last executing test programs:

10m49.887515682s ago: executing program 2 (id=3):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xdab, &(0x7f0000000e80)="$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")

10m49.261217519s ago: executing program 2 (id=7):
syz_usb_connect(0x5, 0xa3b, &(0x7f0000001a80)=ANY=[@ANYBLOB="12010003f1b14140cd060101a614010203010902290a04050300060904f1870fd8350a08092106000001220e06e024e973d4adb1134b04458ac17c2a95d01815088dc26d0d1c3a6fd3b1f28ede093f6036f8cdff23f3e4f868f37d27cf4ed9f784c586de570129422a151d3bbb0555722eae6d105bc8521104cb77f5305b2b2bdd9a299d1783f96d18d2a274e8cfc307a7d5ad49a68d93755b6f49c9c43933f66f7beb7ec5f82e148253b4f57f4fe5cdcabef3f74cf9aea3411b39e7f899990e66e4d921639ae6ae2b84740f0bd0f73c163ace66dc0a7d1b4fb18b7b27b13fe122d4dbca6a66f6ac8046d1ab61076f90b95ba705480e56397865dc622501768bda8443e128d1d81487f6018cb809050010ff030810f864237c53687c51200aace86d6c857eff9296013071f1471f35728e2d30e0ae9f1f90243b5520813d60abfd0aa56d36c2a6b59c853279633e06e0d4976942d75fd68ed88c0db76cda190bbac26812bd4c5abad1aeaabfb9fb19f79cde14208d05891259ca0725010000070009050708400000010e0725010ce5d8056d225d7ba03ece8835c54921e8fa3eb5e451c664df175a833049b070137a67071706451f82e7117dc584710ed28dd95cc9bea94e8a8581b340badc60ec49eacc1b448019382460631eb8b01ef4e116a668cd0cc496c057a06e082f110d1c2fe5a8e118bc8ae54953b243c7a61509050903"], &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0})

10m47.476828197s ago: executing program 2 (id=11):
syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000001b00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xa7, 0x0, 0x5e, {0x8, 0xb, 0x0, 0x2, 0x1, 0x6, 0x20, 0xb7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x298, 0xff, 0x9, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x77, 0x7, {0x8, 0x25, 0x1, 0x1, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x4, 0x9, {0x8, 0x25, 0x1, 0x2, 0x3f, 0xdd, 0x3}}}}}}}}]}}, &(0x7f0000001d00)={0x0, 0x0, 0x14, &(0x7f0000001c00)={0x5, 0xf, 0x14, 0x2, [@generic={0x3, 0x10, 0xb}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x40, 0xf00, 0x3}]}, 0x1, [{0x0, 0x0}]})

10m45.951468418s ago: executing program 2 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc)
close(r4)

10m45.509163579s ago: executing program 2 (id=20):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
add_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000400)={0xa00000, 0x27, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x990a75, 0x6, '\x00', @string=&(0x7f0000000380)=0x2}})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]})
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000000)=""/40, &(0x7f0000000200)=0x28)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840)
write$nci(r0, 0x0, 0x7)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5c0603492a2009405640"], 0xa)

10m30.333329215s ago: executing program 32 (id=20):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
add_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000400)={0xa00000, 0x27, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x990a75, 0x6, '\x00', @string=&(0x7f0000000380)=0x2}})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]})
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000000)=""/40, &(0x7f0000000200)=0x28)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840)
write$nci(r0, 0x0, 0x7)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5c0603492a2009405640"], 0xa)

2m20.521904796s ago: executing program 0 (id=1439):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{0x7, 0xfffffff9, 0x80, 0xf7, 0x10000e}, {0x1, 0xdfffffff, 0x8, 0x6fc, 0x9}]})

2m19.711008868s ago: executing program 0 (id=1441):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x8, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0)

2m19.373010157s ago: executing program 0 (id=1444):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001600)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
syz_emit_ethernet(0xf8f, &(0x7f0000003180)=ANY=[@ANYBLOB="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"], 0x0)

2m19.208567511s ago: executing program 0 (id=1446):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3a00014, &(0x7f0000005800)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT], 0x1, 0x615, &(0x7f0000000a00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./config\x00', &(0x7f0000001080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./config/usb_gadget/g1/strings/file0\x00', 0x1ff)

2m18.854351381s ago: executing program 0 (id=1447):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xfc}, 0x2)
close(r0)

2m15.617877127s ago: executing program 0 (id=1458):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x400000f1}]})

2m15.016708183s ago: executing program 33 (id=1458):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x400000f1}]})

7.335612287s ago: executing program 4 (id=2098):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20)
syz_emit_ethernet(0x15, &(0x7f0000000400)=ANY=[], 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)

7.005986816s ago: executing program 4 (id=2101):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file0\x00', 0x3018000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRES32=0x0], 0xa, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfe63, 0xe7c)

6.851090531s ago: executing program 3 (id=2102):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
poll(&(0x7f0000000040)=[{r1, 0x1}], 0x1, 0x101)
close_range(r0, 0xffffffffffffffff, 0x0)

6.12856049s ago: executing program 4 (id=2103):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000a40)={0x3, 0x100, 0xa8})

5.818908869s ago: executing program 6 (id=2105):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="010001"], 0xa)

5.648743804s ago: executing program 6 (id=2106):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20004000)

5.40274031s ago: executing program 6 (id=2108):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36})
close_range(r0, 0xffffffffffffffff, 0x0)

5.272769894s ago: executing program 3 (id=2109):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000f8b000/0x2000)=nil})
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000dcb000/0x18000)=nil, &(0x7f0000000bc0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)

5.229942855s ago: executing program 5 (id=2110):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000027c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='udf\x00', &(0x7f0000000080)=',+#/\\/.$*---\\\x0f\x00', 0x0)

5.05336536s ago: executing program 5 (id=2112):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x6b, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x9, 0x8, 0x2, 0x0, 0x8, 0xb, 0xf3, 0xfd, 0x4, 0x6, 0x6, 0xf2, 0x0, 0x40, 0x8, 0x2, 0x81, 0x9, 0xa2, '\x00', 0xa, 0x9})

4.905948004s ago: executing program 1 (id=2113):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

4.881450635s ago: executing program 3 (id=2114):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0)
preadv2(r3, &(0x7f0000001840), 0x0, 0x1, 0x7fffffff, 0x1c)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}})

3.759011716s ago: executing program 1 (id=2115):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0)
preadv2(r3, &(0x7f0000001840), 0x0, 0x1, 0x7fffffff, 0x1c)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}})

3.656771079s ago: executing program 4 (id=2116):
syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$eJzs3c1vHGcdB/DvbDZ2Ni3BTZM2oEq1GgkQFolf5IK5YBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTuetdfrl66TxrtpP59o93lmnplnfs/vmZl9saIN8IW1MJH6gxRZmHhlvb28tTnT3NqcudupJxlNspHUk9SSFP9ttVofJvNJsdtN0VMe8P7y3GsffbL18c5SvXqU29eO269Htd1Gz+qNzrrxJGeq8hHs6+/GI/dX7EY+n+RqVcLAnU3S2udnf396t6VL47C9z51KjMDjVey8bh4wlpyvLvT2+4DOK2/tdKPr32if2/W+gwAAAIAnTT+fgb+8ne2sFxdOIRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4XNjY+/3/onrUOvXxFJ3f/x+p1qWqD5cXT7b5g8cVBwAAAAAAAACcohe3s531XOgst4ryb/4vlQuXyuen8lZWs5SVXMt6FrOWtaxkKslYV0cj64traytTfew5feie058S6GhVNj6bcQMAAAAAAADA58yvsrD3938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgGRXJmp0hxv2v1WGr1JOeSjLRXbCT/7NSfZA8GHQAAAACcgtFkO+u50FluFbmU5LnyO4BzeSv3spblrKWZpdwsvxfY+dRf29qcaW5tztxtPw72+/3/nCiMssfsfPdw+JGvlFs0civL5ZpruZE30szN1Mo9265U8XR67Ynrfjum4nuVPiO7WZXtkb9XlQe8e6LBHuWEX6aMlRk5u5uRySq2djae6czM4TN0wtnpPdJUarvBXuo50sj+wTxUzs9XZXs8vzsq5wPRm4nprrPvueNznnz9L3/66WRVH54h9edMVbbK58bBTMx0ZeL5fjJxu3nvzu1bqxNPWiYOmCwzcXl3eSE/yk8ykfG8mpUs5+dZzFqWMp4flrXFavKLrkv+iEzN71t69dMiGanO0J3JOllML5X7Xshyfpw3cjNLebn8N52pfDuzmc1c1wxfPn6Gy6u+tu+q35vm1pcODf7qN6pKI8nvq3I4tPP6TFdeu++5Y2Vb95q9LF3sI0snvDfWv1pV2sf4dVUOh95MTHVl4tnjM/GH8ray2rx3Z+X24pv9He7ie1WlfWb9NhkfnhtJ+3y52J6scmn/2dFue/bQtqmy7dJuW+1A2+Xdtp0rdePIK3Wkeg93sKfpsu35Q9tmyrYrXW2Hvd8CYOid/+b5kca/G/9ofND4TeN245VzPxj9zugLIzn717PfrU+e+VrtheLP+SC/3Pv8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzVt9+5s9hsLq30VFqt1rtHNPVZqVdHeMjdH6GS8X891T7yIU2dnzM7xXi+8nRyemMf1sr/Wq1WtaY4Yps//m1oEtWqDEXqBlQZ3D0JOB3X1+6+eX317Xe+tXx38fWl15fuzc3Ozk3Ozb48c/3WcnNpcud50FECj8Pei/6gIwEAAAAAAAAAAAD6dRr/nWDQYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACebAsTqT9IkanJa5Pt5a3NmWb70anvbVlPUktS/CIpPkzmi6phrKu74qjjvL8899pHn2x9vNdXvbN97bj9+rNRPTKe5MxOef+z6u9GVR6rOG4Ixe4I55NcrUoYuP8HAAD//xokBkA=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x189d051, 0x0, 0x40, 0x0, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x208c828, 0x0)
rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.637168989s ago: executing program 3 (id=2117):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@TCA_CHAIN={0x8, 0xb, 0x32097093}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

3.561628252s ago: executing program 5 (id=2118):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)
close(r1)

2.417806413s ago: executing program 4 (id=2119):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=<r2=>0x0)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, r2, 0x1, 0x1, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906e96754059e65c39c5759b069d6e6d9589e5f2348878c00", 0x24}, 0x60)

2.280500677s ago: executing program 1 (id=2120):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR="b294"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)

2.247031258s ago: executing program 3 (id=2121):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]})
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))

2.220836959s ago: executing program 5 (id=2122):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000a00)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

1.941870096s ago: executing program 4 (id=2123):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0)
write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2)

1.849502849s ago: executing program 6 (id=2124):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7000000010000104000000000001000000000000", @ANYRES32=r2, @ANYBLOB="000100006c300000500012800b000100697036746e6c0000400002801400000000"], 0x70}}, 0xeb64d656001f6f32)

1.827346659s ago: executing program 3 (id=2125):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29f)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
ioctl$FITRIM(r1, 0x40406f06, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x100})

1.677971744s ago: executing program 1 (id=2126):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97454800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.477341849s ago: executing program 6 (id=2127):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0)
preadv2(r3, &(0x7f0000001840), 0x0, 0x1, 0x7fffffff, 0x1c)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}})

1.368700272s ago: executing program 1 (id=2128):
write(0xffffffffffffffff, &(0x7f0000000300)="1c0000005e001f3814584707f9f4ffffff000000010000001ff8", 0x1a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

452.514248ms ago: executing program 1 (id=2129):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0)

274.293383ms ago: executing program 5 (id=2130):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000d042a00"/20, @ANYRES32=r2, @ANYBLOB="d98e000004000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)

197.163595ms ago: executing program 6 (id=2131):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0)
preadv2(r3, &(0x7f0000001840), 0x0, 0x1, 0x7fffffff, 0x1c)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}})

0s ago: executing program 5 (id=2132):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1, 0x21840, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)

kernel console output (not intermixed with test programs):

][ T7828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.271140][ T7828] usb 6-1: Product: syz
[  591.281677][   T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  591.291975][   T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  591.302077][   T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  591.309305][ T4430] tipc: Disabling bearer <udp:syz0>
[  591.312810][ T7828] usb 6-1: Manufacturer: syz
[  591.319065][ T4430] tipc: Left network mode
[  591.324415][   T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  591.383524][ T7775] usb 5-1: config 0 descriptor??
[  591.388722][ T4353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.400952][ T7775] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  591.407932][ T7828] usb 6-1: SerialNumber: syz
[  591.415375][ T7828] usb 6-1: config 0 descriptor??
[  591.422111][ T4353] usb 2-1: config 0 descriptor??
[  591.427400][ T7775] dvb-usb: bulk message failed: -22 (3/0)
[  591.482569][ T7775] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  591.503207][ T7775] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  591.510450][ T7775] usb 5-1: media controller created
[  591.519439][ T7775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  591.564585][ T7775] dvb-usb: bulk message failed: -22 (6/0)
[  591.580502][ T7775] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  591.616727][ T7775] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31
[  591.630466][ T9676] lo speed is unknown, defaulting to 1000
[  591.653091][ T7828] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  591.670183][ T7828] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  591.700001][ T7775] dvb-usb: schedule remote query interval to 150 msecs.
[  591.708084][ T7828] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  591.716442][ T7775] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  591.731133][ T7828] usb 6-1: media controller created
[  591.764620][ T7775] usb 5-1: USB disconnect, device number 21
[  591.813281][ T7828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  591.850057][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.858321][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.859442][ T9673] dvb-usb: bulk message failed: -22 (2/0)
[  591.884083][ T4353] apple 0003:05AC:024B.0015: fixing up MacBook JIS keyboard report descriptor
[  591.909438][ T4353] apple 0003:05AC:024B.0015: unknown global tag 0xe
[  591.916350][ T4353] apple 0003:05AC:024B.0015: item 0 1 1 14 parsing failed
[  591.924610][ T4353] apple 0003:05AC:024B.0015: parse failed
[  591.930553][ T4353] apple: probe of 0003:05AC:024B.0015 failed with error -22
[  591.938441][ T7828] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  592.022517][ T7775] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  592.096927][ T7828] usb 6-1: USB disconnect, device number 17
[  592.267434][ T7778] usb 2-1: USB disconnect, device number 28
[  592.440894][ T4333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.570797][ T9699] loop5: detected capacity change from 0 to 128
[  592.584283][ T9699] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  592.683627][ T9699] hpfs: filesystem error: improperly stopped
[  592.753694][ T9676] chnl_net:caif_netlink_parms(): no params data found
[  592.812845][ T9699] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  592.853425][ T9699] hpfs: You really don't want any checks? You are crazy...
[  592.895017][ T9699] hpfs: hpfs_map_sector(): read error
[  592.932986][ T9699] hpfs: code page support is disabled
[  592.959029][ T9699] hpfs: hpfs_map_4sectors(): unaligned read
[  592.973484][ T9699] hpfs: hpfs_map_4sectors(): unaligned read
[  592.979625][ T9699] hpfs: filesystem error: unable to find root dir
[  593.092938][ T4261] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  593.405745][ T4287] Bluetooth: hci3: command 0x0409 tx timeout
[  593.716812][ T4425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.162866][ T4261] usb 4-1: Using ep0 maxpacket: 8
[  594.172100][ T4261] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  594.189030][   T49] Bluetooth: hci0: unexpected event for opcode 0x2031
[  594.203869][ T9719] device erspan0 entered promiscuous mode
[  594.223779][ T9725] loop1: detected capacity change from 0 to 1024
[  594.228165][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.310900][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state
[  594.343785][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.353454][ T4261] usb 4-1: Product: syz
[  594.357686][ T4261] usb 4-1: Manufacturer: syz
[  594.362425][ T4261] usb 4-1: SerialNumber: syz
[  594.382041][ T9676] device bridge_slave_0 entered promiscuous mode
[  594.431295][ T4261] usb 4-1: config 0 descriptor??
[  594.453697][ T7027] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  594.817045][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.837270][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.878209][ T9676] device bridge_slave_1 entered promiscuous mode
[  595.001457][ T9676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  595.111303][ T9676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.177352][ T9732] loop4: detected capacity change from 0 to 256
[  595.282606][ T9676] team0: Port device team_slave_0 added
[  595.482903][   T49] Bluetooth: hci3: command 0x041b tx timeout
[  595.627688][ T9730] loop5: detected capacity change from 0 to 131072
[  595.638437][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.646813][ T4261] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  595.682297][ T9730] F2FS-fs (loop5): invalid crc value
[  595.747298][ T9730] F2FS-fs (loop5): Found nat_bits in checkpoint
[  595.753542][ T9676] team0: Port device team_slave_1 added
[  595.822602][ T9730] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[  595.848253][ T9730] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  595.881230][ T9730] F2FS-fs (loop5): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix
[  595.909612][ T4261] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  595.928196][ T4261] usb 4-1: USB disconnect, device number 22
[  596.112819][ T7334] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  596.183702][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_0
[  596.212932][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  596.274868][ T9676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  596.331320][ T4430] device hsr_slave_0 left promiscuous mode
[  596.336440][ T7334] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  596.356841][ T7334] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  596.365261][ T4430] device hsr_slave_1 left promiscuous mode
[  596.372031][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.382907][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0
[  596.396433][ T7334] usb 2-1: Product: syz
[  596.400666][ T7334] usb 2-1: Manufacturer: syz
[  596.415939][ T7334] usb 2-1: SerialNumber: syz
[  596.434387][ T7334] usb 2-1: config 0 descriptor??
[  596.439898][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  596.467499][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1
[  596.503447][ T4430] device bridge_slave_1 left promiscuous mode
[  596.540825][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.598709][ T4430] device bridge_slave_0 left promiscuous mode
[  596.613177][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.729809][ T7775] usb 2-1: USB disconnect, device number 29
[  596.761111][ T9755] loop3: detected capacity change from 0 to 8
[  596.885999][ T4430] device veth1_macvtap left promiscuous mode
[  596.899352][ T4430] device veth0_macvtap left promiscuous mode
[  596.924415][ T4430] device veth1_vlan left promiscuous mode
[  596.929096][ T9755] SQUASHFS error: xz decompression failed, data probably corrupt
[  596.952019][ T4430] device veth0_vlan left promiscuous mode
[  596.977097][ T9755] SQUASHFS error: Failed to read block 0xa8: -5
[  597.049205][ T9755] SQUASHFS error: xz decompression failed, data probably corrupt
[  597.081851][ T9755] SQUASHFS error: Failed to read block 0xa8: -5
[  597.108725][   T26] audit: type=1800 audit(1785789440.222:17): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1478" name="file0" dev="loop3" ino=3 res=0 errno=0
[  597.540216][   T26] audit: type=1800 audit(1785789440.652:18): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1480" name="UDC" dev="configfs" ino=51654 res=0 errno=0
[  597.561921][ T9762] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  597.562918][   T49] Bluetooth: hci3: command 0x040f tx timeout
[  597.593762][ T9762] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  597.610791][ T9762] udc dummy_udc.0: failed to start g1: -22
[  597.645294][ T9762] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  597.714580][ T9762] UDC core: g1: couldn't find an available UDC or it's busy
[  598.193164][ T4454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.242911][ T7335] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  598.453297][ T7335] usb 2-1: Using ep0 maxpacket: 32
[  598.460617][ T7335] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  598.474968][ T7335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.493968][ T7335] usb 2-1: config 0 descriptor??
[  598.697459][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.712178][ T7335] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  598.732235][ T7335] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  598.757698][ T7335] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  598.765529][ T7335] usb 2-1: media controller created
[  598.785237][ T7335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  598.920122][ T7335] az6027: usb out operation failed. (-71)
[  598.936818][ T7335] az6027: usb out operation failed. (-71)
[  598.956378][ T7335] stb0899_attach: Driver disabled by Kconfig
[  598.962434][ T7335] az6027: no front-end attached
[  598.962434][ T7335] 
[  598.991735][ T7335] az6027: usb out operation failed. (-71)
[  598.998102][ T7335] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  599.021731][ T7335] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32
[  599.035572][ T7335] dvb-usb: schedule remote query interval to 400 msecs.
[  599.042828][ T7335] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  599.072315][ T7335] usb 2-1: USB disconnect, device number 30
[  599.125747][ T7335] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  599.239961][ T4430] team0 (unregistering): Port device team_slave_1 removed
[  599.314285][ T4430] team0 (unregistering): Port device team_slave_0 removed
[  599.426805][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  599.486067][ T4454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.502769][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.561387][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  599.632892][   T49] Bluetooth: hci3: command 0x0419 tx timeout
[  600.535311][ T4430] team0 (unregistering): Port device dummy0 removed
[  600.654777][ T4430] bond0 (unregistering): Released all slaves
[  600.808770][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_1
[  600.819710][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.854145][ T9676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  601.084332][ T9775] loop1: detected capacity change from 0 to 32768
[  601.112537][ T9775] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1484 (9775)
[  601.128018][ T9779] loop3: detected capacity change from 0 to 512
[  601.153890][ T9676] device hsr_slave_0 entered promiscuous mode
[  601.172063][ T9775] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  601.209308][ T9676] device hsr_slave_1 entered promiscuous mode
[  601.220349][ T9779] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  601.243094][ T9775] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  601.255613][ T9775] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  601.266482][ T9775] BTRFS info (device loop1): use zstd compression, level 3
[  601.276867][ T9775] BTRFS info (device loop1): using free space tree
[  601.309576][ T9780] loop4: detected capacity change from 0 to 4096
[  601.311972][ T9676] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  601.400700][ T9676] Cannot create hsr debugfs directory
[  601.451902][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  601.472313][ T9780] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  601.488723][ T9797] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  601.503097][ T9780] NILFS (loop4): mounting fs with errors
[  601.601052][ T9780] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  601.688055][ T9775] BTRFS info (device loop1): enabling ssd optimizations
[  601.713359][ T7335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.162198][ T4272] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  602.257761][ T9676] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  602.367297][ T7335] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  602.562735][ T7335] usb 6-1: Using ep0 maxpacket: 32
[  602.569976][ T7335] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  602.609713][ T7335] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  602.650151][ T9676] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  602.676069][ T7335] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  602.707716][ T7335] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  602.752278][ T7335] usb 6-1: config 0 interface 0 has no altsetting 0
[  602.765245][ T7335] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  602.783871][ T9676] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  602.811260][ T7335] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  602.850968][ T7335] usb 6-1: Product: syz
[  602.855544][ T7335] usb 6-1: Manufacturer: syz
[  602.860176][ T7335] usb 6-1: SerialNumber: syz
[  602.878895][ T9676] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  602.932799][ T7335] usb 6-1: config 0 descriptor??
[  602.971397][ T7335] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  603.032349][ T7335] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  603.038426][ T9814] loop3: detected capacity change from 0 to 32768
[  603.117796][ T9814] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  603.121487][ T9818] loop4: detected capacity change from 0 to 32768
[  603.179630][ T9814] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  603.182365][ T9676] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.217236][   T14] usb 6-1: USB disconnect, device number 18
[  603.218486][ T9814] BTRFS info (device loop3): turning off barriers
[  603.236250][ T5556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.237164][   T14] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  603.249471][ T7764] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  603.263267][ T9814] BTRFS info (device loop3): setting nodatasum
[  603.288220][ T9814] BTRFS info (device loop3): metadata ratio 772
[  603.288272][ T9676] 8021q: adding VLAN 0 to HW filter on device team0
[  603.313848][ T9814] BTRFS info (device loop3): setting nodatacow, compression disabled
[  603.331296][ T9818] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  603.347817][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  603.376720][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  603.384960][ T9814] BTRFS info (device loop3): turning on flush-on-commit
[  603.405179][ T9814] BTRFS info (device loop3): setting datacow
[  603.411859][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  603.424255][ T9818] (syz.4.1490,9818,0):ocfs2_double_lock:1188 ERROR: status = -2
[  603.427306][ T9814] BTRFS info (device loop3): enabling disk space caching
[  603.452279][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  603.467394][ T7764] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  603.478719][ T9814] BTRFS info (device loop3): force clearing of disk cache
[  603.499842][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.502730][ T7764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.507061][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.539489][ T9814] BTRFS info (device loop3): disk space caching is enabled
[  603.539529][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  603.569237][ T7764] usb 2-1: config 0 descriptor??
[  603.577182][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  603.588315][ T7764] cp210x 2-1:0.0: cp210x converter detected
[  603.602486][ T8158] ocfs2: Unmounting device (7,4) on (node local)
[  603.643654][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.650856][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.698305][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  603.728984][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  603.768991][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  603.996959][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  604.008691][ T7764] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  604.021995][ T7764] usb 2-1: cp210x converter now attached to ttyUSB0
[  604.044608][ T9814] BTRFS info (device loop3): enabling ssd optimizations
[  604.050823][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  604.064735][ T9814] BTRFS info (device loop3): rebuilding free space tree
[  604.523719][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  604.613823][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  604.664285][ T9814] BTRFS info (device loop3): disabling free space tree
[  604.676063][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  604.706312][ T9814] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  604.729069][ T7764] usb 2-1: USB disconnect, device number 31
[  604.740235][ T7764] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  604.749316][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  604.759076][ T7764] cp210x 2-1:0.0: device disconnected
[  604.773856][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  604.783685][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.785816][ T9814] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  604.898452][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  604.927022][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  604.975232][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  605.096753][ T4276] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  605.234414][ T4430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.294050][ T9869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.336985][ T9869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.378719][ T9869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.441341][ T9872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.495568][ T9872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.520273][ T9872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.589274][ T9872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.977967][ T9888] loop3: detected capacity change from 0 to 512
[  606.154261][ T9888] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  606.163782][ T9888] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  606.186190][ T9896] loop5: detected capacity change from 0 to 128
[  606.195457][ T9896] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  606.251447][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  606.254241][ T9899] loop4: detected capacity change from 0 to 128
[  606.269218][ T9899] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  606.284315][ T9899] hpfs: filesystem error: improperly stopped
[  606.290385][ T9899] hpfs: You really don't want any checks? You are crazy...
[  606.291952][ T9896] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  606.313974][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  606.345958][ T9676] 8021q: adding VLAN 0 to HW filter on device batadv0
[  606.421747][ T9899] hpfs: hpfs_map_sector(): read error
[  606.466469][ T9899] hpfs: code page support is disabled
[  606.472075][ T9899] hpfs: hpfs_map_4sectors(): unaligned read
[  606.527109][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  606.604916][ T9899] hpfs: hpfs_map_4sectors(): unaligned read
[  606.610903][ T9899] hpfs: filesystem error: unable to find root dir
[  606.639177][ T4430] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  607.134392][ T9913] loop5: detected capacity change from 0 to 256
[  607.313783][ T9913] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  607.672429][ T9913] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  609.094319][ T4425] net_ratelimit: 94 callbacks suppressed
[  609.094340][ T4425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.864929][ T9918] device gretap0 entered promiscuous mode
[  610.517149][ T9921] loop1: detected capacity change from 0 to 512
[  610.558040][ T9921] EXT4-fs: Ignoring removed orlov option
[  610.595607][ T9921] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  610.746488][ T9921] EXT4-fs (loop1): 1 truncate cleaned up
[  610.758827][ T9921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  610.840658][ T7823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.003422][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.034011][ T9921] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1509: invalid indirect mapped block 4294901760 (level 0)
[  611.099078][ T9921] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1509: invalid indirect mapped block 4294967295 (level 1)
[  611.186671][   T49] Bluetooth: hci5: unknown advertising packet type: 0x20
[  611.186755][   T49] Bluetooth: hci5: unknown advertising packet type: 0x6e
[  611.194770][   T49] Bluetooth: hci5: unknown advertising packet type: 0x20
[  611.201899][   T49] Bluetooth: hci5: unknown advertising packet type: 0x31
[  611.209058][   T49] Bluetooth: hci5: unknown advertising packet type: 0xbb
[  611.216820][   T49] Bluetooth: hci5: unknown advertising packet type: 0x20
[  611.306236][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  611.375300][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  611.413159][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  611.511245][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  611.531385][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  611.606012][ T9676] device veth0_vlan entered promiscuous mode
[  611.630236][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  611.650778][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  611.678189][ T9676] device veth1_vlan entered promiscuous mode
[  611.827027][ T9676] device veth0_macvtap entered promiscuous mode
[  611.857387][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  611.879295][ T9962] siw: device registration error -23
[  611.887474][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  611.911083][ T9963] loop5: detected capacity change from 0 to 1024
[  611.912296][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  612.023907][ T9963] EXT4-fs: Ignoring removed orlov option
[  612.136494][ T9676] device veth1_macvtap entered promiscuous mode
[  612.164490][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.165003][ T9963] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  612.175237][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.175255][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.712416][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.993409][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.003987][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.013964][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.024133][ T9963] EXT4-fs (loop5): shut down requested (0)
[  613.043732][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.186174][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_0
[  613.214217][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  613.222391][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  613.284245][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  613.348757][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.391737][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.409874][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.444983][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.457289][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.469286][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.481294][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.496985][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.510277][ T4515] EXT4-fs (loop5): unmounting filesystem.
[  613.524904][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_1
[  613.559898][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  613.569182][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.597984][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  613.614689][ T9676] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.642815][ T9676] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.671922][ T9676] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.692298][ T9676] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.873722][ T7335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.891161][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.949558][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.999960][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  614.016826][ T9974] loop1: detected capacity change from 0 to 32768
[  614.034508][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.058235][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.117372][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  614.137434][ T9982] syz.5.1523 (9982): drop_caches: 2
[  614.318284][ T9974] XFS (loop1): Mounting V5 Filesystem
[  614.448510][ T9974] XFS (loop1): Ending clean mount
[  614.716503][ T4272] XFS (loop1): Unmounting Filesystem
[  614.843658][ T4333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.499931][T10026] loop5: detected capacity change from 0 to 64
[  616.381994][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.919656][ T7332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.989334][T10047] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1540'.
[  617.393005][T10053] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1542'.
[  617.807004][T10064] loop5: detected capacity change from 0 to 512
[  617.880401][T10035] loop1: detected capacity change from 0 to 40427
[  617.933603][T10035] F2FS-fs (loop1): invalid crc value
[  618.015232][T10035] F2FS-fs (loop1): Found nat_bits in checkpoint
[  618.330170][T10035] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  618.392827][T10035] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  618.818378][T10088] loop3: detected capacity change from 0 to 4096
[  618.839792][ T4272] syz-executor: attempt to access beyond end of device
[  618.839792][ T4272] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  618.908978][T10088] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  618.977479][T10088] NILFS (loop3): error -5 reading inode: ino=2
[  618.992896][ T7332] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  619.003272][T10088] NILFS (loop3): error -5 getting root inode
[  619.192816][ T7332] usb 7-1: Using ep0 maxpacket: 16
[  619.201926][ T7332] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  619.264773][ T7332] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  619.310040][ T7332] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  619.388753][ T7332] usb 7-1: config 0 interface 0 has no altsetting 0
[  619.411300][ T7332] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  619.459152][ T7332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.494932][ T7332] usb 7-1: config 0 descriptor??
[  619.997287][ T7824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.019840][T10112] loop3: detected capacity change from 0 to 4096
[  620.061822][T10112] EXT4-fs: inline encryption not supported
[  620.102406][T10112] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  620.180735][T10112] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003]
[  620.198140][ T7775] usb 7-1: USB disconnect, device number 2
[  620.265005][T10112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  620.592480][T10082] loop4: detected capacity change from 0 to 32768
[  620.599693][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.609459][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.626217][ T4333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.637017][ T7824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.647199][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.818720][T10082] JBD2: Ignoring recovery information on journal
[  620.930127][T10082] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  621.073266][T10082] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  621.073401][T10082] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  621.142775][ T7824] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  621.207409][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  621.329304][T10082] OCFS2: File system is now read-only.
[  621.364360][ T7824] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  621.412914][T10082] (syz.4.1551,10082,1):ocfs2_calc_xattr_init:642 ERROR: status = -117
[  621.422363][ T7824] usb 2-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  621.451236][ T7824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  621.478053][ T7824] usb 2-1: Product: syz
[  621.495695][ T7824] usb 2-1: Manufacturer: syz
[  621.510108][T10082] (syz.4.1551,10082,1):ocfs2_mknod:334 ERROR: status = -117
[  621.533494][ T7824] navman 2-1:1.0: navman converter detected
[  621.571656][ T7824] usb 2-1: navman converter now attached to ttyUSB0
[  621.579431][T10082] (syz.4.1551,10082,0):ocfs2_mknod:502 ERROR: status = -117
[  621.663367][T10082] (syz.4.1551,10082,0):ocfs2_create:676 ERROR: status = -117
[  621.745586][ T7824] usb 2-1: USB disconnect, device number 32
[  621.873084][ T7824] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  621.885508][ T7824] navman 2-1:1.0: device disconnected
[  621.943590][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.989986][T10165] loop3: detected capacity change from 0 to 512
[  622.021042][T10165] EXT4-fs: Ignoring removed orlov option
[  622.125147][T10165] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  622.180942][ T8158] ocfs2: Unmounting device (7,4) on (node local)
[  622.303463][T10165] EXT4-fs (loop3): 1 truncate cleaned up
[  622.309232][T10165] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  622.624394][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  623.047534][T10180] loop5: detected capacity change from 0 to 4096
[  623.234136][   T26] audit: type=1800 audit(1785789466.352:19): pid=10180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1588" name="file1" dev="loop5" ino=33 res=0 errno=0
[  623.713149][ T7824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.257398][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'.
[  624.437308][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.444806][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  624.696512][T10241] Mass Storage Function, version: 2009/09/11
[  624.754639][T10241] LUN: removable file: (no medium)
[  624.904870][T10247] loop4: detected capacity change from 0 to 256
[  624.977233][T10247] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  625.263461][T10249] loop1: detected capacity change from 0 to 4096
[  625.306554][T10249] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  625.515654][   T26] audit: type=1800 audit(1785789468.632:20): pid=10249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1601" name="bus" dev="loop1" ino=33 res=0 errno=0
[  625.822862][ T7824] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  625.960926][T10266] loop6: detected capacity change from 0 to 4096
[  625.994026][T10266] EXT4-fs: inline encryption not supported
[  626.038622][ T7824] usb 5-1: Using ep0 maxpacket: 16
[  626.049426][T10266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  626.070226][ T7824] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  626.094870][ T7824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.112961][ T7824] usb 5-1: Product: syz
[  626.122183][T10267] loop1: detected capacity change from 0 to 8192
[  626.129414][ T7824] usb 5-1: Manufacturer: syz
[  626.134119][ T7824] usb 5-1: SerialNumber: syz
[  626.138862][T10266] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003]
[  626.175744][T10267] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  626.195412][T10267] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  626.206306][T10267] REISERFS (device loop1): using ordered data mode
[  626.212942][T10267] reiserfs: using flush barriers
[  626.222081][T10266] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  626.260737][T10267] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  626.322500][T10267] REISERFS (device loop1): checking transaction log (loop1)
[  626.354708][ T4587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.362908][ T4587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.379035][ T7775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.389918][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.414717][T10267] REISERFS (device loop1): Using r5 hash to sort names
[  626.419188][ T7824] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  626.422155][T10267] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  626.444917][T10267] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  626.476547][ T7824] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  626.542206][ T7824] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  626.618845][ T7824] usb 5-1: media controller created
[  626.644247][T10283] overlayfs: failed to resolve './bus': -2
[  626.779839][ T7824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  627.521646][ T7824] zl10353_read_register: readreg error (reg=127, ret==-71)
[  627.667211][ T4587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.738539][ T7824] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5
[  627.747338][ T9676] EXT4-fs (loop6): unmounting filesystem.
[  627.756635][ T7824] usb 5-1: USB disconnect, device number 22
[  629.473128][ T7824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.642900][ T7772] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  629.762090][T10356] 8021q: adding VLAN 0 to HW filter on device bond1
[  629.772309][T10359] loop1: detected capacity change from 0 to 1024
[  629.778873][ T7332] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  629.779927][T10356] bond0: (slave bond1): Enslaving as an active interface with an up link
[  629.802887][T10359] EXT4-fs: inline encryption not supported
[  629.830091][T10359] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  629.862177][ T7772] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  629.888319][T10359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  629.902682][ T7772] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  629.948179][ T7772] usb 5-1: config 1 interface 0 has no altsetting 0
[  629.987094][T10340] loop6: detected capacity change from 0 to 32768
[  629.993622][ T7332] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  629.993668][ T7332] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  629.993693][ T7332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.997937][ T7332] gspca_main: stv0680-2.14.0 probing 041e:4007
[  630.027824][ T7772] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  630.070196][ T7772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.079560][ T7772] usb 5-1: Product: syz
[  630.090699][ T7772] usb 5-1: Manufacturer: syz
[  630.096119][ T7772] usb 5-1: SerialNumber: syz
[  630.112947][T10347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  630.120231][T10347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  630.125957][T10340] XFS (loop6): Mounting V5 Filesystem
[  630.145400][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  630.237136][T10340] XFS (loop6): Ending clean mount
[  630.265766][T10340] XFS (loop6): Quotacheck needed: Please wait.
[  630.385121][T10340] XFS (loop6): Quotacheck: Done.
[  630.762351][ T9676] XFS (loop6): Unmounting Filesystem
[  631.149827][ T7772] (unnamed net_device) (uninitialized): Assigned a random MAC address: 66:ba:a0:2e:5b:5f
[  631.174055][ T7332] stv0680 4-1:4.0: Could not get descriptor 0200
[  631.221230][ T7772] rtl8150 5-1:1.0: eth9: rtl8150 is detected
[  631.240632][ T7772] usb 5-1: USB disconnect, device number 23
[  631.378887][ T7332] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  631.402655][ T7332] stv0680 4-1:4.0: last error: 34,  command = 0x2
[  631.444345][ T7332] usb 4-1: USB disconnect, device number 23
[  631.477485][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.486579][ T7824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.510503][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.537643][T10391] loop1: detected capacity change from 0 to 4096
[  631.559027][T10391] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  631.646826][T10391] ntfs3: loop1: Failed to load $Extend.
[  631.727327][   T26] audit: type=1800 audit(1785789474.842:21): pid=10391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1641" name="file1" dev="loop1" ino=30 res=0 errno=0
[  632.122998][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.452888][ T7332] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  632.649349][ T7332] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  632.663274][ T7332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.680268][ T7332] usb 4-1: Product: syz
[  632.692854][ T7332] usb 4-1: Manufacturer: syz
[  632.714217][ T7332] usb 4-1: SerialNumber: syz
[  632.738265][ T7332] usb 4-1: config 0 descriptor??
[  632.762733][ T7772] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  632.972522][ T7332] usb 4-1: ignoring: probably an ADSL modem
[  632.974468][ T7772] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  632.999390][ T7772] usb 6-1: config 0 has no interface number 0
[  633.009996][ T7772] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  633.027348][ T7772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.038403][ T7772] usb 6-1: Product: syz
[  633.064460][ T7772] usb 6-1: Manufacturer: syz
[  633.080271][ T7772] usb 6-1: SerialNumber: syz
[  633.828547][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.846177][ T7332] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  633.846729][ T7772] usb 6-1: config 0 descriptor??
[  633.994273][T10445] loop6: detected capacity change from 0 to 64
[  634.033502][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.062520][ T7824] usb 4-1: USB disconnect, device number 24
[  634.155766][ T7772] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  634.187501][ T7772] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  634.240519][ T7772] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  634.277279][ T7772] usb 6-1: media controller created
[  634.331631][ T7772] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  634.413372][ T7772] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  634.462210][ T7772] usb 6-1: USB disconnect, device number 19
[  634.496840][ T9676] hfs: node 4:3 still has 1 user(s)!
[  634.595064][ T7824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.718363][T10462] loop4: detected capacity change from 0 to 512
[  634.821420][T10462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  634.865751][T10462] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  634.958323][T10462] EXT4-fs (loop4): shut down requested (2)
[  635.141615][ T8158] EXT4-fs (loop4): unmounting filesystem.
[  635.342131][T10485] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1661'.
[  635.634055][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.652872][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.701131][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.347682][T10508] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  636.403207][T10508] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  636.468225][T10515] loop4: detected capacity change from 0 to 512
[  636.562362][T10515] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  636.574985][T10515] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  636.593241][ T5370] net_ratelimit: 115 callbacks suppressed
[  636.593257][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.614736][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.626590][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.648840][T10508] siw: device registration error -19
[  636.831191][T10521] loop5: detected capacity change from 0 to 4096
[  636.916042][ T8158] EXT4-fs (loop4): unmounting filesystem.
[  636.936063][T10521] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  637.089075][T10529] loop6: detected capacity change from 0 to 512
[  637.195271][T10529] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  637.267099][T10529] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  637.297943][ T4515] EXT4-fs (loop5): unmounting filesystem.
[  637.641806][ T9676] EXT4-fs (loop6): unmounting filesystem.
[  637.659213][T10543] loop5: detected capacity change from 0 to 4096
[  637.696136][T10543] EXT4-fs: inline encryption not supported
[  637.745980][T10543] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  637.782184][T10543] EXT4-fs (loop5): Test dummy encryption mode enabled
[  637.830643][T10543] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  637.874506][   T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.884127][T10543] System zones: 0-5
[  637.915913][T10543] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  638.100554][T10555] loop1: detected capacity change from 0 to 128
[  638.630539][T10527] loop3: detected capacity change from 0 to 40427
[  638.705255][T10527] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  638.742251][T10527] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  638.798389][T10583] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1684'.
[  638.820959][T10527] F2FS-fs (loop3): invalid crc value
[  638.842213][T10586] netlink: 'syz.6.1684': attribute type 12 has an invalid length.
[  638.848038][T10527] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  638.889856][T10586] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1684'.
[  639.074874][T10527] F2FS-fs (loop3): Start checkpoint disabled!
[  639.127281][T10588] loop1: detected capacity change from 0 to 4096
[  639.177897][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.209439][T10527] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  639.219173][T10588] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[  639.227110][T10527] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  639.415514][T10543] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  639.500797][ T4299] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22.
[  639.526998][ T4272] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[  639.538708][ T4272] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  639.565611][ T4272] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[  639.595705][ T4445] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22.
[  639.608357][ T4272] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22.
[  639.675632][T10527] syz.3.1674: attempt to access beyond end of device
[  639.675632][T10527] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  639.722961][ T7335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.791879][T10527] syz.3.1674: attempt to access beyond end of device
[  639.791879][T10527] loop3: rw=2049, sector=53256, nr_sectors = 8 limit=40427
[  639.880768][ T4515] EXT4-fs (loop5): unmounting filesystem.
[  639.903377][T10527] syz.3.1674: attempt to access beyond end of device
[  639.903377][T10527] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  640.143995][   T11] kworker/u4:1: attempt to access beyond end of device
[  640.143995][   T11] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  640.277957][T10611] loop5: detected capacity change from 0 to 4096
[  640.391942][T10615] loop8: detected capacity change from 0 to 7
[  640.459989][ T6923]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  640.477630][ T6923] loop8: partition table partially beyond EOD, truncated
[  640.509241][ T6923] loop8: p1 size 1905483274 extends beyond EOD, truncated
[  640.538664][   T26] audit: type=1800 audit(1785789483.652:22): pid=10611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1689" name="file2" dev="loop5" ino=33 res=0 errno=0
[  640.561353][ T6923] loop8: p2 start 121280928 is beyond EOD, truncated
[  640.607476][T10615]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  640.637907][   T26] audit: type=1800 audit(1785789483.652:23): pid=10611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1689" name="file2" dev="loop5" ino=33 res=0 errno=0
[  640.638430][T10615] loop8: partition table partially beyond EOD, truncated
[  640.825397][T10615] loop8: p1 size 1905483274 extends beyond EOD, truncated
[  640.855221][T10624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.867631][T10615] loop8: p2 start 121280928 is beyond EOD, truncated
[  640.894218][T10624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.951708][T10624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.021835][T10626] retu-mfd 0-0001: could not read Retu revision: -5
[  641.074051][T10623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.106576][T10626] retu-mfd: probe of 0-0001 failed with error -5
[  641.147421][T10626] i2c i2c-0: new_device: Instantiated device retu at 0x01
[  641.275420][T10632] retu-mfd 0-0002: could not read Tahvo revision: -5
[  641.288825][T10634] loop3: detected capacity change from 0 to 512
[  641.312334][ T7027] udevd[7027]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  641.350580][T10632] retu-mfd: probe of 0-0002 failed with error -5
[  641.371990][T10632] i2c i2c-0: new_device: Instantiated device tahvo at 0x02
[  641.419421][T10641] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  641.494790][T10639] lo speed is unknown, defaulting to 1000
[  641.500953][T10641] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #17: comm syz.4.1697: corrupted in-inode xattr
[  641.603288][T10641] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1697: couldn't read orphan inode 17 (err -117)
[  641.654292][T10641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  641.749258][T10641] EXT4-fs (loop4): shut down requested (0)
[  641.988324][ T8158] EXT4-fs (loop4): unmounting filesystem.
[  642.358386][ T4445] net_ratelimit: 1 callbacks suppressed
[  642.358405][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.374460][ T7335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.393544][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.993201][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.750161][T10674] set_capacity_and_notify: 1 callbacks suppressed
[  643.750177][T10674] loop3: detected capacity change from 0 to 40427
[  643.787016][T10674] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  643.805730][T10674] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  643.856150][T10674] F2FS-fs (loop3): invalid crc value
[  643.920696][T10674] F2FS-fs (loop3): Found nat_bits in checkpoint
[  643.964782][T10682] loop4: detected capacity change from 0 to 40427
[  644.028242][T10682] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  644.062837][ T7332] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  644.085603][T10682] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  644.114343][T10674] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  644.134973][T10674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  644.151901][T10682] F2FS-fs (loop4): Found nat_bits in checkpoint
[  644.177491][T10710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  644.278470][ T7332] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  644.296960][ T7332] usb 7-1: config 0 has no interface number 0
[  644.364110][ T7332] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  644.381196][T10682] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  644.392197][ T7332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.404225][T10682] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  644.418920][ T7332] usb 7-1: Product: syz
[  644.466115][ T7332] usb 7-1: Manufacturer: syz
[  644.487129][ T7332] usb 7-1: SerialNumber: syz
[  644.516992][ T7332] usb 7-1: config 0 descriptor??
[  644.748792][ T8158] syz-executor: attempt to access beyond end of device
[  644.748792][ T8158] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  644.769629][ T7332] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  644.799979][ T7332] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  644.913895][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  644.991408][ T7332] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  645.000235][ T7332] usb 7-1: media controller created
[  645.019953][ T7332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  645.821837][ T7824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.893080][ T7332] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  646.012823][ T7332] usb 7-1: USB disconnect, device number 3
[  646.127817][T10728] sctp: [Deprecated]: syz.5.1721 (pid 10728) Use of int in max_burst socket option deprecated.
[  646.127817][T10728] Use struct sctp_assoc_value instead
[  646.261627][T10731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.318592][T10731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.382332][T10731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.751273][T10743] loop3: detected capacity change from 0 to 64
[  646.937030][T10749] loop6: detected capacity change from 0 to 128
[  647.013318][T10749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  647.093686][T10749] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  647.152417][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1726'.
[  647.177673][T10749] fscrypt (loop6, inode 12): Unsupported encryption flags (0x0b)
[  647.190892][ T4276] hfs: node 4:3 still has 1 user(s)!
[  647.349058][ T9676] EXT4-fs (loop6): unmounting filesystem.
[  647.378937][T10735] loop1: detected capacity change from 0 to 40427
[  647.400628][T10757] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16)
[  647.469202][T10735] F2FS-fs (loop1): invalid crc value
[  647.475415][ T4587] net_ratelimit: 9 callbacks suppressed
[  647.475430][ T4587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.490123][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.502978][T10762] i2c i2c-0: Failed to register i2c client tahvo at 0x02 (-16)
[  647.512132][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.532749][T10735] F2FS-fs (loop1): Found nat_bits in checkpoint
[  647.560685][T10740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.701499][T10735] F2FS-fs (loop1): Start checkpoint disabled!
[  647.813065][T10735] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  647.996207][T10779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.015460][T10779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.063898][T10779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.101784][T10779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.113590][ T4427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.121997][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.484163][ T4427] kworker/u4:10: attempt to access beyond end of device
[  648.484163][ T4427] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  649.022398][T10808] loop5: detected capacity change from 0 to 64
[  649.265686][T10814] netlink: 'syz.6.1742': attribute type 3 has an invalid length.
[  649.292754][T10814] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1742'.
[  649.339093][T10814] netlink: 'syz.6.1742': attribute type 3 has an invalid length.
[  649.389788][T10818] netlink: 'syz.6.1742': attribute type 3 has an invalid length.
[  649.392302][T10814] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1742'.
[  649.423434][T10817] loop1: detected capacity change from 0 to 1024
[  649.501045][T10818] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1742'.
[  650.210017][T10807] loop3: detected capacity change from 0 to 32768
[  650.340109][T10807] XFS (loop3): Mounting V5 Filesystem
[  650.440366][T10807] XFS (loop3): Ending clean mount
[  650.709385][ T4276] XFS (loop3): Unmounting Filesystem
[  650.906383][T10834] loop6: detected capacity change from 0 to 32768
[  651.040257][T10834] XFS (loop6): Mounting V5 Filesystem
[  651.195932][T10834] XFS (loop6): Ending clean mount
[  651.294048][T10834] XFS (loop6): User initiated shutdown received.
[  651.301329][T10834] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  652.107254][T10834] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  652.364564][ T9676] XFS (loop6): Unmounting Filesystem
[  652.601368][T10883] net_ratelimit: 327 callbacks suppressed
[  652.601381][T10883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.926718][T10860] loop1: detected capacity change from 0 to 32768
[  653.123803][T10860] XFS (loop1): Mounting V5 Filesystem
[  653.158037][   T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.240594][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.250988][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.262477][   T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.273392][ T7332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.309477][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.337144][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.362268][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.415982][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.445044][T10860] XFS (loop1): Ending clean mount
[  653.623406][T10860] XFS (loop1): Quotacheck needed: Please wait.
[  653.996073][T10860] XFS (loop1): Quotacheck: Done.
[  654.508020][ T4272] XFS (loop1): Unmounting Filesystem
[  655.149213][T10946] loop4: detected capacity change from 0 to 1024
[  655.240269][T10946] EXT4-fs: inline encryption not supported
[  655.352477][T10946] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  655.692394][ T8158] EXT4-fs (loop4): unmounting filesystem.
[  655.874952][T10968] lo speed is unknown, defaulting to 1000
[  655.922922][ T7335] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  656.121557][ T7335] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  656.135381][ T7335] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  656.163296][ T7335] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  656.191729][ T7335] usb 2-1: config 220 has no interface number 2
[  656.217035][ T7335] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  656.292734][ T7335] usb 2-1: config 220 interface 0 has no altsetting 0
[  656.299608][ T7335] usb 2-1: config 220 interface 76 has no altsetting 0
[  656.357451][ T7335] usb 2-1: config 220 interface 1 has no altsetting 0
[  656.394600][ T7335] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  656.432811][ T7335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.459002][ T7335] usb 2-1: Product: syz
[  656.463852][ T7335] usb 2-1: Manufacturer: syz
[  656.468587][ T7335] usb 2-1: SerialNumber: syz
[  656.693204][ T7335] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  656.727771][ T7335] usb 2-1: No valid video chain found.
[  656.774139][ T7335] usb 2-1: selecting invalid altsetting 0
[  656.933131][ T7335] usb 2-1: selecting invalid altsetting 0
[  657.161265][ T7335] usbtest: probe of 2-1:220.1 failed with error -22
[  657.546390][ T7335] usb 2-1: USB disconnect, device number 33
[  657.932714][ T7332] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  658.143057][ T7332] usb 7-1: Using ep0 maxpacket: 32
[  658.150653][ T7332] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  658.172701][ T7332] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  658.204796][ T7332] usb 7-1: config 0 interface 0 has no altsetting 0
[  658.228593][ T7332] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  658.242682][ T7332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.258270][ T7332] usb 7-1: Product: syz
[  658.262578][ T7332] usb 7-1: Manufacturer: syz
[  658.311003][ T7332] usb 7-1: SerialNumber: syz
[  658.325111][ T7772] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  658.353851][ T4442] net_ratelimit: 174 callbacks suppressed
[  658.353869][ T4442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.389682][ T7332] usb 7-1: config 0 descriptor??
[  658.400074][   T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  658.414529][   T49] CPU: 1 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0
[  658.421983][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  658.432084][   T49] Workqueue: hci5 hci_rx_work
[  658.436979][   T49] Call Trace:
[  658.440290][   T49]  <TASK>
[  658.443258][   T49]  dump_stack_lvl+0x188/0x24e
[  658.448008][   T49]  ? show_regs_print_info+0x12/0x12
[  658.453251][   T49]  ? load_image+0x410/0x410
[  658.457832][   T49]  sysfs_create_dir_ns+0x26a/0x290
[  658.463004][   T49]  ? __lock_acquire+0x7c40/0x7c40
[  658.468095][   T49]  ? sysfs_warn_dup+0xa0/0xa0
[  658.472823][   T49]  ? do_raw_spin_unlock+0x11d/0x230
[  658.478073][   T49]  kobject_add_internal+0x617/0xca0
[  658.483353][   T49]  kobject_add+0x160/0x230
[  658.487816][   T49]  ? kobject_init+0x1c0/0x1c0
[  658.492536][   T49]  ? __raw_spin_lock_init+0x41/0x100
[  658.497858][   T49]  ? klist_children_get+0x50/0x50
[  658.503034][   T49]  ? get_device_parent+0x121/0x3e0
[  658.508192][   T49]  device_add+0x470/0x1050
[  658.512665][   T49]  hci_conn_add_sysfs+0xd1/0x1e0
[  658.517718][   T49]  le_conn_complete_evt+0xfac/0x15c0
[  658.523068][   T49]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  658.529360][   T49]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  658.535106][   T49]  ? mutex_unlock+0x10/0x10
[  658.539651][   T49]  ? skb_pull_data+0xec/0x1f0
[  658.544394][   T49]  hci_le_enh_conn_complete_evt+0x185/0x460
[  658.550348][   T49]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  658.556989][   T49]  ? hci_remote_host_features_evt+0x230/0x230
[  658.563099][   T49]  hci_event_packet+0x7b3/0x1290
[  658.568092][   T49]  ? __lock_acquire+0x7c40/0x7c40
[  658.573167][   T49]  ? bis_list+0x280/0x280
[  658.577551][   T49]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  658.583473][   T49]  ? kcov_remote_start+0x4b0/0x7e0
[  658.588631][   T49]  ? do_machine_check+0x380/0x750
[  658.593699][   T49]  ? hci_send_to_monitor+0x9c/0x4a0
[  658.598921][   T49]  hci_rx_work+0x3eb/0xd40
[  658.603382][   T49]  ? _raw_spin_unlock+0x40/0x40
[  658.608250][   T49]  ? process_one_work+0x7b4/0x1160
[  658.613445][   T49]  process_one_work+0x8ab/0x1160
[  658.618415][   T49]  ? worker_detach_from_pool+0x240/0x240
[  658.624071][   T49]  ? _raw_spin_lock_irq+0xb7/0xf0
[  658.629116][   T49]  ? _raw_spin_lock_irqsave+0x100/0x100
[  658.634673][   T49]  ? wq_worker_running+0x97/0x190
[  658.639750][   T49]  worker_thread+0xaf5/0x12a0
[  658.644469][   T49]  kthread+0x29d/0x330
[  658.648543][   T49]  ? worker_clr_flags+0x1a0/0x1a0
[  658.653579][   T49]  ? kthread_blkcg+0xd0/0xd0
[  658.658175][   T49]  ret_from_fork+0x1f/0x30
[  658.662636][   T49]  </TASK>
[  658.667989][   T49] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  658.690996][   T49] Bluetooth: hci5: failed to register connection device
[  658.774644][ T7772] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  658.792696][ T7772] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  658.803643][ T7772] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  658.822981][ T7772] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  658.854984][ T7772] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  658.874671][ T7772] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  658.902316][ T7772] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  658.911503][ T7332] gs_usb 7-1:0.0: Configuring for 1 interfaces
[  658.920842][ T7772] usb 5-1: Product: syz
[  658.937496][ T7772] usb 5-1: Manufacturer: syz
[  658.962281][ T7772] cdc_wdm 5-1:1.0: skipping garbage
[  658.980268][ T7772] cdc_wdm 5-1:1.0: skipping garbage
[  658.998646][ T7772] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  659.008716][ T7772] cdc_wdm 5-1:1.0: Unknown control protocol
[  659.195182][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  659.202081][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  659.207347][T11037] loop3: detected capacity change from 0 to 128
[  659.209215][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  659.221084][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  659.228427][T11037] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  659.232592][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  659.246810][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  659.253474][ T7772] usb 5-1: USB disconnect, device number 24
[  659.296930][T11037] hpfs: filesystem error: improperly stopped
[  659.309644][T11040] loop5: detected capacity change from 0 to 512
[  659.328223][T11037] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  659.349871][T11037] hpfs: You really don't want any checks? You are crazy...
[  659.393474][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.402538][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.410887][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.415520][T11037] hpfs: Code page index out of array
[  659.419145][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.476717][T11037] hpfs: code page support is disabled
[  659.482312][T11037] hpfs: hpfs_map_4sectors(): unaligned read
[  659.503038][T11040] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  659.581545][ T7332] usb 7-1: USB disconnect, device number 4
[  659.588798][ T7335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.597975][T11037] hpfs: hpfs_map_4sectors(): unaligned read
[  659.610226][T11037] hpfs: filesystem error: unable to find root dir
[  659.630781][T11040] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  659.807569][T11040] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  660.363474][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.523061][T11040] EXT4-fs error (device loop5): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.5.1796: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  660.618421][T11040] EXT4-fs (loop5): Remounting filesystem read-only
[  660.632707][T11040] EXT4-fs error (device loop5): ext4_get_first_dir_block:3594: inode #12: comm syz.5.1796: directory missing '.'
[  660.687851][T11040] EXT4-fs (loop5): Remounting filesystem read-only
[  660.917303][ T4515] EXT4-fs (loop5): unmounting filesystem.
[  660.933790][T11064] loop1: detected capacity change from 0 to 1024
[  660.970066][T11064] EXT4-fs: inline encryption not supported
[  661.095921][T11064] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #3: block 1: comm syz.1.1801: lblock 1 mapped to illegal pblock 1 (length 1)
[  661.115389][T11064] EXT4-fs (loop1): Remounting filesystem read-only
[  661.115418][T11064] Quota error (device loop1): write_blk: dquota write failed
[  661.115452][T11064] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  661.115515][T11064] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1801: Failed to acquire dquot type 0
[  661.123104][T11064] EXT4-fs (loop1): Remounting filesystem read-only
[  661.123482][T11064] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.1801: Freeing blocks not in datazone - block = 0, count = 4096
[  661.136771][T11064] EXT4-fs (loop1): Remounting filesystem read-only
[  661.138037][T11064] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1801: Invalid inode bitmap blk 0 in block_group 0
[  661.188328][ T4429] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  661.189232][ T4429] EXT4-fs (loop1): Remounting filesystem read-only
[  661.281277][T11064] EXT4-fs (loop1): Remounting filesystem read-only
[  661.281306][T11064] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  661.281863][T11064] EXT4-fs (loop1): Remounting filesystem read-only
[  661.281918][T11064] EXT4-fs (loop1): 1 orphan inode deleted
[  661.281950][T11064] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  661.422094][ T4429] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  661.422135][ T4429] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 0
[  661.422423][ T4429] EXT4-fs (loop1): Remounting filesystem read-only
[  661.449285][ T7772] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  661.539104][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  661.563721][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.632694][ T7772] usb 7-1: Using ep0 maxpacket: 32
[  661.635259][ T7772] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  661.635294][ T7772] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  661.637400][ T7772] usb 7-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37
[  661.637429][ T7772] usb 7-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0
[  661.637451][ T7772] usb 7-1: Product: syz
[  661.637466][ T7772] usb 7-1: Manufacturer: syz
[  661.639405][ T7772] usb 7-1: config 0 descriptor??
[  661.718421][T11083] loop5: detected capacity change from 0 to 1024
[  661.786129][T11083] EXT4-fs: inline encryption not supported
[  661.859473][T11083] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  662.122979][ T7772] hid-generic 0003:25DD:F3D2.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.6-1/input0
[  662.193138][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.230370][ T4515] EXT4-fs (loop5): unmounting filesystem.
[  662.274186][T11100] netlink: 'syz.4.1809': attribute type 12 has an invalid length.
[  662.390702][ T7772] usb 7-1: USB disconnect, device number 5
[  662.407938][T11103] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  662.418220][T11103] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  662.427516][T11103] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  662.436325][T11103] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  662.527905][T11101] fido_id[11101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  662.557975][T11103] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  662.567267][T11103] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  662.576289][T11103] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  662.585275][T11103] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  662.602790][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.360665][T11108] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  663.369696][T11108] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  663.378529][T11108] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  663.387284][T11108] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  663.533891][T11108] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  663.543857][T11108] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  663.553295][T11108] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  663.562220][T11108] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  664.028662][T11134] net_ratelimit: 1 callbacks suppressed
[  664.028681][T11134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.084199][T11134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.113455][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.175378][T11134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.235576][T11133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.282410][T11133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.387013][T11117] loop4: detected capacity change from 0 to 32768
[  664.451084][T11117] (syz.4.1814,11117,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  664.514059][T11117] (syz.4.1814,11117,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  664.658524][T11117] JBD2: Ignoring recovery information on journal
[  664.832422][T11117] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  664.876094][ T4445] ocfs2: Finishing quota recovery on device (7,4) for slot 0
[  665.634176][ T7335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.713132][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.924484][ T7772] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  666.124535][ T7772] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  666.172753][ T7772] usb 4-1: config 0 interface 0 has no altsetting 0
[  666.193807][ T7772] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  666.213476][ T8158] ocfs2: Unmounting device (7,4) on (node local)
[  666.238747][ T7772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.267323][ T7772] usb 4-1: Product: syz
[  666.277483][ T7772] usb 4-1: Manufacturer: syz
[  666.287600][ T7772] usb 4-1: SerialNumber: syz
[  666.298437][ T7772] usb 4-1: config 0 descriptor??
[  666.335487][ T7772] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  666.364709][ T7772] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  666.383994][ T7772] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  666.403147][ T7772] usb 4-1: media controller created
[  666.447261][ T7772] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  666.673798][ T5556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.721074][T11151] loop5: detected capacity change from 0 to 40427
[  666.738506][ T7772] DVB: Unable to find symbol tda10046_attach()
[  666.759460][ T7772] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  667.322724][T11192] loop1: detected capacity change from 0 to 131072
[  667.351737][T11192] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  667.358718][T11192] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  667.368600][ T7772] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  667.377166][T11192] F2FS-fs (loop1): invalid crc value
[  667.388681][ T7772] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71
[  667.389628][T11151] F2FS-fs (loop5): invalid crc value
[  667.399963][ T7772] usb 4-1: USB disconnect, device number 25
[  667.426246][T11192] F2FS-fs (loop1): Found nat_bits in checkpoint
[  667.502198][T11192] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  667.509554][T11192] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  667.537048][T11151] F2FS-fs (loop5): Found nat_bits in checkpoint
[  668.572730][ T7772] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  668.673632][ T7824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.704741][T11229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1841'.
[  668.762762][ T7772] usb 2-1: Using ep0 maxpacket: 16
[  668.769816][ T7772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  668.793692][T11229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1841'.
[  668.812799][ T7772] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  668.844383][ T7772] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  668.844885][T11229] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1841'.
[  668.872546][ T7772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  668.901460][ T7772] usb 2-1: SerialNumber: syz
[  668.904380][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1841'.
[  668.940134][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1841'.
[  668.946174][ T7772] usb 2-1: 0:2 : does not exist
[  669.002933][T11232] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1841'.
[  669.152797][    C0] net_ratelimit: 2 callbacks suppressed
[  669.152817][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.207512][T11205] loop6: detected capacity change from 0 to 40427
[  669.249421][T11231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.290474][T11205] F2FS-fs (loop6): Found nat_bits in checkpoint
[  669.311086][T11231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.354334][T11231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.510624][T11205] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2
[  669.520892][T11230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.554238][T11205] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  669.658962][T11244] loop4: detected capacity change from 0 to 256
[  669.726929][T11244] exfat: Deprecated parameter 'utf8'
[  669.749917][T11244] exfat: Deprecated parameter 'utf8'
[  669.762291][T11244] exfat: Deprecated parameter 'namecase'
[  669.786270][T11244] exfat: Deprecated parameter 'namecase'
[  669.823614][T11246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.848559][T11244] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  669.852874][T11246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.875767][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.894304][T11246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.914468][T11247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.939257][   T26] audit: type=1800 audit(1785789513.052:24): pid=11244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1845" name="file1" dev="loop4" ino=1048706 res=0 errno=0
[  669.953531][ T7772] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  670.067900][ T7772] usb 2-1: 5:0: failed to get current value for ch 2 (-22)
[  670.152033][ T7772] usb 2-1: 5:0: failed to get current value for ch 3 (-22)
[  670.191052][ T7772] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[  670.239053][T11250] loop4: detected capacity change from 0 to 256
[  670.260913][ T7772] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[  670.293838][ T7772] usb 2-1: USB disconnect, device number 34
[  670.342377][T11237] loop3: detected capacity change from 0 to 32768
[  670.485721][T11237] XFS (loop3): Mounting V5 Filesystem
[  670.586347][T11237] XFS (loop3): Ending clean mount
[  670.711438][   T26] audit: type=1800 audit(1785789513.822:25): pid=11237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1843" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  670.915518][T11272] loop4: detected capacity change from 0 to 256
[  670.954590][T11272] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  671.031312][T11272] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  671.191002][ T4276] XFS (loop3): Unmounting Filesystem
[  671.457558][T11279] loop1: detected capacity change from 0 to 8192
[  671.503396][T11279] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  671.553397][T11279] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  671.569577][T11279] REISERFS (device loop1): using ordered data mode
[  671.581293][T11279] reiserfs: using flush barriers
[  671.588105][T11279] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  671.605419][T11279] REISERFS (device loop1): checking transaction log (loop1)
[  671.734521][T11279] REISERFS (device loop1): Using tea hash to sort names
[  671.788856][T11279] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  672.539181][T11290] loop4: detected capacity change from 0 to 32768
[  672.605252][T11290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1861 (11290)
[  672.648728][T11290] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  672.660893][T11290] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  672.682881][T11290] BTRFS info (device loop4): setting nodatasum
[  672.689213][T11290] BTRFS info (device loop4): force zlib compression, level 3
[  672.697088][T11290] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  672.706939][T11290] BTRFS info (device loop4): use lzo compression, level 0
[  672.720866][T11290] BTRFS info (device loop4): turning on flush-on-commit
[  672.772969][T11290] BTRFS info (device loop4): enabling auto defrag
[  672.808862][T11290] BTRFS info (device loop4): max_inline at 4096
[  672.901560][T11290] BTRFS info (device loop4): using free space tree
[  673.578731][T11290] BTRFS info (device loop4): enabling ssd optimizations
[  673.952558][ T8158] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  674.218154][T11308] loop3: detected capacity change from 0 to 32768
[  674.256384][T11308] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1867 (11308)
[  674.626702][T11308] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  674.642946][T11308] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  674.692830][T11308] BTRFS info (device loop3): using free space tree
[  674.923665][ T4422] net_ratelimit: 235 callbacks suppressed
[  674.923684][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.037441][T11371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.046464][T11371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.055013][T11371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.064565][T11371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.084764][T11371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.267070][T11371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.655194][T11371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.884103][T11381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.955298][T11381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.819810][T11308] BTRFS error (device loop3): open_ctree failed: -22
[  676.911814][T11400] loop6: detected capacity change from 0 to 4096
[  677.023011][T11400] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  677.104316][ T7027] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (7027)
[  677.110878][   T26] audit: type=1800 audit(1785789520.222:26): pid=11400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1883" name="file1" dev="loop6" ino=30 res=0 errno=0
[  678.678802][T11431] device netdevsim0 entered promiscuous mode
[  678.737226][T11431] device batadv0 entered promiscuous mode
[  678.784587][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  679.782071][T11446] loop5: detected capacity change from 0 to 64
[  680.064782][T11455] input: syz0 as /devices/virtual/input/input33
[  680.092777][ T7772] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  680.299722][ T7772] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  680.319730][ T7772] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.365662][ T7772] usb 7-1: config 0 descriptor??
[  680.388499][ T7772] cp210x 7-1:0.0: cp210x converter detected
[  680.755075][ T4299] net_ratelimit: 190 callbacks suppressed
[  680.755112][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.862008][ T7772] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32
[  681.021320][ T7775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.107410][ T7775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.190149][ T7772] usb 7-1: cp210x converter now attached to ttyUSB0
[  681.347395][ T7775] usb 7-1: USB disconnect, device number 6
[  681.373528][ T7775] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  681.382382][ T7775] cp210x 7-1:0.0: device disconnected
[  681.413715][T11473] loop5: detected capacity change from 0 to 64
[  682.188810][T11483] "syz.4.1911" (11483) uses obsolete ecb(arc4) skcipher
[  682.334590][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.628156][T11496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.665643][T11496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.678384][T11497] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  682.696273][T11496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.727760][T11496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.738044][T11496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.752165][T11495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.218051][ T4317] kernel write not supported for file /input/event0 (pid: 4317 comm: kworker/0:4)
[  684.619191][T11525] loop1: detected capacity change from 0 to 32768
[  684.658710][T11525] (syz.1.1924,11525,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  684.672795][ T4287] Bluetooth: hci4: command 0x1003 tx timeout
[  684.682777][   T49] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  684.692859][ T7775] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  684.714703][T11525] (syz.1.1924,11525,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  684.799878][T11525] JBD2: Ignoring recovery information on journal
[  684.895310][ T7775] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  684.905099][T11525] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  684.910629][ T7775] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  684.962682][ T7775] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  684.983088][ T7775] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64
[  685.004118][ T4422] ocfs2: Finishing quota recovery on device (7,1) for slot 0
[  685.054793][ T7775] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  685.102742][ T7775] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  685.122688][ T7775] usb 7-1: Product: syz
[  685.131512][ T7775] usb 7-1: Manufacturer: syz
[  685.164121][ T7775] cdc_wdm 7-1:1.0: skipping garbage
[  685.169406][ T7775] cdc_wdm 7-1:1.0: skipping garbage
[  685.192502][T11525] (syz.1.1924,11525,0):ocfs2_remove_inode_range:1794 ERROR: status = -22
[  685.204821][ T7775] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  685.230424][ T7775] cdc_wdm 7-1:1.0: Unknown control protocol
[  685.249751][T11553] loop5: detected capacity change from 0 to 4096
[  685.260141][T11525] (syz.1.1924,11525,0):__ocfs2_change_file_space:2045 ERROR: status = -22
[  685.281882][T11553] EXT4-fs: inline encryption not supported
[  685.319196][T11553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  685.351069][T11553] EXT4-fs (loop5): Test dummy encryption mode enabled
[  685.404579][T11553] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  685.456465][T11553] System zones: 0-5
[  685.467278][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  685.474044][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  685.482917][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  685.489582][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  685.497555][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  685.504202][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  685.510548][ T7775] usb 7-1: USB disconnect, device number 7
[  685.517963][ T4272] ocfs2: Unmounting device (7,1) on (node local)
[  685.537050][T11553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  685.675957][T11553] fs-verity: sha512 using implementation "sha512-avx2"
[  685.855736][ T4515] EXT4-fs (loop5): unmounting filesystem.
[  685.874794][T11564] net_ratelimit: 2 callbacks suppressed
[  685.874811][T11564] ip_tables: iptables: counters copy to user failed while replacing table
[  685.875443][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  685.896969][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  686.147106][T11568] loop4: detected capacity change from 0 to 512
[  686.442916][T11568] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  686.526766][ T4456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.994905][T11575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.092100][ T8158] EXT4-fs (loop4): unmounting filesystem.
[  687.236074][T11585] netlink: 710 bytes leftover after parsing attributes in process `syz.4.1945'.
[  687.259708][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.460567][T11593] netlink: 'syz.1.1948': attribute type 29 has an invalid length.
[  687.509684][T11593] netlink: 'syz.1.1948': attribute type 29 has an invalid length.
[  687.543886][T11596] netlink: 'syz.1.1948': attribute type 29 has an invalid length.
[  687.587236][T11593] netlink: 'syz.1.1948': attribute type 29 has an invalid length.
[  687.617995][T11593] netlink: 'syz.1.1948': attribute type 29 has an invalid length.
[  687.795337][ T4333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.574524][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.636675][T11582] loop3: detected capacity change from 0 to 32768
[  689.346147][   T26] audit: type=1800 audit(1785789532.392:27): pid=11582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1944" name="file1" dev="loop3" ino=4 res=0 errno=0
[  689.478642][ T5556] read_mapping_page failed!
[  689.499900][T11621] loop4: detected capacity change from 0 to 512
[  689.506410][ T5556] ERROR: (device loop3): txCommit: 
[  689.506410][ T5556] 
[  689.544604][ T5556] jfs_write_inode: jfs_commit_inode failed!
[  689.568605][T11621] EXT4-fs (loop4): Test dummy encryption mode enabled
[  689.584200][ T5556] read_mapping_page failed!
[  689.588816][ T5556] ERROR: (device loop3): txCommit: 
[  689.588816][ T5556] 
[  689.651994][T11621] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1956: inode #1: comm syz.4.1956: iget: illegal inode #
[  689.665198][ T5556] jfs_write_inode: jfs_commit_inode failed!
[  689.723312][T11621] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1956: error while reading EA inode 1 err=-117
[  689.723687][T11582] read_mapping_page failed!
[  689.789673][T11582] ERROR: (device loop3): txCommit: 
[  689.789673][T11582] 
[  689.806108][T11621] EXT4-fs (loop4): 1 orphan inode deleted
[  689.811937][T11621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  689.893301][T11621] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #13: comm syz.4.1956: corrupted inode contents
[  689.969833][T11621] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #13: comm syz.4.1956: mark_inode_dirty error
[  690.037126][T11635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.043121][T11621] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1956: invalid indirect mapped block 234881024 (level 0)
[  690.055997][T11635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.080635][T11621] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #13: comm syz.4.1956: corrupted inode contents
[  690.125181][T11635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.163795][T11639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.191536][T11621] EXT4-fs error (device loop4): ext4_truncate:4325: inode #13: comm syz.4.1956: mark_inode_dirty error
[  690.206648][T11641] loop1: detected capacity change from 0 to 512
[  690.220124][T11621] EXT4-fs error (device loop4) in ext4_setattr:5695: Corrupt filesystem
[  690.257489][T11641] EXT4-fs: Ignoring removed mblk_io_submit option
[  690.276560][T11633] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #13: comm syz.4.1956: corrupted inode contents
[  690.334532][T11641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  690.383042][T11641] ext4 filesystem being mounted at /401/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  690.409618][T11633] EXT4-fs error (device loop4): ext4_rename:4059: inode #13: comm syz.4.1956: mark_inode_dirty error
[  690.924929][T11639] net_ratelimit: 119 callbacks suppressed
[  690.924944][T11639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.033516][T11650] loop3: detected capacity change from 0 to 2048
[  691.040653][ T8158] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #13: comm syz-executor: corrupted inode contents
[  691.070339][ T8158] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #13: comm syz-executor: mark_inode_dirty error
[  691.071609][T11650] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  691.106708][ T8158] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  691.134019][ T8158] EXT4-fs (loop4): unmounting filesystem.
[  691.201582][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  691.223546][T11650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  691.374517][T11656] loop1: detected capacity change from 0 to 1024
[  691.407077][T11656] EXT4-fs: Ignoring removed bh option
[  691.476385][T11656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  691.633093][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.668269][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  692.273462][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.869186][T11666] loop5: detected capacity change from 0 to 131072
[  692.883492][T11666] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  692.891643][T11666] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  692.929945][T11666] F2FS-fs (loop5): invalid crc value
[  693.052759][T11666] F2FS-fs (loop5): Found nat_bits in checkpoint
[  693.196809][T11666] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  693.204171][T11666] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  693.751329][ T7149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.892510][   T26] audit: type=1800 audit(1785789537.002:28): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1970" name="file3" dev="loop5" ino=8 res=0 errno=0
[  693.904889][T11685] input: syz1 as /devices/virtual/input/input34
[  694.112964][ T4279] Bluetooth: hci0: command 0x0c1a tx timeout
[  694.119181][   T49] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  694.193186][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.782709][ T7828] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  694.812699][ T7775] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  694.977726][ T7828] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  694.997390][ T7828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.007803][ T7775] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  695.032670][ T7828] usb 7-1: Product: syz
[  695.036912][ T7828] usb 7-1: Manufacturer: syz
[  695.041541][ T7828] usb 7-1: SerialNumber: syz
[  695.052711][ T7775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.083454][ T7775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  695.096311][ T7828] usb 7-1: config 0 descriptor??
[  695.109046][ T7828] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  695.117076][ T7775] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  695.136999][T11712] loop1: detected capacity change from 0 to 64
[  695.159574][ T7775] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  695.173556][ T7775] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  695.182394][ T7775] usb 4-1: Manufacturer: syz
[  695.197863][ T7775] usb 4-1: config 0 descriptor??
[  695.688408][ T7775] appleir 0003:05AC:8243.0018: unknown main item tag 0x0
[  695.810816][ T7775] appleir 0003:05AC:8243.0018: No inputs registered, leaving
[  696.038528][ T7775] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  696.136336][ T7775] usb 4-1: USB disconnect, device number 26
[  696.172856][ T6540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.329900][ T7828] gspca_sunplus: reg_w_riv err -71
[  696.341942][ T7828] sunplus: probe of 7-1:0.0 failed with error -71
[  696.362905][ T7828] usb 7-1: USB disconnect, device number 8
[  696.474425][T11720] fido_id[11720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  696.736034][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'.
[  698.044570][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.708691][T11755] device bond_slave_0 entered promiscuous mode
[  698.715669][T11755] device bond_slave_1 entered promiscuous mode
[  698.842119][ T4333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.256628][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.399676][T11761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.495733][T11761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.506240][T11755] device bond_slave_0 left promiscuous mode
[  699.512273][T11755] device bond_slave_1 left promiscuous mode
[  699.564968][T11761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.625687][T11761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.681929][T11761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.702095][T11761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.211302][T11777] lo speed is unknown, defaulting to 1000
[  700.844202][T11788] loop5: detected capacity change from 0 to 6
[  700.861283][T11788] Dev loop5: unable to read RDB block 6
[  700.907204][T11788]  loop5: AHDI p3
[  700.929622][T11788] loop5: partition table partially beyond EOD, truncated
[  700.949886][T11790] loop3: detected capacity change from 0 to 1024
[  701.081403][T11790] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  701.110224][T11790] hfsplus: xattr searching failed
[  701.181742][T11792] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  701.260382][T11792] hfsplus: xattr search failed
[  701.347326][T11790] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  701.348699][T11792] hfsplus: b-tree write err: -5, ino 2
[  701.692460][T11766] loop4: detected capacity change from 0 to 32768
[  701.749134][T11790] hfsplus: xattr searching failed
[  702.074306][T11766] JBD2: Ignoring recovery information on journal
[  702.283022][  T127] net_ratelimit: 109 callbacks suppressed
[  702.283040][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.344351][T11766] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  702.431636][ T4429] hfsplus: b-tree write err: -5, ino 25
[  702.443193][ T4429] hfsplus: b-tree write err: -5, ino 4
[  702.456052][ T4429] hfsplus: b-tree write err: -5, ino 2
[  702.474390][ T4429] hfsplus: b-tree write err: -5, ino 28
[  702.573465][T11766] (syz.4.2006,11766,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  702.759593][ T8158] ocfs2: Unmounting device (7,4) on (node local)
[  702.844817][T11819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.883323][T11819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.891718][T11819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.956850][T11819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.002971][T11819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.041316][T11819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.068429][T11819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.115673][T11820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.153177][T11820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.462807][ T4318] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  703.690594][ T4318] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  703.776118][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.865080][ T4318] usb 5-1: config 0 descriptor??
[  703.890774][ T4318] cp210x 5-1:0.0: cp210x converter detected
[  704.034772][T11837] loop3: detected capacity change from 0 to 16
[  704.062380][T11837] erofs: (device loop3): mounted with root inode @ nid 36.
[  704.132716][ T7775] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  704.153075][T11837] syz.3.2026: attempt to access beyond end of device
[  704.153075][T11837] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  704.249520][T11837] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 89
[  704.280248][T11837] syz.3.2026: attempt to access beyond end of device
[  704.280248][T11837] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16
[  704.303231][ T4318] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  704.315472][T11837] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  704.345092][   T26] audit: type=1800 audit(1785789547.452:29): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2026" name="file2" dev="loop3" ino=89 res=0 errno=0
[  704.365311][ T7775] usb 6-1: Using ep0 maxpacket: 8
[  704.378651][ T7775] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  704.389830][T11844] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  704.416693][ T7775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.429584][ T7775] usb 6-1: Product: syz
[  704.434154][ T7775] usb 6-1: Manufacturer: syz
[  704.438784][ T7775] usb 6-1: SerialNumber: syz
[  704.445519][   T26] audit: type=1800 audit(1785789547.562:30): pid=11844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2026" name="file2" dev="loop3" ino=89 res=0 errno=0
[  704.476745][ T7775] usb 6-1: config 0 descriptor??
[  704.519567][ T4318] usb 5-1: cp210x converter now attached to ttyUSB0
[  704.705351][ T7775] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  704.725488][ T4318] usb 5-1: USB disconnect, device number 25
[  704.774371][ T4318] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  704.819845][ T4318] cp210x 5-1:0.0: device disconnected
[  705.327673][ T7775] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  705.358554][ T7775] usb 6-1: USB disconnect, device number 20
[  705.417083][T11840] syz.3.2026 (11840): drop_caches: 2
[  705.607469][T11862] block device autoloading is deprecated and will be removed.
[  706.360958][T11865] loop1: detected capacity change from 0 to 40427
[  706.426367][T11865] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  706.464704][T11865] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  706.516943][T11880] loop5: detected capacity change from 0 to 2048
[  706.530187][T11865] F2FS-fs (loop1): invalid crc value
[  706.541594][T11865] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  706.587425][T11880] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  706.655066][T11880] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  706.720140][T11880] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  707.551436][T11865] F2FS-fs (loop1): Start checkpoint disabled!
[  707.624419][T11865] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  707.673313][T11865] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  708.444025][ T7778] net_ratelimit: 115 callbacks suppressed
[  708.444044][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.893371][ T5370] kworker/u4:20: attempt to access beyond end of device
[  708.893371][ T5370] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  709.676226][ T5556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.809513][T11919] lo speed is unknown, defaulting to 1000
[  710.557218][T11931] device bond_slave_0 entered promiscuous mode
[  710.563580][T11931] device bond_slave_1 entered promiscuous mode
[  710.843571][T11931] device bond_slave_0 left promiscuous mode
[  710.849600][T11931] device bond_slave_1 left promiscuous mode
[  711.473424][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.489304][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.750682][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.967219][T11948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.976457][T11948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.003032][T11948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.035613][T11948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.064163][T11948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.562947][ T4279] Bluetooth: hci3: command 0x0406 tx timeout
[  714.272110][T11977] lo speed is unknown, defaulting to 1000
[  714.310928][T11981] net_ratelimit: 99 callbacks suppressed
[  714.310944][T11981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.331368][T11983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2069'.
[  714.366856][T11981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.385905][T11981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.454269][T11981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.473021][T11981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.489449][T11981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.524076][T11981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.543126][T11984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.551541][T11984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.586000][T11984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.716936][T11959] loop4: detected capacity change from 0 to 32768
[  714.781903][T11959] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  714.816240][T11959] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  714.894539][T11996] device bond_slave_0 entered promiscuous mode
[  714.900801][T11996] device bond_slave_1 entered promiscuous mode
[  715.204821][T11996] device bond_slave_0 left promiscuous mode
[  715.210836][T11996] device bond_slave_1 left promiscuous mode
[  715.247767][T12000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2074'.
[  715.383658][T11959] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  715.412328][ T7778] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  715.432680][ T7778] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  715.523808][ T7778] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 91ms
[  715.533569][ T7778] gfs2: fsid=syz:syz.0: jid=0: Done
[  715.540437][T11959] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  715.581651][T11959] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  716.336422][T12027] loop5: detected capacity change from 0 to 128
[  716.351150][T12026] loop3: detected capacity change from 0 to 256
[  716.441477][T12029] input: syz1 as /devices/virtual/input/input35
[  716.450578][   T26] audit: type=1804 audit(1785789559.562:31): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2082" name="/newroot/451/file0/bus" dev="loop3" ino=1048707 res=1 errno=0
[  716.693305][T12031] KVM: debugfs: duplicate directory 12031-4
[  716.978171][T12043] device bond_slave_0 entered promiscuous mode
[  716.984517][T12043] device bond_slave_1 entered promiscuous mode
[  717.121153][T12043] device bond_slave_0 left promiscuous mode
[  717.127231][T12043] device bond_slave_1 left promiscuous mode
[  717.140366][T12050] loop6: detected capacity change from 0 to 2048
[  717.259994][T12050] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  717.295274][T12050] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  717.363191][T12050] fs-verity: sha256 using implementation "sha256-avx2"
[  717.366059][ T4317] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  717.500688][ T9676] EXT4-fs (loop6): unmounting filesystem.
[  717.532840][ T7775] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  717.625901][ T4317] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  717.742899][ T7775] usb 2-1: Using ep0 maxpacket: 32
[  717.776647][ T7775] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  717.827726][T12064] netlink: 'syz.4.2096': attribute type 3 has an invalid length.
[  717.847790][ T7775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.892382][ T7775] usb 2-1: Product: syz
[  717.928183][ T7775] usb 2-1: Manufacturer: syz
[  717.959335][ T7775] usb 2-1: SerialNumber: syz
[  718.083143][ T7775] usb 2-1: config 0 descriptor??
[  718.192962][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  718.204130][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  718.216292][ T4317] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  718.232812][ T4317] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  718.241923][ T4317] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  718.250494][ T4317] usb 6-1: Manufacturer: syz
[  718.257255][ T4317] usb 6-1: config 0 descriptor??
[  718.363827][ T7775] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 035
[  718.598955][T12075] loop4: detected capacity change from 0 to 128
[  718.678670][ T4317] appleir 0003:05AC:8243.0019: unknown main item tag 0x0
[  718.702524][T12075] syz.4.2101: attempt to access beyond end of device
[  718.702524][T12075] loop4: rw=2049, sector=145, nr_sectors = 79 limit=128
[  718.707310][ T4317] appleir 0003:05AC:8243.0019: No inputs registered, leaving
[  718.785922][ T7775] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  718.790773][ T4317] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  718.808501][T12074] syz.4.2101: attempt to access beyond end of device
[  718.808501][T12074] loop4: rw=524288, sector=145, nr_sectors = 79 limit=128
[  718.841843][ T7775] hid-generic 0000:0000:0000.001A: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  718.897579][T12075] syz.4.2101: attempt to access beyond end of device
[  718.897579][T12075] loop4: rw=0, sector=145, nr_sectors = 8 limit=128
[  718.970967][T12075] syz.4.2101: attempt to access beyond end of device
[  718.970967][T12075] loop4: rw=0, sector=145, nr_sectors = 8 limit=128
[  719.011794][ T4317] usb 6-1: USB disconnect, device number 21
[  719.099730][T12075] syz.4.2101: attempt to access beyond end of device
[  719.099730][T12075] loop4: rw=0, sector=151, nr_sectors = 1 limit=128
[  719.376274][T12082] fido_id[12082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  719.520791][ T7775] net_ratelimit: 112 callbacks suppressed
[  719.520806][ T7775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.844762][T12092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.859382][T12092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.873548][T12092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.907855][T12092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.918601][T12092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.948783][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2106'.
[  719.965445][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.974635][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.983054][ T7775] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  719.991182][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  720.020219][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2106'.
[  720.139970][T12099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  720.174472][ T7775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  720.197760][ T7775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  720.226142][ T7775] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  720.292692][ T7775] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  720.301807][ T7775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.352893][ T7775] usb 5-1: config 0 descriptor??
[  720.359255][ T7828] usb 2-1: USB disconnect, device number 35
[  720.512950][  T127] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  720.734700][  T127] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  720.749393][  T127] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  720.805344][ T7775] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving
[  720.817499][  T127] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  720.857420][  T127] usb 7-1: config 0 interface 0 has no altsetting 0
[  720.891846][  T127] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  720.899049][ T7775] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  720.905286][  T127] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  720.928012][  T127] usb 7-1: config 0 interface 0 has no altsetting 0
[  721.156942][ T7775] usb 5-1: USB disconnect, device number 26
[  721.727977][  T127] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  721.742816][  T127] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  721.768514][  T127] usb 7-1: config 0 interface 0 has no altsetting 0
[  721.782500][  T127] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  721.792931][  T127] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  721.808175][  T127] usb 7-1: config 0 interface 0 has no altsetting 0
[  721.816326][  T127] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  721.825616][  T127] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  721.836806][  T127] usb 7-1: config 0 interface 0 has no altsetting 0
[  721.851093][  T127] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  721.860288][  T127] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  721.871823][  T127] usb 7-1: config 0 interface 0 has no altsetting 0
[  721.884671][  T127] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  721.894267][  T127] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  721.932783][  T127] usb 7-1: config 0 interface 0 has no altsetting 0
[  721.942144][  T127] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  721.960875][  T127] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  721.996181][T12123] fido_id[12123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  722.009435][  T127] usb 7-1: config 0 interface 0 has no altsetting 0
[  722.060233][  T127] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  722.081886][T12129] loop4: detected capacity change from 0 to 1024
[  722.091237][  T127] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  722.118426][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2118'.
[  722.125842][  T127] usb 7-1: Product: syz
[  722.144853][  T127] usb 7-1: Manufacturer: syz
[  722.149644][  T127] usb 7-1: SerialNumber: syz
[  722.158769][T12133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.189658][  T127] usb 7-1: config 0 descriptor??
[  722.299117][  T127] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  723.097971][T12133] batman_adv: batadv0: Removing interface: batadv_slave_1
[  723.143465][ T4317] usb 7-1: USB disconnect, device number 9
[  723.167519][ T4317] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  723.409063][T12154] loop5: detected capacity change from 0 to 256
[  723.448231][   T26] audit: type=1804 audit(1785789566.562:32): pid=12154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2122" name="/newroot/405/file0/bus" dev="loop5" ino=1048710 res=1 errno=0
[  723.932545][T12161] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2124'.
[  724.452811][ T4351] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  725.237888][ T4351] usb 5-1: config index 0 descriptor too short (expected 28277, got 36)
[  725.252487][ T4351] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  725.269228][ T4351] usb 5-1: config 0 has no interfaces?
[  725.283684][ T4351] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  725.302432][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.321966][T12163] loop3: detected capacity change from 0 to 32768
[  725.323549][ T4351] usb 5-1: config 0 descriptor??
[  725.425498][T12163] JBD2: Ignoring recovery information on journal
[  725.472880][  T127] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  725.501829][T12163] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  725.553188][ T4429] net_ratelimit: 4 callbacks suppressed
[  725.553210][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  725.659222][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2132'.
[  725.682875][  T127] usb 2-1: Using ep0 maxpacket: 16
[  725.689948][  T127] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  725.697360][T12188] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  725.714595][T12163] 
[  725.716978][T12163] ======================================================
[  725.724030][T12163] WARNING: possible circular locking dependency detected
[  725.731079][T12163] syzkaller #0 Not tainted
[  725.731674][  T127] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  725.735504][T12163] ------------------------------------------------------
[  725.735514][T12163] syz.3.2125/12163 is trying to acquire lock:
[  725.735524][T12163] ffff88805240cda0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_read_virt_blocks+0x266/0x980
[  725.756759][  T127] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  725.757540][T12163] 
[  725.757540][T12163] but task is already holding lock:
[  725.757549][T12163] ffff888057ea7ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  725.794739][  T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.795308][T12163] 
[  725.795308][T12163] which lock already depends on the new lock.
[  725.795308][T12163] 
[  725.813723][T12163] 
[  725.813723][T12163] the existing dependency chain (in reverse order) is:
[  725.813734][  T127] usb 2-1: Product: syz
[  725.822744][T12163] 
[  725.822744][T12163] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  725.822783][T12163]        down_read+0x42/0x2d0
[  725.822805][T12163]        ocfs2_start_trans+0x3a4/0x6f0
[  725.822828][T12163]        ocfs2_reserve_local_alloc_bits+0xaad/0x2770
[  725.822905][T12163]        ocfs2_reserve_clusters_with_limit+0x1b6/0xc10
[  725.822928][T12163]        ocfs2_extend_dir+0x77b/0x4c40
[  725.822974][T12163]        ocfs2_prepare_dir_for_insert+0x3217/0x5600
[  725.823000][T12163]        ocfs2_mknod+0xb46/0x2580
[  725.823015][T12163]        ocfs2_create+0x1b6/0x4b0
[  725.823030][T12163]        path_openat+0x11b9/0x2f10
[  725.837353][  T127] usb 2-1: Manufacturer: syz
[  725.840375][T12163]        do_filp_open+0x1ee/0x420
[  725.840402][T12163]        do_sys_openat2+0x14b/0x4f0
[  725.855795][  T127] usb 2-1: SerialNumber: syz
[  725.859388][T12163]        __x64_sys_creat+0x8c/0xb0
[  725.859420][T12163]        do_syscall_64+0x4c/0xa0
[  725.916260][T12163]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  725.918016][ T4351] usb 5-1: USB disconnect, device number 27
[  725.922761][T12163] 
[  725.922761][T12163] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  725.922801][T12163]        ocfs2_start_trans+0x2a5/0x6f0
[  725.922830][T12163]        ocfs2_write_begin_nolock+0x20c2/0x4590
[  725.922852][T12163]        ocfs2_write_begin+0x1b7/0x310
[  725.922872][T12163]        generic_perform_write+0x2fa/0x5c0
[  725.959200][T12163]        __generic_file_write_iter+0x148/0x2a0
[  725.965360][T12163]        ocfs2_file_write_iter+0x1731/0x1fc0
[  725.971362][T12163]        vfs_write+0x482/0x9a0
[  725.976139][T12163]        ksys_write+0x14d/0x260
[  725.976266][T12191] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  725.981007][T12163]        do_syscall_64+0x4c/0xa0
[  725.981034][T12163]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  725.999536][T12163] 
[  725.999536][T12163] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  726.008343][T12163]        __lock_acquire+0x2d18/0x7c40
[  726.013758][T12163]        lock_acquire+0x1bb/0x4a0
[  726.018852][T12163]        down_read+0x42/0x2d0
[  726.023568][T12163]        ocfs2_read_virt_blocks+0x266/0x980
[  726.029681][T12163]        ocfs2_find_entry+0x3a8/0x2080
[  726.035214][T12163]        ocfs2_find_files_on_disk+0x102/0x390
[  726.041325][T12163]        ocfs2_lookup_ino_from_name+0x4f/0xf0
[  726.047443][T12163]        ocfs2_find_victim_alloc_group+0x203/0x9e0
[  726.053987][T12163]        __ocfs2_move_extents_range+0x1c72/0x3450
[  726.060445][T12163]        ocfs2_move_extents+0x409/0xa40
[  726.066023][T12163]        ocfs2_ioctl_move_extents+0x4d4/0x6e0
[  726.072113][T12163]        ocfs2_ioctl+0x31d/0x7c0
[  726.075080][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.077061][T12163]        __se_sys_ioctl+0xfa/0x170
[  726.077097][T12163]        do_syscall_64+0x4c/0xa0
[  726.095254][T12163]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  726.101689][T12163] 
[  726.101689][T12163] other info that might help us debug this:
[  726.101689][T12163] 
[  726.111926][T12163] Chain exists of:
[  726.111926][T12163]   &ocfs2_file_ip_alloc_sem_key --> sb_internal#2 --> &journal->j_trans_barrier
[  726.111926][T12163] 
[  726.126861][T12163]  Possible unsafe locking scenario:
[  726.126861][T12163] 
[  726.134324][T12163]        CPU0                    CPU1
[  726.139713][T12163]        ----                    ----
[  726.145103][T12163]   lock(&journal->j_trans_barrier);
[  726.150401][T12163]                                lock(sb_internal#2);
[  726.157183][T12163]                                lock(&journal->j_trans_barrier);
[  726.164998][T12163]   lock(&ocfs2_file_ip_alloc_sem_key);
[  726.170564][T12163] 
[  726.170564][T12163]  *** DEADLOCK ***
[  726.170564][T12163] 
[  726.178735][T12163] 10 locks held by syz.3.2125/12163:
[  726.181917][  T127] usb 2-1: 0:2 : does not exist
[  726.184038][T12163]  #0: ffff88802e4f4460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200
[  726.196163][  T127] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  726.198713][T12163]  #1: ffff8880524042c8 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: ocfs2_move_extents+0x19d/0xa40
[  726.216932][T12163]  #2: ffff888052403f60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_move_extents+0x3fc/0xa40
[  726.227043][  T127] usb 2-1: USB disconnect, device number 36
[  726.228111][T12163]  #3: ffff888074cb4898 (&new->rf_sem){+.+.}-{3:3}, at: ocfs2_lock_refcount_tree+0x1aa/0x9d0
[  726.244248][T12163]  #4: ffff88805240a648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4810
[  726.258147][T12163]  #5: ffff88805240ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x131f/0x3450
[  726.271872][T12163]  #6: ffff888052405108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x1a31/0x3450
[  726.285540][T12163]  #7: ffff88802e4f4650 (sb_internal#2){.+.+}-{0:0}, at: __ocfs2_move_extents_range+0x1a42/0x3450
[  726.296259][T12163]  #8: ffff888057ea7ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  726.306967][T12163]  #9: ffff8880521ac990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  726.316669][T12163] 
[  726.316669][T12163] stack backtrace:
[  726.322578][T12163] CPU: 1 PID: 12163 Comm: syz.3.2125 Not tainted syzkaller #0
[  726.330227][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  726.340309][T12163] Call Trace:
[  726.343592][T12163]  <TASK>
[  726.346518][T12163]  dump_stack_lvl+0x188/0x24e
[  726.351194][T12163]  ? load_image+0x410/0x410
[  726.355693][T12163]  ? show_regs_print_info+0x12/0x12
[  726.360909][T12163]  ? print_circular_bug+0x12b/0x1a0
[  726.366106][T12163]  check_noncircular+0x296/0x330
[  726.371047][T12163]  ? add_chain_block+0x9b0/0x9b0
[  726.376018][T12163]  ? _find_first_zero_bit+0xd2/0x100
[  726.381364][T12163]  ? add_lock_to_list+0x191/0x280
[  726.386399][T12163]  __lock_acquire+0x2d18/0x7c40
[  726.391252][T12163]  ? verify_lock_unused+0x140/0x140
[  726.396465][T12163]  ? check_noncircular+0x189/0x330
[  726.401598][T12163]  lock_acquire+0x1bb/0x4a0
[  726.406111][T12163]  ? ocfs2_read_virt_blocks+0x266/0x980
[  726.411682][T12163]  ? __might_sleep+0xd0/0xd0
[  726.416354][T12163]  ? lockdep_lock+0xf1/0x1f0
[  726.420958][T12163]  ? read_lock_is_recursive+0x10/0x10
[  726.426356][T12163]  ? lockdep_unlock+0x142/0x2e0
[  726.431295][T12163]  ? lockdep_lock+0x1f0/0x1f0
[  726.436012][T12163]  down_read+0x42/0x2d0
[  726.440195][T12163]  ? ocfs2_read_virt_blocks+0x266/0x980
[  726.445766][T12163]  ocfs2_read_virt_blocks+0x266/0x980
[  726.451174][T12163]  ? ocfs2_validate_dx_leaf+0x200/0x200
[  726.456762][T12163]  ? ocfs2_seek_data_hole_offset+0x990/0x990
[  726.462777][T12163]  ? verify_lock_unused+0x140/0x140
[  726.468012][T12163]  ? verify_lock_unused+0x140/0x140
[  726.473251][T12163]  ocfs2_find_entry+0x3a8/0x2080
[  726.478237][T12163]  ? ocfs2_free_dir_lookup_result+0x100/0x100
[  726.484346][T12163]  ? start_this_handle+0x2037/0x2240
[  726.489643][T12163]  ? start_this_handle+0x20ec/0x2240
[  726.494938][T12163]  ? slab_post_alloc_hook+0x4b/0x490
[  726.500259][T12163]  ? kmem_cache_alloc+0x18b/0x2f0
[  726.505293][T12163]  ? jbd2__journal_start+0x13c/0x5a0
[  726.510602][T12163]  ? jbd2__journal_start+0x5a0/0x5a0
[  726.516073][T12163]  ocfs2_find_files_on_disk+0x102/0x390
[  726.521631][T12163]  ocfs2_lookup_ino_from_name+0x4f/0xf0
[  726.527190][T12163]  ocfs2_find_victim_alloc_group+0x203/0x9e0
[  726.533182][T12163]  ? ocfs2_move_extents+0xa40/0xa40
[  726.538386][T12163]  ? jbd2__journal_start+0x38e/0x5a0
[  726.543675][T12163]  ? jbd2_journal_start+0x26/0x30
[  726.548704][T12163]  ? ocfs2_start_trans+0x4d9/0x6f0
[  726.553824][T12163]  ? ocfs2_recovery_exit+0x50/0x50
[  726.558946][T12163]  __ocfs2_move_extents_range+0x1c72/0x3450
[  726.564855][T12163]  ? ocfs2_find_victim_alloc_group+0x9e0/0x9e0
[  726.571014][T12163]  ? ocfs2_refresh_inode+0x940/0x940
[  726.576306][T12163]  ? mark_lock+0x94/0x320
[  726.580650][T12163]  ? __lock_acquire+0x1465/0x7c40
[  726.585684][T12163]  ? ocfs2_inode_lock_full_nested+0x149/0x1b10
[  726.591842][T12163]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  726.597834][T12163]  ? verify_lock_unused+0x140/0x140
[  726.603040][T12163]  ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10
[  726.609205][T12163]  ? rwsem_write_trylock+0x135/0x1c0
[  726.614517][T12163]  ? clear_nonspinnable+0x60/0x60
[  726.619637][T12163]  ? ocfs2_create_new_inode_locks+0x690/0x690
[  726.625709][T12163]  ocfs2_move_extents+0x409/0xa40
[  726.630741][T12163]  ? ocfs2_validate_and_adjust_move_goal+0x460/0x460
[  726.637427][T12163]  ? __lock_acquire+0x7c40/0x7c40
[  726.642458][T12163]  ? __brelse+0x55/0x90
[  726.646694][T12163]  ? ocfs2_validate_and_adjust_move_goal+0x330/0x460
[  726.653467][T12163]  ocfs2_ioctl_move_extents+0x4d4/0x6e0
[  726.659021][T12163]  ? ocfs2_dump_resv+0x540/0x540
[  726.663963][T12163]  ? tomoyo_path_number_perm+0x205/0x650
[  726.669631][T12163]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  726.675112][T12163]  ocfs2_ioctl+0x31d/0x7c0
[  726.679536][T12163]  ? ocfs2_fileattr_set+0x800/0x800
[  726.684750][T12163]  ? __fget_files+0x28/0x460
[  726.689350][T12163]  ? bpf_lsm_file_ioctl+0x5/0x10
[  726.694340][T12163]  ? security_file_ioctl+0x7c/0xa0
[  726.699472][T12163]  ? ocfs2_fileattr_set+0x800/0x800
[  726.704675][T12163]  __se_sys_ioctl+0xfa/0x170
[  726.709279][T12163]  do_syscall_64+0x4c/0xa0
[  726.713709][T12163]  ? clear_bhb_loop+0x60/0xb0
[  726.718391][T12163]  ? clear_bhb_loop+0x60/0xb0
[  726.723076][T12163]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  726.728993][T12163] RIP: 0033:0x7f6ae019e019
[  726.733419][T12163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.753044][T12163] RSP: 002b:00007f6ae107e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  726.761467][T12163] RAX: ffffffffffffffda RBX: 00007f6ae0425fa0 RCX: 00007f6ae019e019
[  726.769444][T12163] RDX: 00002000000000c0 RSI: 0000000040406f06 RDI: 0000000000000005
[  726.777420][T12163] RBP: 00007f6ae023500c R08: 0000000000000000 R09: 0000000000000000
[  726.785395][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  726.793384][T12163] R13: 00007f6ae0426038 R14: 00007f6ae0425fa0 R15: 00007ffedf5f08a8
[  726.801396][T12163]  </TASK>
[  726.808680][ T7775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.840050][ T7775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.953922][ T4276] ocfs2: Unmounting device (7,3) on (node local)
[  728.753030][ T4456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.872829][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.313115][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.922783][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.793003][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.873770][ T7775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog