last executing test programs:

2m16.059070374s ago: executing program 0 (id=261):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc001001b}]})

2m15.89010336s ago: executing program 0 (id=264):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setresuid(0x0, 0xee00, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x14, r1, 0x1, 0xffffffff, 0x25dfdbfb}, 0x14}}, 0x0)

2m15.747061847s ago: executing program 0 (id=266):
r0 = socket(0x15, 0x5, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040))

2m15.552651044s ago: executing program 0 (id=271):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8)
sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000280)=@pppoe={0x2a, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}, 0x80, 0x0}, 0x0)

2m15.365419927s ago: executing program 0 (id=276):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m15.222392337s ago: executing program 0 (id=278):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)=@delchain={0xac, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}, @filter_kind_options=@f_fw={{0x7}, {0x64, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_team\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0xac}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

2m0.045936884s ago: executing program 32 (id=278):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)=@delchain={0xac, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}, @filter_kind_options=@f_fw={{0x7}, {0x64, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_team\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0xac}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1m41.366787535s ago: executing program 1 (id=584):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setgroups(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000000))

1m41.255568445s ago: executing program 1 (id=585):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x1, 0x44, 0x0, 0x0, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'})

1m41.042268783s ago: executing program 1 (id=590):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
umount2(&(0x7f0000000200)='./file0\x00', 0x0)

1m40.790744907s ago: executing program 1 (id=592):
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230)

1m40.610759468s ago: executing program 1 (id=597):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)

1m40.197619485s ago: executing program 1 (id=607):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x80000000, 0x7, 0x7, 0xfffffffd, 0x1, 0x8, 0x7}]})

1m40.043261651s ago: executing program 33 (id=607):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x80000000, 0x7, 0x7, 0xfffffffd, 0x1, 0x8, 0x7}]})

44.384343279s ago: executing program 5 (id=1514):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0xffffffff, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x8, 0x40000274}, &(0x7f0000c57000), 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}})

44.146324807s ago: executing program 5 (id=1518):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ftruncate(r1, 0xffff)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0)

34.914655958s ago: executing program 5 (id=1518):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ftruncate(r1, 0xffff)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0)

26.112839805s ago: executing program 5 (id=1518):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ftruncate(r1, 0xffff)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0)

15.763751083s ago: executing program 5 (id=1518):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ftruncate(r1, 0xffff)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0)

7.418723234s ago: executing program 5 (id=1518):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ftruncate(r1, 0xffff)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0)

5.005686715s ago: executing program 2 (id=1905):
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000004000000000008000700000000000800060000000000080005000000000008000100000000000800020000000000080003"], 0xc0}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68)

4.914189662s ago: executing program 2 (id=1907):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r1, 0x0)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0)

4.700463598s ago: executing program 2 (id=1909):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = syz_io_uring_setup(0x231b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@rc={0x1f, @fixed, 0x5}})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)

4.04747152s ago: executing program 2 (id=1916):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
getdents64(r1, &(0x7f00000000c0)=""/32, 0x20)
getdents(r1, &(0x7f0000001180)=""/120, 0x78)

3.951558126s ago: executing program 2 (id=1917):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

2.738867833s ago: executing program 2 (id=1919):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000120000000000000007"])
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0)

2.647264734s ago: executing program 6 (id=1921):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
listen(r0, 0xa1)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

2.576427239s ago: executing program 4 (id=1922):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x33}, 0x0, @in=@broadcast}}, 0xe4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)

2.469129506s ago: executing program 4 (id=1924):
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4040041, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
fcntl$setlease(r1, 0x400, 0x2)

2.429745519s ago: executing program 4 (id=1925):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60)
listen(r0, 0x8000009)
r1 = epoll_create(0x10c)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2})

2.357805787s ago: executing program 4 (id=1926):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000c273000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='ext4_request_blocks\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, r2, 0x7, 0x0, @void}, 0x10)

2.331653083s ago: executing program 3 (id=1927):
r0 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57)

2.27879049s ago: executing program 4 (id=1928):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x3}, 0x8)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100), 0x8)
sendto$inet(r0, &(0x7f00000001c0)="ec37de30431f", 0x6, 0x1, &(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)

2.24888609s ago: executing program 3 (id=1929):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x4014)

2.146197233s ago: executing program 4 (id=1930):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)

1.741483213s ago: executing program 6 (id=1931):
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fsync(0xffffffffffffffff)

1.680593327s ago: executing program 3 (id=1932):
syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x2)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

1.111735095s ago: executing program 6 (id=1933):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = io_uring_setup(0x3eae, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4c881)

763.500886ms ago: executing program 3 (id=1934):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

562.365527ms ago: executing program 3 (id=1935):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x80024, &(0x7f0000000280)='upperdir')

511.878701ms ago: executing program 6 (id=1936):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8)
r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x80, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_setup(0x73a6, &(0x7f0000000280)={0x0, 0x95b0, 0x400, 0x3, 0xfffffffe}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0})
io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0)

494.643776ms ago: executing program 3 (id=1937):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800002c1001c0"])

382.612764ms ago: executing program 6 (id=1938):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

0s ago: executing program 6 (id=1939):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

kernel console output (not intermixed with test programs):

