][ T4319] usb 1-1: Product: syz
[  207.036255][ T4319] usb 1-1: Manufacturer: syz
[  207.045895][ T4319] usb 1-1: SerialNumber: syz
[  207.077996][ T4319] usb 1-1: config 0 descriptor??
[  207.113237][ T4319] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  207.280507][ T6179] netlink: 148 bytes leftover after parsing attributes in process `syz.3.560'.
[  207.326826][ T6181] loop5: detected capacity change from 0 to 16
[  207.364309][ T6181] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  207.535661][    C1] usb 1-1: yurex_control_callback - control failed: -71
[  207.536441][ T4320] usb 1-1: USB disconnect, device number 5
[  207.576061][ T4320] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  207.677836][ T6193] Unable to extract alua_tg_pt_write_md
[  207.986243][ T4277] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  208.191428][ T4277] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  208.204478][ T4277] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3
[  208.216217][ T4277] usb 5-1: config 220 interface 0 has no altsetting 0
[  208.228290][ T4277] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  208.259389][ T4277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.281322][ T4277] usb 5-1: Product: syz
[  208.300616][ T4277] usb 5-1: Manufacturer: syz
[  208.305330][ T4277] usb 5-1: SerialNumber: syz
[  208.413760][ T3654] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  208.604456][ T4277] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  208.621955][ T4277] usb 5-1: No valid video chain found.
[  208.647487][ T3654] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  208.680966][ T3654] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.688251][ T4277] usb 5-1: USB disconnect, device number 6
[  208.688997][ T3654] usb 6-1: Product: syz
[  208.755662][ T3654] usb 6-1: Manufacturer: syz
[  208.760423][ T3654] usb 6-1: SerialNumber: syz
[  208.792031][ T3654] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  208.852126][ T3654] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  209.364195][ T4277] usb 6-1: USB disconnect, device number 3
[  209.508596][ T6245] loop4: detected capacity change from 0 to 128
[  209.998162][ T3654] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  210.005291][ T3654] ath9k_htc: Failed to initialize the device
[  210.042344][ T4277] usb 6-1: ath9k_htc: USB layer deinitialized
[  210.190286][ T6263] loop5: detected capacity change from 0 to 512
[  210.318801][ T6263] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  210.346337][ T6263] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.594476][ T5278] EXT4-fs (loop5): unmounting filesystem.
[  211.095993][ T4277] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  211.300768][ T4277] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  211.301912][ T6265] loop4: detected capacity change from 0 to 40427
[  211.320627][ T4277] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3
[  211.352814][ T6265] F2FS-fs (loop4): invalid crc value
[  211.364180][ T4277] usb 6-1: config 220 interface 0 has no altsetting 0
[  211.391835][ T4277] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  211.405096][ T4277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.413700][ T4277] usb 6-1: Product: syz
[  211.423503][ T4277] usb 6-1: Manufacturer: syz
[  211.428632][ T4277] usb 6-1: SerialNumber: syz
[  212.142075][ T4277] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  212.149546][ T6265] F2FS-fs (loop4): Found nat_bits in checkpoint
[  212.151864][ T4277] usb 6-1: No valid video chain found.
[  212.197605][ T5531] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  212.238976][ T4277] usb 6-1: USB disconnect, device number 4
[  212.260460][ T6265] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  212.336338][ T6265] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  212.401690][ T5531] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  212.418046][ T5531] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  212.437703][ T5531] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  212.474590][ T5531] usb 2-1: config 220 has no interface number 2
[  212.487210][ T5531] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  212.524545][ T5531] usb 2-1: config 220 interface 0 has no altsetting 0
[  212.536796][ T5531] usb 2-1: config 220 interface 76 has no altsetting 0
[  212.558111][ T5531] usb 2-1: config 220 interface 1 has no altsetting 0
[  212.569340][ T4276] syz-executor: attempt to access beyond end of device
[  212.569340][ T4276] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  212.601029][ T5531] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  212.645374][ T5531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.653429][ T5531] usb 2-1: Product: syz
[  212.672280][ T5531] usb 2-1: Manufacturer: syz
[  212.676965][ T5531] usb 2-1: SerialNumber: syz
[  212.940731][ T5531] usb 2-1: selecting invalid altsetting 0
[  212.968050][ T5531] usb 2-1: selecting invalid altsetting 0
[  212.974306][ T5531] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  212.998166][ T5531] usb 2-1: No valid video chain found.
