last executing test programs:

11.768909835s ago: executing program 0 (id=6679):
unshare(0x22020400)
socket(0x23, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)

10.854137865s ago: executing program 0 (id=6685):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="2e9b5b0007e03dd65193dfb6c561963f86dd6067060000000600000000000000f5a81543b0", 0x25}, {&(0x7f00000002c0)="a126000000000000000000009a9d682cc28599c8b759", 0x16}], 0x2)

10.300555489s ago: executing program 0 (id=6690):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x18}, {0x4, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

10.017792102s ago: executing program 0 (id=6693):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
r1 = socket(0x1, 0x3, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)

9.910534276s ago: executing program 0 (id=6696):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x14069, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [<r1=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={r1, 0xa9ac}, &(0x7f0000000300)=0x8)

9.072667193s ago: executing program 0 (id=6707):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8.630221933s ago: executing program 32 (id=6707):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.198489493s ago: executing program 1 (id=6726):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0xf0}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xeeee0000, 0x8000, 0x8, 0x8, 0x0, [{0x6, 0xbd, 0xff, '\x00', 0x6}, {0x5, 0x12, 0x2, '\x00', 0x4}, {0x4, 0x46, 0x3c, '\x00', 0x6}, {0x1, 0xfb, 0x1}, {0x8, 0x8, 0xc, '\x00', 0x5}, {0x8, 0x77, 0x1, '\x00', 0x19}, {0x17, 0x5, 0xd6, '\x00', 0x8d}, {0xa, 0x9, 0x1, '\x00', 0x6f}, {0x8, 0xf, 0x9, '\x00', 0x9}, {0x0, 0x3, 0xf, '\x00', 0x8}, {0x6, 0x3, 0xe1, '\x00', 0x5}, {0xfa, 0x46, 0x4, '\x00', 0xdd}, {0x1, 0x80, 0x2, '\x00', 0x5}, {0x80, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x81, 0x7, '\x00', 0xfd}, {0x4, 0x5, 0x2, '\x00', 0xf7}, {0x9, 0x10, 0x5, '\x00', 0x1}, {0xb5, 0x0, 0x9, '\x00', 0xc}, {0xa7, 0x1, 0x3, '\x00', 0x7}, {0xf, 0x3, 0x9, '\x00', 0xd}, {0x8, 0x5, 0x0, '\x00', 0x9}, {0x0, 0x5, 0x0, '\x00', 0xf1}, {0xa, 0x5, 0x2f, '\x00', 0xff}, {0x8}]}})

4.844410888s ago: executing program 1 (id=6727):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfc85}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000)

4.232765205s ago: executing program 1 (id=6729):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r1, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

4.134153849s ago: executing program 2 (id=6732):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x1, 0x1000, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.086298621s ago: executing program 1 (id=6733):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x4f, 0xffffffff}]})
write$ppp(r0, &(0x7f0000000a00)="06bb", 0x2)

3.827843793s ago: executing program 2 (id=6734):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0})

3.639747841s ago: executing program 1 (id=6735):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

3.42916446s ago: executing program 1 (id=6737):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e800000ffffffffffffbbbbbbbbbbbb0800450000b00000000000049078"], 0xc2)

3.232698289s ago: executing program 4 (id=6738):
syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x2008410, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0x1, 0x5556, &(0x7f0000004440)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x104880, 0x0, 0x1, 0x0, &(0x7f0000000200))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80000, 0x0, 0x1, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101800, 0x145)
renameat2(r0, &(0x7f00000001c0)='./bus/file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x4)

2.209526473s ago: executing program 4 (id=6741):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x4)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}})

2.096496509s ago: executing program 4 (id=6742):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x5)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x4, 0x2, r0})

2.05566484s ago: executing program 4 (id=6743):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r1)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002"], 0x1c}}, 0x0)

1.999106263s ago: executing program 4 (id=6744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0)

1.583449121s ago: executing program 3 (id=6745):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1.546895582s ago: executing program 2 (id=6746):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)

1.430440728s ago: executing program 3 (id=6747):
r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80)
write$P9_RSTAT(r1, &(0x7f0000000040)={0x58, 0x7d, 0x1, {0x0, 0x51, 0x2, 0x8, {0x2, 0x1, 0x8}, 0x60000, 0x80000001, 0x2, 0x7fffffff, 0xa, '/dev/vbi#\x00', 0x0, '', 0xa, '/dev/vbi#\x00', 0xa, '/dev/vbi#\x00'}}, 0x58)

1.336733632s ago: executing program 2 (id=6748):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

1.294690093s ago: executing program 3 (id=6749):
socket$nl_netfilter(0x10, 0x3, 0xc)
eventfd2(0x40, 0x80800)
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x8bc3, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x3c})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1.124750741s ago: executing program 3 (id=6750):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
write$eventfd(r1, &(0x7f00000006c0)=0x9, 0x8)

1.124411701s ago: executing program 2 (id=6751):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000280)={{}, 0xfffffffffffffe59, 0x0, 0x1, 0x6, 0xfffffffc})

1.026389755s ago: executing program 3 (id=6752):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x7fff, @private1, 0x8001}, 0x1c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c)

928.824639ms ago: executing program 3 (id=6753):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2)
syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0)

371.789014ms ago: executing program 2 (id=6754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)={0xf8, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x3, 0xe8, 0x24, 0x401}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x85, 0xf, [@fast_bss_trans={0x37, 0x54, {0xf1, 0x1, "74de46ee58670530cc07db14d6f2a74a", "7e6cce6d01e407fe7ac54aaf591b1603f42711dca75d6ecfa0d0cc2975b9888a", "773dcadaf5a7ed8f8a781dc251b44d0bccdef5bf214ed247de1b931b3e843a6e", [{0x3}]}}, @supported_rates={0x1, 0x2, [{0x12}, {0x18, 0x1}]}, @mesh_id={0x72, 0x6}, @random={0x3, 0x7, "9c5142df8e3044"}, @peer_mgmt={0x75, 0x14, {0x0, 0x4000, @void, @void, @val="7fd409c015fc9ba9bdabd6ae32346574"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x4}]]}, 0xf8}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014)

0s ago: executing program 4 (id=6755):
io_uring_setup(0x70c3, &(0x7f0000000040)={0x0, 0x2c43, 0x0, 0x1, 0x2})
close(0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f00000002c0)=[{r1, 0x2}], 0x1, 0xfa)
dup2(r0, r1)

kernel console output (not intermixed with test programs):

851945][ T4841] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  388.894264][ T4841] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  388.938571][ T4841] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  388.974098][ T4841] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  389.014047][ T4841] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  389.045071][ T4841] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  389.060331][ T4841] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  389.102684][ T4841] usb 3-1: USB disconnect, device number 25
[  390.604004][ T4482] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  390.814083][ T4482] usb 4-1: Using ep0 maxpacket: 16
[  390.821060][ T4482] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  390.839718][ T4482] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  390.858207][ T4482] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  390.875616][ T4482] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  390.902664][ T4482] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  390.922087][ T4482] usb 4-1: config 0 has no interface number 0
[  390.942433][ T4482] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  390.987969][ T4482] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  391.008329][ T4482] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  391.028902][ T4482] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  391.062657][ T4482] usb 4-1: config 0 interface 125 has no altsetting 0
[  391.070120][ T4482] usb 4-1: config 0 interface 125 has no altsetting 2
[  391.100751][ T4482] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  391.140273][ T4482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.155654][ T4482] usb 4-1: Product: syz
[  391.160029][ T4482] usb 4-1: Manufacturer: syz
[  391.165593][ T4482] usb 4-1: SerialNumber: syz
[  391.172353][ T4482] usb 4-1: config 0 descriptor??
[  391.187054][ T4482] usb 4-1: selecting invalid altsetting 2
[  392.191885][    C0] usb 4-1: async_complete: urb error -71
[  392.197659][    C0] usb 4-1: async_complete: urb error -71
[  392.203404][ T4482] get_1284_register: usb error -71
[  392.208608][ T4482] uss720: probe of 4-1:0.125 failed with error -71
[  392.218644][ T4482] usb 4-1: USB disconnect, device number 29
[  392.377131][T13561] tipc: Started in network mode
[  392.382166][T13561] tipc: Node identity ac1414aa, cluster identity 4711
[  392.390712][T13561] tipc: Enabled bearer <udp:s>, priority 10
[  393.394603][ T4841] tipc: Node number set to 2886997162
[  393.493820][T13604] device syz_tun entered promiscuous mode
[  393.533284][T13604] device syz_tun left promiscuous mode
[  395.749989][ T5597] libceph: connect (1)[c::]:6789 error -101
[  395.757458][ T5597] libceph: mon0 (1)[c::]:6789 connect error
[  396.007086][T13665] device syzkaller1 entered promiscuous mode
[  396.034370][ T5597] libceph: connect (1)[c::]:6789 error -101
[  396.040435][ T5597] libceph: mon0 (1)[c::]:6789 connect error
[  396.463245][T13657] ceph: No mds server is up or the cluster is laggy
[  397.044003][ T4763] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  397.237727][ T4763] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  397.259258][ T4763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.281942][ T4763] usb 2-1: Product: syz
[  397.289017][ T4763] usb 2-1: Manufacturer: syz
[  397.293839][ T4763] usb 2-1: SerialNumber: syz
[  397.307693][ T4763] usb 2-1: config 0 descriptor??
[  397.318706][ T4763] hub 2-1:0.0: bad descriptor, ignoring hub
[  397.330600][ T4763] hub: probe of 2-1:0.0 failed with error -5
[  397.521381][ T4763] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  397.533405][T13709] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3855'.
[  397.546892][ T4763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  397.581560][ T4763] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  397.613108][ T4763] usb 2-1: media controller created
[  397.676467][ T4763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  397.826539][ T4763] DVB: Unable to find symbol dib7000p_attach()
[  397.833099][ T4763] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  397.984080][ T4763] rc_core: IR keymap rc-dib0700-rc5 not found
[  397.990206][ T4763] Registered IR keymap rc-empty
[  398.006171][ T4763] dvb-usb: could not initialize remote control.
[  398.012540][ T4763] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  398.242977][ T4839] usb 2-1: USB disconnect, device number 32
[  398.261541][T13741] netlink: 'syz.4.3869': attribute type 10 has an invalid length.
[  398.288961][ T4839] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  398.308935][T13741] team0: Device dummy0 failed to register rx_handler
[  398.352179][T13742] netlink: 'syz.4.3869': attribute type 10 has an invalid length.
[  398.791142][T13750] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3873'.
[  399.111009][T13752] ceph: No mds server is up or the cluster is laggy
[  399.434604][T13770] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3879'.
[  400.473523][T13792] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[  400.647126][T13798] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3893'.
[  401.434434][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3901'.
[  401.485908][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3901'.
[  401.821434][T13837] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3908'.
[  401.887456][T13837] device dummy0 left promiscuous mode
[  402.846225][T13872] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3926'.
[  402.886753][T13872] device dummy0 left promiscuous mode
[  403.092941][T13874] ceph: No mds server is up or the cluster is laggy
[  404.007262][T13903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3937'.
[  404.450932][T13906] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3939'.
[  405.094313][ T4482] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  405.323953][ T4482] usb 3-1: Using ep0 maxpacket: 32
[  405.335569][ T4482] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  405.361675][ T4482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.382656][T13921] ceph: No mds server is up or the cluster is laggy
[  405.406613][ T4482] usb 3-1: config 0 descriptor??
[  405.434408][ T4482] as10x_usb: device has been detected
[  405.440193][ T4482] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  405.537065][ T4482] usb 3-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)...
[  405.627517][   T26] audit: type=1326 audit(1765071754.147:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.2.3942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff94f8f749 code=0x0
[  405.717074][ T4482] as10x_usb: error during firmware upload part1
[  405.724741][ T4482] Registered device nBox DVB-T Dongle
[  405.744224][ T4839] usb 3-1: USB disconnect, device number 26
[  405.800762][ T4839] Unregistered device nBox DVB-T Dongle
[  405.820128][ T4839] as10x_usb: device has been disconnected
[  406.201176][ T4841] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  406.388860][ T4841] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  406.406360][ T4841] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  406.432550][ T4841] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  406.454073][ T4841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  406.471137][ T4841] usb 2-1: SerialNumber: syz
[  406.698735][ T4841] usb 2-1: 0:2 : does not exist
[  406.724694][ T4841] usb 2-1: USB disconnect, device number 33
[  406.954895][ T4282] udevd[4282]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  409.652469][T14070] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4012'.
[  412.535864][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4042'.
[  413.375894][T14166] input: syz0 as /devices/virtual/input/input45
[  414.474386][ T4482] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  414.664047][ T4482] usb 4-1: Using ep0 maxpacket: 32
[  414.671086][ T4482] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  414.704270][ T4482] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  414.746649][ T4482] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  414.783967][ T4482] usb 4-1: Product: syz
[  414.788329][ T4482] usb 4-1: Manufacturer: syz
[  414.792945][ T4482] usb 4-1: SerialNumber: syz
[  414.825966][ T4482] usb 4-1: config 0 descriptor??
[  414.856586][T14190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  414.865088][ T4482] hub 4-1:0.0: bad descriptor, ignoring hub
[  414.871025][ T4482] hub: probe of 4-1:0.0 failed with error -5
[  415.554057][T14190] usb 4-1: reset high-speed USB device number 30 using dummy_hcd
[  415.792382][T14190] usb 4-1: device firmware changed
[  415.812779][ T4763] usb 4-1: USB disconnect, device number 30
[  415.983973][ T4763] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  416.184069][ T4763] usb 4-1: Using ep0 maxpacket: 32
[  416.201059][ T4763] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  416.240790][ T4763] usb 4-1: string descriptor 0 read error: -22
[  416.257364][ T4763] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  416.280193][ T4763] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  416.330951][ T4763] usb 4-1: config 0 descriptor??
[  416.357231][T14207] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  416.384633][ T4763] hub 4-1:0.0: bad descriptor, ignoring hub
[  416.390596][ T4763] hub: probe of 4-1:0.0 failed with error -5
[  416.714190][ T4763] usb 4-1: USB disconnect, device number 31
[  416.790812][T14233] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4080'.
[  417.484411][ T4482] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  417.564587][T14261] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4092'.
[  417.675866][ T4482] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  417.724662][ T4482] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  417.755853][ T4482] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  417.785654][ T4482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  417.800268][ T4482] usb 3-1: SerialNumber: syz
[  418.036225][ T4482] usb 3-1: 0:2 : does not exist
[  418.092055][ T4482] usb 3-1: USB disconnect, device number 27
[  418.812765][T14310] sctp: [Deprecated]: syz.1.4113 (pid 14310) Use of int in maxseg socket option.
[  418.812765][T14310] Use struct sctp_assoc_value instead
[  419.064196][ T4763] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  419.254293][ T4763] usb 3-1: Using ep0 maxpacket: 8
[  419.260994][ T4763] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  419.269463][ T4763] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  419.279329][ T4763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  419.289173][ T4763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  419.299195][ T4763] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  419.312224][ T4763] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  419.321922][ T4763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.536158][ T4763] usb 3-1: GET_CAPABILITIES returned 0
[  419.541692][ T4763] usbtmc 3-1:16.0: can't read capabilities
[  420.052216][T14335] loop8: detected capacity change from 0 to 8
[  420.072235][T14335] Dev loop8: unable to read RDB block 8
[  420.082145][T14335]  loop8: unable to read partition table
[  420.091194][T14335] loop8: partition table beyond EOD, truncated
[  420.101656][T14337] usbtmc 3-1:16.0: usb_control_msg returned -32
[  420.131898][T14335] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  420.146976][ T4763] usb 3-1: USB disconnect, device number 28
[  420.185501][T14341] 9pnet_fd: Insufficient options for proto=fd
[  420.284423][T14343] sctp: [Deprecated]: syz.4.4129 (pid 14343) Use of int in max_burst socket option.
[  420.284423][T14343] Use struct sctp_assoc_value instead
[  420.694110][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  420.694207][ T4266] Bluetooth: hci5: command 0x1003 tx timeout
[  421.213514][   T26] audit: type=1326 audit(1765071770.730:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14369 comm="syz.4.4142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4a158f749 code=0x0
[  421.324301][ T4763] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  421.551538][ T4763] usb 2-1: config 2 has an invalid interface number: 211 but max is 0
[  421.566891][ T4763] usb 2-1: config 2 has no interface number 0
[  421.587616][ T4763] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  421.621224][ T4763] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  421.652134][ T4763] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95
[  421.673609][ T4763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.688136][ T4763] usb 2-1: Product: syz
[  421.692492][ T4763] usb 2-1: Manufacturer: syz
[  421.700415][ T4763] usb 2-1: SerialNumber: syz
[  421.733395][T14364] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  421.746942][ T4763] em28xx 2-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211)
[  421.774849][ T4763] em28xx 2-1:2.211: Device initialization failed.
[  421.791546][ T4763] em28xx 2-1:2.211: Device must be connected to a high-speed USB 2.0 port.
[  421.950818][ T4763] usb 2-1: USB disconnect, device number 34
[  422.481603][T14394] netlink: 'syz.0.4151': attribute type 10 has an invalid length.
[  422.525966][T14394] batman_adv: batadv0: Adding interface: netdevsim0
[  422.537606][T14394] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  422.564243][    C1] vkms_vblank_simulate: vblank timer overrun
[  422.570514][T14394] batman_adv: batadv0: Interface activated: netdevsim0
[  423.424085][ T4763] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  423.634055][ T4763] usb 4-1: Using ep0 maxpacket: 8
[  423.640939][ T4763] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  423.651045][ T4763] usb 4-1: config 179 has no interface number 0
[  423.657771][ T4763] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  423.669756][ T4763] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  423.681455][ T4763] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  423.693031][ T4763] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  423.714020][ T4763] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  423.727439][ T4763] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  423.737325][ T4763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.765986][T14408] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  423.904126][ T4339] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  424.012446][ T5597] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input46
[  424.124668][ T4339] usb 2-1: Using ep0 maxpacket: 32
[  424.132456][ T4339] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  424.165902][ T4339] usb 2-1: config 0 has no interface number 0
[  424.172441][T14434] overlayfs: maximum fs stacking depth exceeded
[  424.195326][ T4339] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  424.212201][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.234334][ T4339] usb 2-1: Product: syz
[  424.248109][ T4339] usb 2-1: Manufacturer: syz
[  424.252874][ T4339] usb 2-1: SerialNumber: syz
[  424.286451][ T4763] usb 4-1: USB disconnect, device number 32
[  424.292425][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  424.292470][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  424.311641][ T4339] usb 2-1: config 0 descriptor??
[  424.319314][ T4339] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  424.329989][ T4763] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  424.826417][T14454] sctp: [Deprecated]: syz.2.4178 (pid 14454) Use of int in maxseg socket option.
[  424.826417][T14454] Use struct sctp_assoc_value instead
[  424.878871][ T4339] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  424.902406][ T4339] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  425.113499][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  425.113782][ T4841] usb 2-1: USB disconnect, device number 35
[  425.157475][ T4841] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  425.213429][ T4841] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  425.230256][ T4841] quatech2 2-1:0.51: device disconnected
[  425.594020][ T4339] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  425.784184][ T4339] usb 4-1: Using ep0 maxpacket: 32
[  425.798121][ T4339] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  425.833965][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.854873][ T4339] usb 4-1: config 0 descriptor??
[  425.884726][ T4339] as10x_usb: device has been detected
[  425.890494][ T4339] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  425.954418][ T4339] usb 4-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)...
[  425.999197][ T4339] as10x_usb: error during firmware upload part1
[  426.008615][T14487] sctp: [Deprecated]: syz.4.4192 (pid 14487) Use of int in maxseg socket option.
[  426.008615][T14487] Use struct sctp_assoc_value instead
[  426.023639][ T4339] Registered device nBox DVB-T Dongle
[  426.140904][   T26] audit: type=1326 audit(1765071775.660:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14466 comm="syz.3.4183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cd638f749 code=0x0
[  426.222486][ T4339] usb 4-1: USB disconnect, device number 33
[  426.266541][ T4339] Unregistered device nBox DVB-T Dongle
[  426.277609][ T4339] as10x_usb: device has been disconnected
[  426.859737][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4198'.
[  427.350664][ T4339] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  427.554155][ T4339] usb 2-1: Using ep0 maxpacket: 8
[  427.566429][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  427.600037][ T4339] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  427.644038][ T4339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.661650][ T4339] usb 2-1: config 0 descriptor??
[  427.881385][ T4339] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  428.297465][ T4339] usb 2-1: USB disconnect, device number 36
[  428.791844][T14546] netlink: 'syz.2.4216': attribute type 10 has an invalid length.
[  428.800604][T14546] batman_adv: batadv0: Adding interface: netdevsim0
[  428.814640][T14546] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.842445][T14546] batman_adv: batadv0: Interface activated: netdevsim0
[  429.367009][T14565] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  429.380101][ T7230] Bluetooth: hci5: Frame reassembly failed (-84)
[  429.393997][ T4839] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  429.585359][ T4839] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 255
[  429.595461][ T4839] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  429.611929][ T4839] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  429.621310][ T4839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.645806][ T4839] usb 3-1: Product: syz
[  429.650019][ T4839] usb 3-1: Manufacturer: syz
[  429.681179][ T4839] usb 3-1: SerialNumber: syz
[  429.688535][T14555] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  429.703763][ T4839] usblp0: Disabling reads from problematic bidirectional printer
[  429.753243][T14579] fuse: Bad value for 'fd'
[  429.765821][T14579] overlayfs: failed to clone lowerpath
[  429.910908][ T4839] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004
[  430.120712][    C0] usblp0: nonzero write bulk status received: -71
[  430.129476][ T4839] usb 3-1: USB disconnect, device number 29
[  430.141370][ T4839] usblp0: removed
[  430.146071][ T4482] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  430.334022][ T4482] usb 4-1: Using ep0 maxpacket: 32
[  430.341130][ T4482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.353096][ T4482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  430.363360][ T4482] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  430.373198][ T4482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.397759][ T4482] usb 4-1: config 0 descriptor??
[  430.792178][T14616] device macvlan4 entered promiscuous mode
[  430.802006][T14616] batman_adv: batadv0: Adding interface: macvlan4
[  430.816166][T14616] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.818737][ T4482] savu 0003:1E7D:2D5A.0027: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  430.904161][T14616] batman_adv: batadv0: Not using interface macvlan4 (retrying later): interface not active
[  431.106346][ T4482] usb 4-1: USB disconnect, device number 34
[  431.414042][ T4266] Bluetooth: hci5: command 0x1003 tx timeout
[  431.420428][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  431.909797][ T4763] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  432.095718][ T4763] usb 2-1: Using ep0 maxpacket: 16
[  432.110176][ T4763] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.144817][ T4763] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.166293][ T4763] usb 2-1: config 0 interface 0 has no altsetting 0
[  432.204747][ T4763] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  432.213839][ T4763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.256416][ T4763] usb 2-1: config 0 descriptor??
[  432.667661][ T4763] hid (null): unknown global tag 0xc
[  432.685220][ T4763] hid (null): unknown global tag 0xc
[  432.690595][ T4763] hid (null): bogus close delimiter
[  432.763088][ T4763] cougar 0003:060B:500A.0028: unexpected long global item
[  432.794740][ T4763] cougar 0003:060B:500A.0028: parse failed
[  432.800626][ T4763] cougar: probe of 0003:060B:500A.0028 failed with error -22
[  432.870254][ T4339] usb 2-1: USB disconnect, device number 37
[  434.162263][T14692] 9pnet_fd: Insufficient options for proto=fd
[  434.584135][T14676] overlayfs: failed to clone upperpath
[  435.174680][T14723] loop8: detected capacity change from 0 to 8
[  435.195707][T14723] Dev loop8: unable to read RDB block 8
[  435.201482][T14723]  loop8: unable to read partition table
[  435.255136][T14723] loop8: partition table beyond EOD, truncated
[  435.293985][T14723] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  437.323081][T14776] process '/newroot/936/file0' started with executable stack
[  437.427212][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4317'.
[  437.878120][T14806] netlink: 'syz.3.4324': attribute type 13 has an invalid length.
[  437.886921][T14806] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.4324'.
[  439.914146][ T4339] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  439.976018][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  439.982589][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.117620][ T4339] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  440.128245][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.137457][ T4339] usb 2-1: Product: syz
[  440.147203][ T4339] usb 2-1: Manufacturer: syz
[  440.151835][ T4339] usb 2-1: SerialNumber: syz
[  440.160643][ T4339] usb 2-1: config 0 descriptor??
[  440.395403][ T4839] usb 2-1: USB disconnect, device number 38
[  440.962296][T14902] vxcan1: tx drop: invalid sa for name 0x0000000000000004
[  441.954117][ T4839] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  442.154272][ T4839] usb 3-1: Using ep0 maxpacket: 32
[  442.161480][ T4839] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  442.172121][ T4839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.189870][ T4839] usb 3-1: config 0 descriptor??
[  442.207113][ T4839] gspca_main: sq930x-2.14.0 probing 041e:403c
[  442.620982][T14957] input: syz1 as /devices/virtual/input/input48
[  443.355052][ T4839] gspca_sq930x: ucbus_write failed -71
[  443.360685][ T4839] sq930x: probe of 3-1:0.0 failed with error -71
[  443.396894][ T4839] usb 3-1: USB disconnect, device number 30
[  443.573066][T14989] fuse: Bad value for 'fd'
[  443.661433][T14993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4406'.
[  443.674619][T14993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4406'.
[  443.816183][T14999] input: syz0 as /devices/virtual/input/input49
[  445.384834][ T4763] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  445.487897][T15041] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4427'.
[  445.584051][ T4763] usb 3-1: Using ep0 maxpacket: 8
[  445.590987][ T4763] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  445.643222][ T4763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  445.665208][ T4763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  445.685657][ T4763] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  445.689992][T15043] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777
[  445.709193][ T4763] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  445.727437][ T4763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.941138][T15056] netlink: 'syz.3.4434': attribute type 9 has an invalid length.
[  445.964592][ T4763] usb 3-1: GET_CAPABILITIES returned 0
[  445.970127][ T4763] usbtmc 3-1:16.0: can't read capabilities
[  445.994630][T15056] netlink: 'syz.3.4434': attribute type 6 has an invalid length.
[  445.996839][ T4839] kernel write not supported for file bpf-prog (pid: 4839 comm: kworker/0:14)
[  446.029490][T15056] netlink: 'syz.3.4434': attribute type 7 has an invalid length.
[  446.057930][T15056] netlink: 'syz.3.4434': attribute type 8 has an invalid length.
[  446.186012][ T4763] usb 3-1: USB disconnect, device number 31
[  447.724510][ T4395] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  447.934328][ T4395] usb 4-1: Using ep0 maxpacket: 8
[  447.941851][ T4395] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  447.991048][ T4395] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  448.029350][ T4395] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  448.059874][ T4395] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  448.081312][ T4395] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  448.092130][ T4395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.338892][ T4395] usb 4-1: GET_CAPABILITIES returned 0
[  448.347150][ T4395] usbtmc 4-1:16.0: can't read capabilities
[  448.550069][ T5597] usb 4-1: USB disconnect, device number 35
[  449.357187][T15152] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  449.385818][T15152] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  449.404121][T15152] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  449.510011][T15154] binder: 15153:15154 ioctl c0306201 2000000003c0 returned -22
[  451.284315][ T5597] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  451.475830][ T5597] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  451.506634][ T5597] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  451.530321][ T5597] usb 3-1: config 1 interface 0 has no altsetting 0
[  451.546546][ T5597] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  451.564018][ T5597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.594778][ T5597] usb 3-1: Product: syz
[  451.604216][ T5597] usb 3-1: Manufacturer: syz
[  451.633987][ T5597] usb 3-1: SerialNumber: syz
[  451.664534][T15200] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  451.692801][T15200] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  452.725473][ T5597] (unnamed net_device) (uninitialized): Assigned a random MAC address: ce:62:e0:9b:02:42
[  452.780258][ T5597] rtl8150 3-1:1.0: eth1: rtl8150 is detected
[  452.812629][ T5597] usb 3-1: USB disconnect, device number 32
[  454.126599][T15280] block device autoloading is deprecated and will be removed.
[  454.268391][T15292] device macvtap0 entered promiscuous mode
[  454.285423][T15292] device macvtap0 left promiscuous mode
[  455.610300][   T26] audit: type=1326 audit(1765071805.130:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz.0.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c4b8f749 code=0x7ffc0000
[  455.642892][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4549'.
[  455.671451][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4549'.
[  455.682176][   T26] audit: type=1326 audit(1765071805.160:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz.0.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c4b8f749 code=0x7ffc0000
[  455.712464][   T26] audit: type=1326 audit(1765071805.160:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz.0.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9c4b8f749 code=0x7ffc0000
[  455.804071][   T26] audit: type=1326 audit(1765071805.160:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz.0.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c4b8f749 code=0x7ffc0000
[  455.835028][   T26] audit: type=1326 audit(1765071805.160:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz.0.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c4b8f749 code=0x7ffc0000
[  455.878077][   T26] audit: type=1326 audit(1765071805.160:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz.0.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fd9c4b8f749 code=0x7ffc0000
[  455.922312][   T26] audit: type=1326 audit(1765071805.160:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz.0.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c4b8f749 code=0x7ffc0000
[  456.089759][   T26] audit: type=1326 audit(1765071805.160:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz.0.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c4b8f749 code=0x7ffc0000
[  456.173544][T15360] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4556'.
[  458.144047][ T4482] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  458.353461][ T4482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.384103][ T4482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.399081][ T4482] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  458.451411][ T4482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.513285][ T4482] usb 4-1: config 0 descriptor??
[  458.584039][ T5597] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  458.774262][ T5597] usb 3-1: Using ep0 maxpacket: 8
[  458.781248][ T5597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  458.821363][ T5597] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  458.843999][ T5597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.875667][ T5597] usb 3-1: config 0 descriptor??
[  458.937973][ T4482] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0
[  458.964022][ T4482] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0
[  458.980799][ T4482] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0029/input/input50
[  459.049929][ T4482] cm6533_jd 0003:0D8C:0022.0029: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  459.089790][ T5597] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[  459.145070][ T4482] usb 4-1: USB disconnect, device number 36
[  459.290971][ T5597] usb 3-1: USB disconnect, device number 33
[  459.372087][T15432] fido_id[15432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  460.584091][ T5597] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  460.798968][ T5597] usb 4-1: Using ep0 maxpacket: 8
[  460.816763][ T5597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  460.838927][ T5597] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  460.864725][ T5597] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  460.912320][ T5597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.946184][ T5597] usb 4-1: config 0 descriptor??
[  461.371835][ T5597] hid-rmi 0003:06CB:81A7.002A: unknown main item tag 0x0
[  461.388599][ T5597] hid-rmi 0003:06CB:81A7.002A: unknown main item tag 0x0
[  461.401192][ T5597] hid-rmi 0003:06CB:81A7.002A: unknown main item tag 0x0
[  461.455813][ T5597] hid-rmi 0003:06CB:81A7.002A: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0
[  461.572208][ T5597] usb 4-1: USB disconnect, device number 37
[  461.702814][T15470] fido_id[15470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  463.055542][T15526] device bridge0 entered promiscuous mode
[  463.079988][T15526] device macvlan2 entered promiscuous mode
[  463.115329][T15526] bridge0: port 4(macvlan2) entered blocking state
[  463.150898][T15526] bridge0: port 4(macvlan2) entered disabled state
[  463.173527][T15526] device bridge0 left promiscuous mode
[  463.264198][ T4763] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  463.502308][ T4763] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  463.512238][ T4763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  463.564089][ T4763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  463.603009][ T4763] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  463.644000][ T4763] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  463.653083][ T4763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.693370][ T4763] usb 3-1: config 0 descriptor??
[  463.717381][T15522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  463.721977][ T4482] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  463.735731][ T4482] hid-generic 0000:0000:0000.002B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  463.990219][T15549] fido_id[15549]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  464.041662][T15559] 9pnet_fd: Insufficient options for proto=fd
[  464.144102][ T4763] plantronics 0003:047F:FFFF.002C: unknown main item tag 0xd
[  464.169609][ T4763] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving
[  464.209481][ T4763] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  464.392912][T15575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  464.428824][ T5597] usb 3-1: USB disconnect, device number 34
[  465.609907][ T7567] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[  465.656742][T15615] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  465.677703][ T7992] Bluetooth: hci5: Frame reassembly failed (-84)
[  467.462924][T15691] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4705'.
[  467.560208][   T26] audit: type=1326 audit(1765071817.080:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15696 comm="syz.3.4709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cd638f749 code=0x0
[  467.654109][ T4266] Bluetooth: hci5: command 0x1003 tx timeout
[  467.655389][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  468.645408][ T4763] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  468.844090][ T4763] usb 3-1: Using ep0 maxpacket: 16
[  468.851081][ T4763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.886083][ T4763] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  468.905038][ T4763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.954059][ T4763] usb 3-1: config 0 descriptor??
[  469.225486][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4736'.
[  469.255447][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4736'.
[  469.368735][ T4763] mcp2221 0003:04D8:00DD.002D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  469.522100][T15769] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4740'.
[  469.569846][ T4763] usb 3-1: USB disconnect, device number 35
[  470.667408][T15804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4755'.
[  473.285607][T15888] device geneve2 entered promiscuous mode
[  474.672170][T15916] syz.4.4805[15916] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  474.672266][T15916] syz.4.4805[15916] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  475.145371][ T4395] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  475.291632][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4813'.
[  475.416314][ T4395] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  475.446464][ T4395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.470854][ T4395] usb 3-1: Product: syz
[  475.482614][ T4395] usb 3-1: Manufacturer: syz
[  475.506644][ T4395] usb 3-1: SerialNumber: syz
[  475.526024][ T4395] usb 3-1: config 0 descriptor??
[  475.534304][ T4763] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  475.676522][   T26] audit: type=1326 audit(1765071825.200:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15945 comm="syz.0.4818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9c4b8f749 code=0x0
[  475.734107][ T4763] usb 4-1: Using ep0 maxpacket: 32
[  475.742392][ T5597] usb 3-1: USB disconnect, device number 36
[  475.753504][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.779253][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  475.805495][ T4763] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  475.822866][ T4763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.835215][ T4763] usb 4-1: config 0 descriptor??
[  475.934377][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4823'.
[  476.251364][ T4763] savu 0003:1E7D:2D5A.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  476.526104][ T5597] usb 4-1: USB disconnect, device number 38
[  476.853091][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4835'.
[  476.876747][T15988] batman_adv: batadv0: Adding interface: macsec1
[  476.883308][T15988] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.909226][T15988] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active
[  477.412846][T16006] loop7: detected capacity change from 0 to 7
[  477.427381][T16006] Dev loop7: unable to read RDB block 7
[  477.433238][T16006]  loop7: AHDI p1 p2 p3
[  477.437985][T16006] loop7: partition table partially beyond EOD, truncated
[  477.446145][T16006] loop7: p1 start 1702000233 is beyond EOD, truncated
[  477.453077][T16006] loop7: p2 size 10240 extends beyond EOD, truncated
[  477.533712][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  477.650255][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4845'.
[  478.148655][ T4839] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  478.179496][ T4839] hid-generic 0000:0000:0000.002F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  479.158041][T16069] overlayfs: failed to clone upperpath
[  479.544923][T16076] device syzkaller1 entered promiscuous mode
[  480.152883][T16094] "syz.2.4883" (16094) uses obsolete ecb(arc4) skcipher
[  483.214602][ T4763] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  483.431277][ T4763] usb 2-1: Using ep0 maxpacket: 8
[  483.438003][ T4763] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  483.457258][ T4763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  483.484061][ T4763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  483.524566][ T4763] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  483.581610][ T4763] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  483.594465][T16212] binder: 16211:16212 ioctl c0306201 2000000003c0 returned -22
[  483.599253][ T4763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.842422][ T4482] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  483.850647][ T4763] usb 2-1: GET_CAPABILITIES returned 0
[  483.856966][ T4763] usbtmc 2-1:16.0: can't read capabilities
[  484.039368][T16236] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  484.048081][T16236] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  484.049143][ T4482] usb 3-1: Using ep0 maxpacket: 8
[  484.062232][T16236] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  484.076096][ T4763] usb 2-1: USB disconnect, device number 39
[  484.085575][ T4482] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  484.125329][ T4482] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  484.153607][ T4482] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  484.184025][ T4482] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  484.200655][ T4482] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  484.224138][ T4482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.449994][ T4482] usb 3-1: GET_CAPABILITIES returned 0
[  484.455943][ T4482] usbtmc 3-1:16.0: can't read capabilities
[  484.700516][ T5597] usb 3-1: USB disconnect, device number 37
[  485.717393][T16287] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  485.727050][T16287] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  485.744835][T16287] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  487.905068][T16360] block device autoloading is deprecated and will be removed.
[  488.231052][T16369] device bridge0 entered promiscuous mode
[  488.286308][T16369] device macvlan2 entered promiscuous mode
[  488.342296][T16369] bridge0: port 4(macvlan2) entered blocking state
[  488.357245][T16369] bridge0: port 4(macvlan2) entered disabled state
[  488.385089][T16369] device bridge0 left promiscuous mode
[  489.544872][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5023'.
[  489.557685][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5023'.
[  490.029076][ T4482] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  490.234351][ T4482] usb 2-1: Using ep0 maxpacket: 8
[  490.260237][ T4482] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  490.289786][ T4482] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  490.326340][ T4482] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  490.345933][ T4482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.371622][ T4482] usb 2-1: config 0 descriptor??
[  490.639538][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5038'.
[  490.659403][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5038'.
[  490.810264][ T4482] hid-rmi 0003:06CB:81A7.0030: unknown main item tag 0x0
[  490.843969][ T4482] hid-rmi 0003:06CB:81A7.0030: unknown main item tag 0x0
[  490.851150][ T4482] hid-rmi 0003:06CB:81A7.0030: unknown main item tag 0x0
[  490.884625][ T4482] hid-rmi 0003:06CB:81A7.0030: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0
[  491.047043][ T4339] usb 2-1: USB disconnect, device number 40
[  491.148792][T16466] fido_id[16466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  491.609888][T16489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5054'.
[  491.647732][T16489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5054'.
[  492.911619][T16539] input: syz1 as /devices/virtual/input/input53
[  493.883699][T16583] device macvtap0 entered promiscuous mode
[  493.891902][T16583] device macvtap0 left promiscuous mode
[  495.930988][   T26] audit: type=1326 audit(1765071845.450:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16661 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff94f8f749 code=0x7ffc0000
[  496.035149][   T26] audit: type=1326 audit(1765071845.450:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16661 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff94f8f749 code=0x7ffc0000
[  496.129662][   T26] audit: type=1326 audit(1765071845.450:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16661 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff94f8f749 code=0x7ffc0000
[  496.181801][   T26] audit: type=1326 audit(1765071845.450:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16661 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff94f8f749 code=0x7ffc0000
[  496.308324][   T26] audit: type=1326 audit(1765071845.450:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16661 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff94f8f749 code=0x7ffc0000
[  496.389690][   T26] audit: type=1326 audit(1765071845.460:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16661 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7eff94f8f749 code=0x7ffc0000
[  496.484248][   T26] audit: type=1326 audit(1765071845.460:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16661 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff94f8f749 code=0x7ffc0000
[  496.566936][   T26] audit: type=1326 audit(1765071845.460:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16661 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff94f8f749 code=0x7ffc0000
[  496.740978][T16686] block device autoloading is deprecated and will be removed.
[  500.724316][ T5597] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  500.924041][ T5597] usb 2-1: Using ep0 maxpacket: 32
[  500.930797][ T5597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.974324][ T5597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  501.005484][ T5597] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  501.034020][ T5597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.070404][ T5597] usb 2-1: config 0 descriptor??
[  501.417552][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.423877][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  501.511008][ T5597] savu 0003:1E7D:2D5A.0031: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  501.797862][ T5597] usb 2-1: USB disconnect, device number 41
[  502.704074][ T5597] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  502.902784][ T5597] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  502.934207][ T5597] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  502.951673][ T5597] usb 2-1: config 1 interface 0 has no altsetting 0
[  502.966125][ T5597] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  502.983946][ T5597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.992136][ T5597] usb 2-1: Product: syz
[  502.996861][ T5597] usb 2-1: Manufacturer: syz
[  503.001802][ T5597] usb 2-1: SerialNumber: syz
[  503.024360][T16829] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  503.032144][T16829] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  503.894333][ T4266] Bluetooth: hci5: command 0x1003 tx timeout
[  503.894481][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  504.077005][ T5597] (unnamed net_device) (uninitialized): Assigned a random MAC address: 96:14:9a:c4:85:2c
[  504.129790][ T5597] rtl8150 2-1:1.0: eth1: rtl8150 is detected
[  504.157268][ T5597] usb 2-1: USB disconnect, device number 42
[  504.921807][T16896] netlink: 'syz.4.5230': attribute type 13 has an invalid length.
[  504.940934][T16896] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.5230'.
[  507.293985][ T4839] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  507.495863][ T4839] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[  507.509640][ T4839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  507.546680][ T4839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  507.594215][ T4839] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  507.615814][ T4839] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  507.644102][ T4839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.677361][ T4839] usb 2-1: config 0 descriptor??
[  507.704174][T16980] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  508.124611][ T4839] plantronics 0003:047F:FFFF.0032: unknown main item tag 0xd
[  508.146122][ T4839] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving
[  508.181142][ T4839] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  508.416576][ T4763] usb 2-1: USB disconnect, device number 43
[  508.820100][T17024] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5280'.
[  509.706351][T17062] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5298'.
[  510.273735][T17086] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5309'.
[  511.778124][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5332'.
[  512.041213][T17152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5338'.
[  512.217670][T17160] vxcan1: tx drop: invalid sa for name 0x0000000000000004
[  513.963490][T17223] device macvlan2 entered promiscuous mode
[  513.984825][T17223] batman_adv: batadv0: Adding interface: macvlan2
[  514.017263][T17223] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.102077][T17223] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active
[  514.390508][T17235] device macvlan0 entered promiscuous mode
[  514.414984][T17235] batman_adv: batadv0: Adding interface: macvlan0
[  514.431861][T17235] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.484140][T17235] batman_adv: batadv0: Not using interface macvlan0 (retrying later): interface not active
[  514.751720][T17245] device geneve2 entered promiscuous mode
[  514.814025][ T4482] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  515.004122][ T4482] usb 4-1: Using ep0 maxpacket: 8
[  515.010597][ T4482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  515.021775][ T4482] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  515.030934][ T4482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.040744][ T4482] usb 4-1: config 0 descriptor??
[  515.256434][ T4482] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  515.662654][ T5597] usb 4-1: USB disconnect, device number 39
[  516.647453][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5404'.
[  516.661177][T17269] device macvlan2 entered promiscuous mode
[  516.846700][T17280] input: syz0 as /devices/virtual/input/input55
[  516.954037][ T4763] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  517.134185][ T4763] usb 3-1: Using ep0 maxpacket: 8
[  517.150638][ T4763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  517.171914][ T4763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  517.190225][ T4763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.206858][ T4763] usb 3-1: config 0 descriptor??
[  517.431580][ T4763] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  517.843023][T17309] device macvlan2 entered promiscuous mode
[  517.863467][ T4763] usb 3-1: USB disconnect, device number 38
[  517.881267][T17309] batman_adv: batadv0: Adding interface: macvlan2
[  517.905452][T17309] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.930849][    C1] vkms_vblank_simulate: vblank timer overrun
[  518.004383][T17309] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active
[  518.268840][T17322] loop7: detected capacity change from 0 to 7
[  518.285339][ T4282] Dev loop7: unable to read RDB block 7
[  518.301293][ T4282]  loop7: AHDI p1 p2 p3
[  518.306043][ T4282] loop7: partition table partially beyond EOD, truncated
[  518.313741][ T4282] loop7: p1 start 1702000233 is beyond EOD, truncated
[  518.325064][ T4282] loop7: p2 size 10240 extends beyond EOD, truncated
[  518.343007][T17322] Dev loop7: unable to read RDB block 7
[  518.359688][T17322]  loop7: AHDI p1 p2 p3
[  518.364019][T17322] loop7: partition table partially beyond EOD, truncated
[  518.391968][T17322] loop7: p1 start 1702000233 is beyond EOD, truncated
[  518.399476][T17322] loop7: p2 size 10240 extends beyond EOD, truncated
[  518.494460][T17326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5417'.
[  518.506667][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  518.567365][T17326] batman_adv: batadv0: Adding interface: macsec2
[  518.573775][T17326] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.599090][    C1] vkms_vblank_simulate: vblank timer overrun
[  518.668966][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  518.683042][T17326] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active
[  519.142097][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5430'.
[  519.361851][T17362] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5432'.
[  519.861573][T17382] netlink: 'syz.2.5442': attribute type 9 has an invalid length.
[  519.911743][T17382] netlink: 'syz.2.5442': attribute type 6 has an invalid length.
[  519.930054][T17382] netlink: 'syz.2.5442': attribute type 7 has an invalid length.
[  519.948494][T17382] netlink: 'syz.2.5442': attribute type 8 has an invalid length.
[  520.235162][T17395] netlink: 'syz.4.5460': attribute type 9 has an invalid length.
[  520.244020][ T4487] kernel write not supported for file bpf-prog (pid: 4487 comm: kworker/0:12)
[  520.249489][T17395] netlink: 'syz.4.5460': attribute type 6 has an invalid length.
[  520.281184][T17395] netlink: 'syz.4.5460': attribute type 7 has an invalid length.
[  520.324110][T17395] netlink: 'syz.4.5460': attribute type 8 has an invalid length.
[  520.834990][T17418] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777
[  521.702896][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5471'.
[  521.778323][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5474'.
[  522.585814][T17469] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  522.619759][ T7994] Bluetooth: hci5: Frame reassembly failed (-84)
[  524.362862][T17518] loop8: detected capacity change from 0 to 5
[  524.614275][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  524.914102][ T4839] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  525.124213][ T4839] usb 2-1: Using ep0 maxpacket: 16
[  525.137600][ T4839] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  525.167662][ T4839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.187951][ T4839] usb 2-1: Product: syz
[  525.198339][ T4839] usb 2-1: Manufacturer: syz
[  525.202964][ T4839] usb 2-1: SerialNumber: syz
[  525.224892][ T4839] usb 2-1: config 0 descriptor??
[  525.236315][ T4839] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  525.255483][ T4839] usb 2-1: Detected FT-X
[  525.439870][ T4839] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  525.539601][ T7568] Bluetooth: hci5: Frame reassembly failed (-84)
[  525.553639][T17553] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  525.861273][ T4839] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  526.061843][ T4317] usb 2-1: USB disconnect, device number 44
[  526.089651][T17570] netlink: 'syz.4.5527': attribute type 1 has an invalid length.
[  526.097836][T17570] netlink: 'syz.4.5527': attribute type 6 has an invalid length.
[  526.102236][ T4317] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  526.106555][T17570] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5527'.
[  526.127283][ T4317] ftdi_sio 2-1:0.0: device disconnected
[  527.058747][T17599] netlink: 'syz.3.5541': attribute type 1 has an invalid length.
[  527.087026][T17599] netlink: 'syz.3.5541': attribute type 6 has an invalid length.
[  527.087051][T17599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5541'.
[  527.574997][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  527.575291][ T4266] Bluetooth: hci5: command 0x1003 tx timeout
[  528.651314][T17653] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid'
[  528.651314][T17653] 
[  528.814136][ T4841] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  529.011306][ T4841] usb 2-1: Using ep0 maxpacket: 8
[  529.020206][ T4841] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  529.059613][ T4841] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  529.071965][ T4841] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  529.087931][ T4841] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  529.104253][ T4841] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  529.113338][ T4841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.355633][ T4841] usb 2-1: GET_CAPABILITIES returned 0
[  529.361253][ T4841] usbtmc 2-1:16.0: can't read capabilities
[  529.571322][ T4839] usb 2-1: USB disconnect, device number 45
[  529.726290][T17682] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid'
[  529.726290][T17682] 
[  529.784731][T17686] device syzkaller1 entered promiscuous mode
[  532.505347][T17771] device syzkaller1 entered promiscuous mode
[  533.504308][ T4841] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  533.708558][ T4841] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  533.731713][ T4841] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  533.754053][ T4841] usb 2-1: Product: syz
[  533.759002][ T4841] usb 2-1: Manufacturer: syz
[  533.770312][ T4841] usb 2-1: SerialNumber: syz
[  533.789652][ T4841] usb 2-1: config 0 descriptor??
[  533.807172][ T4841] ch341 2-1:0.0: ch341-uart converter detected
[  533.822143][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5631'.
[  534.815059][ T4841] ch341-uart ttyUSB0: failed to read break control: -71
[  534.822092][ T4841] ch341-uart: probe of ttyUSB0 failed with error -71
[  534.861686][ T4841] usb 2-1: USB disconnect, device number 46
[  534.871537][ T4841] ch341 2-1:0.0: device disconnected
[  536.704218][ T4839] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  536.903990][ T4839] usb 3-1: Using ep0 maxpacket: 8
[  536.910714][ T4839] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  536.939145][ T4839] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  536.972571][ T4839] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  536.993981][ T4839] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  537.010241][ T4839] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  537.029737][ T4839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.094837][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5659'.
[  537.262919][ T4839] usb 3-1: GET_CAPABILITIES returned 0
[  537.268887][ T4839] usbtmc 3-1:16.0: can't read capabilities
[  537.483829][ T4839] usb 3-1: USB disconnect, device number 39
[  539.060159][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5695'.
[  539.252930][T17958] netlink: 'syz.3.5698': attribute type 2 has an invalid length.
[  539.971548][T17980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5708'.
[  540.884012][ T4839] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  541.024624][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5712'.
[  541.105190][ T4839] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  541.122598][ T4839] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  541.132581][ T4839] usb 3-1: Product: syz
[  541.143184][ T4839] usb 3-1: Manufacturer: syz
[  541.148087][ T4839] usb 3-1: SerialNumber: syz
[  541.161477][ T4839] usb 3-1: config 0 descriptor??
[  541.212814][ T4839] ch341 3-1:0.0: ch341-uart converter detected
[  541.261834][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5723'.
[  541.969120][T18037] netlink: 'syz.4.5732': attribute type 2 has an invalid length.
[  542.193455][ T4839] ch341-uart ttyUSB0: failed to read break control: -71
[  542.207644][ T4839] ch341-uart: probe of ttyUSB0 failed with error -71
[  542.254306][ T4839] usb 3-1: USB disconnect, device number 40
[  542.273505][ T4839] ch341 3-1:0.0: device disconnected
[  543.316150][T18068] netlink: 'syz.0.5746': attribute type 2 has an invalid length.
[  544.853004][T18115] input: syz1 as /devices/virtual/input/input56
[  545.034645][T18123] vivid-007: disconnect
[  545.045058][T18121] vivid-007: reconnect
[  545.294133][ T4841] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  545.486694][ T4841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  545.505698][ T4841] usb 4-1: config 1 has no interface number 0
[  545.525142][ T4841] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  545.552727][ T4841] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  545.575942][ T4841] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  545.595170][ T4841] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  545.618396][ T4841] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  545.640496][ T4841] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  545.650072][ T4841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.658525][ T4841] usb 4-1: Product: syz
[  545.662889][ T4841] usb 4-1: Manufacturer: syz
[  545.667890][ T4841] usb 4-1: SerialNumber: syz
[  545.686022][T18126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  545.934516][T18126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  546.156333][T18126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  546.603130][T18126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  546.623048][ T4841] cdc_ncm 4-1:1.1: bind() failure
[  546.866098][ T4839] usb 4-1: USB disconnect, device number 40
[  548.706731][ T4763] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  548.916673][ T4763] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  548.954446][ T4763] usb 3-1: config 1 has no interface number 0
[  548.960594][ T4763] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  549.032818][ T4763] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  549.064951][ T4763] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  549.104694][ T4763] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  549.131447][ T4763] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  549.194873][ T4763] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  549.224147][ T4763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.250225][ T4763] usb 3-1: Product: syz
[  549.278907][ T4763] usb 3-1: Manufacturer: syz
[  549.283560][ T4763] usb 3-1: SerialNumber: syz
[  549.292677][T18211] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  549.511327][T18211] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  549.740520][T18211] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  550.166331][T18211] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  550.175400][ T4763] cdc_ncm 3-1:1.1: bind() failure
[  550.409335][ T4763] usb 3-1: USB disconnect, device number 41
[  553.664207][ T4839] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  553.688560][ T4317] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  553.845758][ T4839] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  553.855132][ T4839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.865521][ T4839] usb 2-1: config 0 descriptor??
[  553.874074][ T4317] usb 4-1: Using ep0 maxpacket: 32
[  553.876366][ T4839] cp210x 2-1:0.0: cp210x converter detected
[  553.885242][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.885268][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  553.909098][ T4317] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  553.920177][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.959874][ T4317] usb 4-1: config 0 descriptor??
[  554.188675][ T4317] usbhid 4-1:0.0: can't add hid device: -71
[  554.194874][ T4317] usbhid: probe of 4-1:0.0 failed with error -71
[  554.203569][ T4317] usb 4-1: USB disconnect, device number 41
[  554.281696][ T4839] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  554.501960][   T26] audit: type=1326 audit(1765071904.010:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.0.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c4b8f749 code=0x7fc00000
[  554.554601][ T4839] usb 2-1: cp210x converter now attached to ttyUSB0
[  554.766613][ T4317] usb 2-1: USB disconnect, device number 47
[  554.796128][ T4317] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  554.856411][ T4317] cp210x 2-1:0.0: device disconnected
[  555.604675][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5888'.
[  555.754060][ T5597] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  555.954066][ T5597] usb 2-1: Using ep0 maxpacket: 32
[  555.961464][ T5597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  555.971933][ T5597] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  555.987011][ T5597] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  555.999205][ T5597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.032842][ T5597] usb 2-1: config 0 descriptor??
[  556.248600][ T5597] usbhid 2-1:0.0: can't add hid device: -71
[  556.264325][ T5597] usbhid: probe of 2-1:0.0 failed with error -71
[  556.279953][ T5597] usb 2-1: USB disconnect, device number 48
[  556.540091][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5899'.
[  556.845147][T18421] bridge0: port 4(vlan0) entered blocking state
[  556.904186][T18421] bridge0: port 4(vlan0) entered disabled state
[  556.911634][T18421] device vlan0 entered promiscuous mode
[  556.954022][T18421] device syz_tun entered promiscuous mode
[  557.604050][ T4839] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  557.814089][ T4839] usb 2-1: Using ep0 maxpacket: 32
[  557.835197][ T4839] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  557.843327][ T4839] usb 2-1: config 0 has no interface number 0
[  557.876090][ T4839] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  557.898821][ T4839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.932314][ T4839] usb 2-1: Product: syz
[  557.941034][ T4839] usb 2-1: Manufacturer: syz
[  557.956320][ T4839] usb 2-1: SerialNumber: syz
[  557.979632][ T4839] usb 2-1: config 0 descriptor??
[  557.994824][ T4839] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  558.195875][ T4839] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  558.224185][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5915'.
[  558.234615][ T4839] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  558.616526][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  558.630767][ T4839] usb 2-1: USB disconnect, device number 49
[  558.647745][ T4839] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  558.672256][T18459] bridge0: port 3(vlan2) entered blocking state
[  558.698653][ T4839] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  558.701493][T18459] bridge0: port 3(vlan2) entered disabled state
[  558.726880][ T4839] quatech2 2-1:0.51: device disconnected
[  558.728584][T18459] device vlan2 entered promiscuous mode
[  558.742785][T18459] device syz_tun entered promiscuous mode
[  558.840252][ T5597] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  559.044219][ T5597] usb 3-1: Using ep0 maxpacket: 32
[  559.055577][ T5597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.085201][ T5597] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  559.107352][ T5597] usb 3-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  559.147195][ T5597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.170111][ T5597] usb 3-1: config 0 descriptor??
[  559.225327][T18470] input: syz1 as /devices/virtual/input/input57
[  559.416439][ T5597] usbhid 3-1:0.0: can't add hid device: -71
[  559.422468][ T5597] usbhid: probe of 3-1:0.0 failed with error -71
[  559.455414][ T5597] usb 3-1: USB disconnect, device number 42
[  559.760188][T18486] autofs4:pid:18486:autofs_fill_super: called with bogus options
[  559.912138][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5939'.
[  559.942504][T18494] bridge0: port 4(vlan0) entered blocking state
[  559.949450][T18494] bridge0: port 4(vlan0) entered disabled state
[  559.957337][T18494] device vlan0 entered promiscuous mode
[  559.963106][T18494] device syz_tun entered promiscuous mode
[  560.685223][T18520] autofs4:pid:18520:autofs_fill_super: called with bogus options
[  562.075566][T18550] autofs4:pid:18550:autofs_fill_super: called with bogus options
[  562.684421][T18555] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  562.866653][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  562.872990][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  563.034213][ T4839] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  563.235713][ T4839] usb 3-1: Using ep0 maxpacket: 16
[  563.242699][ T4839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.264013][ T5597] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  563.273972][ T4839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.294014][ T4839] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  563.374380][ T4839] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  563.398199][ T4839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.433339][ T4839] usb 3-1: config 0 descriptor??
[  563.484228][ T5597] usb 4-1: Using ep0 maxpacket: 32
[  563.491153][ T5597] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  563.524013][ T5597] usb 4-1: config 0 has no interface number 0
[  563.545382][ T5597] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  563.581991][ T5597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.610889][ T5597] usb 4-1: Product: syz
[  563.621011][ T5597] usb 4-1: Manufacturer: syz
[  563.631128][ T5597] usb 4-1: SerialNumber: syz
[  563.643363][ T5597] usb 4-1: config 0 descriptor??
[  563.663709][ T5597] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  563.864162][ T4487] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  563.868764][ T5597] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  563.879100][ T4839] microsoft 0003:045E:07DA.0033: unbalanced collection at end of report description
[  563.901533][ T4839] microsoft 0003:045E:07DA.0033: parse failed
[  563.912754][ T5597] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  563.914220][ T4839] microsoft: probe of 0003:045E:07DA.0033 failed with error -22
[  564.074028][ T4487] usb 2-1: Using ep0 maxpacket: 8
[  564.086420][ T4839] usb 3-1: USB disconnect, device number 43
[  564.101322][ T4487] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  564.139197][ T4487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.158740][ T4487] usb 2-1: Product: syz
[  564.162945][ T4487] usb 2-1: Manufacturer: syz
[  564.176718][ T4487] usb 2-1: SerialNumber: syz
[  564.177038][T18586] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  564.206395][ T4487] usb 2-1: config 0 descriptor??
[  564.225474][ T4487] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  564.301096][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  564.309792][ T4317] usb 4-1: USB disconnect, device number 42
[  564.320984][ T4317] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  564.372297][ T4317] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  564.389716][ T4317] quatech2 4-1:0.51: device disconnected
[  565.239503][ T4487] usb 2-1: USB disconnect, device number 50
[  566.096847][T18645] loop8: detected capacity change from 0 to 7
[  566.116733][ T4282] Dev loop8: unable to read RDB block 7
[  566.122363][ T4282]  loop8: unable to read partition table
[  566.136107][ T4282] loop8: partition table beyond EOD, truncated
[  566.143055][T18645] Dev loop8: unable to read RDB block 7
[  566.182048][T18645]  loop8: unable to read partition table
[  566.202758][T18645] loop8: partition table beyond EOD, truncated
[  566.233500][T18645] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  566.679035][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6015'.
[  568.034114][ T5597] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  568.224765][ T5597] usb 2-1: Using ep0 maxpacket: 32
[  568.233808][ T5597] usb 2-1: config 0 has an invalid interface number: 153 but max is 0
[  568.271389][ T5597] usb 2-1: config 0 has no interface number 0
[  568.297052][ T5597] usb 2-1: config 0 interface 153 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  568.327320][ T5597] usb 2-1: config 0 interface 153 has no altsetting 0
[  568.354277][ T5597] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=ef.ae
[  568.377023][ T5597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.391799][ T5597] usb 2-1: Product: syz
[  568.415578][ T5597] usb 2-1: Manufacturer: syz
[  568.441412][ T5597] usb 2-1: SerialNumber: syz
[  568.471123][ T5597] usb 2-1: config 0 descriptor??
[  568.495126][T18705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  568.717079][ T5597] asix: probe of 2-1:0.153 failed with error -71
[  568.762919][ T5597] usb 2-1: USB disconnect, device number 51
[  568.914157][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  572.344188][ T4839] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  572.543997][ T4839] usb 4-1: Using ep0 maxpacket: 32
[  572.551095][ T4839] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  572.581524][ T4839] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  572.600473][T18853] input: syz1 as /devices/virtual/input/input59
[  572.607445][ T4839] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  572.616446][ T4839] usb 4-1: Product: syz
[  572.635208][ T4839] usb 4-1: Manufacturer: syz
[  572.639854][ T4839] usb 4-1: SerialNumber: syz
[  572.683795][ T4839] usb 4-1: config 0 descriptor??
[  572.711734][T18842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  572.726135][ T4839] hub 4-1:0.0: bad descriptor, ignoring hub
[  572.732169][ T4839] hub: probe of 4-1:0.0 failed with error -5
[  573.213315][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6091'.
[  573.264216][ T4839] usb 4-1: reset high-speed USB device number 43 using dummy_hcd
[  573.324588][ T4839] usb 4-1: device reset changed ep0 maxpacket size!
[  573.376424][ T4839] usb 4-1: USB disconnect, device number 43
[  573.784027][ T4839] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  573.890004][T18902] netlink: 'syz.2.6103': attribute type 10 has an invalid length.
[  573.919415][T18902] device syz_tun entered promiscuous mode
[  574.019678][ T4839] usb 4-1: config 0 has no interfaces?
[  574.030345][ T4839] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f
[  574.049834][ T4839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.063138][ T4839] usb 4-1: Product: syz
[  574.074929][ T4839] usb 4-1: Manufacturer: syz
[  574.081046][ T4839] usb 4-1: SerialNumber: syz
[  574.094902][ T4839] usb 4-1: config 0 descriptor??
[  574.240807][T18916] netlink: 'syz.0.6107': attribute type 11 has an invalid length.
[  574.400673][ T4841] usb 4-1: USB disconnect, device number 44
[  574.596560][T18930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6113'.
[  574.693816][T18934] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  575.454012][ T5597] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  575.649761][ T5597] usb 3-1: Using ep0 maxpacket: 8
[  575.659125][ T5597] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  575.672576][ T5597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  575.682890][ T5597] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  575.696759][ T4763] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  575.704512][ T5597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  575.724609][ T5597] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  575.739291][ T5597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.759393][ T5597] usb 3-1: config 0 descriptor??
[  575.773234][T18952] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  575.894232][ T4763] usb 4-1: Using ep0 maxpacket: 8
[  575.903131][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  575.915114][ T4763] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  575.925051][ T4763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.936898][ T4763] usb 4-1: config 0 descriptor??
[  576.000333][ T4279] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  576.013856][ T5597] usb 3-1: USB disconnect, device number 44
[  576.148109][ T4763] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  576.349859][T18959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.358660][T18959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.581190][ T4841] usb 4-1: USB disconnect, device number 45
[  577.144753][T19006] 9pnet_fd: Insufficient options for proto=fd
[  577.514160][ T4841] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  577.704131][ T4841] usb 4-1: Using ep0 maxpacket: 8
[  577.711244][ T4841] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  577.737919][ T4841] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  577.750818][ T4841] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  577.764250][ T4841] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  577.784937][ T4841] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  577.808418][ T4841] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  577.819335][ T4841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.097018][ T4841] usb 4-1: usb_control_msg returned -32
[  578.102667][ T4841] usbtmc 4-1:16.0: can't read capabilities
[  578.504192][T19054] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  578.705598][ T5597] usb 4-1: USB disconnect, device number 46
[  578.874238][ T4763] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  579.056343][T19077] 9pnet_fd: Insufficient options for proto=fd
[  579.081539][ T4763] usb 3-1: Using ep0 maxpacket: 8
[  579.090204][ T4763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  579.114020][ T4763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  579.133370][ T4763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.154717][ T4763] usb 3-1: config 0 descriptor??
[  579.366807][ T4763] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  579.588001][ T4841] usb 3-1: USB disconnect, device number 45
[  580.433970][ T4763] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  580.625817][ T4763] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  580.644055][ T4763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  580.658226][ T4763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  580.670190][ T4763] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  580.694786][ T4763] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  580.714000][ T4763] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  580.722377][ T4763] usb 2-1: Manufacturer: syz
[  580.736126][ T4763] usb 2-1: config 0 descriptor??
[  581.144547][T19118] fuse: Bad value for 'fd'
[  581.192992][ T4763] appleir 0003:05AC:8243.0034: unknown main item tag 0x0
[  581.204642][ T4763] appleir 0003:05AC:8243.0034: No inputs registered, leaving
[  581.236791][ T4763] appleir 0003:05AC:8243.0034: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  581.469329][ T4841] usb 2-1: USB disconnect, device number 52
[  581.513544][T19121] fido_id[19121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  585.743991][ T4487] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  585.934102][ T4487] usb 3-1: Using ep0 maxpacket: 32
[  585.941145][ T4487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  585.972267][ T4487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  586.003117][ T4487] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  586.012870][ T4487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.031427][T19244] overlayfs: failed to clone upperpath
[  586.038164][ T4487] usb 3-1: config 0 descriptor??
[  586.055975][ T4487] hub 3-1:0.0: USB hub found
[  586.258913][ T4487] hub 3-1:0.0: config failed, can't read hub descriptor (err -90)
[  586.695891][ T4487] hid-generic 0003:046D:C31C.0035: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0
[  587.106394][ T4839] usb 3-1: USB disconnect, device number 46
[  587.308088][T19277] fido_id[19277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  589.474229][ T4763] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  589.664150][ T4763] usb 4-1: Using ep0 maxpacket: 32
[  589.671515][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  589.695480][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  589.724039][ T4763] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  589.733109][ T4763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.760012][ T4763] usb 4-1: config 0 descriptor??
[  590.222715][ T4763] savu 0003:1E7D:2D5A.0036: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  590.404205][ T4763] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  590.479041][ T4839] usb 4-1: USB disconnect, device number 47
[  590.595487][ T4763] usb 3-1: config 0 has an invalid interface number: 204 but max is 0
[  590.603780][ T4763] usb 3-1: config 0 has no interface number 0
[  590.612527][ T4763] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d
[  590.621691][ T4763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.629776][ T4763] usb 3-1: Product: syz
[  590.633990][ T4763] usb 3-1: Manufacturer: syz
[  590.638586][ T4763] usb 3-1: SerialNumber: syz
[  590.650633][ T4763] usb 3-1: config 0 descriptor??
[  590.657707][ T4763] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  590.668239][ T4763] ems_usb: probe of 3-1:0.204 failed with error -22
[  590.873074][ T4839] usb 3-1: USB disconnect, device number 47
[  591.120166][T19361] input: syz0 as /devices/virtual/input/input60
[  591.264108][T19365] IPVS: Unknown mcast interface: hsr0
[  591.270879][T19369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6310'.
[  591.954086][ T4763] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  592.142979][ T4763] usb 4-1: Using ep0 maxpacket: 8
[  592.155781][ T4763] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  592.163816][ T4763] usb 4-1: config 0 has no interface number 0
[  592.199608][ T4763] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  592.221354][ T4763] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  592.224895][T19401] overlayfs: failed to clone lowerpath
[  592.236070][ T4763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.271895][ T4763] usb 4-1: config 0 descriptor??
[  592.305429][T19403] overlayfs: failed to clone lowerpath
[  592.317987][ T4763] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  593.581923][ T4763] usb 4-1: USB disconnect, device number 48
[  594.663606][T19472] sctp: [Deprecated]: syz.3.6354 (pid 19472) Use of int in max_burst socket option deprecated.
[  594.663606][T19472] Use struct sctp_assoc_value instead
[  594.727213][ T6190] device vlan0 left promiscuous mode
[  594.744247][ T6190] device syz_tun left promiscuous mode
[  594.754694][ T6190] bridge0: port 4(vlan0) entered disabled state
[  595.041739][T18750] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  595.052700][T18750] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.182023][T18750] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  595.201098][T18750] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.366323][T18750] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  595.386925][T18750] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.415935][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6361'.
[  595.437943][T19489] device bond_slave_0 entered promiscuous mode
[  595.444936][T19489] device bond_slave_1 entered promiscuous mode
[  595.488591][T19489] device macvlan3 entered promiscuous mode
[  595.514211][T19489] device bond0 entered promiscuous mode
[  595.544294][T19489] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  595.615909][T18750] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  595.644018][T18750] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.006461][ T4266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  596.018562][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  596.030823][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  596.038984][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  596.055312][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  596.062652][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  596.694564][   T26] audit: type=1326 audit(1765071946.210:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.6371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cd638f749 code=0x0
[  597.122239][T19501] chnl_net:caif_netlink_parms(): no params data found
[  597.207243][T19541] input: syz0 as /devices/virtual/input/input61
[  597.479009][T19550] overlayfs: failed to set xattr on upper
[  597.507603][T19550] overlayfs: ...falling back to index=off,metacopy=off.
[  597.524494][T19501] bridge0: port 1(bridge_slave_0) entered blocking state
[  597.535517][T19501] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.574519][T19501] device bridge_slave_0 entered promiscuous mode
[  597.631176][T19501] bridge0: port 2(bridge_slave_1) entered blocking state
[  597.641817][T19501] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.659049][T19501] device bridge_slave_1 entered promiscuous mode
[  598.112882][T19501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  598.134096][ T4279] Bluetooth: hci0: command 0x0409 tx timeout
[  598.163075][T19501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  598.288145][T18750] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  598.354912][T18750] batman_adv: batadv0: Removing interface: batadv_slave_0
[  598.385102][T18750] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  598.404877][T18750] batman_adv: batadv0: Removing interface: batadv_slave_1
[  598.429720][T18750] batman_adv: batadv0: Removing interface: macvlan0
[  598.447570][T18750] device team0 left promiscuous mode
[  598.452894][T18750] device team_slave_0 left promiscuous mode
[  598.476199][T18750] device team_slave_1 left promiscuous mode
[  598.485219][T18750] bridge0: port 3(team0) entered disabled state
[  598.506132][T18750] device bridge_slave_1 left promiscuous mode
[  598.517491][T18750] bridge0: port 2(bridge_slave_1) entered disabled state
[  598.543013][T18750] device bridge_slave_0 left promiscuous mode
[  598.556191][T18750] bridge0: port 1(bridge_slave_0) entered disabled state
[  598.643769][T18750] device veth1_macvtap left promiscuous mode
[  598.651913][T18750] device veth0_macvtap left promiscuous mode
[  598.663733][T18750] device veth1_vlan left promiscuous mode
[  598.672350][T18750] device veth0_vlan left promiscuous mode
[  599.114552][T18750] team0 (unregistering): Port device bridge2 removed
[  600.214100][ T4279] Bluetooth: hci0: command 0x041b tx timeout
[  601.522225][T18750] team0 (unregistering): Port device team_slave_1 removed
[  601.639430][T18750] team0 (unregistering): Port device team_slave_0 removed
[  601.824697][T18750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  601.975091][T18750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  602.294210][ T4266] Bluetooth: hci0: command 0x040f tx timeout
[  602.593592][T18750] bond0 (unregistering): Released all slaves
[  602.670521][T19598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6395'.
[  602.679766][T19598] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  602.688742][T19598] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (6543)
[  602.757496][T19501] team0: Port device team_slave_0 added
[  602.801148][T19501] team0: Port device team_slave_1 added
[  602.885955][T19501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  602.908569][T19501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  602.992508][T19501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.045613][T19501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.052586][T19501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  603.179210][T19501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.277297][T19501] device hsr_slave_0 entered promiscuous mode
[  603.316544][T19501] device hsr_slave_1 entered promiscuous mode
[  603.815336][ T4339] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  604.004138][ T4339] usb 3-1: Using ep0 maxpacket: 16
[  604.011074][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.060825][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  604.101010][ T4339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  604.143103][ T4339] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  604.189185][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.225125][ T4339] usb 3-1: config 0 descriptor??
[  604.383957][ T4266] Bluetooth: hci0: command 0x0419 tx timeout
[  604.624959][T19501] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  604.657595][T19501] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  604.668144][ T4339] HID 045e:07da: Invalid code 65791 type 1
[  604.691571][ T4339] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0037/input/input62
[  604.727068][ T4339] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  604.787351][T19501] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  604.846022][T19501] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  604.877017][ T4487] usb 3-1: USB disconnect, device number 48
[  605.043501][T19702] fido_id[19702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  605.154662][T19501] 8021q: adding VLAN 0 to HW filter on device bond0
[  605.200507][T18754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  605.224884][T18754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  605.258172][T19501] 8021q: adding VLAN 0 to HW filter on device team0
[  605.304790][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  605.328898][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  605.358038][T18767] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.365223][T18767] bridge0: port 1(bridge_slave_0) entered forwarding state
[  605.413699][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  605.433037][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  605.491756][T18767] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.498933][T18767] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.527845][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  605.565079][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  605.597250][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  605.644725][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  605.689453][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  605.737356][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  605.784990][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  605.827201][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  605.844181][T19734] Bluetooth: MGMT ver 1.22
[  605.873834][T19501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  605.909299][T19501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  605.948005][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  605.967333][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  606.005258][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  606.026353][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  606.044979][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  606.638755][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  606.648945][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  606.673768][T19501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  606.723765][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  606.734718][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  606.779760][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  606.789233][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  606.801376][T19501] device veth0_vlan entered promiscuous mode
[  606.809442][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  606.818467][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  606.827193][T19763] 9pnet_fd: Insufficient options for proto=fd
[  606.846999][T19501] device veth1_vlan entered promiscuous mode
[  606.919843][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  606.941190][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  607.015531][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  607.062086][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  607.101734][T19501] device veth0_macvtap entered promiscuous mode
[  607.157057][T19501] device veth1_macvtap entered promiscuous mode
[  607.238722][T19501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  607.271321][T19501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.307491][T19501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  607.365212][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  607.380913][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  607.416936][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  607.475206][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  607.507479][T19501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  607.527851][T19501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.564726][T19501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  607.631391][T19501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.676275][T19501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  607.733025][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  607.764753][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  607.778251][T19501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.797629][T19501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.845251][T19501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.884129][T19501] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  608.130597][T18767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.148730][T18767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.225367][T18747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  608.245341][T18754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.254149][ T4839] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  608.283707][T18754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.341486][T18767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  608.417193][   T26] audit: type=1326 audit(2000000006.589:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19820 comm="syz.4.6470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4a158f749 code=0x0
[  608.485592][ T4839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.517673][ T4839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.557261][ T4839] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  608.588707][T19828] device wlan0 entered promiscuous mode
[  608.614023][ T4839] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  608.615569][T19828] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  608.660817][ T4839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.696666][ T4839] usb 4-1: config 0 descriptor??
[  609.096977][T19839] loop1: detected capacity change from 0 to 4096
[  609.153574][ T4839] plantronics 0003:047F:FFFF.0038: unknown main item tag 0xd
[  609.173683][ T4839] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving
[  609.206465][T19844] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  609.225798][ T4839] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  609.420776][T19852] overlayfs: failed to clone upperpath
[  609.790796][T19864] netlink: 'syz.0.6481': attribute type 1 has an invalid length.
[  611.159628][T19912] 9pnet_fd: Insufficient options for proto=fd
[  611.284227][ T4839] usb 4-1: USB disconnect, device number 49
[  611.431154][T19899] loop1: detected capacity change from 0 to 40427
[  611.456624][T19899] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  611.493631][T19899] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  611.532930][T19899] F2FS-fs (loop1): invalid crc value
[  611.607165][T19899] F2FS-fs (loop1): Found nat_bits in checkpoint
[  611.775149][T19899] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  611.794659][T19899] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  612.720688][T19952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6512'.
[  613.641892][T19978] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[  613.641892][T19978]    program syz.2.6520 not setting count and/or reply_len properly
[  614.824168][ T4841] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  614.960310][T20028] loop1: detected capacity change from 0 to 8192
[  615.025114][ T4841] usb 4-1: Using ep0 maxpacket: 8
[  615.041162][ T4841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  615.105875][ T4841] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  615.141346][ T4841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.166507][ T4841] usb 4-1: config 0 descriptor??
[  615.240202][T20037] block nbd2: server does not support multiple connections per device.
[  615.319072][T20033] block nbd2: shutting down sockets
[  615.588560][T20044] loop1: detected capacity change from 0 to 4096
[  615.597735][ T4841] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  615.632033][T20044] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  615.798807][ T4763] usb 4-1: USB disconnect, device number 50
[  615.912093][T20058] overlayfs: failed to clone upperpath
[  616.195393][T20069] 9pnet_fd: Insufficient options for proto=fd
[  616.301763][T20072] IPv6: NLM_F_CREATE should be specified when creating new route
[  616.324345][T20072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  616.331630][T20072] IPv6: NLM_F_CREATE should be set when creating new route
[  616.338965][T20072] IPv6: NLM_F_CREATE should be set when creating new route
[  616.352076][T20073] overlayfs: failed to clone upperpath
[  616.832007][T20095] loop1: detected capacity change from 0 to 2048
[  616.940873][T20096] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  616.964143][ T4839] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  617.031336][   T26] audit: type=1800 audit(2000000015.199:1030): pid=20095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6573" name="file1" dev="loop1" ino=15 res=0 errno=0
[  617.204018][ T4839] usb 4-1: Using ep0 maxpacket: 8
[  617.210838][ T4839] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  617.241091][ T4839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  617.293970][ T4839] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  617.331738][ T4839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  617.381214][ T4839] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  617.403947][ T4839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.439136][ T4839] usb 4-1: config 0 descriptor??
[  617.445056][T20089] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  617.758092][ T4839] usb 4-1: USB disconnect, device number 51
[  617.761045][ T4266] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  619.789251][ T4763] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  619.922012][T20182] loop1: detected capacity change from 0 to 4096
[  619.968385][T20182] EXT4-fs (loop1): Test dummy encryption mode enabled
[  619.975789][ T4763] usb 4-1: Using ep0 maxpacket: 32
[  619.983624][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  620.001176][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  620.017190][ T4763] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  620.019788][T20182] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  620.026819][ T4763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.046291][ T4763] usb 4-1: config 0 descriptor??
[  620.061153][T20182] System zones: 0-5
[  620.081281][T20182] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  620.354969][T19501] EXT4-fs (loop1): unmounting filesystem.
[  620.471399][ T4763] ft260 0003:0403:6030.0039: unknown main item tag 0x7
[  620.492944][ T4763] ft260 0003:0403:6030.0039: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0
[  620.669261][ T4763] ft260 0003:0403:6030.0039: chip code: 6424 8183
[  621.075842][ T4763] usb 4-1: USB disconnect, device number 52
[  621.169884][T20216] loop1: detected capacity change from 0 to 32768
[  621.353095][T20228] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4
[  621.353095][T20228] 
[  621.414361][T20228] ERROR: (device loop1): remounting filesystem as read-only
[  621.430219][T20216] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4
[  621.430219][T20216] 
[  621.844471][T20248] device syzkaller1 entered promiscuous mode
[  622.345816][ T4763] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  622.553989][ T4763] usb 2-1: Using ep0 maxpacket: 8
[  622.561079][ T4763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  622.572454][ T4763] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  622.598010][ T4763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.626222][ T4763] usb 2-1: config 0 descriptor??
[  622.865146][ T4763] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  623.102946][T20256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.152392][T20256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.397646][ T4763] usb 2-1: USB disconnect, device number 53
[  623.814050][ T4841] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  624.021402][T20330] loop1: detected capacity change from 0 to 1024
[  624.032004][ T4841] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  624.058040][ T4841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  624.064935][T20330] EXT4-fs: Ignoring removed nomblk_io_submit option
[  624.098484][ T4841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  624.119008][ T4841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  624.146243][ T4841] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  624.156746][T20330] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  624.165879][ T4841] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  624.196758][ T4841] usb 4-1: Manufacturer: syz
[  624.238363][ T4841] usb 4-1: config 0 descriptor??
[  624.250830][T20330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  624.300472][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.306870][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  624.477477][T19501] EXT4-fs (loop1): unmounting filesystem.
[  624.685461][ T4841] appleir 0003:05AC:8243.003A: unknown main item tag 0x0
[  624.693096][ T4841] appleir 0003:05AC:8243.003A: No inputs registered, leaving
[  624.721255][ T4841] appleir 0003:05AC:8243.003A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  624.860533][T20349] loop1: detected capacity change from 0 to 512
[  625.007526][T20349] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  625.015851][ T4487] usb 4-1: USB disconnect, device number 53
[  625.062762][T20349] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  625.104036][T20349] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.6682: Failed to acquire dquot type 1
[  625.228498][T20349] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.6682: corrupted inode contents
[  625.247281][T20356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6684'.
[  625.260687][T20349] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #16: comm syz.1.6682: mark_inode_dirty error
[  625.297257][T20349] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.6682: corrupted inode contents
[  625.331182][T20349] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.6682: mark_inode_dirty error
[  625.371642][T20349] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.6682: corrupted inode contents
[  625.435237][T20349] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  625.462005][T20349] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.6682: corrupted inode contents
[  625.503812][T20349] EXT4-fs error (device loop1): ext4_truncate:4318: inode #16: comm syz.1.6682: mark_inode_dirty error
[  625.529687][T20349] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  625.611617][T20349] EXT4-fs (loop1): 1 truncate cleaned up
[  625.629742][T20349] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  625.684118][T20349] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  625.833013][T19501] EXT4-fs (loop1): unmounting filesystem.
[  626.750238][T15951] device vlan0 left promiscuous mode
[  626.768683][T15951] device syz_tun left promiscuous mode
[  626.805056][T15951] bridge0: port 4(vlan0) entered disabled state
[  627.489259][T18761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.663438][T18761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.842045][T18761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.946318][T18761] batman_adv: batadv0: Interface deactivated: netdevsim0
[  628.153500][T18761] batman_adv: batadv0: Removing interface: netdevsim0
[  628.202352][T18761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.239581][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  628.252873][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  628.262626][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  628.270502][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  628.280157][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  628.289471][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  628.684489][T20418] loop1: detected capacity change from 0 to 32768
[  628.838270][T20418] XFS (loop1): Mounting V5 Filesystem
[  629.011314][T20418] XFS (loop1): Ending clean mount
[  629.025136][T20418] XFS (loop1): Quotacheck needed: Please wait.
[  629.045426][T18761] tipc: Disabling bearer <udp:s>
[  629.087721][T18761] tipc: Left network mode
[  629.132917][T20420] chnl_net:caif_netlink_parms(): no params data found
[  629.133277][T20418] XFS (loop1): Quotacheck: Done.
[  629.376307][T19501] XFS (loop1): Unmounting Filesystem
[  629.841409][T20420] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.854398][T20420] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.862553][T20420] device bridge_slave_0 entered promiscuous mode
[  630.059939][T20420] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.072854][T20420] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.127924][T20420] device bridge_slave_1 entered promiscuous mode
[  630.374219][ T4279] Bluetooth: hci4: command 0x0409 tx timeout
[  630.549249][T20420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  630.585804][T20420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  630.671946][T20367] Set syz1 is full, maxelem 65536 reached
[  630.783534][T20420] team0: Port device team_slave_0 added
[  630.886096][T20420] team0: Port device team_slave_1 added
[  630.982889][T20420] batman_adv: batadv0: Adding interface: batadv_slave_0
[  631.001488][T20420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  631.073565][T20420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  631.301611][T20420] batman_adv: batadv0: Adding interface: batadv_slave_1
[  631.323300][T20420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  631.413755][T20420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  631.560810][T20481] device hsr0 entered promiscuous mode
[  632.123391][T20420] device hsr_slave_0 entered promiscuous mode
[  632.167275][T20420] device hsr_slave_1 entered promiscuous mode
[  632.180686][T20420] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  632.203973][T20420] Cannot create hsr debugfs directory
[  632.454179][ T4279] Bluetooth: hci4: command 0x041b tx timeout
[  632.584143][ T4324] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  632.788261][ T4324] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  632.808840][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.832293][ T4324] usb 3-1: Product: syz
[  632.837157][T18761] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  632.855489][ T4324] usb 3-1: Manufacturer: syz
[  632.857985][T18761] batman_adv: batadv0: Removing interface: batadv_slave_1
[  632.860109][ T4324] usb 3-1: SerialNumber: syz
[  632.897007][ T4324] usb 3-1: config 0 descriptor??
[  632.904631][T18761] batman_adv: batadv0: Removing interface: macvlan2
[  632.924801][T18761] batman_adv: batadv0: Removing interface: macsec2
[  632.956670][T18761] device team0 left promiscuous mode
[  632.962009][T18761] device team_slave_0 left promiscuous mode
[  632.994206][T18761] device team_slave_1 left promiscuous mode
[  633.020586][T18761] device bridge3 left promiscuous mode
[  633.034586][T18761] bridge0: port 3(team0) entered disabled state
[  633.066371][T18761] device bridge_slave_1 left promiscuous mode
[  633.092955][T18761] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.110758][ T4324] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  633.119936][T18761] device bridge_slave_0 left promiscuous mode
[  633.146762][T18761] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.247753][T18761] device veth1_macvtap left promiscuous mode
[  633.274798][T18761] device veth0_macvtap left promiscuous mode
[  633.280917][T18761] device veth1_vlan left promiscuous mode
[  633.622026][T18761] team0 (unregistering): Port device bridge4 removed
[  633.725726][T18761] team0 (unregistering): Port device bridge3 removed
[  633.939467][ T4324] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  633.958939][ T4324] usb 3-1: USB disconnect, device number 49
[  634.418588][T18761] team0 (unregistering): Port device team_slave_1 removed
[  634.499578][T18761] team0 (unregistering): Port device team_slave_0 removed
[  634.535394][ T4279] Bluetooth: hci4: command 0x040f tx timeout
[  634.644130][T18761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  634.835328][T18761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  635.896651][T18761] bond0 (unregistering): Released all slaves
[  636.137463][    C0] ------------[ cut here ]------------
[  636.142984][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  636.153503][    C0] WARNING: CPU: 0 PID: 4839 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880
[  636.163586][    C0] Modules linked in:
[  636.167550][    C0] CPU: 0 PID: 4839 Comm: kworker/0:14 Not tainted syzkaller #0
[  636.175147][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  636.185258][    C0] Workqueue: events pwq_unbound_release_workfn
[  636.191801][    C0] RIP: 0010:__rate_control_send_low+0x635/0x880
[  636.198101][    C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 e0 21 86 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 2b 25 bf f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  636.217769][    C0] RSP: 0018:ffffc90000007600 EFLAGS: 00010246
[  636.223861][    C0] RAX: b864638a6a0c7500 RBX: 000000000000000c RCX: ffff888027c08000
[  636.231892][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  636.239915][    C0] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff52000000e51
[  636.247944][    C0] R10: fffff52000000e51 R11: 1ffff92000000e50 R12: 0000000000000000
[  636.255971][    C0] R13: dffffc0000000000 R14: ffff888055b23378 R15: ffff888054480668
[  636.264011][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  636.273058][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  636.279715][    C0] CR2: 00007f4324a92aa1 CR3: 000000005dfd9000 CR4: 00000000003506f0
[  636.287748][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  636.295793][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  636.303785][    C0] Call Trace:
[  636.307127][    C0]  <IRQ>
[  636.310003][    C0]  rate_control_send_low+0x194/0x790
[  636.315360][    C0]  rate_control_get_rate+0x207/0x5c0
[  636.320675][    C0]  ieee80211_beacon_get_finish+0x37c/0x6a0
[  636.326556][    C0]  ? ieee80211_set_beacon_cntdwn+0x660/0x660
[  636.332557][    C0]  ? __local_bh_enable_ip+0x12a/0x1b0
[  636.338001][    C0]  ? _local_bh_enable+0xa0/0xa0
[  636.342892][    C0]  __ieee80211_beacon_get+0x18e0/0x1f50
[  636.348533][    C0]  ? __ieee80211_beacon_get+0xad/0x1f50
[  636.354135][    C0]  ? ieee80211_beacon_get_template+0x40/0x40
[  636.360166][    C0]  ieee80211_beacon_get_tim+0x5b/0x4d0
[  636.365703][    C0]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[  636.371266][    C0]  ? read_lock_is_recursive+0x10/0x10
[  636.376718][    C0]  __iterate_interfaces+0x243/0x500
[  636.377128][T20420] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  636.381922][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  636.394945][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  636.402172][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  636.408497][    C0]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[  636.415584][    C0]  mac80211_hwsim_beacon+0xb7/0x1b0
[  636.420814][    C0]  __hrtimer_run_queues+0x554/0xd60
[  636.426098][    C0]  ? hw_scan_work+0xf30/0xf30
[  636.430804][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  636.435992][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  636.442090][    C0]  hrtimer_run_softirq+0x183/0x2a0
[  636.447273][    C0]  handle_softirqs+0x2a1/0x920
[  636.452082][    C0]  ? __irq_exit_rcu+0x12f/0x220
[  636.457021][    C0]  ? do_softirq+0x200/0x200
[  636.461559][    C0]  __irq_exit_rcu+0x12f/0x220
[  636.466312][    C0]  ? irq_exit_rcu+0x20/0x20
[  636.470845][    C0]  irq_exit_rcu+0x5/0x20
[  636.475186][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  636.480838][    C0]  </IRQ>
[  636.483783][    C0]  <TASK>
[  636.486772][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  636.492768][    C0] RIP: 0010:lockdep_unregister_key+0x4c3/0x530
[  636.498999][    C0] Code: 81 87 90 48 c7 c6 70 a9 63 81 e8 a8 93 07 00 e8 03 a7 07 00 e9 86 fc ff ff e8 99 c3 ac 08 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b eb a1 0f 0b e9 11 ff ff ff 0f 0b e9 5e ff ff ff
[  636.518656][    C0] RSP: 0018:ffffc9000923fb20 EFLAGS: 00000246
[  636.524795][    C0] RAX: b864638a6a0c7500 RBX: 0000000000000000 RCX: b864638a6a0c7500
[  636.532788][    C0] RDX: 0000000000000001 RSI: ffffffff8a6c12e0 RDI: ffffffff8abef920
[  636.541000][    C0] RBP: ffffc9000923fbf0 R08: dffffc0000000000 R09: fffffbfff210f482
[  636.549023][    C0] R10: fffffbfff210f482 R11: 1ffffffff210f481 R12: 0000000000000a06
[  636.557062][    C0] R13: ffff888073b28129 R14: ffffffff90878198 R15: 1ffff92001247f68
[  636.565105][    C0]  ? lockdep_reset_lock+0x2d0/0x2d0
[  636.570342][    C0]  ? read_lock_is_recursive+0x10/0x10
[  636.575782][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  636.581705][    C0]  ? _raw_spin_unlock+0x40/0x40
[  636.586631][    C0]  pwq_unbound_release_workfn+0x262/0x2b0
[  636.592378][    C0]  ? process_one_work+0x7a1/0x1160
[  636.597559][    C0]  process_one_work+0x898/0x1160
[  636.602528][    C0]  ? worker_detach_from_pool+0x240/0x240
[  636.608252][    C0]  ? _raw_spin_lock_irq+0xab/0xe0
[  636.613300][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  636.614186][ T4279] Bluetooth: hci4: command 0x0419 tx timeout
[  636.618715][    C0]  ? kthread_data+0x4b/0xc0
[  636.629221][    C0]  worker_thread+0xaa2/0x1250
[  636.633990][    C0]  kthread+0x29d/0x330
[  636.638084][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[  636.643131][    C0]  ? kthread_blkcg+0xd0/0xd0
[  636.647800][    C0]  ret_from_fork+0x1f/0x30
[  636.652252][    C0]  </TASK>
[  636.655348][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  636.662633][    C0] CPU: 0 PID: 4839 Comm: kworker/0:14 Not tainted syzkaller #0
[  636.670195][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  636.680274][    C0] Workqueue: events pwq_unbound_release_workfn
[  636.686464][    C0] Call Trace:
[  636.689756][    C0]  <IRQ>
[  636.692612][    C0]  dump_stack_lvl+0x168/0x22e
[  636.697322][    C0]  ? memcpy+0x3c/0x60
[  636.701323][    C0]  ? show_regs_print_info+0x12/0x12
[  636.706545][    C0]  ? load_image+0x3b0/0x3b0
[  636.711074][    C0]  panic+0x2c9/0x710
[  636.714984][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  636.719513][    C0]  ? ret_from_fork+0x1f/0x30
[  636.724136][    C0]  __warn+0x2f8/0x4f0
[  636.728161][    C0]  ? __rate_control_send_low+0x635/0x880
[  636.733809][    C0]  ? __rate_control_send_low+0x635/0x880
[  636.739457][    C0]  report_bug+0x2ba/0x4f0
[  636.743811][    C0]  ? __rate_control_send_low+0x635/0x880
[  636.749466][    C0]  handle_bug+0x3a/0x70
[  636.753647][    C0]  exc_invalid_op+0x16/0x40
[  636.758176][    C0]  asm_exc_invalid_op+0x16/0x20
[  636.763044][    C0] RIP: 0010:__rate_control_send_low+0x635/0x880
[  636.769302][    C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 e0 21 86 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 2b 25 bf f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  636.788966][    C0] RSP: 0018:ffffc90000007600 EFLAGS: 00010246
[  636.795057][    C0] RAX: b864638a6a0c7500 RBX: 000000000000000c RCX: ffff888027c08000
[  636.803047][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  636.811036][    C0] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff52000000e51
[  636.819026][    C0] R10: fffff52000000e51 R11: 1ffff92000000e50 R12: 0000000000000000
[  636.827019][    C0] R13: dffffc0000000000 R14: ffff888055b23378 R15: ffff888054480668
[  636.835049][    C0]  rate_control_send_low+0x194/0x790
[  636.840368][    C0]  rate_control_get_rate+0x207/0x5c0
[  636.845682][    C0]  ieee80211_beacon_get_finish+0x37c/0x6a0
[  636.851519][    C0]  ? ieee80211_set_beacon_cntdwn+0x660/0x660
[  636.857521][    C0]  ? __local_bh_enable_ip+0x12a/0x1b0
[  636.862913][    C0]  ? _local_bh_enable+0xa0/0xa0
[  636.867783][    C0]  __ieee80211_beacon_get+0x18e0/0x1f50
[  636.873360][    C0]  ? __ieee80211_beacon_get+0xad/0x1f50
[  636.878929][    C0]  ? ieee80211_beacon_get_template+0x40/0x40
[  636.884963][    C0]  ieee80211_beacon_get_tim+0x5b/0x4d0
[  636.890449][    C0]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[  636.896013][    C0]  ? read_lock_is_recursive+0x10/0x10
[  636.901418][    C0]  __iterate_interfaces+0x243/0x500
[  636.906642][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  636.912909][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  636.920137][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  636.926400][    C0]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[  636.933451][    C0]  mac80211_hwsim_beacon+0xb7/0x1b0
[  636.938674][    C0]  __hrtimer_run_queues+0x554/0xd60
[  636.943903][    C0]  ? hw_scan_work+0xf30/0xf30
[  636.948601][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  636.953732][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  636.959830][    C0]  hrtimer_run_softirq+0x183/0x2a0
[  636.964970][    C0]  handle_softirqs+0x2a1/0x920
[  636.969778][    C0]  ? __irq_exit_rcu+0x12f/0x220
[  636.974653][    C0]  ? do_softirq+0x200/0x200
[  636.979321][    C0]  __irq_exit_rcu+0x12f/0x220
[  636.984027][    C0]  ? irq_exit_rcu+0x20/0x20
[  636.988556][    C0]  irq_exit_rcu+0x5/0x20
[  636.992825][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  636.998473][    C0]  </IRQ>
[  637.001410][    C0]  <TASK>
[  637.004362][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  637.010360][    C0] RIP: 0010:lockdep_unregister_key+0x4c3/0x530
[  637.016548][    C0] Code: 81 87 90 48 c7 c6 70 a9 63 81 e8 a8 93 07 00 e8 03 a7 07 00 e9 86 fc ff ff e8 99 c3 ac 08 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b eb a1 0f 0b e9 11 ff ff ff 0f 0b e9 5e ff ff ff
[  637.036177][    C0] RSP: 0018:ffffc9000923fb20 EFLAGS: 00000246
[  637.042268][    C0] RAX: b864638a6a0c7500 RBX: 0000000000000000 RCX: b864638a6a0c7500
[  637.050261][    C0] RDX: 0000000000000001 RSI: ffffffff8a6c12e0 RDI: ffffffff8abef920
[  637.058253][    C0] RBP: ffffc9000923fbf0 R08: dffffc0000000000 R09: fffffbfff210f482
[  637.066244][    C0] R10: fffffbfff210f482 R11: 1ffffffff210f481 R12: 0000000000000a06
[  637.074324][    C0] R13: ffff888073b28129 R14: ffffffff90878198 R15: 1ffff92001247f68
[  637.082334][    C0]  ? lockdep_reset_lock+0x2d0/0x2d0
[  637.087558][    C0]  ? read_lock_is_recursive+0x10/0x10
[  637.092952][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  637.098865][    C0]  ? _raw_spin_unlock+0x40/0x40
[  637.103743][    C0]  pwq_unbound_release_workfn+0x262/0x2b0
[  637.109485][    C0]  ? process_one_work+0x7a1/0x1160
[  637.114613][    C0]  process_one_work+0x898/0x1160
[  637.119578][    C0]  ? worker_detach_from_pool+0x240/0x240
[  637.125214][    C0]  ? _raw_spin_lock_irq+0xab/0xe0
[  637.130245][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  637.135625][    C0]  ? kthread_data+0x4b/0xc0
[  637.140177][    C0]  worker_thread+0xaa2/0x1250
[  637.144877][    C0]  kthread+0x29d/0x330
[  637.148952][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[  637.153970][    C0]  ? kthread_blkcg+0xd0/0xd0
[  637.158567][    C0]  ret_from_fork+0x1f/0x30
[  637.162977][    C0]  </TASK>
[  637.166245][    C0] Kernel Offset: disabled
[  637.170560][    C0] Rebooting in 86400 seconds..