93273][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.935880][ T5923] usb 6-1: USB disconnect, device number 3
[  136.942617][ T7345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.976844][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.983892][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.062733][ T7345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.135287][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  137.135306][   T29] audit: type=1326 audit(1732423807.683:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  137.163814][   T29] audit: type=1326 audit(1732423807.683:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  137.185339][   T29] audit: type=1326 audit(1732423807.683:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  137.206786][   T29] audit: type=1326 audit(1732423807.683:26): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  137.228716][   T29] audit: type=1326 audit(1732423807.683:27): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  137.251134][   T29] audit: type=1326 audit(1732423807.683:28): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  137.273480][   T29] audit: type=1326 audit(1732423807.683:29): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  137.295567][   T29] audit: type=1326 audit(1732423807.683:30): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  137.325582][ T7345] hsr_slave_0: entered promiscuous mode
[  137.341722][ T7345] hsr_slave_1: entered promiscuous mode
[  137.357828][   T29] audit: type=1804 audit(1732423807.903:31): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.654" name="/" dev="pidfs" ino=7747 res=1 errno=0
[  137.379129][ T7345] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.392023][ T7345] Cannot create hsr debugfs directory
[  137.546637][   T55] Bluetooth: hci2: command tx timeout
[  137.602206][ T5886] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0
[  137.614001][ T5886] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0
[  137.657283][ T5886] hid-generic 0000:0003:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  137.867062][ T5886] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  138.034653][ T7345] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  138.048044][ T7345] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  138.057987][ T5886] usb 5-1: Using ep0 maxpacket: 32
[  138.076685][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short
[  138.087859][ T7345] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  138.095455][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -71
[  138.109759][ T5886] usb 5-1: can't read configurations, error -71
[  138.143314][ T7345] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  138.287194][ T5915] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  138.346014][ T7345] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.405518][ T7345] 8021q: adding VLAN 0 to HW filter on device team0
[  138.435635][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.442797][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.451058][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  138.472123][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.506265][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.533181][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.536720][ T5915] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  138.540322][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.556601][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.619204][ T5915] usb 3-1: config 0 descriptor??
[  138.683607][ T7475] netlink: 277 bytes leftover after parsing attributes in process `syz.3.667'.
[  138.957439][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.966013][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.043068][ T5915] playstation 0003:054C:05C4.0009: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0
[  139.086204][ T7345] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.112619][ T7494] ax25_connect(): syz.5.673 uses autobind, please contact jreuter@yaina.de
[  139.135873][ T7491] cifs: Unknown parameter 'mode'
[  139.231191][ T3450] wlan1: Trigger new scan to find an IBSS to join
[  139.256850][ T5915] playstation 0003:054C:05C4.0009: Invalid reportID received, expected 18 got 72
[  139.266035][ T5915] playstation 0003:054C:05C4.0009: Failed to retrieve DualShock4 pairing info: -22
[  139.296562][ T5915] playstation 0003:054C:05C4.0009: Failed to get MAC address from DualShock4
[  139.315835][ T5915] playstation 0003:054C:05C4.0009: Failed to create dualshock4.
[  139.338668][ T5915] playstation 0003:054C:05C4.0009: probe with driver playstation failed with error -22
[  139.516892][ T7514] ntfs3(nullb0): Primary boot signature is not NTFS.
[  139.524594][ T7514] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  139.537846][ T7514] erofs (device nullb0): cannot find valid erofs superblock
[  139.568813][   T47] usb 3-1: USB disconnect, device number 7
[  139.647735][   T55] Bluetooth: hci2: command tx timeout
[  139.659670][ T7345] veth0_vlan: entered promiscuous mode
[  139.670879][ T7345] veth1_vlan: entered promiscuous mode
[  139.700150][ T7345] veth0_macvtap: entered promiscuous mode
[  139.708964][ T7345] veth1_macvtap: entered promiscuous mode
[  139.743181][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.766560][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.786561][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.816554][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.830400][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.851832][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.861977][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.872512][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.883603][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.893690][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.904744][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.915090][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.925811][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.935757][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.946269][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.956317][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.967206][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.980629][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.018978][ T7345] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.027947][ T7345] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.041382][ T7345] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.057300][ T7345] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.213647][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.254388][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.291094][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.308773][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.704524][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.697'.
[  140.742986][ T7549] macsec1: entered promiscuous mode
[  140.766381][ T7549] vlan0: entered promiscuous mode
[  140.801589][ T7549] vlan0: left promiscuous mode
[  140.912706][ T7551] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  140.935062][ T7551] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  141.707473][   T55] Bluetooth: hci2: command tx timeout
[  142.030241][ T7617] netlink: 'syz.4.728': attribute type 10 has an invalid length.
[  142.061946][ T7617] team0: Port device netdevsim0 added
[  142.074763][ T7617] netlink: 'syz.4.728': attribute type 10 has an invalid length.
[  142.107481][ T7619] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  142.159103][ T7617] team0: Port device netdevsim0 removed
[  142.199355][ T7617] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  142.224531][ T7617] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  142.294298][ T5923] IPVS: starting estimator thread 0...
[  142.417211][ T7626] IPVS: using max 20 ests per chain, 48000 per kthread
[  143.157097][ T7664] sctp: [Deprecated]: syz.2.745 (pid 7664) Use of int in maxseg socket option.
[  143.157097][ T7664] Use struct sctp_assoc_value instead
[  144.101659][ T7699] netlink: 'syz.4.762': attribute type 11 has an invalid length.
[  144.193460][   T64] wlan1: Trigger new scan to find an IBSS to join
[  144.398652][ T7710] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  144.804605][ T7718] overlayfs: disabling nfs_export due to verity=on
[  144.825213][ T7718] overlayfs: missing 'lowerdir'
[  145.140572][ T3482] wlan1: Creating new IBSS network, BSSID 7e:48:72:7a:c9:37
[  145.196610][ T5923] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  145.318297][ T7739] syz.5.778 uses obsolete (PF_INET,SOCK_PACKET)
[  145.387249][ T5923] usb 3-1: Using ep0 maxpacket: 16
[  145.410627][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.443295][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.476679][ T5923] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  145.506343][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.531520][ T5923] usb 3-1: config 0 descriptor??
[  145.970773][ T5923] corsair-cpro 0003:1B1C:1D00.000A: item fetching failed at offset 1/5
[  146.009499][ T5923] corsair-cpro 0003:1B1C:1D00.000A: probe with driver corsair-cpro failed with error -22
[  146.126797][   T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  146.144368][   T29] audit: type=1326 audit(1732423816.693:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000
[  146.194611][ T5923] usb 3-1: USB disconnect, device number 8
[  146.205343][   T29] audit: type=1326 audit(1732423816.733:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000
[  146.255913][ T7671] Set syz1 is full, maxelem 65536 reached
[  146.272420][   T29] audit: type=1326 audit(1732423816.733:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000
[  146.344269][   T29] audit: type=1326 audit(1732423816.733:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000
[  146.367156][   T47] usb 6-1: Using ep0 maxpacket: 16
[  146.388209][   T47] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[  146.396650][   T29] audit: type=1326 audit(1732423816.733:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000
[  146.396690][   T29] audit: type=1326 audit(1732423816.733:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000
[  146.396721][   T29] audit: type=1326 audit(1732423816.733:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000
[  146.396749][   T29] audit: type=1326 audit(1732423816.733:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000
[  146.396778][   T29] audit: type=1326 audit(1732423816.733:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000
[  146.396806][   T29] audit: type=1326 audit(1732423816.733:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000
[  146.439754][    C0] vkms_vblank_simulate: vblank timer overrun
[  146.490116][   T47] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  146.541362][   T47] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  146.549799][   T47] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  146.558435][   T47] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  146.567790][   T47] usb 6-1: config 0 has no interface number 0
[  146.573962][   T47] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  146.586225][   T47] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  146.597168][   T47] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  146.607141][   T47] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  146.620264][   T47] usb 6-1: config 0 interface 125 has no altsetting 0
[  146.627110][   T47] usb 6-1: config 0 interface 125 has no altsetting 2
[  146.709278][   T47] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  146.718991][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.737091][   T47] usb 6-1: Product: syz
[  146.741318][   T47] usb 6-1: Manufacturer: syz
[  146.766569][   T47] usb 6-1: SerialNumber: syz
[  146.779525][   T47] usb 6-1: config 0 descriptor??
[  146.799059][   T47] usb 6-1: selecting invalid altsetting 2
[  147.029425][    C1] usb 6-1: async_complete: urb error -71
[  147.035248][    C1] usb 6-1: async_complete: urb error -71
[  147.040965][    C1] usb 6-1: async_complete: urb error -71
[  147.046659][    C1] usb 6-1: async_complete: urb error -71
[  147.086766][   T47] get_1284_register: usb error -71
[  147.092009][   T47] uss720 6-1:0.125: probe with driver uss720 failed with error -71
[  147.139044][   T47] usb 6-1: USB disconnect, device number 4
[  147.928208][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.819'.
[  147.954286][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'.
[  148.063093][ T7833] netlink: 'syz.2.821': attribute type 9 has an invalid length.
[  148.205400][ T7841] kernel profiling enabled (shift: 9)
[  148.261498][ T7847] sctp: [Deprecated]: syz.4.826 (pid 7847) Use of int in max_burst socket option.
[  148.261498][ T7847] Use struct sctp_assoc_value instead
[  148.946181][ T7880] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  149.268840][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.852'.
[  149.278607][ T7902] netlink: 172 bytes leftover after parsing attributes in process `syz.5.852'.
[  149.288730][ T7902] netlink: 116 bytes leftover after parsing attributes in process `syz.5.852'.
[  149.594469][ T7914] misc userio: Can't change port type on an already running userio instance
[  149.788150][ T7930] netlink: 'syz.6.863': attribute type 10 has an invalid length.
[  149.862657][ T7930] team0: Port device wlan1 added
[  150.476837][ T5916] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  150.531319][ T7971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  150.539097][ T7971] IPv6: NLM_F_CREATE should be set when creating new route
[  150.546432][ T7971] IPv6: NLM_F_CREATE should be set when creating new route
[  150.649439][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.665731][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.690919][ T5916] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  150.701234][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.718985][ T5916] usb 6-1: config 0 descriptor??
[  150.856707][   T47] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  151.029332][   T47] usb 5-1: config 0 has no interfaces?
[  151.035060][   T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  151.061198][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.094402][   T47] usb 5-1: config 0 descriptor??
[  151.170265][ T5916] hid-steam 0003:28DE:1142.000B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[  151.237199][ T5916] hid-steam 0003:28DE:1142.000B: Steam wireless receiver connected
[  151.277884][ T5916] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[  151.389983][   T47] usb 5-1: USB disconnect, device number 11
[  151.419983][ T5916] usb 6-1: USB disconnect, device number 5
[  151.434124][ T5916] hid-steam 0003:28DE:1142.000B: Steam wireless receiver disconnected
[  152.996636][   T47] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  153.160814][   T47] usb 7-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  153.170032][   T47] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 184
[  153.186663][   T47] usb 7-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  153.195816][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.220868][   T47] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  153.337923][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.384631][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'.
[  153.434292][   T47] gspca_sn9c2028: read1 error -32
[  153.440400][   T47] gspca_sn9c2028: read1 error -32
[  153.462022][ T8088] input: syz0 as /devices/virtual/input/input15
[  153.662919][   T47] usb 7-1: USB disconnect, device number 2
[  154.367230][ T8135] binder: 8133:8135 ioctl c018620b 200000c0 returned -14
[  154.410866][ T8139] vivid-001: disconnect
[  154.432992][ T8138] vivid-001: reconnect
[  155.187220][    T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  155.316647][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  155.396564][    T8] usb 6-1: Using ep0 maxpacket: 8
[  155.405866][    T8] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  155.415892][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.426518][    T8] usb 6-1: Product: syz
[  155.430801][    T8] usb 6-1: Manufacturer: syz
[  155.435424][    T8] usb 6-1: SerialNumber: syz
[  155.469478][    T8] usb 6-1: config 0 descriptor??
[  155.489467][    T8] gspca_main: vc032x-2.14.0 probing 046d:0896
[  155.546553][ T5915] usb 4-1: config 0 has no interfaces?
[  155.552398][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00
[  155.566832][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.592574][ T5915] usb 4-1: config 0 descriptor??
[  155.595424][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.979'.
[  155.821499][ T5915] usb 4-1: USB disconnect, device number 6
[  156.087037][ T8211] tipc: Started in network mode
[  156.092064][ T8211] tipc: Node identity fffffeff, cluster identity 7
[  156.099432][ T8211] tipc: Node number set to 4294967039
[  156.207014][ T5934] kernel write not supported for file /amidi2 (pid: 5934 comm: kworker/1:7)
[  156.322570][    T8] gspca_vc032x: reg_w err -71
[  156.327490][    T8] vc032x 6-1:0.0: probe with driver vc032x failed with error -71
[  156.516933][    T8] usb 6-1: USB disconnect, device number 6
[  157.200842][ T8257] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  157.235645][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1014'.
[  157.338189][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1018'.
[  157.726767][ T5923] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  157.886707][ T5923] usb 4-1: Using ep0 maxpacket: 16
[  157.893744][ T5923] usb 4-1: config 157 interface 0 has no altsetting 0
[  157.906260][ T5923] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  157.927254][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.946799][ T5923] usb 4-1: Product: syz
[  157.951015][ T5923] usb 4-1: Manufacturer: syz
[  157.955625][ T5923] usb 4-1: SerialNumber: syz
[  158.102915][ T8303] siw: device registration error -23
[  158.276174][ T8308] pim6reg: entered allmulticast mode
[  158.290451][ T8308] pim6reg: left allmulticast mode
[  158.326675][ T5934] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  158.385676][ T5923] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  158.417290][ T5923] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  158.446955][ T5923] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  158.457310][ T5923] usb 4-1: media controller created
[  158.476662][ T5934] usb 3-1: Using ep0 maxpacket: 16
[  158.486932][ T5934] usb 3-1: config 128 has an invalid interface number: 61 but max is 0
[  158.495381][ T5934] usb 3-1: config 128 has no interface number 0
[  158.509948][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  158.563960][ T5934] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=25.84
[  158.573262][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.581749][ T5934] usb 3-1: Product: syz
[  158.586932][ T5934] usb 3-1: Manufacturer: syz
[  158.591565][ T5934] usb 3-1: SerialNumber: syz
[  158.603154][ T5923] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)...
[  158.614124][ T5923] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered.
[  158.764777][ T5923] DVB: Unable to find symbol qt1010_attach()
[  158.836392][ T5923] usb 4-1: USB disconnect, device number 7
[  159.061068][ T5934] usb 3-1: ignoring: probably an ADSL modem
[  159.235928][ T8338] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  159.584382][ T5934] cxacru 3-1:128.61: usbatm_usb_probe: bind failed: -19!
[  159.617086][ T5934] usb 3-1: USB disconnect, device number 9
[  159.628012][ T5923] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  159.986588][ T5923] usb 6-1: Using ep0 maxpacket: 8
[  159.995967][ T5923] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  160.012003][ T5923] usb 6-1: config 179 has no interface number 0
[  160.020284][ T5923] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  160.033659][ T5923] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  160.052090][ T5923] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  160.064900][ T5923] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  160.084084][ T5923] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  160.125383][ T5923] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  160.150640][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.178617][ T8340] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  160.484276][ T5923] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input16
[  160.673851][ T5923] usb 6-1: USB disconnect, device number 7
[  160.679889][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  160.679938][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  160.718093][ T5923] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  160.772842][ T8371] serio: Serial port ptm0
[  160.925811][ T8344] syz.4.1050 (8344): drop_caches: 2
[  161.147149][   T29] kauditd_printk_skb: 57 callbacks suppressed
[  161.147168][   T29] audit: type=1326 audit(1732423831.693:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  161.153290][ T8379] netlink: 'syz.2.1066': attribute type 11 has an invalid length.
[  161.212014][ T8379] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1066'.
[  161.260622][   T29] audit: type=1326 audit(1732423831.693:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  161.356211][   T29] audit: type=1326 audit(1732423831.693:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  161.416969][   T29] audit: type=1326 audit(1732423831.693:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  161.472489][   T29] audit: type=1326 audit(1732423831.693:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000
[  163.058505][ T8475] omfs: Invalid superblock (0)
[  163.259246][   T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  163.426577][   T47] usb 3-1: Using ep0 maxpacket: 16
[  163.442878][   T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.454805][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  163.496804][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  163.528849][   T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  163.553496][   T47] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.580953][   T47] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  163.592952][   T47] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  163.601660][   T47] usb 3-1: Manufacturer: syz
[  163.611677][   T47] usb 3-1: config 0 descriptor??
[  163.817925][    T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  163.926569][   T47] rc_core: IR keymap rc-hauppauge not found
[  163.936773][   T47] Registered IR keymap rc-empty
[  163.949725][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.976776][ T5934] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  163.996009][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  164.017979][   T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  164.041127][   T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17
[  164.051096][    T8] usb 4-1: config 0 has no interfaces?
[  164.065695][    T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  164.086706][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  164.086982][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.108541][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  164.118393][    T8] usb 4-1: config 0 descriptor??
[  164.145909][ T5934] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  164.162175][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  164.175293][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.194056][ T5934] usb 6-1: Product: syz
[  164.198409][ T5934] usb 6-1: Manufacturer: syz
[  164.203068][ T5934] usb 6-1: SerialNumber: syz
[  164.209258][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  164.224873][ T5934] usb 6-1: config 0 descriptor??
[  164.242948][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  164.267239][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  164.286679][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  164.306689][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  164.326694][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  164.348494][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  164.368132][   T47] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  164.416602][   T47] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  164.446704][   T47] usb 3-1: USB disconnect, device number 10
[  164.454493][ T5934] hso 6-1:0.0: Can't find BULK IN endpoint
[  164.477127][ T5934] usb-storage 6-1:0.0: USB Mass Storage device detected
[  164.485597][ T5853] usb 4-1: USB disconnect, device number 8
[  164.667342][ T5915] usb 6-1: USB disconnect, device number 8
[  165.703795][ T8549] input: syz0 as /devices/virtual/input/input18
[  166.036613][   T47] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  166.207306][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.219348][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.241756][   T47] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  166.271294][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.296022][   T47] usb 4-1: config 0 descriptor??
[  166.725205][ T8576] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  166.734433][   T47] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0
[  166.746936][   T47] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x1
[  166.756628][   T47] zeroplus 0003:0C12:0030.000D: item fetching failed at offset 3/7
[  166.765158][   T47] zeroplus 0003:0C12:0030.000D: parse failed
[  166.784951][   T47] zeroplus 0003:0C12:0030.000D: probe with driver zeroplus failed with error -22
[  166.962298][   T47] usb 4-1: USB disconnect, device number 9
[  167.143198][   T29] audit: type=1326 audit(1732423837.683:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.4.1157" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1d8f7e819 code=0x0
[  167.643080][   T29] audit: type=1326 audit(1732423838.193:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.3.1163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x0
[  168.617235][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'.
[  168.685107][ T8649] hsr0: entered promiscuous mode
[  168.879755][ T5853] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  169.036773][ T5853] usb 4-1: Using ep0 maxpacket: 32
[  169.052263][ T5853] usb 4-1: config 0 has an invalid interface number: 252 but max is 0
[  169.076741][ T5853] usb 4-1: config 0 has no interface number 0
[  169.086674][ T5853] usb 4-1: config 0 interface 252 has no altsetting 0
[  169.109388][ T5853] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=aa.f8
[  169.125654][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.147988][ T5853] usb 4-1: Product: syz
[  169.152210][ T5853] usb 4-1: Manufacturer: syz
[  169.163116][ T5853] usb 4-1: SerialNumber: syz
[  169.177801][ T8670] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  169.204345][ T5853] usb 4-1: config 0 descriptor??
[  169.212295][ T5853] pcwd_usb: The device isn't a Human Interface Device
[  169.433074][ T5853] usb 4-1: USB disconnect, device number 10
[  169.863419][ T8698] veth1_to_team: entered promiscuous mode
[  169.882584][ T8697] veth1_to_team: left promiscuous mode
[  170.487650][ T5853] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  170.662390][ T5853] usb 7-1: Using ep0 maxpacket: 16
[  170.712328][ T5853] usb 7-1: config 1 has an invalid interface number: 65 but max is 1
[  170.722052][ T5853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.741178][ T5853] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  170.754851][ T5853] usb 7-1: config 1 has no interface number 2
[  170.765721][ T5853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.786741][ T5853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.804265][ T5853] usb 7-1: config 1 interface 65 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  170.827414][ T5853] usb 7-1: config 1 interface 65 has no altsetting 0
[  170.874895][ T5853] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  170.894553][ T5853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.913189][ T5853] usb 7-1: Product: syz
[  170.929009][ T5853] usb 7-1: Manufacturer: syz
[  170.938870][ T5853] usb 7-1: SerialNumber: syz
[  170.960235][ T5853] usb 7-1: selecting invalid altsetting 1
[  171.164271][ T5853] cdc_ncm 7-1:1.0: bind() failure
[  171.177472][ T5853] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  171.184317][ T5853] cdc_ncm 7-1:1.1: bind() failure
[  171.215677][ T5853] cdc_mbim 7-1:1.65: probe with driver cdc_mbim failed with error -71
[  171.229353][ T5853] usb 7-1: USB disconnect, device number 3
[  171.740397][ T8780] bridge0: port 3(vlan2) entered blocking state
[  171.757608][ T8780] bridge0: port 3(vlan2) entered disabled state
[  171.772660][ T8780] vlan2: entered allmulticast mode
[  171.779618][ T8780] dummy0: entered allmulticast mode
[  171.794475][ T8780] vlan2: entered promiscuous mode
[  171.800984][ T8780] dummy0: entered promiscuous mode
[  171.932400][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'.
[  171.947332][ T8791] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.965089][ T8791] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.981748][ T8791] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.992873][ T8791] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.027007][ T5890] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  172.188966][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.219640][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.245468][ T5890] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  172.265790][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.288829][ T5890] usb 6-1: config 0 descriptor??
[  172.678543][ T8803] loop5: detected capacity change from 0 to 7
[  172.711255][ T5890] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0
[  172.716396][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read
[  172.724649][ T5890] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0
[  172.746787][ T5890] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000E/input/input19
[  172.770364][ T8806] Buffer I/O error on dev loop5, logical block 0, async page read
[  172.797752][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read
[  172.811002][ T5890] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  172.826586][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read
[  172.835583][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read
[  172.846328][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read
[  172.855044][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read
[  172.876985][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read
[  172.907732][ T8803] ldm_validate_partition_table(): Disk read failed.
[  172.932246][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read
[  172.948569][   T47] usb 6-1: USB disconnect, device number 9
[  172.952668][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read
[  172.982786][ T8803] Dev loop5: unable to read RDB block 0
[  172.999930][ T8803]  loop5: unable to read partition table
[  173.016661][ T8803] loop5: partition table beyond EOD, truncated
[  173.022861][ T8803] loop_reread_partitions: partition scan of loop5 (�被x������ڬ��dƤ����ݡ�����
[  173.022861][ T8803] ) failed (rc=-5)
[  173.136696][ T5853] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  173.300043][ T5853] usb 4-1: Using ep0 maxpacket: 32
[  173.319601][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.341073][ T5853] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  173.358153][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.378727][ T5853] usb 4-1: config 0 descriptor??
[  173.398532][ T5853] hub 4-1:0.0: USB hub found
[  173.605681][ T5853] hub 4-1:0.0: 1 port detected
[  173.820638][   T29] audit: type=1326 audit(1732423844.373:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8832 comm="syz.2.1259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453417e819 code=0x0
[  174.431502][ T5853] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  174.620171][   T29] audit: type=1400 audit(1732423845.173:107): lsm=SMACK fn=smack_inode_set_acl action=denied subject="w" object="_" requested=w pid=8854 comm="syz.5.1268" name="145" dev="tmpfs" ino=754
[  174.621093][ T8857] input: syz1 as /devices/virtual/input/input20
[  175.017273][ T5934] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  175.201202][ T5934] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  175.216826][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.230375][   T53] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  175.246811][ T3073] usb 4-1: USB disconnect, device number 11
[  175.266573][ T5934] usb 3-1: config 0 descriptor??
[  175.683724][ T5934] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  175.891627][ T8913] sctp: [Deprecated]: syz.6.1292 (pid 8913) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.891627][ T8913] Use struct sctp_sack_info instead
[  176.085458][ T5934] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  176.107874][ T5934] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22
[  176.213662][ T8926] loop6: detected capacity change from 0 to 1
[  176.226074][ T8926] Dev loop6: unable to read RDB block 1
[  176.232482][ T8926]  loop6: unable to read partition table
[  176.238646][ T8926] loop6: partition table beyond EOD, truncated
[  176.244983][ T8926] loop_reread_partitions: partition scan of loop6 (�被x������ڬ��dƤ����ݡ�����
[  176.244983][ T8926] ) failed (rc=-5)
[  176.293742][ T5934] usb 3-1: USB disconnect, device number 11
[  176.733869][ T8949] loop2: detected capacity change from 0 to 7
[  176.742243][ T8949] Dev loop2: unable to read RDB block 7
[  176.749268][ T8949]  loop2: unable to read partition table
[  176.755156][ T8949] loop2: partition table beyond EOD, truncated
[  176.762943][ T8949] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  176.776969][ T5915] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  176.847154][ T8954] loop2: detected capacity change from 0 to 7
[  176.855820][ T8954] Dev loop2: unable to read RDB block 7
[  176.865660][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1312'.
[  176.866639][ T8954]  loop2: unable to read partition table
[  176.886018][ T8954] loop2: partition table beyond EOD, truncated
[  176.892697][ T8954] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  176.958206][ T5915] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  176.980543][ T5915] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  177.005125][ T5915] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  177.027116][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.053502][ T8939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  177.087391][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  177.302554][ T5915] usb 4-1: USB disconnect, device number 12
[  177.406759][ T5923] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  177.576714][ T5923] usb 6-1: Using ep0 maxpacket: 8
[  177.588765][ T5923] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  177.613369][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  177.626343][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.635240][ T5923] usb 6-1: Product: syz
[  177.639780][ T5923] usb 6-1: Manufacturer: syz
[  177.645103][ T5923] usb 6-1: SerialNumber: syz
[  177.736582][ T3073] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  177.922381][ T3073] usb 7-1: Using ep0 maxpacket: 16
[  177.968774][ T3073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.980223][ T3073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.996656][ T3073] usb 7-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  178.005819][ T3073] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.031995][ T8996] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  178.047480][ T3073] usb 7-1: config 0 descriptor??
[  178.466046][ T3073] razer 0003:1532:011B.000F: unknown main item tag 0x0
[  178.473290][ T3073] razer 0003:1532:011B.000F: unknown main item tag 0x0
[  178.488750][ T3073] razer 0003:1532:011B.000F: unknown main item tag 0x0
[  178.516360][ T3073] razer 0003:1532:011B.000F: unknown main item tag 0x0
[  178.536798][ T3073] razer 0003:1532:011B.000F: unknown main item tag 0x0
[  178.678921][ T3073] razer 0003:1532:011B.000F: failed to enable macro keys: -71
[  178.707036][ T3073] razer 0003:1532:011B.000F: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.6-1/input0
[  178.720535][ T5923] cdc_ncm 6-1:1.0: bind() failure
[  178.736601][ T5923] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[  178.747006][ T3073] usb 7-1: USB disconnect, device number 4
[  178.756639][ T5923] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  178.786242][ T5923] usbtest 6-1:1.1: probe with driver usbtest failed with error -71
[  178.806611][ T5923] usb 6-1: USB disconnect, device number 10
[  179.279457][ T9039] tipc: Enabled bearer <udp:syz2>, priority 10
[  179.736938][ T5890] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  179.910906][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  179.926113][ T5890] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  179.950867][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.959298][ T5890] usb 7-1: Product: syz
[  179.963503][ T5890] usb 7-1: Manufacturer: syz
[  179.968397][ T5890] usb 7-1: SerialNumber: syz
[  180.026602][ T5890] usb 7-1: config 0 descriptor??
[  180.038084][ T5890] gm12u320 7-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8
[  180.047611][ T5890] gm12u320 7-1:0.0: probe with driver gm12u320 failed with error -5
[  180.058441][ T5890] usb-storage 7-1:0.0: USB Mass Storage device detected
[  180.072238][ T5890] usb-storage 7-1:0.0: device ignored
[  180.265322][ T5915] usb 7-1: USB disconnect, device number 5
[  180.279520][ T3073] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  180.436829][ T3073] usb 6-1: Using ep0 maxpacket: 32
[  180.450602][ T3073] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  180.462646][ T3073] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  180.473751][ T3073] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  180.488118][ T3073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  180.498510][ T3073] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  180.509510][ T3073] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  180.523651][ T3073] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  180.533452][ T3073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.544274][ T3073] usb 6-1: config 0 descriptor??
[  180.769524][ T3073] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  181.024505][ T5916] usb 6-1: USB disconnect, device number 11
[  181.036153][ T5916] usblp0: removed
[  181.139551][ T5890] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  181.296965][ T5890] usb 5-1: Using ep0 maxpacket: 32
[  181.319176][ T5890] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  181.342654][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.358311][ T5890] usb 5-1: config 0 descriptor??
[  181.456916][ T5915] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  181.569407][ T5890] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  181.594346][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  181.614747][ T5890] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  181.626657][ T5915] usb 7-1: Using ep0 maxpacket: 32
[  181.634453][ T5890] usb 5-1: media controller created
[  181.649928][ T5915] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  181.674557][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.689315][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  181.698273][ T5915] usb 7-1: Product: syz
[  181.702485][ T5915] usb 7-1: Manufacturer: syz
[  181.707932][ T5915] usb 7-1: SerialNumber: syz
[  181.720487][ T5915] usb 7-1: config 0 descriptor??
[  181.862476][ T9137] wireguard0: entered promiscuous mode
[  181.883581][ T9137] wireguard0: entered allmulticast mode
[  182.155912][ T5915] airspy 7-1:0.0: Board ID: 00
[  182.166723][ T5915] airspy 7-1:0.0: Firmware version: 
[  182.428203][ T5890] az6027: usb out operation failed. (-71)
[  182.434509][ T5890] stb0899_attach: Driver disabled by Kconfig
[  182.446884][ T5890] az6027: no front-end attached
[  182.446884][ T5890] 
[  182.456676][ T5890] az6027: usb out operation failed. (-71)
[  182.462485][ T5890] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  182.475749][ T9164] team0: entered promiscuous mode
[  182.481234][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21
[  182.484434][ T9164] team_slave_0: entered promiscuous mode
[  182.504804][ T5890] dvb-usb: schedule remote query interval to 400 msecs.
[  182.504803][ T9164] team_slave_1: entered promiscuous mode
[  182.504832][ T5890] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  182.548842][ T5890] usb 5-1: USB disconnect, device number 12
[  182.573068][ T9165] vlan1: entered promiscuous mode
[  182.587841][ T9165] team0: Port device vlan1 added
[  182.606616][ T9163] team0: left promiscuous mode
[  182.611444][ T9163] team_slave_0: left promiscuous mode
[  182.622376][ T9163] team_slave_1: left promiscuous mode
[  182.634062][ T9163] vlan1: left promiscuous mode
[  182.652395][ T5890] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  182.756652][ T5915] airspy 7-1:0.0: usb_control_msg() failed -71 request 12
[  182.766435][ T5915] airspy 7-1:0.0: Registered as swradio24
[  182.777325][ T5915] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  182.801654][ T5915] usb 7-1: USB disconnect, device number 6
[  184.326319][ T9223] input: syz1 as /devices/virtual/input/input22
[  184.336144][ T9223] input: failed to attach handler leds to device input22, error: -6
[  184.481147][ T9226] sctp: [Deprecated]: syz.4.1426 (pid 9226) Use of int in max_burst socket option.
[  184.481147][ T9226] Use struct sctp_assoc_value instead
[  184.743456][ T5842] Bluetooth: hci5: sending frame failed (-49)
[  184.752056][ T9234] Bluetooth: hci5: Frame reassembly failed (-84)
[  184.760716][   T55] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  185.201223][ T9249] sctp: [Deprecated]: syz.6.1436 (pid 9249) Use of int in max_burst socket option deprecated.
[  185.201223][ T9249] Use struct sctp_assoc_value instead
[  185.430199][ T9264] sctp: [Deprecated]: syz.4.1443 (pid 9264) Use of struct sctp_assoc_value in delayed_ack socket option.
[  185.430199][ T9264] Use struct sctp_sack_info instead
[  185.657117][ T9268] delete_channel: no stack
[  185.958440][ T9288] syzkaller1: entered promiscuous mode
[  185.963978][ T9288] syzkaller1: entered allmulticast mode
[  186.086623][ T5890] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  186.171386][ T9292] sctp: [Deprecated]: syz.6.1456 (pid 9292) Use of int in max_burst socket option.
[  186.171386][ T9292] Use struct sctp_assoc_value instead
[  186.256706][ T5890] usb 6-1: Using ep0 maxpacket: 32
[  186.268950][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  186.296948][ T5890] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  186.316581][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.324640][ T5890] usb 6-1: Product: syz
[  186.345534][ T5890] usb 6-1: Manufacturer: syz
[  186.355915][ T5890] usb 6-1: SerialNumber: syz
[  186.370527][ T5890] usb 6-1: config 0 descriptor??
[  186.378231][ T5890] hub 6-1:0.0: bad descriptor, ignoring hub
[  186.384461][ T5890] hub 6-1:0.0: probe with driver hub failed with error -5
[  186.400649][ T5890] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23
[  186.416349][ T5890] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  186.467924][ T5890] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -8
[  186.638995][ T9321] rtc_cmos 00:00: Alarms can be up to one day in the future
[  186.726891][ T5923] usb 6-1: USB disconnect, device number 12
[  187.381219][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future
[  187.406929][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future
[  187.415187][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future
[  187.454146][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future
[  187.482260][ T5923] rtc rtc0: __rtc_set_alarm: err=-22
[  187.532890][ T9371] vlan2: entered promiscuous mode
[  187.544618][ T9371] vlan2: entered allmulticast mode
[  188.074401][ T9389] loop6: detected capacity change from 0 to 524287999
[  188.100946][    C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  188.117317][    C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  188.135259][   T35] loop: Write error at byte offset 1, length 4096.
[  188.148181][    C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  188.157741][    C1] buffer_io_error: 5 callbacks suppressed
[  188.157757][    C1] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  188.450202][ T9408] tipc: Enabled bearer <eth:geneve1>, priority 10
[  188.764925][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'.
[  188.921100][   T64] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.080630][   T64] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.218452][   T64] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.313659][   T64] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.505913][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.516071][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.524548][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.534370][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.544804][   T64] bridge_slave_1: left allmulticast mode
[  189.557287][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  189.565496][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.579182][   T64] bridge_slave_1: left promiscuous mode
[  189.609747][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.671922][   T64] bridge_slave_0: left allmulticast mode
[  189.682883][   T64] bridge_slave_0: left promiscuous mode
[  189.704538][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.107310][ T5916] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  190.236766][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.249386][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.259273][   T64] bond0 (unregistering): Released all slaves
[  190.273102][ T5916] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.287914][ T9458] syzkaller1: entered promiscuous mode
[  190.298551][ T9458] syzkaller1: entered allmulticast mode
[  190.305149][ T5916] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  190.356153][ T5916] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  190.377985][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  190.386211][ T5916] usb 7-1: SerialNumber: syz
[  190.611158][ T5916] usb 7-1: 0:2 : does not exist
[  190.689397][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.699235][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.700203][ T5916] usb 7-1: USB disconnect, device number 7
[  190.734171][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.754048][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.813771][   T64] veth1_macvtap: left promiscuous mode
[  190.834620][   T64] veth0_macvtap: left promiscuous mode
[  190.847074][   T64] veth1_vlan: left promiscuous mode
[  190.852418][   T64] veth0_vlan: left promiscuous mode
[  191.309637][ T5853] IPVS: starting estimator thread 0...
[  191.403277][ T9493] IPVS: using max 26 ests per chain, 62400 per kthread
[  191.480361][   T64] team0 (unregistering): Port device vlan1 removed
[  191.629369][ T5842] Bluetooth: hci0: command tx timeout
[  191.930204][ T9521] mmap: syz.6.1556 (9521): VmData 37453824 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data.
[  192.229492][   T64] team0 (unregistering): Port device team_slave_1 removed
[  192.287509][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'.
[  192.364678][   T64] team0 (unregistering): Port device team_slave_0 removed
[  193.254620][ T9561] nbd: device at index 3 is going down
[  193.436292][   T29] audit: type=1326 audit(1732423864.985:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000
[  193.476454][   T29] audit: type=1326 audit(1732423864.985:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000
[  193.566561][   T29] audit: type=1326 audit(1732423865.025:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f088477e819 code=0x7ffc0000
[  193.569091][ T9568] loop2: detected capacity change from 0 to 7
[  193.611269][ T9568] Dev loop2: unable to read RDB block 7
[  193.622283][ T9568]  loop2: unable to read partition table
[  193.628726][ T9568] loop2: partition table beyond EOD, truncated
[  193.633248][   T29] audit: type=1326 audit(1732423865.025:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000
[  193.643682][ T9568] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  193.670023][ T9439] chnl_net:caif_netlink_parms(): no params data found
[  193.695160][ T9524] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  193.697590][   T29] audit: type=1326 audit(1732423865.025:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000
[  193.729688][ T5842] Bluetooth: hci0: command tx timeout
[  193.799394][   T29] audit: type=1326 audit(1732423865.035:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f088477e819 code=0x7ffc0000
[  193.856960][   T29] audit: type=1326 audit(1732423865.035:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000
[  193.879174][   T29] audit: type=1326 audit(1732423865.035:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000
[  193.922400][   T29] audit: type=1326 audit(1732423865.035:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f088477d1b0 code=0x7ffc0000
[  194.046541][   T29] audit: type=1326 audit(1732423865.035:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f088477d1b0 code=0x7ffc0000
[  194.176221][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.187236][ T9439] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.204761][ T9439] bridge_slave_0: entered allmulticast mode
[  194.217631][ T9439] bridge_slave_0: entered promiscuous mode
[  194.235439][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.246053][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.253828][ T9439] bridge_slave_1: entered allmulticast mode
[  194.283478][ T9439] bridge_slave_1: entered promiscuous mode
[  194.368390][ T9439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.388966][ T9439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.452766][ T9439] team0: Port device team_slave_0 added
[  194.463572][ T9439] team0: Port device team_slave_1 added
[  194.472273][   T64] IPVS: stop unused estimator thread 0...
[  194.478417][ T5934] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  194.534389][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.551985][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.580892][ T5853] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  194.597084][ T9439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.608879][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.615177][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  194.631141][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.649044][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.658212][ T5934] usb 3-1: Using ep0 maxpacket: 8
[  194.696118][ T9439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.708782][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  194.729925][ T5934] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  194.747323][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.761129][ T5934] usb 3-1: config 0 descriptor??
[  194.779475][ T5853] usb 7-1: Using ep0 maxpacket: 8
[  194.791652][ T5853] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  194.804914][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.816034][ T5853] usb 7-1: config 0 descriptor??
[  194.830364][ T9439] hsr_slave_0: entered promiscuous mode
[  194.846957][ T9439] hsr_slave_1: entered promiscuous mode
[  194.855137][ T9439] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.863114][ T9439] Cannot create hsr debugfs directory
[  194.903675][ T9613] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  195.015298][ T5934] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  195.326176][ T9439] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  195.341049][ T9439] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  195.350940][ T9439] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  195.363035][ T9439] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  195.424849][ T5916] usb 3-1: USB disconnect, device number 12
[  195.437198][ T5916] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected
[  195.472984][ T9439] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.496996][ T9439] 8021q: adding VLAN 0 to HW filter on device team0
[  195.522172][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.529374][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.544531][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.551739][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.786862][ T5839] Bluetooth: hci0: command tx timeout
[  195.818123][ T9439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.850662][ T5853] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  195.881652][ T5853] asix 7-1:0.0: probe with driver asix failed with error -71
[  195.922485][ T5853] usb 7-1: USB disconnect, device number 8
[  196.135869][ T9439] veth0_vlan: entered promiscuous mode
[  196.164198][ T9439] veth1_vlan: entered promiscuous mode
[  196.219741][ T9439] veth0_macvtap: entered promiscuous mode
[  196.230731][ T9439] veth1_macvtap: entered promiscuous mode
[  196.250197][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.261352][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.277827][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.298414][ T9656] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1608'.
[  196.308574][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.319402][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.330099][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'.
[  196.340715][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.351655][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'.
[  196.361426][ T9439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.391626][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.422900][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.433284][ T5916] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  196.451259][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.466543][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.481696][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.495858][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.518691][ T9439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.544033][ T9439] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.558429][ T9439] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.568205][ T9439] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.577404][ T9439] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.598014][ T5916] usb 5-1: Using ep0 maxpacket: 32
[  196.608681][ T5916] usb 5-1: config 0 has an invalid interface number: 219 but max is 0
[  196.628329][ T5916] usb 5-1: config 0 has no interface number 0
[  196.652189][ T5916] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  196.682171][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  196.688670][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  196.724745][ T5916] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  196.739531][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.747440][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.755001][ T5916] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  196.772388][ T5916] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  196.783363][ T5916] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  196.793598][ T5916] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  196.815431][ T5916] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  196.824994][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.833491][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.841229][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.850272][ T5916] usb 5-1: Product: syz
[  196.856150][ T5916] usb 5-1: Manufacturer: syz
[  196.861041][ T5916] usb 5-1: SerialNumber: syz
[  196.868117][ T5916] usb 5-1: config 0 descriptor??
[  196.874792][ T9653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  196.886168][ T9653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  197.017148][ T5915] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  197.085367][ T9676] capability: warning: `syz.2.1617' uses 32-bit capabilities (legacy support in use)
[  197.108595][ T5916] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz)
[  197.202957][ T5915] usb 7-1: config 0 has an invalid interface number: 62 but max is 0
[  197.216613][ T5915] usb 7-1: config 0 has no interface number 0
[  197.233706][ T5915] usb 7-1: config 0 interface 62 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  197.266139][ T5915] usb 7-1: New USB device found, idVendor=951f, idProduct=a083, bcdDevice=31.b8
[  197.278119][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.286239][ T5915] usb 7-1: Product: syz
[  197.296411][ T5915] usb 7-1: Manufacturer: syz
[  197.301825][ T5915] usb 7-1: SerialNumber: syz
[  197.309873][ T5915] usb 7-1: config 0 descriptor??
[  197.332210][ T5916] etas_es58x 5-1:0.219: could not retrieve the product info string
[  197.532957][ T5915] usb 7-1: USB disconnect, device number 9
[  197.564196][ T5916] usb 5-1: USB disconnect, device number 13
[  197.573642][ T5916] etas_es58x 5-1:0.219: Disconnecting syz syz
[  197.800792][ T9700] sctp: [Deprecated]: syz.3.1628 (pid 9700) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.800792][ T9700] Use struct sctp_sack_info instead
[  197.930321][ T9706] netlink: 'syz.3.1631': attribute type 1 has an invalid length.
[  198.166088][ T3482] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.466344][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  198.504711][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  198.515438][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  198.526198][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  198.534342][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  198.542759][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  198.822048][ T9724] chnl_net:caif_netlink_parms(): no params data found
[  198.966081][ T9724] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.987147][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.994489][ T9724] bridge_slave_0: entered allmulticast mode
[  199.006371][ T9724] bridge_slave_0: entered promiscuous mode
[  199.020523][ T9724] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.031279][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.057452][ T9724] bridge_slave_1: entered allmulticast mode
[  199.064678][ T9724] bridge_slave_1: entered promiscuous mode
[  199.095863][ T9724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.109451][ T9724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.157014][ T9724] team0: Port device team_slave_0 added
[  199.167090][ T5916] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  199.180623][ T3482] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.197188][ T9724] team0: Port device team_slave_1 added
[  199.206992][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  199.224952][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.232256][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.266647][ T9724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.285311][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.294588][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.320562][    C1] vkms_vblank_simulate: vblank timer overrun
[  199.337188][ T9724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.358999][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.376342][ T5916] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  199.393581][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  199.400500][ T5916] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  199.413321][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.425654][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.436055][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  199.451018][ T5915] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  199.461292][ T5916] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  199.464800][ T9724] hsr_slave_0: entered promiscuous mode
[  199.470517][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.470568][ T5916] usb 3-1: Product: syz
[  199.470583][ T5916] usb 3-1: Manufacturer: syz
[  199.470598][ T5916] usb 3-1: SerialNumber: syz
[  199.472353][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.509513][ T9724] hsr_slave_1: entered promiscuous mode
[  199.517410][ T5915] usb 4-1: config 0 descriptor??
[  199.528447][ T9724] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.536059][ T9724] Cannot create hsr debugfs directory
[  199.570245][ T3482] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.644559][ T3482] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.890435][ T3482] bridge_slave_1: left allmulticast mode
[  199.896156][ T3482] bridge_slave_1: left promiscuous mode
[  199.912431][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.938105][ T3482] bridge_slave_0: left allmulticast mode
[  199.943803][ T3482] bridge_slave_0: left promiscuous mode
[  199.963643][ T5915] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max
[  199.973030][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.020797][ T5915] microsoft 0003:045E:07DA.0010: No inputs registered, leaving
[  200.048370][ T5915] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  200.061085][ T5915] microsoft 0003:045E:07DA.0010: no inputs found
[  200.068089][ T5915] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway
[  200.206877][ T5842] Bluetooth: hci1: command tx timeout
[  200.300981][ T5915] usb 4-1: USB disconnect, device number 13
[  200.590539][ T5842] Bluetooth: hci0: command tx timeout
[  200.609619][ T5916] cdc_ncm 3-1:1.0: bind() failure
[  200.630055][ T5916] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  200.649630][ T5916] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  200.659174][ T5916] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  200.672507][ T5916] usb 3-1: USB disconnect, device number 13
[  200.846670][   T47] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  200.890762][ T3482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.901909][ T3482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.930946][ T3482] bond0 (unregistering): Released all slaves
[  201.006255][   T47] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 384
[  201.017340][   T47] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  201.042468][   T47] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  201.052180][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  201.060512][   T47] usb 7-1: SerialNumber: syz
[  201.075842][ T9780] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  201.287241][ T9780] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  201.470209][ T3482] hsr_slave_0: left promiscuous mode
[  201.478698][ T3482] hsr_slave_1: left promiscuous mode
[  201.491272][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.506986][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.525460][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.541158][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.592319][ T3482] veth1_macvtap: left promiscuous mode
[  201.602767][ T3482] veth0_macvtap: left promiscuous mode
[  201.615531][ T3482] veth1_vlan: left promiscuous mode
[  201.626783][ T3482] veth0_vlan: left promiscuous mode
[  201.701270][   T47] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[  201.914861][   T47] usb 7-1: USB disconnect, device number 10
[  201.966901][ T5916] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  202.149206][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  202.171028][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.176624][ T3073] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  202.196284][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  202.218131][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.245307][ T5916] usb 3-1: config 0 descriptor??
[  202.259678][ T5916] hub 3-1:0.0: USB hub found
[  202.352688][ T3073] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  202.363442][ T3073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.384124][ T3073] usb 5-1: config 0 descriptor??
[  202.401998][ T3073] cp210x 5-1:0.0: cp210x converter detected
[  202.423238][ T3482] team0 (unregistering): Port device team_slave_1 removed
[  202.460723][ T5916] hub 3-1:0.0: 1 port detected
[  202.496028][ T3482] team0 (unregistering): Port device team_slave_0 removed
[  202.565857][ T9809] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  202.666814][   T55] Bluetooth: hci0: command tx timeout
[  202.746144][ T9813] [U] 
[  202.832242][ T3073] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  202.834467][ T9806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.859404][ T9806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.871456][ T5916] usb 3-1: USB disconnect, device number 14
[  202.900520][ T3073] usb 5-1: cp210x converter now attached to ttyUSB0
[  202.933553][   T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  203.123065][ T5923] usb 5-1: USB disconnect, device number 14
[  203.132159][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  203.141146][   T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  203.167200][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  203.189602][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  203.209468][   T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  203.227513][ T5923] cp210x 5-1:0.0: device disconnected
[  203.245498][   T47] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  203.269677][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.289432][   T47] usb 4-1: config 0 descriptor??
[  203.349831][ T9724] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  203.364147][ T9724] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  203.407925][ T9724] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  203.427651][ T9724] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  203.575270][ T9724] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.594333][ T9724] 8021q: adding VLAN 0 to HW filter on device team0
[  203.606185][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.613389][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.681931][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.689131][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.711876][ T9830] veth0_to_bond: entered promiscuous mode
[  203.722347][   T47] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving
[  203.732226][ T9830] macsec1: entered promiscuous mode
[  203.739790][   T47] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  203.753693][ T9830] macsec1: entered allmulticast mode
[  203.764620][ T9830] veth0_to_bond: entered allmulticast mode
[  203.781233][ T9830] veth0_to_bond: left allmulticast mode
[  203.810316][ T9830] veth0_to_bond: left promiscuous mode
[  204.020408][ T5916] usb 4-1: USB disconnect, device number 14
[  204.285166][ T9724] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.684813][ T9861] syzkaller1: entered promiscuous mode
[  204.718361][ T9861] syzkaller1: entered allmulticast mode
[  204.746667][ T5842] Bluetooth: hci0: command 0x040f tx timeout
[  204.897435][ T9724] veth0_vlan: entered promiscuous mode
[  204.932572][ T9724] veth1_vlan: entered promiscuous mode
[  204.963996][ T9724] veth0_macvtap: entered promiscuous mode
[  204.974102][ T9724] veth1_macvtap: entered promiscuous mode
[  205.008338][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.021759][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.031780][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.042322][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.052484][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.063016][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.074067][ T9724] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.101978][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.113358][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.130687][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.144079][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.158196][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.169786][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.185940][ T9724] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.241287][ T9724] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.256568][ T9724] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.265330][ T9724] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.274412][ T9724] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.428100][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.436176][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.555927][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.577893][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.787531][ T5890] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  205.979295][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  205.991108][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  206.010347][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  206.031172][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  206.051633][ T5890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  206.078050][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.089274][ T5890] usb 4-1: config 0 descriptor??
[  206.095928][ T9887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  206.515056][ T5890] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd
[  206.538734][ T5890] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  206.555314][ T5890] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  206.636652][ T5916] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  206.789400][ T5916] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  206.810167][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  206.872338][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  206.886876][ T5890] usb 4-1: USB disconnect, device number 15
[  206.926629][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  206.967051][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  206.990347][ T5916] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  207.016774][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.036954][ T5916] usb 5-1: config 0 descriptor??
[  207.045772][ T9914] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  207.047545][ T1002] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.482433][ T5916] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd
[  207.514287][ T5916] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  207.545373][ T5916] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  207.698977][ T1002] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.739860][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  207.750452][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  207.759479][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  207.768648][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  207.779526][   T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  207.788418][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  207.808940][ T5916] usb 5-1: USB disconnect, device number 15
[  208.009365][ T1002] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.129837][ T1002] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.166589][   T47] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  208.261452][ T9961] chnl_net:caif_netlink_parms(): no params data found
[  208.352632][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'.
[  208.361706][   T47] usb 4-1: Using ep0 maxpacket: 32
[  208.382341][   T47] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  208.406553][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.457067][   T47] usb 4-1: config 0 descriptor??
[  208.490785][   T47] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  208.586683][ T9993] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1727'.
[  208.714546][T10003] loop6: detected capacity change from 0 to 1
[  208.729421][T10003] Dev loop6: unable to read RDB block 1
[  208.743483][T10003]  loop6: unable to read partition table
[  208.755165][T10003] loop6: partition table beyond EOD, truncated
[  208.774151][T10003] loop_reread_partitions: partition scan of loop6 (�被x������ڬ��dƤ����ݡ�����
[  208.774151][T10003] ) failed (rc=-5)
[  209.100138][T10020] Bluetooth: MGMT ver 1.23
[  209.110447][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.130223][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.145109][ T9961] bridge_slave_0: entered allmulticast mode
[  209.153298][ T9961] bridge_slave_0: entered promiscuous mode
[  209.167176][ T1002] bridge_slave_1: left allmulticast mode
[  209.177500][ T1002] bridge_slave_1: left promiscuous mode
[  209.190072][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.220613][ T1002] bridge_slave_0: left allmulticast mode
[  209.245924][ T1002] bridge_slave_0: left promiscuous mode
[  209.254613][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.500703][   T47] gspca_vc032x: reg_w err -71
[  209.515437][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.531668][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.544541][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.565863][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.573422][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.594801][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.635447][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.651709][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.659236][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.664562][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.676782][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.683268][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.693413][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.700112][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.705560][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.715668][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.721750][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.754688][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  209.776620][   T47] gspca_vc032x: Unknown sensor...
[  209.781749][   T47] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  209.831245][   T47] usb 4-1: USB disconnect, device number 16
[  209.866667][ T5842] Bluetooth: hci0: command tx timeout
[  210.145641][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.200660][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.223467][ T1002] bond0 (unregistering): Released all slaves
[  210.241155][T10044] input: syz0 as /devices/virtual/input/input28
[  210.248706][ T9998] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1727'.
[  210.270824][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.316800][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.324921][ T9961] bridge_slave_1: entered allmulticast mode
[  210.367318][ T9961] bridge_slave_1: entered promiscuous mode
[  210.529717][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.587251][   T53] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  210.609936][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.637007][ T5886] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  210.727880][ T9961] team0: Port device team_slave_0 added
[  210.786843][ T5886] usb 3-1: Using ep0 maxpacket: 32
[  210.807810][ T5886] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  210.840172][ T5886] usb 3-1: config 0 has no interface number 0
[  210.861614][ T5886] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  210.883697][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.912471][ T9961] team0: Port device team_slave_1 added
[  210.915488][ T5886] usb 3-1: Product: syz
[  210.926384][ T5886] usb 3-1: Manufacturer: syz
[  210.936784][ T5886] usb 3-1: SerialNumber: syz
[  210.947293][ T5886] usb 3-1: config 0 descriptor??
[  210.955802][ T5886] smsc95xx v2.0.0
[  211.003579][ T1002] hsr_slave_0: left promiscuous mode
[  211.039703][ T1002] hsr_slave_1: left promiscuous mode
[  211.073382][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.088578][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.107249][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.123810][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.184066][ T1002] veth1_macvtap: left promiscuous mode
[  211.193312][ T1002] veth0_macvtap: left promiscuous mode
[  211.209219][ T1002] veth1_vlan: left promiscuous mode
[  211.221992][ T1002] veth0_vlan: left promiscuous mode
[  211.382036][ T5886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  211.416922][ T5886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  211.859618][ T5886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  211.881427][ T5886] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  211.915569][ T5886] usb 3-1: USB disconnect, device number 15
[  211.952829][ T5842] Bluetooth: hci0: command tx timeout
[  212.175543][ T1002] team0 (unregistering): Port device team_slave_1 removed
[  212.240915][ T1002] team0 (unregistering): Port device team_slave_0 removed
[  212.807070][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.816842][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.850174][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.863722][T10076] netlink: 'syz.4.1748': attribute type 12 has an invalid length.
[  212.885218][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.915433][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.963772][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.041331][ T3073] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  213.071752][ T9961] hsr_slave_0: entered promiscuous mode
[  213.085747][ T9961] hsr_slave_1: entered promiscuous mode
[  213.094219][ T9961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.117879][ T9961] Cannot create hsr debugfs directory
[  213.226705][ T3073] usb 3-1: Using ep0 maxpacket: 32
[  213.254309][ T3073] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  213.276057][ T3073] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  213.290251][ T3073] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  213.303347][ T3073] usb 3-1: config 1 has no interface number 0
[  213.316953][ T3073] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  213.339672][ T3073] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  213.361503][ T3073] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  213.371170][ T3073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.403075][ T3073] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  213.666120][ T9961] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  213.685085][ T9961] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  213.695361][ T9961] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  213.712219][ T9961] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  213.723681][T10135] netlink: 'syz.4.1764': attribute type 3 has an invalid length.
[  213.732025][T10135] netlink: 'syz.4.1764': attribute type 1 has an invalid length.
[  213.756940][T10135] netlink: 'syz.4.1764': attribute type 2 has an invalid length.
[  213.764721][T10135] netlink: 198060 bytes leftover after parsing attributes in process `syz.4.1764'.
[  213.855004][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.887435][ T9961] 8021q: adding VLAN 0 to HW filter on device team0
[  213.929708][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.936877][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.958003][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.965137][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.985613][ T3073] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  214.005967][T10145] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  214.012792][T10145] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  214.026970][ T5842] Bluetooth: hci0: command tx timeout
[  214.052262][T10148] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  214.064288][T10145] vhci_hcd vhci_hcd.0: Device attached
[  214.107398][T10151] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6)
[  214.113975][T10151] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  214.123606][T10151] vhci_hcd vhci_hcd.0: Device attached
[  214.155619][T10145] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5)
[  214.162184][T10145] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  214.206562][T10145] vhci_hcd vhci_hcd.0: Device attached
[  214.222542][T10151] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10)
[  214.229196][T10151] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  214.236962][ T5886] vhci_hcd: vhci_device speed not set
[  214.258212][T10151] vhci_hcd vhci_hcd.0: Device attached
[  214.300075][ T5886] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  214.311604][T10145] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(9)
[  214.318166][T10145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  214.356077][ T9961] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.373259][T10145] vhci_hcd vhci_hcd.0: Device attached
[  214.405066][ T3073] usb 3-1: USB disconnect, device number 16
[  214.406284][T10159] vhci_hcd: connection closed
[  214.411555][T10153] vhci_hcd: connection closed
[  214.416297][T10146] vhci_hcd: connection reset by peer
[  214.420626][ T3073] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  214.421304][T10156] vhci_hcd: connection closed
[  214.463985][   T35] vhci_hcd: stop threads
[  214.464995][T10162] vhci_hcd: connection closed
[  214.483729][   T35] vhci_hcd: release socket
[  214.514744][   T35] vhci_hcd: disconnect device
[  214.524816][   T35] vhci_hcd: stop threads
[  214.534065][   T35] vhci_hcd: release socket
[  214.544209][   T35] vhci_hcd: disconnect device
[  214.556919][   T35] vhci_hcd: stop threads
[  214.561206][   T35] vhci_hcd: release socket
[  214.567687][   T35] vhci_hcd: disconnect device
[  214.574857][   T35] vhci_hcd: stop threads
[  214.580660][   T35] vhci_hcd: release socket
[  214.585755][   T35] vhci_hcd: disconnect device
[  214.591484][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1772'.
[  214.605036][   T35] vhci_hcd: stop threads
[  214.614546][   T35] vhci_hcd: release socket
[  214.632847][   T35] vhci_hcd: disconnect device
[  214.825258][ T9961] veth0_vlan: entered promiscuous mode
[  214.851589][ T9961] veth1_vlan: entered promiscuous mode
[  214.916146][ T9961] veth0_macvtap: entered promiscuous mode
[  214.937601][ T9961] veth1_macvtap: entered promiscuous mode
[  214.995618][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.016590][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.026444][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.037126][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.052366][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.074416][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.095594][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.112451][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.119990][T10187] atomic_op ffff88803154c998 conn xmit_atomic 0000000000000000
[  215.123807][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.173270][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.189369][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.200539][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.214370][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.242090][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.272568][ T9961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.302470][ T9961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.326650][ T9961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.337884][T10195] loop2: detected capacity change from 0 to 7
[  215.348531][ T9961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.369039][T10195] Dev loop2: unable to read RDB block 7
[  215.374664][T10195]  loop2: unable to read partition table
[  215.391640][T10195] loop2: partition table beyond EOD, truncated
[  215.406759][T10195] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  215.478275][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.486134][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.530954][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.539735][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.759243][T10210] loop2: detected capacity change from 0 to 7
[  215.772967][T10210] Dev loop2: unable to read RDB block 7
[  215.778847][T10210]  loop2: unable to read partition table
[  215.785325][T10210] loop2: partition table beyond EOD, truncated
[  215.799987][T10210] loop_reread_partitions: partition scan of loop2 (�被) failed (rc=-5)
[  216.043226][T10221] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  216.245766][ T5923] IPVS: starting estimator thread 0...
[  216.262950][T10232] tipc: Started in network mode
[  216.300062][T10232] tipc: Node identity ac1414aa, cluster identity 4711
[  216.329714][T10232] tipc: Enabled bearer <udp:s>, priority 10
[  216.346705][T10233] IPVS: using max 23 ests per chain, 55200 per kthread
[  216.920052][T10264] vcan0: tx drop: invalid da for name 0x0000000000000003
[  216.995927][T10266] loop8: detected capacity change from 0 to 7
[  217.013996][T10266] Dev loop8: unable to read RDB block 7
[  217.020501][T10266]  loop8: unable to read partition table
[  217.030249][T10266] loop8: partition table beyond EOD, truncated
[  217.039211][T10266] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  217.039211][T10266] ) failed (rc=-5)
[  217.273950][ T3450] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.458782][ T3073] tipc: Node number set to 2886997162
[  218.326847][ T3450] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.373598][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  218.384032][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  218.394531][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  218.404311][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  218.412119][ T5153] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  218.434819][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  218.478109][ T3450] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.701658][ T3450] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.822225][T10287] chnl_net:caif_netlink_parms(): no params data found
[  218.866361][ T3450] bridge_slave_1: left allmulticast mode
[  218.872623][ T3450] bridge_slave_1: left promiscuous mode
[  218.880254][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.891640][ T3450] bridge_slave_0: left allmulticast mode
[  218.899826][ T3450] bridge_slave_0: left promiscuous mode
[  218.905576][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.424952][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.445067][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.455736][ T3450] bond0 (unregistering): Released all slaves
[  219.457042][ T5886] vhci_hcd: vhci_device speed not set
[  219.665900][T10287] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.673555][T10287] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.681842][T10287] bridge_slave_0: entered allmulticast mode
[  219.689273][T10287] bridge_slave_0: entered promiscuous mode
[  219.700727][T10287] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.711398][T10287] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.718669][T10287] bridge_slave_1: entered allmulticast mode
[  219.729841][T10287] bridge_slave_1: entered promiscuous mode
[  219.885620][T10287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.910235][T10287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.955739][ T3450] hsr_slave_0: left promiscuous mode
[  219.972462][ T3450] hsr_slave_1: left promiscuous mode
[  219.982985][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.996588][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.016528][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.026889][   T55] Bluetooth: hci0: command 0x1003 tx timeout
[  220.033373][ T5842] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  220.074413][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.216494][ T3450] veth1_macvtap: left promiscuous mode
[  220.238672][ T3450] veth0_macvtap: left promiscuous mode
[  220.246837][ T3450] veth1_vlan: left promiscuous mode
[  220.252165][ T3450] veth0_vlan: left promiscuous mode
[  220.434489][T10352] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  220.523114][ T5842] Bluetooth: hci5: command tx timeout
[  221.004458][ T3450] team0 (unregistering): Port device team_slave_1 removed
[  221.059070][ T3450] team0 (unregistering): Port device team_slave_0 removed
[  221.700386][T10287] team0: Port device team_slave_0 added
[  221.730424][T10287] team0: Port device team_slave_1 added
[  221.797719][T10287] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.804711][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.830626][    C0] vkms_vblank_simulate: vblank timer overrun
[  221.839560][T10287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.874698][T10287] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.900790][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.927294][T10287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.131562][T10287] hsr_slave_0: entered promiscuous mode
[  222.142778][T10287] hsr_slave_1: entered promiscuous mode
[  222.151663][T10287] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  222.166176][T10287] Cannot create hsr debugfs directory
[  222.346959][ T3073] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  222.508776][ T3073] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  222.525976][ T3073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.537577][ T3073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.547606][ T3073] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  222.566119][ T3073] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  222.574049][T10287] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  222.576907][ T3073] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  222.594225][ T5842] Bluetooth: hci5: command tx timeout
[  222.597898][T10287] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  222.610431][ T3073] usb 7-1: Manufacturer: syz
[  222.612951][T10287] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  222.624583][ T3073] usb 7-1: config 0 descriptor??
[  222.633712][T10287] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  222.735481][T10287] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.762301][T10287] 8021q: adding VLAN 0 to HW filter on device team0
[  222.781503][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.788671][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.809944][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.817131][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.876090][T10287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  222.892534][T10287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  223.040729][ T3073] appleir 0003:05AC:8243.0014: unknown main item tag 0x0
[  223.067594][ T3073] appleir 0003:05AC:8243.0014: No inputs registered, leaving
[  223.115897][ T3073] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[  223.144225][T10423] usb 7-1: USB disconnect, device number 11
[  223.158564][T10287] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.318858][T10432] binder: 10431:10432 ioctl c0306201 200001c0 returned -14
[  223.506327][T10287] veth0_vlan: entered promiscuous mode
[  223.538775][T10287] veth1_vlan: entered promiscuous mode
[  223.587995][T10287] veth0_macvtap: entered promiscuous mode
[  223.610169][T10287] veth1_macvtap: entered promiscuous mode
[  223.634794][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.659042][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.673492][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.684327][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.694337][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.705878][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.717488][T10287] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.732395][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.743065][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.753251][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.764585][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.774474][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.785038][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.796379][T10287] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.807830][T10287] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.816864][T10287] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.825592][T10287] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.834462][T10287] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.878886][ T3073] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  223.942493][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.984621][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.010997][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.020214][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.049791][ T3073] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  224.063476][ T3073] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  224.105335][ T3073] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  224.114622][ T3073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.123076][ T3073] usb 5-1: Product: syz
[  224.127510][ T3073] usb 5-1: Manufacturer: syz
[  224.132136][ T3073] usb 5-1: SerialNumber: syz
[  224.144509][ T3073] usb 5-1: config 0 descriptor??
[  224.150806][T10442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  224.158166][T10442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  224.326839][    T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  224.375072][T10442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  224.382854][T10442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  224.476976][    T8] usb 3-1: Using ep0 maxpacket: 32
[  224.485873][    T8] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  224.495086][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.503456][    T8] usb 3-1: Product: syz
[  224.508208][    T8] usb 3-1: Manufacturer: syz
[  224.512831][    T8] usb 3-1: SerialNumber: syz
[  224.519508][    T8] usb 3-1: config 0 descriptor??
[  224.934501][    T8] airspy 3-1:0.0: Board ID: 00
[  224.939527][    T8] airspy 3-1:0.0: Firmware version: 
[  225.195991][ T3073] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL
[  225.207857][ T3073] usb 5-1: USB disconnect, device number 16
[  225.335941][    T8] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e
[  225.344225][    T8] airspy 3-1:0.0: Registered as swradio24
[  225.350552][    T8] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  225.362141][    T8] usb 3-1: USB disconnect, device number 17
[  225.585607][ T3450] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.477908][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  226.487984][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  226.495827][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  226.505542][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  226.513276][   T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  226.520786][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  226.571813][ T3450] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.739070][T10477] smc: net device caif0 applied user defined pnetid SYZ2
[  226.889799][ T3450] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.935172][T10466] chnl_net:caif_netlink_parms(): no params data found
[  227.001047][ T3450] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.150548][T10466] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.167164][T10466] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.196850][T10466] bridge_slave_0: entered allmulticast mode
[  227.203911][T10466] bridge_slave_0: entered promiscuous mode
[  227.212243][T10466] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.219793][T10466] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.227417][T10466] bridge_slave_1: entered allmulticast mode
[  227.234406][T10466] bridge_slave_1: entered promiscuous mode
[  227.331278][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.343357][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.404466][ T3450] bridge_slave_1: left allmulticast mode
[  227.410463][ T3450] bridge_slave_1: left promiscuous mode
[  227.416213][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.425712][ T3450] bridge_slave_0: left allmulticast mode
[  227.437595][ T3450] bridge_slave_0: left promiscuous mode
[  227.443410][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.057288][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  228.078881][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  228.089990][ T3450] bond0 (unregistering): Released all slaves
[  228.115608][T10466] team0: Port device team_slave_0 added
[  228.199285][T10466] team0: Port device team_slave_1 added
[  228.348336][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.367199][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.426727][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.463791][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.476622][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.543002][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.593097][   T55] Bluetooth: hci0: command tx timeout
[  228.722726][T10466] hsr_slave_0: entered promiscuous mode
[  228.743426][T10466] hsr_slave_1: entered promiscuous mode
[  228.750226][T10466] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.759257][T10466] Cannot create hsr debugfs directory
[  228.774900][ T3450] hsr_slave_0: left promiscuous mode
[  228.798413][ T3450] hsr_slave_1: left promiscuous mode
[  228.814911][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.824845][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.842523][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.863739][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.936262][ T3450] veth1_macvtap: left promiscuous mode
[  228.957793][ T3450] veth0_macvtap: left promiscuous mode
[  228.970063][ T3450] veth1_vlan: left promiscuous mode
[  228.980968][ T3450] veth0_vlan: left promiscuous mode
[  229.694114][ T3450] team0 (unregistering): Port device team_slave_1 removed
[  229.734337][ T3450] team0 (unregistering): Port device team_slave_0 removed
[  230.304142][T10546] Bluetooth: MGMT ver 1.23
[  230.666676][ T5842] Bluetooth: hci0: command tx timeout
[  230.891215][T10466] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  230.901253][T10466] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  230.913259][T10466] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  230.925522][T10466] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  231.086320][T10466] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.117900][T10466] 8021q: adding VLAN 0 to HW filter on device team0
[  231.135211][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.142404][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.192269][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.199433][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.600675][T10466] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.873161][T10466] veth0_vlan: entered promiscuous mode
[  231.891862][T10466] veth1_vlan: entered promiscuous mode
[  231.922718][T10466] veth0_macvtap: entered promiscuous mode
[  231.932111][T10466] veth1_macvtap: entered promiscuous mode
[  231.948621][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.961672][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.971966][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.987945][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.998477][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.010601][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.021910][T10466] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.038852][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.049699][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.060822][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.078701][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.101359][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.121671][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.140491][T10466] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.161928][T10466] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.170864][T10466] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.180995][T10466] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.206820][T10466] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.253827][T10597] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.261975][T10597] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.275019][T10597] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.282433][T10597] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.290539][T10597] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.297721][T10597] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.312724][T10597] team0: Port device bridge0 added
[  232.347445][   T55] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  232.506723][T10541] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  232.513940][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  232.529008][T10541] Bluetooth: hci3: Opcode 0x0406 failed: -110
[  232.746719][   T55] Bluetooth: hci0: command 0x040f tx timeout
[  233.207958][T10541] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  233.214409][T10541] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  233.223790][T10541] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  233.235802][T10541] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  233.248480][T10541] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  233.263501][T10541] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  233.270622][T10541] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  233.282436][T10541] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  233.288743][T10541] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  233.321935][T10541] ------------[ cut here ]------------
[  233.328471][T10541] refcount_t: underflow; use-after-free.
[  233.334684][T10541] WARNING: CPU: 0 PID: 10541 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0
[  233.344317][T10541] Modules linked in:
[  233.348297][T10541] CPU: 0 UID: 0 PID: 10541 Comm: syz.2.1919 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[  233.359128][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  233.369281][T10541] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  233.375471][T10541] Code: e0 64 5f 8c e8 17 33 a9 fc 90 0f 0b 90 90 eb 99 e8 8b 8d e8 fc c6 05 d6 15 59 0b 01 90 48 c7 c7 40 65 5f 8c e8 f7 32 a9 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 68 8d e8 fc c6 05 b0 15 59 0b 01 90
[  233.395692][T10541] RSP: 0018:ffffc9000489ef38 EFLAGS: 00010246
[  233.401851][T10541] RAX: dbe0113176482a00 RBX: ffff88801cbab078 RCX: 0000000000080000
[  233.409906][T10541] RDX: ffffc9000bfea000 RSI: 000000000006023b RDI: 000000000006023c
[  233.418323][T10541] RBP: 0000000000000003 R08: ffffffff815687d2 R09: fffffbfff1cfa8a0
[  233.426329][T10541] R10: dffffc0000000000 R11: fffffbfff1cfa8a0 R12: ffff88801cbab060
[  233.434552][T10541] R13: ffffffff85ee3a30 R14: 1ffff1100397560c R15: ffff88801cbab060
[  233.442618][T10541] FS:  00007f4534f846c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  233.451890][T10541] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  233.458558][T10541] CR2: 00007fe194e1ef7e CR3: 000000006ccf4000 CR4: 00000000003526f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  233.466805][T10541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  233.474802][T10541] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  233.483120][T10541] Call Trace:
[  233.486429][T10541]  <TASK>
[  233.489444][T10541]  ? __warn+0x168/0x4e0
[  233.493634][T10541]  ? refcount_warn_saturate+0x15a/0x1d0
[  233.499246][T10541]  ? report_bug+0x2b3/0x500
[  233.503778][T10541]  ? refcount_warn_saturate+0x15a/0x1d0
[  233.509682][T10541]  ? handle_bug+0x60/0x90
[  233.515025][T10541]  ? exc_invalid_op+0x1a/0x50
[  233.519904][T10541]  ? asm_exc_invalid_op+0x1a/0x20
[  233.524959][T10541]  ? __pfx_klist_children_put+0x10/0x10
[  233.530581][T10541]  ? __warn_printk+0x292/0x360
[  233.535382][T10541]  ? refcount_warn_saturate+0x15a/0x1d0
[  233.541287][T10541]  ? refcount_warn_saturate+0x159/0x1d0
[  233.547084][T10541]  klist_dec_and_del+0x3ec/0x3f0
[  233.552054][T10541]  ? __pfx_klist_children_put+0x10/0x10
[  233.557704][T10541]  ? __pfx_klist_children_put+0x10/0x10
[  233.563292][T10541]  ? __pfx_klist_children_put+0x10/0x10
[  233.569694][T10541]  klist_remove+0x25e/0x480
[  233.574254][T10541]  ? __pfx_klist_remove+0x10/0x10
[  233.579393][T10541]  ? __pfx_kobject_move+0x10/0x10
[  233.584457][T10541]  ? get_device_parent+0x25d/0x410
[  233.589693][T10541]  device_move+0x1b4/0x710
[  233.594153][T10541]  ? __pfx_sco_connect_cfm+0x10/0x10
[  233.599778][T10541]  hci_conn_del_sysfs+0xac/0x160
[  233.604753][T10541]  hci_conn_del+0x8c4/0xc40
[  233.609348][T10541]  hci_abort_conn_sync+0x583/0xe00
[  233.614499][T10541]  ? hci_abort_conn_sync+0x1f6/0xe00
[  233.619963][T10541]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  233.625634][T10541]  ? __pfx_lock_release+0x10/0x10
[  233.631273][T10541]  ? hci_disconnect_all_sync+0x8e/0x460
[  233.636890][T10541]  hci_disconnect_all_sync+0x264/0x460
[  233.642382][T10541]  ? __pfx_bt_err+0x10/0x10
[  233.646961][T10541]  ? hci_disconnect_all_sync+0x8e/0x460
[  233.652542][T10541]  ? __pfx_hci_disconnect_all_sync+0x10/0x10
[  233.658838][T10541]  ? __mutex_lock+0x37f/0xee0
[  233.663553][T10541]  hci_suspend_sync+0x41a/0xca0
[  233.668518][T10541]  ? __pfx_hci_suspend_sync+0x10/0x10
[  233.673926][T10541]  ? __pfx_mgmt_suspending+0x10/0x10
[  233.679317][T10541]  ? hci_cmd_sync_cancel_sync+0xcc/0x190
[  233.684988][T10541]  hci_suspend_dev+0x203/0x3e0
[  233.690064][T10541]  hci_suspend_notifier+0xf2/0x2b0
[  233.695221][T10541]  notifier_call_chain+0x19f/0x3e0
[  233.700430][T10541]  blocking_notifier_call_chain_robust+0xe8/0x1e0
[  233.706985][T10541]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[  233.714042][T10541]  ? chrdev_open+0x36e/0x600
[  233.719102][T10541]  pm_notifier_call_chain_robust+0x2c/0x60
[  233.724944][T10541]  snapshot_open+0x19b/0x280
[  233.729618][T10541]  ? __pfx_snapshot_open+0x10/0x10
[  233.734759][T10541]  misc_open+0x2cc/0x340
[  233.739124][T10541]  chrdev_open+0x521/0x600
[  233.743562][T10541]  ? __pfx_chrdev_open+0x10/0x10
[  233.748679][T10541]  ? do_raw_spin_unlock+0x13c/0x8b0
[  233.753884][T10541]  ? __pfx_chrdev_open+0x10/0x10
[  233.758869][T10541]  do_dentry_open+0xbe1/0x1b70
[  233.763681][T10541]  vfs_open+0x3e/0x330
[  233.767812][T10541]  path_openat+0x2c84/0x3590
[  233.772474][T10541]  ? __pfx_path_openat+0x10/0x10
[  233.777750][T10541]  do_filp_open+0x27f/0x4e0
[  233.782290][T10541]  ? __pfx_do_filp_open+0x10/0x10
[  233.787435][T10541]  ? do_raw_spin_lock+0x14f/0x370
[  233.792509][T10541]  do_sys_openat2+0x13e/0x1d0
[  233.797225][T10541]  ? __pfx_do_sys_openat2+0x10/0x10
[  233.802431][T10541]  ? smack_file_ioctl+0x353/0x3a0
[  233.807782][T10541]  __x64_sys_openat+0x247/0x2a0
[  233.812683][T10541]  ? __pfx___x64_sys_openat+0x10/0x10
[  233.818091][T10541]  ? do_syscall_64+0x100/0x230
[  233.823035][T10541]  ? do_syscall_64+0xb6/0x230
[  233.827821][T10541]  do_syscall_64+0xf3/0x230
[  233.832337][T10541]  ? clear_bhb_loop+0x35/0x90
[  233.837332][T10541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.843253][T10541] RIP: 0033:0x7f453417e819
[  233.847759][T10541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.867763][T10541] RSP: 002b:00007f4534f84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  233.876203][T10541] RAX: ffffffffffffffda RBX: 00007f4534335fa0 RCX: 00007f453417e819
[  233.884207][T10541] RDX: 0000000000004000 RSI: 00000000200002c0 RDI: ffffffffffffff9c
[  233.892211][T10541] RBP: 00007f45341f175e R08: 0000000000000000 R09: 0000000000000000
[  233.900340][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.908381][T10541] R13: 0000000000000000 R14: 00007f4534335fa0 R15: 00007ffc9eec0e38
[  233.916378][T10541]  </TASK>
[  233.919451][T10541] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  233.926731][T10541] CPU: 0 UID: 0 PID: 10541 Comm: syz.2.1919 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[  233.937154][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  233.947208][T10541] Call Trace:
[  233.950484][T10541]  <TASK>
[  233.953410][T10541]  dump_stack_lvl+0x241/0x360
[  233.958094][T10541]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.963287][T10541]  ? __pfx__printk+0x10/0x10
[  233.967878][T10541]  ? _printk+0xd5/0x120
[  233.972039][T10541]  ? __init_begin+0x41000/0x41000
[  233.977074][T10541]  ? vscnprintf+0x5d/0x90
[  233.981403][T10541]  panic+0x349/0x880
[  233.985299][T10541]  ? __warn+0x177/0x4e0
[  233.989453][T10541]  ? __pfx_panic+0x10/0x10
[  233.993868][T10541]  ? show_trace_log_lvl+0x3b2/0x410
[  233.999086][T10541]  __warn+0x34b/0x4e0
[  234.003071][T10541]  ? refcount_warn_saturate+0x15a/0x1d0
[  234.008621][T10541]  report_bug+0x2b3/0x500
[  234.012950][T10541]  ? refcount_warn_saturate+0x15a/0x1d0
[  234.018495][T10541]  handle_bug+0x60/0x90
[  234.022646][T10541]  exc_invalid_op+0x1a/0x50
[  234.027147][T10541]  asm_exc_invalid_op+0x1a/0x20
[  234.031993][T10541] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  234.038147][T10541] Code: e0 64 5f 8c e8 17 33 a9 fc 90 0f 0b 90 90 eb 99 e8 8b 8d e8 fc c6 05 d6 15 59 0b 01 90 48 c7 c7 40 65 5f 8c e8 f7 32 a9 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 68 8d e8 fc c6 05 b0 15 59 0b 01 90
[  234.057749][T10541] RSP: 0018:ffffc9000489ef38 EFLAGS: 00010246
[  234.063815][T10541] RAX: dbe0113176482a00 RBX: ffff88801cbab078 RCX: 0000000000080000
[  234.071786][T10541] RDX: ffffc9000bfea000 RSI: 000000000006023b RDI: 000000000006023c
[  234.079753][T10541] RBP: 0000000000000003 R08: ffffffff815687d2 R09: fffffbfff1cfa8a0
[  234.087723][T10541] R10: dffffc0000000000 R11: fffffbfff1cfa8a0 R12: ffff88801cbab060
[  234.095688][T10541] R13: ffffffff85ee3a30 R14: 1ffff1100397560c R15: ffff88801cbab060
[  234.103660][T10541]  ? __pfx_klist_children_put+0x10/0x10
[  234.109214][T10541]  ? __warn_printk+0x292/0x360
[  234.113983][T10541]  ? refcount_warn_saturate+0x159/0x1d0
[  234.119524][T10541]  klist_dec_and_del+0x3ec/0x3f0
[  234.124459][T10541]  ? __pfx_klist_children_put+0x10/0x10
[  234.130004][T10541]  ? __pfx_klist_children_put+0x10/0x10
[  234.135547][T10541]  ? __pfx_klist_children_put+0x10/0x10
[  234.141093][T10541]  klist_remove+0x25e/0x480
[  234.145601][T10541]  ? __pfx_klist_remove+0x10/0x10
[  234.150631][T10541]  ? __pfx_kobject_move+0x10/0x10
[  234.155652][T10541]  ? get_device_parent+0x25d/0x410
[  234.160762][T10541]  device_move+0x1b4/0x710
[  234.165175][T10541]  ? __pfx_sco_connect_cfm+0x10/0x10
[  234.170461][T10541]  hci_conn_del_sysfs+0xac/0x160
[  234.175402][T10541]  hci_conn_del+0x8c4/0xc40
[  234.179908][T10541]  hci_abort_conn_sync+0x583/0xe00
[  234.185021][T10541]  ? hci_abort_conn_sync+0x1f6/0xe00
[  234.190317][T10541]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  234.195948][T10541]  ? __pfx_lock_release+0x10/0x10
[  234.200978][T10541]  ? hci_disconnect_all_sync+0x8e/0x460
[  234.206523][T10541]  hci_disconnect_all_sync+0x264/0x460
[  234.212160][T10541]  ? __pfx_bt_err+0x10/0x10
[  234.216660][T10541]  ? hci_disconnect_all_sync+0x8e/0x460
[  234.222203][T10541]  ? __pfx_hci_disconnect_all_sync+0x10/0x10
[  234.228175][T10541]  ? __mutex_lock+0x37f/0xee0
[  234.232857][T10541]  hci_suspend_sync+0x41a/0xca0
[  234.237710][T10541]  ? __pfx_hci_suspend_sync+0x10/0x10
[  234.243080][T10541]  ? __pfx_mgmt_suspending+0x10/0x10
[  234.248376][T10541]  ? hci_cmd_sync_cancel_sync+0xcc/0x190
[  234.254010][T10541]  hci_suspend_dev+0x203/0x3e0
[  234.258779][T10541]  hci_suspend_notifier+0xf2/0x2b0
[  234.263888][T10541]  notifier_call_chain+0x19f/0x3e0
[  234.269012][T10541]  blocking_notifier_call_chain_robust+0xe8/0x1e0
[  234.275438][T10541]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[  234.282460][T10541]  ? chrdev_open+0x36e/0x600
[  234.287060][T10541]  pm_notifier_call_chain_robust+0x2c/0x60
[  234.292865][T10541]  snapshot_open+0x19b/0x280
[  234.297450][T10541]  ? __pfx_snapshot_open+0x10/0x10
[  234.302568][T10541]  misc_open+0x2cc/0x340
[  234.306816][T10541]  chrdev_open+0x521/0x600
[  234.311238][T10541]  ? __pfx_chrdev_open+0x10/0x10
[  234.316175][T10541]  ? do_raw_spin_unlock+0x13c/0x8b0
[  234.321377][T10541]  ? __pfx_chrdev_open+0x10/0x10
[  234.326316][T10541]  do_dentry_open+0xbe1/0x1b70
[  234.331090][T10541]  vfs_open+0x3e/0x330
[  234.335158][T10541]  path_openat+0x2c84/0x3590
[  234.339778][T10541]  ? __pfx_path_openat+0x10/0x10
[  234.344736][T10541]  do_filp_open+0x27f/0x4e0
[  234.349241][T10541]  ? __pfx_do_filp_open+0x10/0x10
[  234.354262][T10541]  ? do_raw_spin_lock+0x14f/0x370
[  234.359321][T10541]  do_sys_openat2+0x13e/0x1d0
[  234.363998][T10541]  ? __pfx_do_sys_openat2+0x10/0x10
[  234.369197][T10541]  ? smack_file_ioctl+0x353/0x3a0
[  234.374228][T10541]  __x64_sys_openat+0x247/0x2a0
[  234.379080][T10541]  ? __pfx___x64_sys_openat+0x10/0x10
[  234.384456][T10541]  ? do_syscall_64+0x100/0x230
[  234.389220][T10541]  ? do_syscall_64+0xb6/0x230
[  234.393901][T10541]  do_syscall_64+0xf3/0x230
[  234.398403][T10541]  ? clear_bhb_loop+0x35/0x90
[  234.403079][T10541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.408975][T10541] RIP: 0033:0x7f453417e819
[  234.413398][T10541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.433003][T10541] RSP: 002b:00007f4534f84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  234.441423][T10541] RAX: ffffffffffffffda RBX: 00007f4534335fa0 RCX: 00007f453417e819
[  234.449390][T10541] RDX: 0000000000004000 RSI: 00000000200002c0 RDI: ffffffffffffff9c
[  234.457367][T10541] RBP: 00007f45341f175e R08: 0000000000000000 R09: 0000000000000000
[  234.465344][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.473314][T10541] R13: 0000000000000000 R14: 00007f4534335fa0 R15: 00007ffc9eec0e38
[  234.481314][T10541]  </TASK>
[  234.484594][T10541] Kernel Offset: disabled
[  234.489121][T10541] Rebooting in 86400 seconds..