[  213.041364][ T5531] usb 2-1: selecting invalid altsetting 0
[  213.057439][ T5531] usbtest: probe of 2-1:220.1 failed with error -22
[  213.115615][ T5531] usb 2-1: USB disconnect, device number 9
[  213.389897][ T6322] loop4: detected capacity change from 0 to 2048
[  213.475583][ T6322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  213.944507][ T6341] netlink: 'syz.3.609': attribute type 1 has an invalid length.
[  213.944529][ T6341] netlink: 'syz.3.609': attribute type 2 has an invalid length.
[  215.080873][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.089624][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.156591][ T4322] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  215.252894][ T4319] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  215.359617][ T4322] usb 5-1: Using ep0 maxpacket: 8
[  215.366610][ T4322] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  215.401785][ T4322] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  215.435057][ T4322] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  215.466907][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.470482][ T4319] usb 6-1: Using ep0 maxpacket: 32
[  215.481534][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.491126][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.495313][ T4319] usb 6-1: unable to get BOS descriptor or descriptor too short
[  215.516194][ T4301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.519863][ T4322] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  215.564209][ T4319] usb 6-1: unable to read config index 0 descriptor/start: -71
[  215.593502][ T4322] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.607182][ T4319] usb 6-1: can't read configurations, error -71
[  215.635373][ T4322] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  215.666409][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.689734][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.709540][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.929450][ T4322] usb 5-1: GET_CAPABILITIES returned 0
[  215.935009][ T4322] usbtmc 5-1:16.0: can't read capabilities
[  216.164304][ T3654] usb 5-1: USB disconnect, device number 7
[  216.184998][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.279328][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.853628][ T6427] loop4: detected capacity change from 0 to 8
[  220.943106][ T4320] net_ratelimit: 3 callbacks suppressed
[  220.943122][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.138950][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.485263][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.561477][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.743852][ T4319] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  223.570835][ T4319] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  223.625513][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.655080][ T4319] usb 5-1: Product: syz
[  223.680963][ T4319] usb 5-1: Manufacturer: syz
[  223.716188][ T4319] usb 5-1: SerialNumber: syz
[  223.744486][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.775327][ T4319] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  223.846645][ T4319] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  224.755770][ T4354] usb 5-1: USB disconnect, device number 8
[  224.870976][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.041367][ T4319] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  225.083916][ T4319] ath9k_htc: Failed to initialize the device
[  225.090457][ T4354] usb 5-1: ath9k_htc: USB layer deinitialized
[  225.725851][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.747304][ T4286] Bluetooth: hci2: unexpected cc 0x0c57 length: 26 < 33
[  225.991184][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.141964][ T3654] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  226.249813][ T6550] input: syz1 as /devices/virtual/input/input8
[  226.356152][ T3654] usb 6-1: Using ep0 maxpacket: 8
[  226.374470][ T3654] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  226.476332][ T3654] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.505490][ T3654] usb 6-1: Product: syz
[  226.516594][ T3654] usb 6-1: Manufacturer: syz
[  226.521500][ T3654] usb 6-1: SerialNumber: syz
[  226.533277][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.568710][ T3654] usb 6-1: config 0 descriptor??
[  226.579340][ T4482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.610743][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.628012][ T3654] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244)
[  226.655268][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.984995][ T6566] syz.1.674 sent an empty control message without MSG_MORE.
[  227.065185][ T3654] radio-usb-si4713: probe of 6-1:0.0 failed with error -71
[  227.105166][ T3654] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  227.156675][ T3654] usb 6-1: USB disconnect, device number 7
[  227.215794][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.609474][ T6575] netlink: 'syz.1.679': attribute type 10 has an invalid length.
[  227.721031][ T6575] device syz_tun entered promiscuous mode
[  227.807487][ T6575] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  227.811337][ T6579] loop5: detected capacity change from 0 to 16
[  227.863444][ T6579] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  228.139200][ T6586] Mass Storage Function, version: 2009/09/11
[  228.201949][ T6591] wlan0 speed is unknown, defaulting to 1000
[  228.248297][ T6586] LUN: removable file: (no medium)
[  228.296728][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.441922][ T5531] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  228.685902][ T5531] usb 6-1: Using ep0 maxpacket: 8
[  228.694195][ T5531] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  228.750690][ T5531] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  228.786103][ T5531] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  228.828055][ T5531] usb 6-1: Product: syz
[  228.832295][ T5531] usb 6-1: Manufacturer: syz
[  228.858117][ T5531] usb 6-1: SerialNumber: syz
[  229.108661][ T5531] usb 6-1: Invalid connection information received from device
[  229.339639][ T5531] usb 6-1: USB disconnect, device number 8
[  229.408798][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.713026][ T6618] bridge0: port 3(netdevsim0) entered blocking state
[  229.719798][ T6618] bridge0: port 3(netdevsim0) entered disabled state
[  229.762063][ T6618] device netdevsim0 entered promiscuous mode
[  229.791245][ T6618] bridge0: port 3(netdevsim0) entered blocking state
[  229.798162][ T6618] bridge0: port 3(netdevsim0) entered forwarding state
[  229.916801][ T5531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.288059][ T5531] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  230.514624][ T5531] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  230.527982][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.544782][ T5531] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  230.619312][ T5531] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  230.667590][ T5531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.719201][ T5531] usb 6-1: Product: syz
[  230.740904][ T5531] usb 6-1: Manufacturer: syz
[  230.758205][ T5531] usb 6-1: SerialNumber: syz
[  230.818128][ T5531] usb 6-1: config 0 descriptor??
[  230.828971][ T6623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  230.844055][ T6623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  231.114620][ T6623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  231.163925][ T6623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  231.196979][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.077544][ T5531] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  232.206319][ T6635] loop4: detected capacity change from 0 to 512
[  232.243723][ T5531] dm9601 6-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, ce:79:9d:c0:26:83
[  232.308647][ T5531] usb 6-1: USB disconnect, device number 9
[  232.327197][ T5531] dm9601 6-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet
[  232.506695][ T6635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022]
[  232.564804][ T4451] net_ratelimit: 1 callbacks suppressed
[  232.564815][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.579335][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.589847][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.639854][ T6640] syz.0.707 uses obsolete (PF_INET,SOCK_PACKET)
[  232.653653][ T6635] System zones: 1-12
[  232.773917][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.790916][ T6635] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.705: Directory hole found for htree index block 0
[  232.959555][ T6635] EXT4-fs (loop4): Remounting filesystem read-only
[  232.966646][ T6635] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  233.035318][ T6635] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.705: Directory hole found for htree index block 0
[  233.146868][ T6635] EXT4-fs (loop4): Remounting filesystem read-only
[  233.199666][ T6635] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  233.323519][ T6635] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  233.964062][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.221880][ T6654] netlink: 64 bytes leftover after parsing attributes in process `syz.5.712'.
[  234.555099][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  235.031526][ T4322] kernel write not supported for file bpf-prog (pid: 4322 comm: kworker/1:6)
[  235.092674][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.332017][ T4354] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  235.563762][ T4354] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.588351][ T4354] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  235.600170][ T6677] input input9: cannot allocate more than FF_MAX_EFFECTS effects
[  235.718372][ T4354] usb 5-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[  235.748562][ T4354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.756615][ T4354] usb 5-1: Product: syz
[  235.846230][ T4354] usb 5-1: Manufacturer: syz
[  235.850904][ T4354] usb 5-1: SerialNumber: syz
[  235.903343][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.240536][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.420992][ T6686] wlan0 speed is unknown, defaulting to 1000
[  236.444851][ T6671] netlink: 'syz.4.717': attribute type 34 has an invalid length.
[  236.560209][ T4354] usb 5-1: cannot find UAC_HEADER
[  236.667218][ T4354] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  236.728129][ T4354] usb 5-1: USB disconnect, device number 9
[  236.784666][ T4930] udevd[4930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  237.354425][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.591707][ T6705] loop5: detected capacity change from 0 to 128
[  237.661222][ T6705] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  238.238218][   T26] audit: type=1800 audit(1785524009.181:3): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.733" name="file2" dev="loop5" ino=95 res=0 errno=0
[  239.365157][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.378250][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.386431][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.401584][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.417535][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.522483][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.546654][ T4277] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  240.721638][ T6750] loop4: detected capacity change from 0 to 4096
[  240.759440][ T4277] usb 2-1: config index 0 descriptor too short (expected 1572, got 36)
[  240.785809][ T6750] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  240.802826][ T4277] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  241.879576][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.887880][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.918377][ T4277] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  241.957277][ T4277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.978737][ T4277] usb 2-1: Product: syz
[  241.982961][ T4277] usb 2-1: Manufacturer: syz
[  242.012640][ T4277] usb 2-1: SerialNumber: syz
[  242.082460][ T4277] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10
[  242.275349][ T3623] bcm5974 2-1:1.0: could not read from device
[  242.314362][ T4277] bcm5974 2-1:1.0: could not read from device
[  242.395981][ T3623] bcm5974 2-1:1.0: could not read from device
[  242.422253][ T4277] input: failed to attach handler mousedev to device input10, error: -5
[  242.482338][ T4277] usb 2-1: USB disconnect, device number 10
[  242.747296][ T5531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.816072][ T4930] udevd[4930]: Error opening device "/dev/input/event4": No such file or directory
[  242.871647][ T4930] udevd[4930]: Unable to EVIOCGABS device "/dev/input/event4"
[  242.910572][ T4930] udevd[4930]: Unable to EVIOCGABS device "/dev/input/event4"
[  242.940829][ T4930] udevd[4930]: Unable to EVIOCGABS device "/dev/input/event4"
[  242.972410][ T4930] udevd[4930]: Unable to EVIOCGABS device "/dev/input/event4"
[  243.016503][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.019854][ T4930] udevd[4930]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting.
[  243.175549][ T3638] udevd[3638]: worker [4930] terminated by signal 6 (Aborted)
[  243.257179][ T3638] udevd[3638]: worker [4930] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10/event4'
[  245.244683][ T4482] net_ratelimit: 1 callbacks suppressed
[  245.244705][ T4482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.258467][ T4482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.267786][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.276855][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.915882][ T6782] loop5: detected capacity change from 0 to 32768
[  246.068925][ T6782] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  246.231037][   T26] audit: type=1800 audit(1785524016.658:4): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.760" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  246.263684][ T4319] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  246.345229][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.428577][ T5278] ocfs2: Unmounting device (7,5) on (node local)
[  246.468031][ T4319] usb 1-1: config index 0 descriptor too short (expected 1572, got 36)
[  246.489116][ T4319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.561919][ T4319] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  246.599653][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.632582][ T4319] usb 1-1: Product: syz
[  246.647763][ T4319] usb 1-1: Manufacturer: syz
[  246.664449][ T4319] usb 1-1: SerialNumber: syz
[  246.698411][ T4319] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input11
[  246.829185][ T6822] loop4: detected capacity change from 0 to 1024
[  246.902837][ T3623] bcm5974 1-1:1.0: could not read from device
[  246.994490][ T4319] bcm5974 1-1:1.0: could not read from device
[  247.004933][ T3623] bcm5974 1-1:1.0: could not read from device
[  247.013775][ T6822] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  247.061068][ T6822] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.081924][ T4319] input: failed to attach handler mousedev to device input11, error: -5
[  247.095405][ T3623] bcm5974 1-1:1.0: could not read from device
[  247.105751][ T4319] usb 1-1: USB disconnect, device number 6
[  247.135527][ T6822] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 2: comm syz.4.773: lblock 2 mapped to illegal pblock 2 (length 4)
[  247.175099][ T6812] orangefs_mount: mount request failed with -4
[  247.241577][ T6833] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.773: lblock 0 mapped to illegal pblock 0 (length 2)
[  247.349116][ T6837] loop5: detected capacity change from 0 to 512
[  247.369781][ T6833] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117
[  247.432678][ T6837] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  247.443127][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.446228][ T6833] EXT4-fs (loop4): This should not happen!! Data will be lost
[  247.446228][ T6833] 
[  247.463037][ T4482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.478612][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.487562][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.509054][ T6837] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.558081][ T6846] input: syz1 as /devices/virtual/input/input12
[  247.638579][ T4301] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:5: lblock 4 mapped to illegal pblock 4 (length 2)
[  247.687269][ T5278] EXT4-fs (loop5): unmounting filesystem.
[  247.708093][ T4301] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  247.738334][ T4301] EXT4-fs (loop4): This should not happen!! Data will be lost
[  247.738334][ T4301] 
[  247.782739][ T4482] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:15: bg 0: block 112: padding at end of block bitmap is not set
[  247.829881][ T4482] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28
[  247.867033][ T4482] EXT4-fs (loop4): This should not happen!! Data will be lost
[  247.867033][ T4482] 
[  247.906829][ T4482] EXT4-fs (loop4): Total free blocks count 0
[  247.933599][ T4482] EXT4-fs (loop4): Free/Dirty block details
[  247.939571][ T4482] EXT4-fs (loop4): free_blocks=0
[  248.379815][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.384146][ T6860] loop4: detected capacity change from 0 to 40427
[  248.406104][ T6860] F2FS-fs (loop4): invalid crc value
[  248.450962][ T6860] F2FS-fs (loop4): Found nat_bits in checkpoint
[  248.479963][ T4277] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  248.509084][ T6860] F2FS-fs (loop4): Start checkpoint disabled!
[  248.532485][ T6860] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  248.550372][   T26] audit: type=1800 audit(1785524018.829:5): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.781" name="file1" dev="loop4" ino=10 res=0 errno=0
[  248.691161][ T4277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.754773][ T4277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.796461][ T4277] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  248.806010][ T4277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.856336][ T4277] usb 2-1: config 0 descriptor??
[  248.871914][ T4429] kworker/u4:12: attempt to access beyond end of device
[  248.871914][ T4429] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  250.429714][ T4277] usb 2-1: string descriptor 0 read error: -71
[  250.437751][ T6893] loop5: detected capacity change from 0 to 256
[  250.453011][ T4277] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71
[  250.491633][ T6893] exfat: Bad value for 'uid'
[  250.496529][ T4277] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71
[  250.504666][ T4277] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71
[  250.584028][ T4277] uclogic 0003:256C:006D.0002: failed probing parameters: -71
[  250.622775][ T4277] uclogic: probe of 0003:256C:006D.0002 failed with error -71
[  250.665028][ T4277] usb 2-1: USB disconnect, device number 11
[  251.031032][ T4301] net_ratelimit: 4 callbacks suppressed
[  251.031048][ T4301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.045540][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.055756][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.200460][   T26] audit: type=1800 audit(1785524021.309:6): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.802" name="UDC" dev="configfs" ino=43143 res=0 errno=0
[  251.234855][ T6905] Need at least one configuration in g1.
[  251.243874][ T6905] udc usbip-vudc.0: failed to start g1: -22
[  251.249843][ T6905] configfs-gadget.g1: probe of gadget.32 failed with error -22
[  251.302710][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.326518][ T6905] UDC core: g1: couldn't find an available UDC or it's busy
[  251.493621][ T6910] loop6: detected capacity change from 0 to 8
[  251.602687][ T6910] loop6: detected capacity change from 8 to 7
[  251.676859][ T6910] Dev loop6: unable to read RDB block 7
[  251.707822][ T6910]  loop6: unable to read partition table
[  251.715078][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.770402][ T6910] loop6: partition table beyond EOD, truncated
[  251.796919][ T6910] loop_reread_partitions: partition scan of loop6 (°´[{BÑ·�¶žMܾ`*ÎîZ´Ç5�¡]�z(¿Ťî4+hGËpX��„Ïgm
[  251.796919][ T6910] ü òæôØ.BÊL_seÔ) failed (rc=-5)
[  251.887184][ T3638] Dev loop6: unable to read RDB block 7
[  251.892811][ T3638]  loop6: unable to read partition table
[  251.929943][ T3638] loop6: partition table beyond EOD, truncated
[  252.405620][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.936483][ T6938] capability: warning: `syz.0.814' uses deprecated v2 capabilities in a way that may be insecure
[  253.365981][ T6949] loop4: detected capacity change from 0 to 2048
[  253.408713][ T6949] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  253.455693][ T6949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  253.516504][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.549891][ T6949] overlayfs: upper fs needs to support d_type.
[  253.678263][ T6949] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  253.730010][ T6949] overlayfs: failed to set xattr on upper
[  253.760697][ T6949] overlayfs: ...falling back to index=off,metacopy=off.
[  253.769004][ T4453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.777884][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.787342][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.843853][ T6960] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  253.996469][ T4276] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  254.036439][ T4276] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  256.514162][   T27] net_ratelimit: 2 callbacks suppressed
[  256.514179][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.595901][ T6993] overlayfs: failed to clone upperpath
[  257.200456][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.209166][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.220168][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.613866][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.645405][   T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  257.655550][   T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  257.664990][   T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  257.730622][   T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  257.738660][   T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  257.746165][   T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  257.847368][ T5531] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  257.967788][ T7012] wlan0 speed is unknown, defaulting to 1000
[  258.050522][ T5531] usb 6-1: Using ep0 maxpacket: 32
[  258.063201][ T5531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.159507][ T5531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.212632][ T5531] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  258.279064][ T5531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.339229][ T5531] usb 6-1: config 0 descriptor??
[  258.361619][ T5531] hub 6-1:0.0: USB hub found
[  258.600536][ T5531] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  258.669165][ T7012] chnl_net:caif_netlink_parms(): no params data found
[  258.731340][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.042683][ T5531] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0
[  259.080780][ T5531] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0
[  259.110339][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.172563][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.238323][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.247250][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.255941][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.269743][ T7012] device bridge_slave_0 entered promiscuous mode
[  259.334063][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.341289][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.433524][ T7012] device bridge_slave_1 entered promiscuous mode
[  259.666854][ T4277] usb 6-1: USB disconnect, device number 10
[  259.775771][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.818933][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.889728][ T7012] team0: Port device team_slave_0 added
[  259.920755][   T49] Bluetooth: hci4: command 0x0409 tx timeout
[  259.952321][ T7012] team0: Port device team_slave_1 added
[  260.030861][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.059818][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.155556][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.185273][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.242710][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.298531][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.381895][ T7049] netlink: 'syz.5.855': attribute type 22 has an invalid length.
[  260.403496][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.855'.
[  260.433642][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.503963][ T7012] device hsr_slave_0 entered promiscuous mode
[  260.530978][ T7012] device hsr_slave_1 entered promiscuous mode
[  260.576656][ T7012] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  260.614208][ T7012] Cannot create hsr debugfs directory
[  260.631332][ T7049] netlink: 'syz.5.855': attribute type 22 has an invalid length.
[  260.663715][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.855'.
[  261.317674][ T7012] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  261.451285][ T7012] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  261.478943][ T7067] netlink: 'syz.5.863': attribute type 1 has an invalid length.
[  261.523466][ T7067] netlink: 44 bytes leftover after parsing attributes in process `syz.5.863'.
[  261.544876][ T7012] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  261.588100][ T7012] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  261.868855][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.972566][ T5531] net_ratelimit: 2 callbacks suppressed
[  261.972577][ T5531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.016867][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  262.071712][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  262.116068][ T7012] 8021q: adding VLAN 0 to HW filter on device team0
[  262.143501][   T49] Bluetooth: hci4: command 0x041b tx timeout
[  262.177776][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  262.222201][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  262.297683][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.305001][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.380813][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  262.421793][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  262.470389][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.477640][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.554720][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  262.620355][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  262.670211][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.670637][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  262.800860][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  262.840645][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  262.907268][ T7012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  262.987486][ T7012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  263.044364][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  263.052947][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  263.093611][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  263.174672][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  263.233902][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  263.276791][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  263.308786][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  263.340340][ T4482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.349095][ T5531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.357873][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.366511][ T4393] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  263.390185][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  263.575103][ T4393] usb 6-1: Using ep0 maxpacket: 16
[  263.582261][ T4393] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  263.647329][ T4393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  263.714028][ T4393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  263.726189][ T4393] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  263.778164][ T4393] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  263.811815][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.827305][ T4393] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  263.869770][ T4393] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  263.949789][ T4393] usb 6-1: Manufacturer: syz
[  263.975229][ T4393] usb 6-1: config 0 descriptor??
[  264.110445][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  264.127158][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  264.180995][ T7012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.376605][ T4286] Bluetooth: hci4: command 0x040f tx timeout
[  264.408607][ T4393] rc_core: IR keymap rc-hauppauge not found
[  264.414982][ T4393] Registered IR keymap rc-empty
[  264.438410][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  264.472761][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  264.516748][ T4393] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  264.573739][ T4393] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13
[  264.678597][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  264.710646][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  264.717008][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  264.761567][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  264.778552][ T7111] input: syz0 as /devices/virtual/input/input14
[  264.793577][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  264.836223][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  264.859220][ T7113] 
[  264.861614][ T7113] ======================================================
[  264.868647][ T7113] WARNING: possible circular locking dependency detected
[  264.875694][ T7113] syzkaller #0 Not tainted
[  264.880128][ T7113] ------------------------------------------------------
[  264.887171][ T7113] syz.1.879/7113 is trying to acquire lock:
[  264.893171][ T7113] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980
[  264.902959][ T7113] 
[  264.902959][ T7113] but task is already holding lock:
[  264.910341][ T7113] ffff888070774660 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0
[  264.920049][ T7113] 
[  264.920049][ T7113] which lock already depends on the new lock.
[  264.920049][ T7113] 
[  264.930495][ T7113] 
[  264.930495][ T7113] the existing dependency chain (in reverse order) is:
[  264.939532][ T7113] 
[  264.939532][ T7113] -> #2 (&sb->s_type->i_mutex_key#21){++++}-{3:3}:
[  264.948224][ T7113]        down_write+0x36/0x60
[  264.952896][ T7113]        configfs_depend_item_unlocked+0x14f/0x430
[  264.959392][ T7113]        usbg_make_tpg+0x1f3/0x580
[  264.964496][ T7113]        target_fabric_make_tpg+0xa0/0x6d0
[  264.970301][ T7113]        configfs_mkdir+0x511/0x9e0
[  264.975497][ T7113]        vfs_mkdir+0x386/0x570
[  264.980256][ T7113]        do_mkdirat+0x1d8/0x440
[  264.985095][ T7113]        __x64_sys_mkdir+0x6a/0x80
[  264.990273][ T7113]        do_syscall_64+0x4c/0xa0
[  264.995214][ T7113]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  265.001626][ T7113] 
[  265.001626][ T7113] -> #1 (&opts->dep_lock){+.+.}-{3:3}:
[  265.009262][ T7113]        __mutex_lock+0x12d/0xae0
[  265.014379][ T7113]        tcm_set_name+0x26/0x90
[  265.019250][ T7113]        function_make+0x195/0x350
[  265.024352][ T7113]        configfs_mkdir+0x511/0x9e0
[  265.029577][ T7113]        vfs_mkdir+0x386/0x570
[  265.034355][ T7113]        do_mkdirat+0x1d8/0x440
[  265.039193][ T7113]        __x64_sys_mkdir+0x6a/0x80
[  265.044336][ T7113]        do_syscall_64+0x4c/0xa0
[  265.049264][ T7113]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  265.055695][ T7113] 
[  265.055695][ T7113] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  265.063962][ T7113]        __lock_acquire+0x2d18/0x7c40
[  265.069352][ T7113]        lock_acquire+0x1bb/0x4a0
[  265.074411][ T7113]        __mutex_lock+0x12d/0xae0
[  265.079465][ T7113]        configfs_rmdir+0x638/0x980
[  265.084692][ T7113]        vfs_rmdir+0x34e/0x4a0
[  265.089448][ T7113]        do_rmdir+0x29a/0x5c0
[  265.094114][ T7113]        __x64_sys_rmdir+0x45/0x50
[  265.099217][ T7113]        do_syscall_64+0x4c/0xa0
[  265.104147][ T7113]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  265.110554][ T7113] 
[  265.110554][ T7113] other info that might help us debug this:
[  265.110554][ T7113] 
[  265.120771][ T7113] Chain exists of:
[  265.120771][ T7113]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#21
[  265.120771][ T7113] 
[  265.135452][ T7113]  Possible unsafe locking scenario:
[  265.135452][ T7113] 
[  265.142891][ T7113]        CPU0                    CPU1
[  265.148253][ T7113]        ----                    ----
[  265.153607][ T7113]   lock(&sb->s_type->i_mutex_key#21);
[  265.159095][ T7113]                                lock(&opts->dep_lock);
[  265.166021][ T7113]                                lock(&sb->s_type->i_mutex_key#21);
[  265.174018][ T7113]   lock(gadget_subsys.su_mutex);
[  265.179053][ T7113] 
[  265.179053][ T7113]  *** DEADLOCK ***
[  265.179053][ T7113] 
[  265.187200][ T7113] 3 locks held by syz.1.879/7113:
[  265.192209][ T7113]  #0: ffff88801a312460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  265.201448][ T7113]  #1: ffff8880706e7900 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0
[  265.212275][ T7113]  #2: ffff888070774660 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0
[  265.222364][ T7113] 
[  265.222364][ T7113] stack backtrace:
[  265.228251][ T7113] CPU: 1 PID: 7113 Comm: syz.1.879 Not tainted syzkaller #0
[  265.235527][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  265.245608][ T7113] Call Trace:
[  265.248879][ T7113]  <TASK>
[  265.251802][ T7113]  dump_stack_lvl+0x188/0x24e
[  265.256479][ T7113]  ? load_image+0x410/0x410
[  265.260982][ T7113]  ? show_regs_print_info+0x12/0x12
[  265.266174][ T7113]  ? print_circular_bug+0x12b/0x1a0
[  265.271384][ T7113]  check_noncircular+0x296/0x330
[  265.276350][ T7113]  ? add_chain_block+0x9b0/0x9b0
[  265.281282][ T7113]  ? lockdep_lock+0xf1/0x1f0
[  265.285865][ T7113]  ? _find_first_zero_bit+0xd2/0x100
[  265.291146][ T7113]  __lock_acquire+0x2d18/0x7c40
[  265.296082][ T7113]  ? mark_lock+0x94/0x320
[  265.300430][ T7113]  ? verify_lock_unused+0x140/0x140
[  265.305642][ T7113]  ? __lock_acquire+0x138a/0x7c40
[  265.310690][ T7113]  ? verify_lock_unused+0x140/0x140
[  265.315928][ T7113]  lock_acquire+0x1bb/0x4a0
[  265.320431][ T7113]  ? configfs_rmdir+0x638/0x980
[  265.325278][ T7113]  ? __might_sleep+0xd0/0xd0
[  265.329862][ T7113]  ? read_lock_is_recursive+0x10/0x10
[  265.335233][ T7113]  __mutex_lock+0x12d/0xae0
[  265.339733][ T7113]  ? configfs_rmdir+0x638/0x980
[  265.344583][ T7113]  ? configfs_rmdir+0x638/0x980
[  265.349516][ T7113]  ? dput+0x37/0x1d0
[  265.353405][ T7113]  ? mutex_lock_nested+0x10/0x10
[  265.358341][ T7113]  ? __lock_acquire+0x7c40/0x7c40
[  265.363372][ T7113]  ? lockref_put_or_lock+0x6e/0xb0
[  265.368529][ T7113]  ? dput+0x37/0x1d0
[  265.372430][ T7113]  ? dput+0x37/0x1d0
[  265.376322][ T7113]  configfs_rmdir+0x638/0x980
[  265.381000][ T7113]  vfs_rmdir+0x34e/0x4a0
[  265.385240][ T7113]  do_rmdir+0x29a/0x5c0
[  265.389396][ T7113]  ? d_delete_notify+0x150/0x150
[  265.394340][ T7113]  ? getname_flags+0x206/0x500
[  265.399103][ T7113]  __x64_sys_rmdir+0x45/0x50
[  265.403705][ T7113]  do_syscall_64+0x4c/0xa0
[  265.408117][ T7113]  ? clear_bhb_loop+0x60/0xb0
[  265.412784][ T7113]  ? clear_bhb_loop+0x60/0xb0
[  265.417502][ T7113]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  265.423401][ T7113] RIP: 0033:0x7fe59639e019
[  265.427945][ T7113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.447562][ T7113] RSP: 002b:00007fe597230028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  265.455975][ T7113] RAX: ffffffffffffffda RBX: 00007fe596625fa0 RCX: 00007fe59639e019
[  265.463939][ T7113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[  265.471987][ T7113] RBP: 00007fe59643500c R08: 0000000000000000 R09: 0000000000000000
[  265.479981][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.487973][ T7113] R13: 00007fe596626038 R14: 00007fe596625fa0 R15: 00007ffe6f97cbf8
[  265.495941][ T7113]  </TASK>
[  265.501272][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  265.510916][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.519068][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.528751][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.537713][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.582003][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  265.637615][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  265.669626][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  265.723083][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  265.776451][ T4393] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  265.820152][ T4393] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  265.853708][ T4393] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  265.869520][ T4393] usb 6-1: USB disconnect, device number 11
[  265.997117][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  266.014160][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  266.045054][ T7012] device veth0_vlan entered promiscuous mode
[  266.062479][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  266.085691][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  266.125844][ T7012] device veth1_vlan entered promiscuous mode
[  266.142282][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  266.169337][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  266.195622][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  266.239475][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  266.253232][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  266.279883][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  266.309211][ T7012] device veth0_macvtap entered promiscuous mode
[  266.343143][ T7012] device veth1_macvtap entered promiscuous mode
[  266.357689][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.373975][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.385390][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.396261][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.406214][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.416956][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.428258][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.439507][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.449461][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.471064][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.485576][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.495443][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  266.504395][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  266.516343][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  266.526014][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  266.537476][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.549121][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.559499][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.570905][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.581104][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.593715][ T4286] Bluetooth: hci4: command 0x0419 tx timeout
[  266.604336][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.614600][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.626313][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.637576][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.648274][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.661036][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.676112][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  266.689471][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  266.707713][ T7012] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.716439][ T7012] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.725445][ T7012] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.735093][ T7012] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.758912][ T7012] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht'
[  266.777126][ T4482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.778349][ T7012] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
[  266.785336][ T4482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.808038][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  266.820159][ T4453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.828254][ T4453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.836099][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  266.930740][   T49] Bluetooth: hci2: command 0x0406 tx timeout
[  267.785894][ T4393] net_ratelimit: 2 callbacks suppressed
[  267.785910][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.897548][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.922926][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.019094][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.130346][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.230956][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.239112][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.182012][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.353070][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.453721][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog