last executing test programs:

4m16.896243295s ago: executing program 3 (id=134):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e02, 0xffffffff, @empty, 0x5}}, 0x0, 0x0, 0x23f, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0)
listen(r0, 0x800)
socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0)

4m14.693391379s ago: executing program 3 (id=145):
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl(r2, 0x4048aecb, &(0x7f0000000200)="070000002000000001000000ffffffff40")

4m14.385852075s ago: executing program 3 (id=148):
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)

4m13.942569049s ago: executing program 3 (id=155):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e02, 0xffffffff, @empty, 0x5}}, 0x0, 0x0, 0x23f, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0)
listen(r0, 0x800)
socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0)

4m12.855796511s ago: executing program 3 (id=160):
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x5a)
write(r0, &(0x7f0000000340)="2d2519d01038dc3dc2547dfbde71febae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d8714bdef1c9e7253595f944123f1c9c5e4ee16a1d71f8", 0x3b)

4m12.744989982s ago: executing program 3 (id=161):
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10)
write(r0, &(0x7f0000000340)='4', 0x1)

3m57.60576013s ago: executing program 32 (id=161):
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10)
write(r0, &(0x7f0000000340)='4', 0x1)

2m36.048540703s ago: executing program 5 (id=668):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="b805000000b9000000800f01c1410f01c866ba610066b8002066efc441fe7fc3660f3881b4193ac073ce48b872880000000000000f23c00f21f83501000f000f23f8660f388293e400000066baf80cb857db0485ef66bafc0cec67f20f080f01cf", 0x61}], 0x1, 0xb, &(0x7f0000000280)=[@dstype3={0x7, 0x4}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m35.446874331s ago: executing program 5 (id=670):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x0)

2m34.984918209s ago: executing program 5 (id=672):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
r1 = getpgid(0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = pidfd_getfd(r2, r2, 0x0)
setns(r3, 0x66020000)
umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0)

2m34.750578445s ago: executing program 5 (id=674):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88)
r3 = accept(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0x12, &(0x7f0000000340)={0x0}}, 0x80)

2m33.350624815s ago: executing program 5 (id=677):
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70"], 0x1a4}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001"], 0x314}], 0x1}, 0x800)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m31.454752383s ago: executing program 5 (id=685):
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000340)='4', 0x1)

2m16.285263369s ago: executing program 33 (id=685):
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000340)='4', 0x1)

12.95501246s ago: executing program 0 (id=1265):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1231, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x10000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0}, 0x97)

12.735730792s ago: executing program 0 (id=1269):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

12.190534724s ago: executing program 1 (id=1276):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0xc, 0x4)
sendto(r0, 0x0, 0x0, 0x240048d0, 0x0, 0x0)

12.078605085s ago: executing program 1 (id=1277):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)

11.796846343s ago: executing program 1 (id=1279):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1231, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x10000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0}, 0x97)

11.526573249s ago: executing program 1 (id=1281):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

11.335801632s ago: executing program 1 (id=1282):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\b'], 0x50)

9.545805601s ago: executing program 0 (id=1287):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@sysvgroups}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc41, 0x3)
fallocate(r0, 0x0, 0x2000, 0x18003)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x2cf2)

8.406381418s ago: executing program 1 (id=1288):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
r1 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = gettid()
setpgid(r1, r2)
write$UHID_INPUT(r0, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006)
r3 = syz_open_dev$sndctrl(&(0x7f00000024c0), 0x0, 0x48200)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000280)={0x0, 0xa883, 0x8759e7e628373aa})
fsetxattr(r0, 0x0, &(0x7f0000000100)='\x00', 0x1, 0x2)
mmap(&(0x7f000036b000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r3, 0xbf2af000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)

7.632271774s ago: executing program 34 (id=1288):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
r1 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = gettid()
setpgid(r1, r2)
write$UHID_INPUT(r0, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006)
r3 = syz_open_dev$sndctrl(&(0x7f00000024c0), 0x0, 0x48200)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000280)={0x0, 0xa883, 0x8759e7e628373aa})
fsetxattr(r0, 0x0, &(0x7f0000000100)='\x00', 0x1, 0x2)
mmap(&(0x7f000036b000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r3, 0xbf2af000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)

7.612558379s ago: executing program 0 (id=1292):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

7.612237719s ago: executing program 2 (id=1293):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005000000058004"], 0x4a)

7.422696762s ago: executing program 0 (id=1296):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {0x0}], 0x2}, 0x0)

6.78343479s ago: executing program 2 (id=1298):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000b80)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES64, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c200000000009500001200000000d87d023c44b7ca5498c326"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

6.502588829s ago: executing program 0 (id=1300):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = getpid()
r2 = gettid()
rt_tgsigqueueinfo(r1, r2, 0x7, &(0x7f0000000280)={0xc, 0x0, 0x4})
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000)
readv(r3, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6)
r4 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000000c0)=""/148)

6.211991039s ago: executing program 35 (id=1300):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = getpid()
r2 = gettid()
rt_tgsigqueueinfo(r1, r2, 0x7, &(0x7f0000000280)={0xc, 0x0, 0x4})
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000)
readv(r3, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6)
r4 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000000c0)=""/148)

6.183106387s ago: executing program 2 (id=1302):
r0 = socket(0x10, 0x80002, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x13, r0, 0x4c8bc000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, 0x0)

5.92205287s ago: executing program 2 (id=1305):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

5.086263603s ago: executing program 2 (id=1306):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0xf20, 0x0)

4.304507701s ago: executing program 2 (id=1307):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0xfffffffe, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)}], 0x1}, 0xb3407970072453b5)

3.559548958s ago: executing program 36 (id=1307):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0xfffffffe, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)}], 0x1}, 0xb3407970072453b5)

3.542832253s ago: executing program 6 (id=1311):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/207, 0xcf}, {&(0x7f0000000280)=""/68, 0x44}, {&(0x7f00000028c0)=""/4114, 0x1012}, {&(0x7f0000002800)=""/169, 0xa9}, {&(0x7f0000000100)=""/222, 0xde}, {&(0x7f0000000080)=""/101, 0x65}], 0x6}, 0xc}], 0x1, 0x100, 0x0)
sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)

3.533787596s ago: executing program 4 (id=1312):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, 0x0, 0x4005)

3.321802725s ago: executing program 6 (id=1313):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x10002, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2c8, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)

3.172722236s ago: executing program 6 (id=1314):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), 0x0}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4080)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
futex(0xfffffffffffffffd, 0x3, 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

2.925904605s ago: executing program 4 (id=1315):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0xf3f, 0x0)

2.611188093s ago: executing program 6 (id=1316):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)

2.480759479s ago: executing program 4 (id=1317):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x140, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@remote, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x2, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d3, 0x32}, @in6=@loopback, {0x1, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x28044}, 0x80)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r1, 0x0, 0x0)

2.158654629s ago: executing program 4 (id=1318):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e24, @broadcast}, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x3ff})
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8)

875.723306ms ago: executing program 4 (id=1319):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
nanosleep(&(0x7f0000000180), 0x0)

384.361533ms ago: executing program 4 (id=1320):
r0 = syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000002200)=ANY=[@ANYBLOB="12010003000000201e040030400001020301090269000301008002080b0101010420c009040000000101200009240101000909009a090401000001022000090401010101022000090501091000060d080825018303050900090402000001022000"], &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003410000004103d8e65d66620070ab"]}, 0x0)

373.995646ms ago: executing program 6 (id=1321):
syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x0, 0x190, &(0x7f0000000000)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0xf, 0x2c}, {0x5000, 0x0, 0x9, 0x0, 0x40, 0x85, 0x6d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x7, 0x9, 0x11, 0xa7, 0x4, 0x81}, {0x80a0000, 0xeeee0000, 0xb, 0x3, 0x2, 0x42, 0xb, 0xff, 0x8, 0x7, 0xa}, {0x10000, 0xd000, 0xb, 0x3, 0x3, 0x6, 0xab, 0x7e, 0x7, 0x2, 0xdf, 0x83}, {0x9000, 0x100000, 0xe, 0xc, 0xb1, 0x8, 0x21, 0xa0, 0x82, 0x3, 0x1}, {0x3000, 0xd000, 0x4, 0x5, 0x7, 0x41, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0xeeee0000, 0x12, 0x5, 0xf, 0x7, 0xb7, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x80a0000, 0x1000}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2084, 0x3, 0x0, 0x3000, [0xaffe, 0x4, 0x80, 0xfff]})

0s ago: executing program 6 (id=1322):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, 0x0, 0x4005)

kernel console output (not intermixed with test programs):

syz0: Couldn't create ib_mad CQ
[  186.363107][ T6617] infiniband syz0: Couldn't open port 1
[  186.525315][ T6617] RDS/IB: syz0: added
[  186.530004][ T6617] smc: adding ib device syz0 with port count 1
[  186.593568][ T6617] smc:    ib device syz0 port 1 has pnetid 
[  186.601959][ T4223] lo speed is unknown, defaulting to 1000
[  186.627034][ T6617] lo speed is unknown, defaulting to 1000
[  187.005338][ T6617] lo speed is unknown, defaulting to 1000
[  187.358159][ T6617] lo speed is unknown, defaulting to 1000
[  187.516975][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.557761][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.660200][ T6617] lo speed is unknown, defaulting to 1000
[  187.704260][ T6707] device syzkaller0 entered promiscuous mode
[  187.977607][ T6617] lo speed is unknown, defaulting to 1000
[  188.293912][ T6617] lo speed is unknown, defaulting to 1000
[  188.323022][ T6718] netlink: 104 bytes leftover after parsing attributes in process `syz.4.660'.
[  188.412640][ T6715] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  188.422749][ T6227] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  188.467528][ T6227] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  188.476472][ T6715] kvm: pic: non byte read
[  188.489245][ T6715] kvm: pic: level sensitive irq not supported
[  188.489310][ T6715] kvm: pic: non byte read
[  188.530824][ T6227] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  188.542936][ T6715] kvm: pic: level sensitive irq not supported
[  188.543017][ T6715] kvm: pic: non byte read
[  188.582290][ T6715] kvm: pic: non byte read
[  188.585616][ T6227] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  188.893115][ T6227] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.940571][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.961484][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.999663][ T6227] 8021q: adding VLAN 0 to HW filter on device team0
[  189.028287][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  189.081438][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  189.122391][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.129587][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.215552][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.352075][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.373777][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.429981][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.437176][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.502765][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.594321][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.623966][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.692453][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.731823][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.803675][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.821542][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.882707][ T6227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.931080][ T6227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.995266][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.016866][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.077843][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.117129][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  190.176785][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.444145][ T4319] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  190.653347][ T4319] usb 3-1: Using ep0 maxpacket: 8
[  190.660875][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.702452][ T4319] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  190.719057][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.767483][ T4319] usb 3-1: config 0 descriptor??
[  190.805070][ T4319] gspca_main: vc032x-2.14.0 probing 046d:0892
[  190.889193][ T6771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.925278][ T6771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.996937][ T4319] gspca_vc032x: reg_r err -32
[  191.002055][ T4319] vc032x: probe of 3-1:0.0 failed with error -32
[  191.009814][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.029954][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.071387][ T6227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.148902][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  191.188066][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.235635][ T6784] device syzkaller0 entered promiscuous mode
[  191.267283][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.298816][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.437388][ T6227] device veth0_vlan entered promiscuous mode
[  191.474875][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.485047][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  191.566946][ T6227] device veth1_vlan entered promiscuous mode
[  191.694905][ T6227] device veth0_macvtap entered promiscuous mode
[  191.726470][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  191.751217][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  191.784191][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  191.836536][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  191.865653][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.888933][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.898660][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  191.926108][ T6227] device veth1_macvtap entered promiscuous mode
[  191.971264][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.998428][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.028763][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.073647][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.115276][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.172506][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.213305][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.241964][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.270176][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.300873][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.341861][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.384706][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  192.392981][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  192.411162][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  192.439137][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.450154][ T6809] jffs2: notice: (6809) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  192.460029][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.510364][ T6809] netlink: 'syz.2.666': attribute type 5 has an invalid length.
[  192.533318][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.568015][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.596140][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.647921][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.699728][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.735397][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.772049][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.791288][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.834656][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.967557][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  192.979992][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  193.035051][ T6227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.063325][ T6227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.113443][ T6227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.147141][ T6227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.422376][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.442450][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.522876][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  193.575908][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.593490][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.616179][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  193.802030][ T4223] usb 3-1: USB disconnect, device number 18
[  194.201885][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.208394][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.769026][ T6723] Set syz1 is full, maxelem 65536 reached
[  194.971010][ T6859] jffs2: notice: (6859) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  195.373397][ T4335] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  195.593453][ T4335] usb 3-1: Using ep0 maxpacket: 8
[  195.606059][ T4335] usb 3-1: no configurations
[  195.622032][ T4335] usb 3-1: can't read configurations, error -22
[  195.793589][ T4335] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  195.801664][   T14] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  195.999680][ T4335] usb 3-1: Using ep0 maxpacket: 8
[  196.004827][   T14] usb 2-1: Using ep0 maxpacket: 8
[  196.011668][ T4335] usb 3-1: no configurations
[  196.017793][   T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.051695][ T4335] usb 3-1: can't read configurations, error -22
[  196.077929][   T14] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  196.088815][ T4335] usb usb3-port1: attempt power cycle
[  196.128304][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.171547][   T14] usb 2-1: config 0 descriptor??
[  196.211784][   T14] gspca_main: vc032x-2.14.0 probing 046d:0892
[  196.402065][   T14] gspca_vc032x: reg_r err -32
[  196.407377][   T14] vc032x: probe of 2-1:0.0 failed with error -32
[  196.523441][ T4335] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  196.584249][ T4335] usb 3-1: Using ep0 maxpacket: 8
[  196.589882][ T4335] usb 3-1: no configurations
[  196.623341][ T4335] usb 3-1: can't read configurations, error -22
[  196.803883][ T4335] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  196.864682][ T4335] usb 3-1: Using ep0 maxpacket: 8
[  196.870326][ T4335] usb 3-1: no configurations
[  196.897838][ T4335] usb 3-1: can't read configurations, error -22
[  196.907634][ T4335] usb usb3-port1: unable to enumerate USB device
[  197.786274][ T6939] jffs2: notice: (6939) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[  197.893426][ T6941] netlink: 'syz.1.688': attribute type 5 has an invalid length.
[  197.944795][ T6941] jffs2: warning: (6941) jffs2_sum_write_data: Not enough space for summary, padsize = -2
[  199.164257][ T4335] usb 2-1: USB disconnect, device number 11
[  199.210609][ T6980] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  199.977848][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready
[  200.011302][ T7003] sl0: header compression turned on
[  200.079093][   T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  200.273388][   T14] usb 2-1: Using ep0 maxpacket: 8
[  200.279246][   T14] usb 2-1: no configurations
[  200.301399][   T14] usb 2-1: can't read configurations, error -22
[  200.473609][   T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  200.673365][   T14] usb 2-1: Using ep0 maxpacket: 8
[  200.695923][   T14] usb 2-1: no configurations
[  200.720982][   T14] usb 2-1: can't read configurations, error -22
[  200.750354][   T14] usb usb2-port1: attempt power cycle
[  201.207389][   T14] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  201.253855][   T14] usb 2-1: Using ep0 maxpacket: 8
[  201.259708][   T14] usb 2-1: no configurations
[  201.281859][   T14] usb 2-1: can't read configurations, error -22
[  201.493940][   T14] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  201.567146][   T14] usb 2-1: Using ep0 maxpacket: 8
[  201.572838][   T14] usb 2-1: no configurations
[  201.591376][   T14] usb 2-1: can't read configurations, error -22
[  201.636298][   T14] usb usb2-port1: unable to enumerate USB device
[  202.113577][ T4288] Bluetooth: hci1: unexpected event for opcode 0x0c20
[  202.808905][ T7075] Could not find key with description: [syz]
[  202.859988][ T7075] process_request_key_err: No key
[  202.865569][ T7075] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  202.946254][ T7075] One or more global auth toks could not properly register; rc = [-2]
[  203.024802][ T7075] Error parsing options; rc = [-2]
[  204.972882][ T4317] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  205.356918][ T4317] usb 3-1: unable to get BOS descriptor or descriptor too short
[  205.413856][ T4317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.447230][ T4317] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  205.488568][ T4317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  205.525519][ T4317] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  205.625877][ T4317] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  205.656356][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.673314][ T4317] usb 3-1: Product: syz
[  205.677529][ T4317] usb 3-1: Manufacturer: syz
[  205.682144][ T4317] usb 3-1: SerialNumber: syz
[  205.693508][   T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  205.719016][ T4317] usb 3-1: config 0 descriptor??
[  205.741078][ T7115] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  205.768264][    C1] usb 3-1: NFC: Urb failure (status -71)
[  205.774743][ T4317] usb 3-1: NFC: Unable to get FW version
[  205.781979][ T4317] pn533_usb: probe of 3-1:0.0 failed with error -90
[  205.923594][   T14] usb 5-1: Using ep0 maxpacket: 8
[  205.935130][   T14] usb 5-1: unable to read config index 0 descriptor/start: -61
[  205.975788][   T14] usb 5-1: can't read configurations, error -61
[  205.990802][ T4335] usb 3-1: USB disconnect, device number 23
[  206.147217][   T14] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  206.366975][   T14] usb 5-1: Using ep0 maxpacket: 8
[  206.386355][   T14] usb 5-1: unable to read config index 0 descriptor/start: -61
[  206.408024][   T14] usb 5-1: can't read configurations, error -61
[  206.428446][   T14] usb usb5-port1: attempt power cycle
[  206.578788][ T7052] Set syz1 is full, maxelem 65536 reached
[  206.831475][ T7155] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0]
[  206.869452][   T14] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  206.877609][ T7155] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  206.918792][   T14] usb 5-1: Using ep0 maxpacket: 8
[  206.933054][   T14] usb 5-1: unable to read config index 0 descriptor/start: -61
[  206.951666][ T7155] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  206.968583][ T4284] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  206.978002][   T14] usb 5-1: can't read configurations, error -61
[  207.034506][ T7155] One or more global auth toks could not properly register; rc = [-22]
[  207.042839][ T7155] Error parsing options; rc = [-22]
[  207.098485][ T7159] nvmet: disable ns before setting buffered_io value.
[  207.125435][ T7158] nvmet: Invalid value 'loop
[  207.125435][ T7158] Þ�R&Ѹôž\J“‚öÔ«{tÉ
“Ñ•“õŠŽÝíUanü~s'ôS‹•‚,p»p×{*3A<>õ�Ã…ë´ÎtBä“ÿ&"âÞ:jÀ}ðãgáÉÎdù�S:Ξ¸•ZY5áðÿ‚µ‘Ô ÁD�boߺ¢ÃŸÙhàåBA8IÎöqq¾“DÌ3ƒD*6ç.
Ô«E�rÉ׈ñ¹°­pÜü
é.Íš9´¡ìm¥W¼Ecº¦áTgÕe6:ÏïBi¡
®ÀÚÁ‡2¾Ó°I5ó/1‘×xøyÕ?^kÃ33' for trtype
[  207.163436][   T14] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  207.193365][ T4284] usb 3-1: Using ep0 maxpacket: 8
[  207.203348][ T4284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.214240][   T14] usb 5-1: Using ep0 maxpacket: 8
[  207.221557][   T14] usb 5-1: unable to read config index 0 descriptor/start: -61
[  207.238215][   T14] usb 5-1: can't read configurations, error -61
[  207.244744][ T4284] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  207.262472][   T14] usb usb5-port1: unable to enumerate USB device
[  207.272577][ T4284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.313015][ T4284] usb 3-1: config 0 descriptor??
[  207.336420][ T4284] gspca_main: vc032x-2.14.0 probing 046d:0892
[  207.537432][ T4284] gspca_vc032x: reg_r err -32
[  207.543973][ T4284] vc032x: probe of 3-1:0.0 failed with error -32
[  208.813351][ T4335] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  209.011541][ T7197] jffs2: notice: (7197) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  209.048822][ T7198] netlink: 'syz.2.739': attribute type 5 has an invalid length.
[  209.061728][ T4335] usb 2-1: Using ep0 maxpacket: 8
[  209.069877][ T4335] usb 2-1: config 14 has an invalid interface number: 199 but max is 0
[  209.087399][ T4335] usb 2-1: config 14 has no interface number 0
[  209.101358][ T4335] usb 2-1: New USB device found, idVendor=5bfe, idProduct=a243, bcdDevice=3a.07
[  209.113190][ T4335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.125555][ T4335] usb 2-1: Product: syz
[  209.130573][ T4335] usb 2-1: Manufacturer: syz
[  209.141342][ T4335] usb 2-1: SerialNumber: syz
[  209.186115][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.219001][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.385187][ T4335] cdc_acm 2-1:14.199: invalid descriptor buffer length
[  209.425379][ T4335] usb 2-1: USB disconnect, device number 16
[  210.188391][ T4335] usb 3-1: USB disconnect, device number 24
[  210.241390][ T4223] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  210.406468][ T7224] device syzkaller0 entered promiscuous mode
[  210.533760][ T4223] usb 5-1: Using ep0 maxpacket: 8
[  210.638328][ T4223] usb 5-1: unable to read config index 0 descriptor/start: -61
[  210.646111][ T4223] usb 5-1: can't read configurations, error -61
[  210.855956][ T4223] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  211.005040][ T4287] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  211.017930][ T4286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  211.026182][ T4286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  211.047838][ T4286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  211.064223][ T4286] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  211.071542][ T4286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  211.097943][ T4223] usb 5-1: Using ep0 maxpacket: 8
[  211.149346][ T7233] lo speed is unknown, defaulting to 1000
[  211.186595][ T4223] usb 5-1: unable to read config index 0 descriptor/start: -61
[  211.194270][ T4223] usb 5-1: can't read configurations, error -61
[  211.223133][ T4223] usb usb5-port1: attempt power cycle
[  211.689963][ T7233] chnl_net:caif_netlink_parms(): no params data found
[  211.741423][ T4223] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  211.799738][ T4223] usb 5-1: Using ep0 maxpacket: 8
[  211.853643][ T4223] usb 5-1: unable to read config index 0 descriptor/start: -61
[  211.861283][ T4223] usb 5-1: can't read configurations, error -61
[  211.878952][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.914310][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.938368][ T7233] device bridge_slave_0 entered promiscuous mode
[  211.972338][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.006897][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.060716][ T7233] device bridge_slave_1 entered promiscuous mode
[  212.062595][ T4223] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  212.133842][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.147094][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.155534][ T4223] usb 5-1: Using ep0 maxpacket: 8
[  212.202855][ T7233] team0: Port device team_slave_0 added
[  212.211439][ T7233] team0: Port device team_slave_1 added
[  212.229879][ T4223] usb 5-1: unable to read config index 0 descriptor/start: -61
[  212.239928][ T4223] usb 5-1: can't read configurations, error -61
[  212.246592][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.263769][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.287274][ T4223] usb usb5-port1: unable to enumerate USB device
[  212.298511][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.317425][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.332894][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.373094][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.384728][ T4335] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  212.451971][ T7233] device hsr_slave_0 entered promiscuous mode
[  212.460511][ T7233] device hsr_slave_1 entered promiscuous mode
[  212.469140][ T7233] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.480053][ T7233] Cannot create hsr debugfs directory
[  212.573803][ T4335] usb 3-1: Using ep0 maxpacket: 8
[  212.586462][ T4335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  212.613690][ T4335] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  212.637305][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.685469][ T4335] usb 3-1: config 0 descriptor??
[  212.727694][ T4335] gspca_main: vc032x-2.14.0 probing 046d:0892
[  212.777848][ T7260] device syzkaller0 entered promiscuous mode
[  212.918598][ T4335] gspca_vc032x: reg_r err -32
[  212.928717][ T4335] vc032x: probe of 3-1:0.0 failed with error -32
[  212.941794][ T7233] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  212.984700][ T7233] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  213.040581][ T7233] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  213.071292][ T7233] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  213.143610][ T4288] Bluetooth: hci6: command 0x0409 tx timeout
[  213.268682][ T7279] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  213.455635][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.558798][ T7286] device syzkaller0 entered promiscuous mode
[  213.629087][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  213.654106][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  213.705950][ T4223] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  213.971570][ T4223] usb 2-1: Using ep0 maxpacket: 8
[  214.080127][ T4223] usb 2-1: unable to get BOS descriptor or descriptor too short
[  214.125091][ T4223] usb 2-1: config 150 has an invalid interface number: 124 but max is 1
[  214.146713][ T4223] usb 2-1: config 150 has no interface number 1
[  214.153046][ T4223] usb 2-1: config 150 interface 0 has no altsetting 0
[  214.166270][ T4223] usb 2-1: config 150 interface 124 has no altsetting 0
[  214.244412][ T4223] usb 2-1: New USB device found, idVendor=03f0, idProduct=371d, bcdDevice=30.63
[  214.253572][ T4223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.274702][ T4223] usb 2-1: Product: syz
[  214.278933][ T4223] usb 2-1: Manufacturer: syz
[  214.300627][ T4223] usb 2-1: SerialNumber: syz
[  214.384582][ T7299] jffs2: notice: (7299) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  214.438560][ T7301] netlink: 'syz.2.773': attribute type 5 has an invalid length.
[  214.605781][ T4223] usb 2-1: unknown number of interfaces: 2
[  214.626672][ T4223] usb 2-1: USB disconnect, device number 17
[  214.707751][  T127] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  214.947714][  T127] usb 5-1: Using ep0 maxpacket: 8
[  215.019458][  T127] usb 5-1: unable to read config index 0 descriptor/start: -61
[  215.035465][  T127] usb 5-1: can't read configurations, error -61
[  215.221875][  T127] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  215.240888][ T4286] Bluetooth: hci6: command 0x041b tx timeout
[  215.490351][  T127] usb 5-1: Using ep0 maxpacket: 8
[  215.570091][  T127] usb 5-1: unable to read config index 0 descriptor/start: -61
[  215.577823][  T127] usb 5-1: can't read configurations, error -61
[  215.580398][ T4335] usb 3-1: USB disconnect, device number 25
[  215.605353][  T127] usb usb5-port1: attempt power cycle
[  216.098691][  T127] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  216.201483][  T127] usb 5-1: Using ep0 maxpacket: 8
[  216.351494][  T127] usb 5-1: unable to read config index 0 descriptor/start: -61
[  216.359266][  T127] usb 5-1: can't read configurations, error -61
[  216.570313][  T127] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  216.659806][  T127] usb 5-1: Using ep0 maxpacket: 8
[  216.735276][  T127] usb 5-1: unable to read config index 0 descriptor/start: -61
[  216.747473][  T127] usb 5-1: can't read configurations, error -61
[  216.783321][  T127] usb usb5-port1: unable to enumerate USB device
[  217.143509][ T4319] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  217.313516][ T4286] Bluetooth: hci6: command 0x040f tx timeout
[  217.343627][ T4319] usb 2-1: Using ep0 maxpacket: 8
[  217.357289][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -61
[  217.398300][ T4319] usb 2-1: can't read configurations, error -61
[  217.602131][ T4319] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  217.795200][ T4319] usb 2-1: Using ep0 maxpacket: 8
[  217.811307][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -61
[  217.829953][ T4319] usb 2-1: can't read configurations, error -61
[  217.847171][ T4319] usb usb2-port1: attempt power cycle
[  218.270082][ T4319] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  218.320364][ T4319] usb 2-1: Using ep0 maxpacket: 8
[  218.328544][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -61
[  218.353371][ T4319] usb 2-1: can't read configurations, error -61
[  218.537012][ T4319] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  218.584141][ T4319] usb 2-1: Using ep0 maxpacket: 8
[  218.591398][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -61
[  218.629927][ T4319] usb 2-1: can't read configurations, error -61
[  218.643025][ T4319] usb usb2-port1: unable to enumerate USB device
[  218.960478][ T4284] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  219.153314][ T4284] usb 5-1: Using ep0 maxpacket: 8
[  219.167122][ T4284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.193039][ T4284] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  219.208964][ T4284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.227927][ T4284] usb 5-1: config 0 descriptor??
[  219.256389][ T4284] gspca_main: vc032x-2.14.0 probing 046d:0892
[  219.390161][ T4286] Bluetooth: hci6: command 0x0419 tx timeout
[  219.456237][ T4284] gspca_vc032x: reg_r err -32
[  219.461017][ T4284] vc032x: probe of 5-1:0.0 failed with error -32
[  220.778260][ T7233] 8021q: adding VLAN 0 to HW filter on device team0
[  220.819998][ T7314] device syzkaller0 entered promiscuous mode
[  220.826608][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  220.846769][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  220.883340][ T4319] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  220.894030][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.901158][ T7277] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.961575][ T7357] jffs2: notice: (7357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  221.007598][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  221.016197][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  221.035276][ T7358] netlink: 'syz.4.796': attribute type 5 has an invalid length.
[  221.064050][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  221.074220][ T4319] usb 2-1: Using ep0 maxpacket: 8
[  221.094245][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -61
[  221.116594][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.120689][ T4319] usb 2-1: can't read configurations, error -61
[  221.124813][ T7277] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.208393][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  221.231660][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  221.258700][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  221.289318][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  221.321007][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  221.328311][ T4319] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  221.358126][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  221.401377][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  221.452391][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  221.461306][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  221.497589][ T7233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  221.527758][ T7233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  221.544311][ T4319] usb 2-1: Using ep0 maxpacket: 8
[  221.555162][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -61
[  221.562932][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  221.579636][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  221.590065][ T4319] usb 2-1: can't read configurations, error -61
[  221.609940][ T4319] usb usb2-port1: attempt power cycle
[  222.043520][ T4319] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  222.074467][ T4319] usb 2-1: Using ep0 maxpacket: 8
[  222.090994][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -61
[  222.117006][ T4319] usb 2-1: can't read configurations, error -61
[  222.172683][ T4335] usb 5-1: USB disconnect, device number 22
[  222.240872][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  222.261200][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  222.293080][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.300631][ T4319] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  222.360927][ T4319] usb 2-1: Using ep0 maxpacket: 8
[  222.369278][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -61
[  222.403020][ T4319] usb 2-1: can't read configurations, error -61
[  222.427174][ T4319] usb usb2-port1: unable to enumerate USB device
[  222.470428][ T4317] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  222.727873][ T4317] usb 3-1: Using ep0 maxpacket: 8
[  222.793564][ T7392] device syzkaller0 entered promiscuous mode
[  222.867449][ T4317] usb 3-1: unable to read config index 0 descriptor/start: -61
[  222.906369][ T4317] usb 3-1: can't read configurations, error -61
[  223.099094][ T4317] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  223.361451][ T4317] usb 3-1: Using ep0 maxpacket: 8
[  223.437118][ T4317] usb 3-1: unable to read config index 0 descriptor/start: -61
[  223.444861][ T4317] usb 3-1: can't read configurations, error -61
[  223.498477][ T4317] usb usb3-port1: attempt power cycle
[  224.029684][ T4317] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  224.132877][ T4317] usb 3-1: Using ep0 maxpacket: 8
[  224.229076][   T14] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  224.233392][ T4317] usb 3-1: unable to read config index 0 descriptor/start: -61
[  224.270541][ T4317] usb 3-1: can't read configurations, error -61
[  224.433311][   T14] usb 2-1: Using ep0 maxpacket: 8
[  224.450263][   T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  224.470870][   T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  224.481826][   T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  224.487701][ T4317] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  224.508510][   T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  224.523926][   T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  224.533114][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.582329][ T4317] usb 3-1: Using ep0 maxpacket: 8
[  224.649693][ T4317] usb 3-1: unable to read config index 0 descriptor/start: -61
[  224.670916][ T4317] usb 3-1: can't read configurations, error -61
[  224.686645][ T4317] usb usb3-port1: unable to enumerate USB device
[  224.777158][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.821578][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.854683][   T14] usb 2-1: GET_CAPABILITIES returned 0
[  224.860403][   T14] usbtmc 2-1:16.0: can't read capabilities
[  225.076830][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  225.089111][   T14] usb 2-1: USB disconnect, device number 26
[  225.647199][ T4335] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  225.853472][ T4335] usb 3-1: Using ep0 maxpacket: 8
[  225.882775][ T4335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.910822][ T4335] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  225.929876][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.956741][ T4335] usb 3-1: config 0 descriptor??
[  225.978737][ T4335] gspca_main: vc032x-2.14.0 probing 046d:0892
[  226.078503][ T4317] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  226.183924][ T4335] gspca_vc032x: reg_r err -32
[  226.188913][ T4335] vc032x: probe of 3-1:0.0 failed with error -32
[  226.328796][ T4317] usb 2-1: Using ep0 maxpacket: 16
[  226.402669][ T4317] usb 2-1: unable to get BOS descriptor or descriptor too short
[  226.465467][ T4317] usb 2-1: config 0 has an invalid interface number: 228 but max is 2
[  226.485519][ T4317] usb 2-1: config 0 has an invalid interface number: 172 but max is 2
[  226.494849][ T4317] usb 2-1: config 0 has an invalid interface number: 181 but max is 2
[  226.524766][ T4317] usb 2-1: config 0 has no interface number 0
[  226.530936][ T4317] usb 2-1: config 0 has no interface number 1
[  226.554425][ T4317] usb 2-1: config 0 has no interface number 2
[  226.561922][ T4317] usb 2-1: config 0 interface 228 has no altsetting 0
[  226.569073][ T4317] usb 2-1: config 0 interface 172 has no altsetting 0
[  226.584047][ T4317] usb 2-1: config 0 interface 181 has no altsetting 0
[  226.650409][ T4317] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f
[  226.676293][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.686464][ T4317] usb 2-1: Product: syz
[  226.690675][ T4317] usb 2-1: Manufacturer: syz
[  226.706587][ T4317] usb 2-1: SerialNumber: syz
[  226.735358][ T4317] usb 2-1: config 0 descriptor??
[  227.052891][ T4317] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  227.080142][ T4317] usb 2-1: selecting invalid altsetting 0
[  227.107270][ T2312] pvrusb2: Invalid write control endpoint
[  227.155676][ T4317] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  227.170401][ T4317] usb 2-1: selecting invalid altsetting 0
[  227.228959][ T4317] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  227.255438][ T4317] usb 2-1: selecting invalid altsetting 0
[  227.298664][ T2312] pvrusb2: Invalid write control endpoint
[  227.321982][ T2312] pvrusb2: Invalid write control endpoint
[  227.327377][ T4317] usb 2-1: USB disconnect, device number 27
[  227.327849][ T2312] pvrusb2: Invalid write control endpoint
[  227.349964][ T2312] pvrusb2: Invalid write control endpoint
[  227.370985][ T2312] pvrusb2: Invalid write control endpoint
[  227.396673][ T2312] pvrusb2: Invalid write control endpoint
[  227.402732][ T2312] pvrusb2: Invalid write control endpoint
[  227.418211][ T2312] pvrusb2: Invalid write control endpoint
[  227.434788][ T2312] pvrusb2: Invalid write control endpoint
[  227.440569][ T2312] pvrusb2: Invalid write control endpoint
[  227.446896][ T2312] pvrusb2: Invalid write control endpoint
[  227.462035][ T2312] pvrusb2: Invalid write control endpoint
[  227.468805][ T2312] pvrusb2: Invalid write control endpoint
[  227.475185][ T2312] pvrusb2: Invalid write control endpoint
[  227.489817][ T2312] pvrusb2: Invalid write control endpoint
[  227.495962][ T2312] pvrusb2: Invalid write control endpoint
[  227.510829][ T2312] pvrusb2: Invalid write control endpoint
[  227.537023][ T2312] pvrusb2: Invalid write control endpoint
[  227.563203][ T2312] pvrusb2: Invalid write control endpoint
[  227.583427][ T2312] pvrusb2: Invalid write control endpoint
[  227.589209][ T2312] pvrusb2: Invalid write control endpoint
[  227.627513][ T7455] jffs2: notice: (7455) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  227.652849][ T2312] pvrusb2: Invalid write control endpoint
[  227.659386][ T2312] pvrusb2: Invalid write control endpoint
[  227.666136][ T2312] pvrusb2: Invalid write control endpoint
[  227.689114][ T2312] pvrusb2: Invalid write control endpoint
[  227.704727][ T2312] pvrusb2: Invalid write control endpoint
[  227.720310][ T7455] netlink: 'syz.2.816': attribute type 5 has an invalid length.
[  227.728775][ T2312] pvrusb2: Invalid write control endpoint
[  227.734659][ T2312] pvrusb2: Invalid write control endpoint
[  227.740402][ T2312] pvrusb2: Invalid write control endpoint
[  227.765619][ T2312] pvrusb2: Invalid write control endpoint
[  227.771617][ T2312] pvrusb2: Invalid write control endpoint
[  227.793536][ T2312] pvrusb2: Invalid write control endpoint
[  227.834427][ T2312] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  228.002199][ T2312] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  228.017657][ T2312] pvrusb2: Invalid write control endpoint
[  228.039007][ T2312] pvrusb2: Invalid write control endpoint
[  228.059673][ T2312] pvrusb2: Invalid write control endpoint
[  228.077965][ T2312] pvrusb2: Invalid write control endpoint
[  228.097275][ T2312] pvrusb2: Invalid write control endpoint
[  228.121102][ T2312] pvrusb2: Invalid write control endpoint
[  228.133587][ T2312] pvrusb2: Invalid write control endpoint
[  228.149367][ T2312] pvrusb2: Invalid write control endpoint
[  228.158084][ T2312] pvrusb2: Invalid write control endpoint
[  228.167363][ T2312] pvrusb2: Invalid write control endpoint
[  228.175188][ T2312] pvrusb2: Invalid write control endpoint
[  228.181126][ T2312] pvrusb2: Invalid write control endpoint
[  228.188416][ T2312] pvrusb2: Invalid write control endpoint
[  228.194841][ T2312] pvrusb2: Invalid write control endpoint
[  228.207907][ T2312] pvrusb2: Invalid write control endpoint
[  228.216568][ T2312] pvrusb2: Invalid write control endpoint
[  228.222454][ T2312] pvrusb2: Invalid write control endpoint
[  228.231678][ T2312] pvrusb2: Invalid write control endpoint
[  228.239970][ T2312] pvrusb2: Invalid write control endpoint
[  228.251291][ T2312] pvrusb2: Invalid write control endpoint
[  228.260985][ T2312] pvrusb2: Invalid write control endpoint
[  228.306002][ T2312] pvrusb2: Attached sub-driver cs53l32a
[  228.440003][ T2312] pvrusb2: Invalid write control endpoint
[  228.459436][ T2312] pvrusb2: Invalid write control endpoint
[  228.474319][ T2312] pvrusb2: Invalid write control endpoint
[  228.482487][ T2312] pvrusb2: Invalid write control endpoint
[  228.497274][ T2312] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  228.526117][ T2312] pvrusb2: Device being rendered inoperable
[  228.542441][ T2312] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  228.562622][ T2312] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  228.600746][ T2312] pvrusb2: Invalid write control endpoint
[  228.722696][ T2312] pvrusb2: Invalid write control endpoint
[  228.738541][ T2312] pvrusb2: Invalid write control endpoint
[  228.754556][ T2312] pvrusb2: Invalid write control endpoint
[  228.760526][ T2312] pvrusb2: Invalid write control endpoint
[  228.783582][ T2312] pvrusb2: Invalid write control endpoint
[  228.814983][ T2312] pvrusb2: Invalid write control endpoint
[  228.842287][ T2312] pvrusb2: Invalid write control endpoint
[  228.855447][ T2312] pvrusb2: Invalid write control endpoint
[  228.880039][ T2312] pvrusb2: Invalid write control endpoint
[  228.896885][ T2312] pvrusb2: Invalid write control endpoint
[  228.910603][  T127] usb 3-1: USB disconnect, device number 30
[  228.916918][ T2312] pvrusb2: Invalid write control endpoint
[  228.937195][ T2312] pvrusb2: Invalid write control endpoint
[  228.957964][ T2312] pvrusb2: Invalid write control endpoint
[  228.966412][ T2312] pvrusb2: Invalid write control endpoint
[  228.972333][ T2312] pvrusb2: Invalid write control endpoint
[  228.990957][ T2312] pvrusb2: Invalid write control endpoint
[  228.999487][ T2312] pvrusb2: Invalid write control endpoint
[  229.011562][ T2312] pvrusb2: Invalid write control endpoint
[  229.031612][ T2312] pvrusb2: Invalid write control endpoint
[  229.058136][ T2312] pvrusb2: Invalid write control endpoint
[  229.073326][ T2312] pvrusb2: Invalid write control endpoint
[  229.081874][ T2312] pvrusb2: Invalid write control endpoint
[  229.107051][ T2312] pvrusb2: Invalid write control endpoint
[  229.113132][ T2312] pvrusb2: Invalid write control endpoint
[  229.122806][ T2312] pvrusb2: Invalid write control endpoint
[  229.129002][ T2312] pvrusb2: Invalid write control endpoint
[  229.142568][ T2312] pvrusb2: Invalid write control endpoint
[  229.151595][ T2312] pvrusb2: Invalid write control endpoint
[  229.167241][ T2312] pvrusb2: Invalid write control endpoint
[  229.173170][ T2312] pvrusb2: Invalid write control endpoint
[  229.184486][ T2312] pvrusb2: Invalid write control endpoint
[  229.190292][ T2312] pvrusb2: Invalid write control endpoint
[  229.212212][ T2312] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  229.492930][ T2312] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b)
[  229.499545][ T2312] pvrusb2: Invalid write control endpoint
[  229.539272][ T2312] pvrusb2: Invalid write control endpoint
[  229.553560][ T2312] pvrusb2: Invalid write control endpoint
[  229.585682][ T2312] pvrusb2: Invalid write control endpoint
[  229.591477][ T2312] pvrusb2: Invalid write control endpoint
[  229.622363][ T2312] pvrusb2: Invalid write control endpoint
[  229.652860][ T2312] pvrusb2: Invalid write control endpoint
[  229.686863][ T2312] pvrusb2: Invalid write control endpoint
[  229.703813][ T2312] pvrusb2: Invalid write control endpoint
[  229.729593][ T2312] pvrusb2: Invalid write control endpoint
[  229.740308][ T2312] pvrusb2: Invalid write control endpoint
[  229.758458][ T2312] pvrusb2: Invalid write control endpoint
[  229.785354][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  229.798183][ T2312] pvrusb2: Invalid write control endpoint
[  229.817528][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  229.820471][ T2312] pvrusb2: Invalid write control endpoint
[  229.870669][ T2312] pvrusb2: Invalid write control endpoint
[  229.883053][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  229.889290][ T2312] pvrusb2: Invalid write control endpoint
[  229.912194][ T2312] pvrusb2: Invalid write control endpoint
[  229.936991][ T2312] pvrusb2: Invalid write control endpoint
[  229.938717][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  229.959744][ T2312] pvrusb2: Invalid write control endpoint
[  229.987358][ T2312] pvrusb2: Invalid write control endpoint
[  230.006438][ T2312] pvrusb2: Invalid write control endpoint
[  230.008397][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  230.044673][ T2312] pvrusb2: Attached sub-driver cs53l32a
[  230.094043][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  230.165039][ T7233] device veth0_vlan entered promiscuous mode
[  230.230588][ T7233] device veth1_vlan entered promiscuous mode
[  230.318359][ T2312] pvrusb2: Invalid write control endpoint
[  230.318411][ T2312] pvrusb2: Invalid write control endpoint
[  230.318426][ T2312] pvrusb2: Invalid write control endpoint
[  230.318440][ T2312] pvrusb2: Invalid write control endpoint
[  230.318448][ T2312] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  230.318483][ T2312] pvrusb2: Device being rendered inoperable
[  230.318505][ T2312] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  230.318513][ T2312] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  230.318542][ T2312] pvrusb2: Invalid write control endpoint
[  230.343756][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  230.344493][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  230.365243][ T7233] device veth0_macvtap entered promiscuous mode
[  230.584064][ T2312] pvrusb2: Invalid write control endpoint
[  230.592693][ T2312] pvrusb2: Invalid write control endpoint
[  230.594949][ T7483] binder: 7482:7483 ioctl c0306201 0 returned -14
[  230.631158][ T2312] pvrusb2: Invalid write control endpoint
[  230.649349][ T2312] pvrusb2: Invalid write control endpoint
[  230.669899][ T2312] pvrusb2: Invalid write control endpoint
[  230.719532][ T2312] pvrusb2: Invalid write control endpoint
[  230.737345][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  230.755444][ T2312] pvrusb2: Invalid write control endpoint
[  230.762224][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  230.770774][ T4319] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  230.788788][ T2312] pvrusb2: Invalid write control endpoint
[  230.808030][ T7233] device veth1_macvtap entered promiscuous mode
[  230.818982][ T2312] pvrusb2: Invalid write control endpoint
[  230.832471][ T2312] pvrusb2: Invalid write control endpoint
[  230.832494][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  230.849244][ T2312] pvrusb2: Invalid write control endpoint
[  230.872905][ T2312] pvrusb2: Invalid write control endpoint
[  230.882908][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  230.889202][ T2312] pvrusb2: Invalid write control endpoint
[  230.926988][ T2312] pvrusb2: Invalid write control endpoint
[  230.950299][ T2312] pvrusb2: Invalid write control endpoint
[  230.963516][ T4319] usb 5-1: Using ep0 maxpacket: 8
[  230.970390][ T4319] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  231.001262][ T2312] pvrusb2: Invalid write control endpoint
[  231.029538][ T4319] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  231.039938][ T2312] pvrusb2: Invalid write control endpoint
[  231.047452][ T7507] device syzkaller0 entered promiscuous mode
[  231.060601][ T2312] pvrusb2: Invalid write control endpoint
[  231.067783][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.080622][ T2312] pvrusb2: Invalid write control endpoint
[  231.088868][ T2312] pvrusb2: Invalid write control endpoint
[  231.089646][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.104483][ T4319] usb 5-1: config 0 descriptor??
[  231.111018][ T2312] pvrusb2: Invalid write control endpoint
[  231.124870][ T4319] gspca_main: vc032x-2.14.0 probing 046d:0892
[  231.136499][ T2312] pvrusb2: Invalid write control endpoint
[  231.148062][ T2312] pvrusb2: Invalid write control endpoint
[  231.160297][ T2312] pvrusb2: Invalid write control endpoint
[  231.161661][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.169655][ T7511] jffs2: notice: (7511) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  231.192663][ T2312] pvrusb2: Invalid write control endpoint
[  231.201177][ T2312] pvrusb2: Invalid write control endpoint
[  231.203250][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.207426][ T2312] pvrusb2: Invalid write control endpoint
[  231.233541][ T2312] pvrusb2: Invalid write control endpoint
[  231.241038][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.241375][ T2312] pvrusb2: Invalid write control endpoint
[  231.269847][ T2312] pvrusb2: Invalid write control endpoint
[  231.273331][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.276190][ T2312] pvrusb2: Invalid write control endpoint
[  231.292270][ T2312] pvrusb2: Invalid write control endpoint
[  231.328062][ T4319] gspca_vc032x: reg_r err -32
[  231.332991][ T4319] vc032x: probe of 5-1:0.0 failed with error -32
[  231.349269][ T2312] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  231.367514][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.385749][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.404551][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.415316][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.437210][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.463737][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.483382][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.505150][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.548149][ T2312] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_c)
[  231.564704][ T2312] pvrusb2: Invalid write control endpoint
[  231.580781][ T2312] pvrusb2: Invalid write control endpoint
[  231.601167][ T2312] pvrusb2: Invalid write control endpoint
[  231.621596][ T2312] pvrusb2: Invalid write control endpoint
[  231.629343][ T2312] pvrusb2: Invalid write control endpoint
[  231.648747][ T2312] pvrusb2: Invalid write control endpoint
[  231.665388][ T2312] pvrusb2: Invalid write control endpoint
[  231.691831][ T2312] pvrusb2: Invalid write control endpoint
[  231.716715][ T2312] pvrusb2: Invalid write control endpoint
[  231.731320][ T2312] pvrusb2: Invalid write control endpoint
[  231.737508][ T2312] pvrusb2: Invalid write control endpoint
[  231.752240][ T2312] pvrusb2: Invalid write control endpoint
[  231.767301][ T2312] pvrusb2: Invalid write control endpoint
[  231.773130][ T2312] pvrusb2: Invalid write control endpoint
[  231.789725][ T2312] pvrusb2: Invalid write control endpoint
[  231.796611][ T2312] pvrusb2: Invalid write control endpoint
[  231.810302][ T2312] pvrusb2: Invalid write control endpoint
[  231.816635][ T2312] pvrusb2: Invalid write control endpoint
[  231.833994][ T2312] pvrusb2: Invalid write control endpoint
[  231.848947][ T2312] pvrusb2: Invalid write control endpoint
[  231.854957][ T2312] pvrusb2: Invalid write control endpoint
[  231.861645][ T2312] pvrusb2: Attached sub-driver cs53l32a
[  232.039278][ T2312] pvrusb2: Invalid write control endpoint
[  232.045289][ T2312] pvrusb2: Invalid write control endpoint
[  232.083230][ T2312] pvrusb2: Invalid write control endpoint
[  232.109331][ T2312] pvrusb2: Invalid write control endpoint
[  232.116340][ T4288] Bluetooth: hci5: command 0x0406 tx timeout
[  232.127815][ T2312] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  232.175942][ T2312] pvrusb2: Device being rendered inoperable
[  232.182040][ T2312] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  232.195661][ T2312] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  232.813972][ T7534] jffs2: notice: (7534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  232.864652][ T7534] netlink: 'syz.4.828': attribute type 5 has an invalid length.
[  233.985873][  T127] usb 5-1: USB disconnect, device number 23
[  234.673401][ T4319] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  234.888669][ T4319] usb 5-1: Using ep0 maxpacket: 8
[  234.910479][ T4319] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  234.926712][ T4319] usb 5-1: config 0 has no interface number 0
[  234.936633][ T4319] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  234.951435][ T4319] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  234.966957][ T4319] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  234.986080][ T4319] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  234.996380][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.030821][ T4319] usb 5-1: config 0 descriptor??
[  235.053678][ T4319] ldusb 5-1:0.55: Interrupt in endpoint not found
[  235.279543][   T14] usb 5-1: USB disconnect, device number 24
[  235.447723][ T7543] sg_write: data in/out 355776/136 bytes for SCSI command 0x0-- guessing data in;
[  235.447723][ T7543]    program syz.4.837 not setting count and/or reply_len properly
[  236.057018][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  236.074299][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  236.092265][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.155669][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.200526][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.226829][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.260644][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.310469][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.332758][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.356284][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.380178][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.404116][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.425296][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.448614][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.489453][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.517778][ T7527] device syzkaller0 entered promiscuous mode
[  236.534746][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  236.558798][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  236.667629][ T7233] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.726521][ T7233] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.748728][ T7233] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.777097][ T7233] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.794328][ T7559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.802942][ T7559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.857860][ T7559] jffs2: notice: (7559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  236.964723][ T7559] netlink: 'syz.0.843': attribute type 5 has an invalid length.
[  237.011592][ T7275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.030275][ T7275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.067650][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  237.099859][ T7268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.118890][ T7268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.136798][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  237.730149][ T7578] device syzkaller0 entered promiscuous mode
[  237.889241][ T7594] jffs2: notice: (7594) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  239.650343][ T4284] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  239.862166][ T4284] usb 5-1: Using ep0 maxpacket: 8
[  239.875055][ T4284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.892396][ T4284] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  239.905200][ T4284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.945339][ T4284] usb 5-1: config 0 descriptor??
[  239.969364][ T4284] gspca_main: vc032x-2.14.0 probing 046d:0892
[  240.171309][ T4284] gspca_vc032x: reg_r err -32
[  240.177488][ T4284] vc032x: probe of 5-1:0.0 failed with error -32
[  241.626308][ T7648] jffs2: notice: (7648) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  241.667147][ T7648] netlink: 'syz.4.860': attribute type 5 has an invalid length.
[  242.811500][ T4284] usb 5-1: USB disconnect, device number 25
[  243.003077][ T7655] jffs2: notice: (7655) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  243.584996][ T7671] FAULT_INJECTION: forcing a failure.
[  243.584996][ T7671] name failslab, interval 1, probability 0, space 0, times 0
[  243.663052][ T7671] CPU: 0 PID: 7671 Comm: syz.6.871 Not tainted syzkaller #0
[  243.670408][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  243.680488][ T7671] Call Trace:
[  243.683786][ T7671]  <TASK>
[  243.686736][ T7671]  dump_stack_lvl+0x188/0x24e
[  243.691441][ T7671]  ? show_regs_print_info+0x12/0x12
[  243.696661][ T7671]  ? load_image+0x410/0x410
[  243.701192][ T7671]  ? __lock_acquire+0x7c40/0x7c40
[  243.706253][ T7671]  should_fail_ex+0x390/0x4c0
[  243.710968][ T7671]  should_failslab+0x5/0x20
[  243.715490][ T7671]  slab_pre_alloc_hook+0x59/0x300
[  243.720544][ T7671]  kmem_cache_alloc_lru+0x49/0x2e0
[  243.725676][ T7671]  ? sock_alloc_inode+0x24/0xc0
[  243.730551][ T7671]  sock_alloc_inode+0x24/0xc0
[  243.735249][ T7671]  ? sockfs_init_fs_context+0xa0/0xa0
[  243.740653][ T7671]  new_inode_pseudo+0x5f/0x1c0
[  243.745438][ T7671]  __sock_create+0x129/0x940
[  243.750056][ T7671]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  243.756070][ T7671]  __sys_socket+0xc4/0x190
[  243.760523][ T7671]  __x64_sys_socket+0x76/0x80
[  243.765235][ T7671]  do_syscall_64+0x4c/0xa0
[  243.769675][ T7671]  ? clear_bhb_loop+0x60/0xb0
[  243.774370][ T7671]  ? clear_bhb_loop+0x60/0xb0
[  243.779071][ T7671]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  243.784995][ T7671] RIP: 0033:0x7fc69c59e159
[  243.789429][ T7671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.809034][ T7671] RSP: 002b:00007fc69d426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  243.817457][ T7671] RAX: ffffffffffffffda RBX: 00007fc69c825fa0 RCX: 00007fc69c59e159
[  243.825422][ T7671] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a
[  243.833381][ T7671] RBP: 00007fc69c63506b R08: 0000000000000000 R09: 0000000000000000
[  243.841343][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.849300][ T7671] R13: 00007fc69c826038 R14: 00007fc69c825fa0 R15: 00007ffed59f7eb8
[  243.857270][ T7671]  </TASK>
[  244.127227][ T7671] socket: no more sockets
[  244.650692][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.792909][ T7701] nvmet: disable ns before setting buffered_io value.
[  244.973677][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.379623][ T7709] device syzkaller0 entered promiscuous mode
[  246.091077][ T7735] nvmet: disable ns before setting buffered_io value.
[  246.164753][ T7732] nvmet: Invalid value 'loop
[  246.164753][ T7732] Þ�R&Ѹôž\J“‚öÔ«{tÉ
“Ñ•“õŠŽÝíUanü~s'ôS‹•‚,p»p×{*3A<>õ�Ã…ë´ÎtBä“ÿ&"âÞ:jÀ}ðãgáÉÎdù�S:Ξ¸•ZY5áðÿ‚µ‘Ô ÁD�boߺ¢ÃŸÙhàåBA8IÎöqq¾“DÌ3ƒD*6ç.
Ô«E�rÉ׈ñ¹°­pÜü
é.Íš9´¡ìm¥W¼Ecº¦áTgÕe6:ÏïBi¡
®ÀÚÁ‡2¾Ó°I5ó/1‘×xøyÕ?^kÃ33' for trtype
[  246.707905][ T7756] jffs2: notice: (7756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  246.754529][ T7755] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  246.963963][ T7677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  250.668737][ T7807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.686863][ T7806] jffs2: notice: (7806) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  250.737230][ T7807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.288906][  T127] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  251.602419][  T127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.626884][  T127] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  251.683342][  T127] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  251.733243][  T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.777743][  T127] usb 3-1: config 0 descriptor??
[  253.637240][ T7818] device syzkaller0 entered promiscuous mode
[  254.007163][   T14] usb 3-1: USB disconnect, device number 31
[  254.216644][ T7840] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  254.272421][ T7840] kvm: pic: single mode not supported
[  254.272499][ T7840] kvm: pic: non byte read
[  254.307256][ T7840] kvm: pic: level sensitive irq not supported
[  254.307572][ T7840] kvm: pic: non byte read
[  254.344053][ T7840] kvm: pic: level sensitive irq not supported
[  254.344363][ T7840] kvm: pic: non byte read
[  254.374061][ T7840] kvm: pic: level sensitive irq not supported
[  254.374178][ T7840] kvm: pic: non byte read
[  254.392050][ T7840] kvm: pic: level sensitive irq not supported
[  254.392165][ T7840] kvm: pic: non byte read
[  254.404062][ T7840] kvm: pic: level sensitive irq not supported
[  254.404221][ T7840] kvm: pic: non byte read
[  254.422598][ T7840] kvm: pic: level sensitive irq not supported
[  254.422662][ T7840] kvm: pic: non byte read
[  254.442825][ T7840] kvm: pic: level sensitive irq not supported
[  254.442892][ T7840] kvm: pic: non byte read
[  255.628648][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.635047][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.884495][ T7859] jffs2: notice: (7859) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  256.613948][ T7825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  258.970185][ T7864] netlink: 'syz.2.910': attribute type 17 has an invalid length.
[  259.009392][ T7864] infiniband syz0: set active
[  259.113583][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  259.164465][ T7864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.218843][ T7872] device syzkaller0 entered promiscuous mode
[  259.230924][ T4319] lo speed is unknown, defaulting to 1000
[  259.524845][ T7896] jffs2: notice: (7896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  259.791144][ T7903] jffs2: notice: (7903) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  260.155126][ T7918] nvmet: Invalid value 'loop
[  260.155126][ T7918] Þ�R&Ѹôž\J“‚öÔ«{tÉ
“Ñ•“õŠŽÝíUanü~s'ôS‹•‚,p»p×{*3A<>õ�Ã…ë´ÎtBä“ÿ&"âÞ:jÀ}ðãgáÉÎdù�S:Ξ¸•ZY5áðÿ‚µ‘Ô ÁD�boߺ¢ÃŸÙhàåBA8IÎöqq¾“DÌ3ƒD*6ç.
Ô«E�rÉ׈ñ¹°­pÜü
é.Íš9´¡ìm¥W¼Ecº¦áTgÕe6:ÏïBi¡
®ÀÚÁ‡2¾Ó°I5ó/1‘×xøyÕ?^kÃ33' for trtype
[  260.315428][ T7920] netlink: 'syz.0.926': attribute type 17 has an invalid length.
[  260.397112][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  260.444234][ T7920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  260.785575][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready
[  260.839524][ T7932] sl0: header compression turned on
[  261.091594][ T7937] jffs2: notice: (7937) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  261.773175][ T7956] nvmet: Invalid value 'loop
[  261.773175][ T7956] Þ�R&Ѹôž\J“‚öÔ«{tÉ
“Ñ•“õŠŽÝíUanü~s'ôS‹•‚,p»p×{*3A<>õ�Ã…ë´ÎtBä“ÿ&"âÞ:jÀ}ðãgáÉÎdù�S:Ξ¸•ZY5áðÿ‚µ‘Ô ÁD�boߺ¢ÃŸÙhàåBA8IÎöqq¾“DÌ3ƒD*6ç.
Ô«E�rÉ׈ñ¹°­pÜü
é.Íš9´¡ìm¥W¼Ecº¦áTgÕe6:ÏïBi¡
®ÀÚÁ‡2¾Ó°I5ó/1‘×xøyÕ?^kÃ33' for trtype
[  262.661688][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready
[  263.085559][ T7997] jffs2: notice: (7997) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  263.738201][ T8017] nvmet: Invalid value 'loop
[  263.738201][ T8017] Þ�R&Ѹôž\J“‚öÔ«{tÉ
“Ñ•“õŠŽÝíUanü~s'ôS‹•‚,p»p×{*3A<>õ�Ã…ë´ÎtBä“ÿ&"âÞ:jÀ}ðãgáÉÎdù�S:Ξ¸•ZY5áðÿ‚µ‘Ô ÁD�boߺ¢ÃŸÙhàåBA8IÎöqq¾“DÌ3ƒD*6ç.
Ô«E�rÉ׈ñ¹°­pÜü
é.Íš9´¡ìm¥W¼Ecº¦áTgÕe6:ÏïBi¡
®ÀÚÁ‡2¾Ó°I5ó/1‘×xøyÕ?^kÃ33' for trtype
[  264.091635][ T8020] jffs2: notice: (8020) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  265.286505][ T8051] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready
[  265.339344][ T8053] sl0: header compression turned on
[  265.475748][ T8056] jffs2: notice: (8056) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  266.367657][ T8084] jffs2: notice: (8084) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  267.211686][ T8109] jffs2: notice: (8109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  267.863190][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready
[  268.248378][  T127] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  268.497956][  T127] usb 2-1: device descriptor read/64, error -71
[  268.870012][  T127] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  269.121332][  T127] usb 2-1: device descriptor read/64, error -71
[  269.293382][  T127] usb usb2-port1: attempt power cycle
[  269.377754][ T4351] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  269.677950][ T4351] usb 7-1: Using ep0 maxpacket: 16
[  269.810050][  T127] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  269.849108][ T4351] usb 7-1: unable to read config index 0 descriptor/start: -61
[  269.856779][ T4351] usb 7-1: can't read configurations, error -61
[  269.909894][  T127] usb 2-1: device descriptor read/8, error -71
[  269.959251][ T8169] jffs2: notice: (8169) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  270.100767][ T4351] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  270.127677][ T8173] Could not find key with description: [syz]
[  270.213923][ T8173] process_request_key_err: No key
[  270.243251][ T8173] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  270.268059][  T127] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  270.323091][ T8173] One or more global auth toks could not properly register; rc = [-2]
[  270.337780][  T127] usb 2-1: device descriptor read/8, error -71
[  270.403442][ T8173] Error parsing options; rc = [-2]
[  270.427686][ T4351] usb 7-1: Using ep0 maxpacket: 16
[  270.483554][  T127] usb usb2-port1: unable to enumerate USB device
[  270.523046][ T4351] usb 7-1: unable to read config index 0 descriptor/start: -61
[  270.533324][ T4351] usb 7-1: can't read configurations, error -61
[  270.606326][ T4351] usb usb7-port1: attempt power cycle
[  271.022317][ T8187] jffs2: notice: (8187) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  271.133188][ T4351] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  271.317794][ T4351] usb 7-1: Using ep0 maxpacket: 16
[  271.504774][ T4351] usb 7-1: unable to read config index 0 descriptor/start: -61
[  271.515538][ T4351] usb 7-1: can't read configurations, error -61
[  271.766959][ T4351] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  271.913997][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready
[  271.919016][ T4351] usb 7-1: Using ep0 maxpacket: 16
[  271.978232][ T8212] sl0: header compression turned on
[  272.209637][ T4351] usb 7-1: unable to read config index 0 descriptor/start: -71
[  272.224815][ T4351] usb 7-1: can't read configurations, error -71
[  272.265130][ T4351] usb usb7-port1: unable to enumerate USB device
[  273.053021][ T8231] jffs2: notice: (8231) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  273.087690][ T4286] Bluetooth: hci2: command 0x0406 tx timeout
[  273.155801][   T14] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  273.355125][   T14] usb 2-1: Using ep0 maxpacket: 32
[  273.367859][   T14] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  273.433369][   T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.472386][   T14] usb 2-1: config 0 has no interfaces?
[  273.504133][   T14] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  273.537249][   T14] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  273.582933][ T8244] Could not find key with description: [syz]
[  273.589346][   T14] usb 2-1: Product: syz
[  273.604319][   T14] usb 2-1: Manufacturer: syz
[  273.608972][   T14] usb 2-1: SerialNumber: syz
[  273.670560][   T14] usb 2-1: config 0 descriptor??
[  273.764811][ T8244] process_request_key_err: No key
[  273.819728][ T8244] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  274.012217][ T8244] One or more global auth toks could not properly register; rc = [-2]
[  274.056178][ T8244] Error parsing options; rc = [-2]
[  275.073493][ T4284] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  275.263356][ T4284] usb 5-1: Using ep0 maxpacket: 16
[  275.270770][ T4284] usb 5-1: unable to read config index 0 descriptor/start: -61
[  275.302694][ T8280] jffs2: notice: (8280) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  275.343689][ T4284] usb 5-1: can't read configurations, error -61
[  275.517329][ T4284] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  275.723394][ T4284] usb 5-1: Using ep0 maxpacket: 16
[  275.730891][ T4284] usb 5-1: unable to read config index 0 descriptor/start: -61
[  275.766568][ T4284] usb 5-1: can't read configurations, error -61
[  275.783721][ T4284] usb usb5-port1: attempt power cycle
[  275.948565][ T4223] usb 2-1: USB disconnect, device number 32
[  276.246337][ T4284] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  276.318100][ T4284] usb 5-1: Using ep0 maxpacket: 16
[  276.329692][ T4284] usb 5-1: unable to read config index 0 descriptor/start: -61
[  276.357630][ T4284] usb 5-1: can't read configurations, error -61
[  276.400843][ T8306] Could not find key with description: [syz]
[  276.443310][ T8306] process_request_key_err: No key
[  276.501176][ T8306] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  276.553525][ T4284] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  276.588636][ T8306] One or more global auth toks could not properly register; rc = [-2]
[  276.632228][ T4284] usb 5-1: Using ep0 maxpacket: 16
[  276.645716][ T4284] usb 5-1: unable to read config index 0 descriptor/start: -61
[  276.673382][ T8306] Error parsing options; rc = [-2]
[  276.684027][ T4284] usb 5-1: can't read configurations, error -61
[  276.703589][ T4284] usb usb5-port1: unable to enumerate USB device
[  276.714755][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.784759][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.070382][ T8311] jffs2: notice: (8311) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  278.496862][ T8347] jffs2: notice: (8347) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  278.553610][   T14] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  278.780642][   T14] usb 2-1: Using ep0 maxpacket: 32
[  278.788927][   T14] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  278.843383][   T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.883411][   T14] usb 2-1: config 0 has no interfaces?
[  278.904530][ T8348] device syzkaller0 entered promiscuous mode
[  278.913698][   T14] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  278.938625][   T14] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  278.973594][   T14] usb 2-1: Product: syz
[  278.989903][   T14] usb 2-1: Manufacturer: syz
[  279.008382][   T14] usb 2-1: SerialNumber: syz
[  279.043896][   T14] usb 2-1: config 0 descriptor??
[  279.683562][ T4284] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  279.893511][ T4284] usb 7-1: Using ep0 maxpacket: 16
[  279.902435][ T4284] usb 7-1: unable to read config index 0 descriptor/start: -61
[  279.923597][ T4284] usb 7-1: can't read configurations, error -61
[  280.103436][ T4284] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  280.327245][ T4284] usb 7-1: Using ep0 maxpacket: 16
[  280.364231][ T4284] usb 7-1: unable to read config index 0 descriptor/start: -61
[  280.396789][ T4284] usb 7-1: can't read configurations, error -61
[  280.438834][ T4284] usb usb7-port1: attempt power cycle
[  280.941367][ T4284] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  281.024913][ T4284] usb 7-1: Using ep0 maxpacket: 16
[  281.035091][ T4284] usb 7-1: unable to read config index 0 descriptor/start: -61
[  281.042715][ T4284] usb 7-1: can't read configurations, error -61
[  281.249789][ T4284] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  281.305259][ T4284] usb 7-1: Using ep0 maxpacket: 16
[  281.315047][ T4284] usb 7-1: unable to read config index 0 descriptor/start: -61
[  281.349104][  T127] usb 2-1: USB disconnect, device number 33
[  281.359075][ T4284] usb 7-1: can't read configurations, error -61
[  281.384435][ T4284] usb usb7-port1: unable to enumerate USB device
[  282.000801][  T127] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  282.267786][  T127] usb 2-1: Using ep0 maxpacket: 8
[  282.354617][  T127] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.377821][  T127] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  282.404282][  T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.450506][  T127] usb 2-1: config 0 descriptor??
[  282.484544][  T127] gspca_main: vc032x-2.14.0 probing 046d:0892
[  282.691537][  T127] gspca_vc032x: reg_r err -32
[  282.696442][  T127] vc032x: probe of 2-1:0.0 failed with error -32
[  283.391035][ T8388] jffs2: notice: (8388) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  284.202755][ T8400] jffs2: notice: (8400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  285.412809][ T4317] usb 2-1: USB disconnect, device number 34
[  285.703946][ T4335] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  285.893414][ T4335] usb 7-1: Using ep0 maxpacket: 16
[  285.903140][ T4335] usb 7-1: unable to read config index 0 descriptor/start: -61
[  285.932754][ T4335] usb 7-1: can't read configurations, error -61
[  286.110679][ T4335] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  286.313420][ T4335] usb 7-1: Using ep0 maxpacket: 16
[  286.341495][ T4335] usb 7-1: unable to read config index 0 descriptor/start: -61
[  286.359216][ T4335] usb 7-1: can't read configurations, error -61
[  286.366662][ T4335] usb usb7-port1: attempt power cycle
[  286.813466][ T4335] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  286.867084][ T4335] usb 7-1: Using ep0 maxpacket: 16
[  286.879287][ T4335] usb 7-1: unable to read config index 0 descriptor/start: -61
[  286.898914][ T4335] usb 7-1: can't read configurations, error -61
[  287.071890][ T4335] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  287.113836][ T4335] usb 7-1: Using ep0 maxpacket: 16
[  287.159937][ T4335] usb 7-1: unable to read config index 0 descriptor/start: -61
[  287.188041][ T4335] usb 7-1: can't read configurations, error -61
[  287.218572][ T4335] usb usb7-port1: unable to enumerate USB device
[  287.256264][ T8424] jffs2: notice: (8424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  287.262506][ T8421] device syzkaller0 entered promiscuous mode
[  288.003381][ T4284] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  288.196595][ T4284] usb 2-1: Using ep0 maxpacket: 8
[  288.205658][ T4284] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.229193][ T4284] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  288.245131][ T4284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.291880][ T4284] usb 2-1: config 0 descriptor??
[  288.322813][ T4284] gspca_main: vc032x-2.14.0 probing 046d:0892
[  288.514035][ T4284] gspca_vc032x: reg_r err -32
[  288.519101][ T4284] vc032x: probe of 2-1:0.0 failed with error -32
[  289.534085][ T8462] jffs2: notice: (8462) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found.
[  290.023775][ T4284] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  290.023816][ T8482] jffs2: notice: (8482) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found.
[  290.240032][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.240916][ T4284] usb 5-1: Using ep0 maxpacket: 8
[  290.267351][ T4284] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  290.279084][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.284342][ T4284] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  290.311817][ T4284] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  290.339356][ T4284] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  290.387324][ T4284] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  290.446672][ T4284] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  290.474052][ T4284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.507344][ T4284] usbtmc 5-1:16.0: bulk endpoints not found
[  291.347159][ T4317] usb 2-1: USB disconnect, device number 35
[  292.659781][  T127] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  292.833918][ T4335] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  292.869325][ T8548] loop2: detected capacity change from 0 to 512
[  292.881046][ T4317] usb 5-1: USB disconnect, device number 30
[  292.901522][  T127] usb 7-1: Using ep0 maxpacket: 16
[  292.953965][ T8548] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  292.982740][ T8548] UDF-fs: Scanning with blocksize 512 failed
[  293.020134][  T127] usb 7-1: unable to read config index 0 descriptor/start: -61
[  293.022689][ T8553] device syzkaller0 entered promiscuous mode
[  293.028841][  T127] usb 7-1: can't read configurations, error -61
[  293.053808][ T4335] usb 2-1: Using ep0 maxpacket: 8
[  293.055723][ T8548] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  293.078915][ T4335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.083372][ T8548] UDF-fs: Scanning with blocksize 1024 failed
[  293.126320][ T4335] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  293.162515][ T4335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.174012][ T8548] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  293.181437][ T8548] UDF-fs: Scanning with blocksize 2048 failed
[  293.222433][ T4335] usb 2-1: config 0 descriptor??
[  293.270415][ T4335] gspca_main: vc032x-2.14.0 probing 046d:0892
[  293.289034][  T127] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  293.301045][ T8548] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  293.370110][ T8548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  293.466579][ T4335] gspca_vc032x: reg_r err -32
[  293.472411][ T4335] vc032x: probe of 2-1:0.0 failed with error -32
[  293.568306][  T127] usb 7-1: Using ep0 maxpacket: 16
[  293.655778][  T127] usb 7-1: unable to read config index 0 descriptor/start: -61
[  293.673390][  T127] usb 7-1: can't read configurations, error -61
[  293.703969][  T127] usb usb7-port1: attempt power cycle
[  293.811177][ T8567] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1095'.
[  294.250372][  T127] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  294.328454][  T127] usb 7-1: Using ep0 maxpacket: 16
[  294.340860][ T8577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1097'.
[  294.423105][  T127] usb 7-1: unable to read config index 0 descriptor/start: -61
[  294.445819][  T127] usb 7-1: can't read configurations, error -61
[  294.658062][  T127] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  294.759316][  T127] usb 7-1: Using ep0 maxpacket: 16
[  294.832059][  T127] usb 7-1: unable to read config index 0 descriptor/start: -61
[  294.839704][  T127] usb 7-1: can't read configurations, error -61
[  294.877010][  T127] usb usb7-port1: unable to enumerate USB device
[  295.003649][ T4319] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  295.213472][ T4319] usb 5-1: Using ep0 maxpacket: 8
[  295.227040][ T4319] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  295.247999][ T4319] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  295.266358][ T4319] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  295.284351][ T4319] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  295.301588][ T4319] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  295.320585][ T4319] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  295.346165][ T4319] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  295.363057][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.395354][ T4319] usbtmc: probe of 5-1:16.0 failed with error -22
[  295.486235][ T8607] jffs2: notice: (8607) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found.
[  296.078924][ T4335] usb 2-1: USB disconnect, device number 36
[  296.088732][ T8622] loop2: detected capacity change from 0 to 256
[  296.204863][ T8622] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  296.736031][ T8632] loop1: detected capacity change from 0 to 512
[  296.783038][ T8633] device syzkaller0 entered promiscuous mode
[  296.816449][ T8632] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  296.841962][ T8632] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  296.941370][ T8632] EXT4-fs (loop1): 1 truncate cleaned up
[  296.998180][ T8632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  297.132411][ T8632] EXT4-fs (loop1): resizing filesystem from 256 to 2 blocks
[  297.153479][ T8632] EXT4-fs warning (device loop1): ext4_resize_fs:2051: can't shrink FS - resize aborted
[  297.260157][ T6227] EXT4-fs (loop1): unmounting filesystem.
[  297.407876][ T8641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1115'.
[  297.755095][ T4351] usb 5-1: USB disconnect, device number 31
[  297.979272][ T8656] device syzkaller0 entered promiscuous mode
[  298.103353][   T14] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  298.321727][ T8667] loop0: detected capacity change from 0 to 256
[  298.333443][   T14] usb 7-1: Using ep0 maxpacket: 8
[  298.340211][   T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.384929][   T14] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  298.424219][   T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.449844][   T14] usb 7-1: config 0 descriptor??
[  298.458285][ T8667] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  298.487640][   T14] gspca_main: vc032x-2.14.0 probing 046d:0892
[  298.577678][ T8667] FAULT_INJECTION: forcing a failure.
[  298.577678][ T8667] name failslab, interval 1, probability 0, space 0, times 0
[  298.640678][ T8667] CPU: 0 PID: 8667 Comm: syz.0.1126 Not tainted syzkaller #0
[  298.648117][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  298.658194][ T8667] Call Trace:
[  298.661486][ T8667]  <TASK>
[  298.664438][ T8667]  dump_stack_lvl+0x188/0x24e
[  298.669146][ T8667]  ? show_regs_print_info+0x12/0x12
[  298.674369][ T8667]  ? load_image+0x410/0x410
[  298.678908][ T8667]  ? __might_sleep+0xd0/0xd0
[  298.683525][ T8667]  ? __lock_acquire+0x7c40/0x7c40
[  298.688577][ T8667]  ? __crypto_alloc_tfm+0x12c/0x480
[  298.693803][ T8667]  should_fail_ex+0x390/0x4c0
[  298.698525][ T8667]  should_failslab+0x5/0x20
[  298.703045][ T8667]  slab_pre_alloc_hook+0x59/0x300
[  298.708087][ T8667]  ? skcipher_init_tfm_simple+0x5f/0x90
[  298.713662][ T8667]  ? init_skcipher_req+0x83/0x1b0
[  298.718714][ T8667]  __kmem_cache_alloc_node+0x4f/0x270
[  298.724115][ T8667]  ? init_skcipher_req+0x83/0x1b0
[  298.729176][ T8667]  __kmalloc+0xa3/0x240
[  298.733371][ T8667]  init_skcipher_req+0x83/0x1b0
[  298.738242][ T8667]  encrypted_read+0x2f5/0xe10
[  298.742949][ T8667]  ? encrypted_destroy+0x40/0x40
[  298.747904][ T8667]  ? __mod_lruvec_page_state+0xa1/0x410
[  298.753448][ T8667]  ? __might_sleep+0xd0/0xd0
[  298.758029][ T8667]  ? read_lock_is_recursive+0x10/0x10
[  298.763399][ T8667]  ? rcu_is_watching+0x11/0xa0
[  298.768162][ T8667]  ? down_read+0x1a8/0x2d0
[  298.772574][ T8667]  keyctl_read_key+0x292/0x460
[  298.777337][ T8667]  __se_sys_keyctl+0x17f/0x870
[  298.782098][ T8667]  ? __x64_sys_keyctl+0xc0/0xc0
[  298.786940][ T8667]  ? do_futex+0x310/0x320
[  298.791264][ T8667]  ? __ia32_sys_get_robust_list+0x100/0x100
[  298.797159][ T8667]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  298.803136][ T8667]  ? lock_chain_count+0x20/0x20
[  298.807985][ T8667]  ? lockdep_hardirqs_on+0x94/0x140
[  298.813176][ T8667]  ? __x64_sys_keyctl+0x1c/0xc0
[  298.818023][ T8667]  do_syscall_64+0x4c/0xa0
[  298.822429][ T8667]  ? clear_bhb_loop+0x60/0xb0
[  298.827103][ T8667]  ? clear_bhb_loop+0x60/0xb0
[  298.831775][ T8667]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  298.837664][ T8667] RIP: 0033:0x7f209239e159
[  298.842068][ T8667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.861668][ T8667] RSP: 002b:00007f2093229028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  298.870079][ T8667] RAX: ffffffffffffffda RBX: 00007f2092625fa0 RCX: 00007f209239e159
[  298.878043][ T8667] RDX: 0000200000000240 RSI: 000000002bd2fab9 RDI: 000000000000000b
[  298.886006][ T8667] RBP: 00007f209243506b R08: 0000000000000000 R09: 0000000000000000
[  298.893969][ T8667] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000
[  298.901932][ T8667] R13: 00007f2092626038 R14: 00007f2092625fa0 R15: 00007ffc5fa25d38
[  298.909906][ T8667]  </TASK>
[  298.933323][   T14] gspca_vc032x: reg_r err -32
[  298.938154][   T14] vc032x: probe of 7-1:0.0 failed with error -32
[  299.125300][ T8667] trusted_key: encrypted_key: failed to allocate request for cbc(aes)
[  299.635987][ T8685] loop0: detected capacity change from 0 to 8
[  299.690212][ T8685] SQUASHFS error: lzo decompression failed, data probably corrupt
[  299.712751][ T8685] SQUASHFS error: Failed to read block 0x91: -5
[  299.721137][ T8685] SQUASHFS error: Unable to read metadata cache entry [8f]
[  299.736211][ T8685] SQUASHFS error: Unable to read inode 0x11f
[  299.773500][   T14] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  299.781244][ T4319] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  299.983504][ T4319] usb 2-1: Using ep0 maxpacket: 8
[  300.009931][ T4319] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  300.018380][   T14] usb 5-1: Using ep0 maxpacket: 32
[  300.027420][   T14] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  300.050166][ T4319] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  300.061827][   T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  300.082101][ T4319] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  300.093897][   T14] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  300.113567][ T4319] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  300.123828][   T14] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[  300.137743][ T4319] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  300.161745][   T14] usb 5-1: config 0 interface 0 has no altsetting 0
[  300.169576][ T4319] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  300.183501][ T4319] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  300.197881][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.207671][   T14] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  300.219157][   T14] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  300.229407][   T14] usb 5-1: Product: syz
[  300.237606][ T4319] usbtmc: probe of 2-1:16.0 failed with error -22
[  300.254586][   T14] usb 5-1: Manufacturer: syz
[  300.260276][   T14] usb 5-1: SerialNumber: syz
[  300.308506][   T14] usb 5-1: config 0 descriptor??
[  300.333252][   T14] ldusb 5-1:0.0: Interrupt in endpoint not found
[  300.392607][ T8693] loop2: detected capacity change from 0 to 1024
[  300.768441][ T8698] loop2: detected capacity change from 0 to 512
[  300.946123][ T8698] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[  300.974950][ T8698] System zones: 0-7
[  301.056076][ T8698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  301.170408][ T8707] device syzkaller0 entered promiscuous mode
[  301.201073][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  301.482367][   T14] usb 7-1: USB disconnect, device number 18
[  301.692674][ T4351] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  301.956818][ T4351] usb 3-1: Using ep0 maxpacket: 8
[  302.793791][ T4223] usb 2-1: USB disconnect, device number 37
[  302.813735][ T4351] usb 3-1: unable to get BOS descriptor or descriptor too short
[  302.824138][   T14] usb 5-1: USB disconnect, device number 32
[  302.983004][ T4351] usb 3-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40
[  303.001469][ T4351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.024455][ T4351] usb 3-1: Product: syz
[  303.047144][ T4351] usb 3-1: Manufacturer: syz
[  303.061281][ T4351] usb 3-1: SerialNumber: syz
[  303.256383][ T8731] loop4: detected capacity change from 0 to 1024
[  303.366676][ T4351] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  303.393911][ T8731] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  303.436910][ T4351] usb 3-1: USB disconnect, device number 32
[  303.447879][ T8731] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.684355][ T4279] EXT4-fs (loop4): unmounting filesystem.
[  303.729292][ T4653] udevd[4653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  303.998479][ T8743] loop1: detected capacity change from 0 to 128
[  304.071628][ T8741] device syzkaller0 entered promiscuous mode
[  304.153335][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[  304.163330][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  304.173316][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  304.183317][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  304.193315][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  304.203312][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  304.213312][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  304.223317][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  304.233306][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  304.243316][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  305.753290][    C1] sched: RT throttling activated
[  306.346313][ T8748] syz.0.1145 (8748) used greatest stack depth: 19184 bytes left
[  306.362040][ T4319] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  306.563433][ T4319] usb 7-1: Using ep0 maxpacket: 8
[  306.581001][ T4319] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.634710][ T8754] device bridge0 entered promiscuous mode
[  306.644415][ T4319] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  306.670906][ T4319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.671992][ T8752] device bridge0 left promiscuous mode
[  306.729548][ T4319] usb 7-1: config 0 descriptor??
[  306.769689][ T4319] gspca_main: vc032x-2.14.0 probing 046d:0892
[  306.961981][ T4319] gspca_vc032x: reg_r err -32
[  306.967006][ T4319] vc032x: probe of 7-1:0.0 failed with error -32
[  307.081524][ T4223] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  307.096955][   T14] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  307.303486][   T14] usb 5-1: Using ep0 maxpacket: 32
[  307.310053][   T14] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  307.365664][   T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  307.371120][ T4223] usb 3-1: Using ep0 maxpacket: 8
[  307.403530][   T14] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  307.442337][   T14] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[  307.461487][ T4223] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  307.469911][ T4223] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  307.477676][   T14] usb 5-1: config 0 interface 0 has no altsetting 0
[  307.521594][   T14] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  307.531002][ T4223] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  307.552683][   T14] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  307.561403][ T4223] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  307.571881][   T14] usb 5-1: Product: syz
[  307.593069][ T4223] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  307.593077][   T14] usb 5-1: Manufacturer: syz
[  307.593098][ T4223] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  307.632488][   T14] usb 5-1: SerialNumber: syz
[  307.664785][   T14] usb 5-1: config 0 descriptor??
[  307.694056][   T14] ldusb 5-1:0.0: Interrupt in endpoint not found
[  307.707476][ T4223] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  307.768302][ T4223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.833463][ T4223] usbtmc: probe of 3-1:16.0 failed with error -22
[  308.021605][ T4223] usb 7-1: USB disconnect, device number 19
[  308.560713][ T8773] device syzkaller0 entered promiscuous mode
[  308.952205][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'.
[  309.355460][ T8783] device syzkaller0 entered promiscuous mode
[  309.513654][ T8785] device bridge0 entered promiscuous mode
[  309.535843][ T8784] device bridge0 left promiscuous mode
[  309.709003][ T4223] usb 3-1: USB disconnect, device number 33
[  309.898982][ T4351] usb 5-1: USB disconnect, device number 33
[  310.163840][ T8799] Error parsing options; rc = [-22]
[  310.294082][ T4317] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  310.480895][ T8801] loop4: detected capacity change from 0 to 2048
[  310.936322][ T8801] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  311.126060][ T4317] usb 7-1: device descriptor read/64, error -71
[  311.695576][ T4317] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  312.121755][ T8801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  312.610924][ T4317] usb 7-1: device descriptor read/64, error -71
[  312.809543][ T4317] usb usb7-port1: attempt power cycle
[  313.344117][ T8826] device syzkaller0 entered promiscuous mode
[  313.835283][   T26] audit: type=1326 audit(1790387721.453:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.0.1178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209239e159 code=0x7ffc0000
[  314.053464][ T4319] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  314.129652][   T26] audit: type=1326 audit(1790387721.453:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.0.1178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209239e159 code=0x7ffc0000
[  314.263643][ T4319] usb 2-1: Using ep0 maxpacket: 32
[  314.277505][ T4319] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  314.318171][ T4319] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.363575][   T26] audit: type=1326 audit(1790387721.453:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.0.1178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209239e159 code=0x7ffc0000
[  314.388943][ T4319] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  314.455234][ T4319] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[  314.469729][   T26] audit: type=1326 audit(1790387721.453:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.0.1178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209239e159 code=0x7ffc0000
[  314.479440][ T4319] usb 2-1: config 0 interface 0 has no altsetting 0
[  314.532880][ T4319] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  314.562749][ T4319] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  314.582546][ T4319] usb 2-1: Product: syz
[  314.582693][   T26] audit: type=1326 audit(1790387721.453:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.0.1178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f209239e159 code=0x7ffc0000
[  314.593359][ T4319] usb 2-1: Manufacturer: syz
[  314.693730][   T26] audit: type=1326 audit(1790387721.453:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.0.1178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209239e159 code=0x7ffc0000
[  314.701977][ T4319] usb 2-1: SerialNumber: syz
[  314.792983][ T4319] usb 2-1: config 0 descriptor??
[  314.798256][   T26] audit: type=1326 audit(1790387721.453:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.0.1178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209239e159 code=0x7ffc0000
[  314.798294][   T26] audit: type=1326 audit(1790387721.463:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.0.1178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209239e159 code=0x7ffc0000
[  314.798322][   T26] audit: type=1326 audit(1790387721.463:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.0.1178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209239e159 code=0x7ffc0000
[  314.798349][   T26] audit: type=1326 audit(1790387721.463:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.0.1178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f209239e159 code=0x7ffc0000
[  314.894432][ T4319] ldusb 2-1:0.0: Interrupt in endpoint not found
[  315.080796][ T4317] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  315.220133][ T8858] Error parsing options; rc = [-22]
[  315.368466][ T4317] usb 5-1: device descriptor read/64, error -71
[  315.582122][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.614700][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.703506][ T4317] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  315.909383][ T4317] usb 5-1: device descriptor read/64, error -71
[  316.060989][ T4317] usb usb5-port1: attempt power cycle
[  316.538831][ T4317] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  316.624950][ T4351] usb 2-1: USB disconnect, device number 38
[  316.656982][ T4317] usb 5-1: device descriptor read/8, error -71
[  316.668397][ T8875] device syzkaller0 entered promiscuous mode
[  316.949825][ T8883] loop0: detected capacity change from 0 to 512
[  316.970109][ T8883] EXT4-fs: Ignoring removed mblk_io_submit option
[  317.035049][ T8883] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  317.043375][ T4317] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  317.068025][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.074387][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.138878][ T4317] usb 5-1: device descriptor read/8, error -71
[  317.177628][ T8883] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1196: Failed to acquire dquot type 0
[  317.180626][ T8889] device syzkaller0 entered promiscuous mode
[  317.244242][ T8883] EXT4-fs (loop0): Remounting filesystem read-only
[  317.275744][ T4317] usb usb5-port1: unable to enumerate USB device
[  317.297207][ T8883] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1196: Failed to acquire dquot type 0
[  317.360029][ T8883] EXT4-fs (loop0): Remounting filesystem read-only
[  317.412956][ T8883] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 44 vs 41 free clusters
[  317.446401][ T8883] EXT4-fs (loop0): Remounting filesystem read-only
[  317.468532][ T8883] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1196: Failed to acquire dquot type 0
[  317.501516][ T8883] EXT4-fs (loop0): Remounting filesystem read-only
[  317.506335][ T8897] Error parsing options; rc = [-22]
[  317.518120][ T8883] EXT4-fs (loop0): 1 orphan inode deleted
[  317.563333][ T8883] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  317.603397][ T8883] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.871922][ T8883] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1196: Failed to acquire dquot type 0
[  318.223242][ T8905] loop1: detected capacity change from 0 to 2048
[  318.383654][ T8883] EXT4-fs (loop0): Remounting filesystem read-only
[  318.848232][ T8905] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  319.690204][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  319.853469][ T8905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  320.829818][ T4223] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  320.907545][ T8921] device syzkaller0 entered promiscuous mode
[  321.109976][ T4223] usb 5-1: Using ep0 maxpacket: 32
[  321.211333][ T4223] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  321.223335][ T4223] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  321.282600][ T4223] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  321.332389][ T4223] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  321.428659][ T4223] usb 5-1: config 0 interface 0 has no altsetting 0
[  321.968172][ T4223] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  322.001642][ T4223] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  322.063347][ T4223] usb 5-1: Product: syz
[  322.067560][ T4223] usb 5-1: Manufacturer: syz
[  322.072164][ T4223] usb 5-1: SerialNumber: syz
[  322.197043][ T4223] usb 5-1: config 0 descriptor??
[  322.227514][ T8937] loop2: detected capacity change from 0 to 512
[  322.229383][ T4223] ldusb 5-1:0.0: Interrupt in endpoint not found
[  322.605432][ T8937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  322.812786][ T8952] loop0: detected capacity change from 0 to 2048
[  323.270542][ T8937] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.379346][ T8952] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  324.568634][ T8952] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  324.586395][   T26] kauditd_printk_skb: 71 callbacks suppressed
[  324.588077][   T26] audit: type=1800 audit(1790387732.053:77): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1214" name="file1" dev="loop2" ino=15 res=0 errno=0
[  325.229986][ T4319] usb 5-1: USB disconnect, device number 38
[  325.283672][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  325.675638][ T8970] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1225'.
[  325.999873][ T8983] device syzkaller0 entered promiscuous mode
[  326.154916][ T8988] loop2: detected capacity change from 0 to 8
[  326.258307][ T4223] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  326.283397][ T1172] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  326.358864][ T8988] SQUASHFS error: Failed to read block 0x4de: -5
[  326.374752][ T8988] SQUASHFS error: Failed to read block 0x4de: -5
[  326.382523][   T26] audit: type=1800 audit(1790387734.013:78): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1232" name="file1" dev="loop2" ino=5 res=0 errno=0
[  326.419650][ T8988] SQUASHFS error: Failed to read block 0x4de: -5
[  326.440504][ T8988] SQUASHFS error: Failed to read block 0x4de: -5
[  326.465502][ T8988] SQUASHFS error: Failed to read block 0x4de: -5
[  326.470290][ T8992] loop0: detected capacity change from 0 to 2048
[  326.482417][ T8988] SQUASHFS error: Failed to read block 0x4de: -5
[  326.528733][ T4223] usb 2-1: Using ep0 maxpacket: 8
[  326.532912][ T1172] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  326.548563][ T8992] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  326.565032][ T1172] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  326.611500][ T1172] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  326.654766][ T1172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.750492][ T1172] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  326.778789][ T4223] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  326.779956][ T8992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  326.789073][ T4223] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  326.789099][ T4223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.281051][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.720363][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.956716][ T9012] loop0: detected capacity change from 0 to 512
[  329.018073][ T9012] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  329.210824][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  330.670532][ T4319] usb 2-1: USB disconnect, device number 39
[  330.732451][ T4375] usb 5-1: USB disconnect, device number 39
[  331.122765][ T9037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.181741][ T9037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.852875][ T9084] jffs2: notice: (9084) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found.
[  333.934899][ T9087] device syzkaller0 entered promiscuous mode
[  334.171705][ T9099] loop2: detected capacity change from 0 to 512
[  334.203194][   T26] audit: type=1326 audit(1790387741.833:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.1.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef8f9e159 code=0x7ffc0000
[  334.286125][ T9099] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1272: missing EA_INODE flag
[  334.323674][ T9099] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1272: error while reading EA inode 12 err=-117
[  334.383753][   T26] audit: type=1326 audit(1790387741.833:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.1.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef8f9e159 code=0x7ffc0000
[  334.439130][ T9099] EXT4-fs (loop2): 1 orphan inode deleted
[  334.460845][ T9099] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  334.529148][   T26] audit: type=1326 audit(1790387741.833:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.1.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6ef8f9e159 code=0x7ffc0000
[  334.594418][ T4288] Bluetooth: hci6: command 0x0406 tx timeout
[  334.648361][   T26] audit: type=1326 audit(1790387741.833:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.1.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef8f9e159 code=0x7ffc0000
[  334.764556][   T26] audit: type=1326 audit(1790387741.833:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.1.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef8f9e159 code=0x7ffc0000
[  334.808156][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  337.086722][ T9150] loop0: detected capacity change from 0 to 1024
[  337.110158][ T9150] EXT4-fs: Ignoring removed bh option
[  337.206180][ T9150] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  337.741039][ T9150] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  338.220320][ T8161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.398207][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  339.022105][ T9173] jffs2: notice: (9173) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (2 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found.
[  339.470135][ T8161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.508041][ T9183] device syzkaller0 entered promiscuous mode
[  339.657196][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  339.678801][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  339.691326][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  339.699580][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  339.708305][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  339.717194][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  339.786470][ T9186] lo speed is unknown, defaulting to 1000
[  339.929699][ T9189] loop2: detected capacity change from 0 to 164
[  340.065640][ T4653] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  340.135844][ T8161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.318793][ T9186] chnl_net:caif_netlink_parms(): no params data found
[  340.473653][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.483800][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.493741][ T9186] device bridge_slave_0 entered promiscuous mode
[  340.505004][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.513471][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.521676][ T9186] device bridge_slave_1 entered promiscuous mode
[  340.551195][ T9186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.617853][ T9186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.314215][ T8161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.493033][ T9186] team0: Port device team_slave_0 added
[  341.553144][ T9186] team0: Port device team_slave_1 added
[  341.761766][ T9186] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.773885][ T9186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.829846][ T4288] Bluetooth: hci0: command 0x0409 tx timeout
[  341.920871][ T9186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.001102][ T9186] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.053312][ T9186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.161424][ T9186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.350663][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  342.360403][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  342.373614][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  342.381619][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  342.390744][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  342.398378][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  342.549132][ T9186] device hsr_slave_0 entered promiscuous mode
[  342.643961][ T9186] device hsr_slave_1 entered promiscuous mode
[  342.654441][ T9186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  342.691776][ T9186] Cannot create hsr debugfs directory
[  342.708784][ T9211] lo speed is unknown, defaulting to 1000
[  343.221206][ T9225] device syzkaller0 entered promiscuous mode
[  343.771126][ T9240] jffs2: notice: (9240) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (2 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found.
[  343.871739][ T4288] Bluetooth: hci0: command 0x041b tx timeout
[  344.041875][ T9186] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  344.044880][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  344.058681][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  344.067833][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  344.091262][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  344.117501][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  344.129057][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  344.129606][ T9186] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  344.443709][ T9186] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  344.461793][ T4288] Bluetooth: hci1: command 0x0409 tx timeout
[  344.475827][ T9186] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  344.483192][ T9256] Bluetooth: MGMT ver 1.22
[  344.700185][ T9246] lo speed is unknown, defaulting to 1000
[  345.582603][ T9211] chnl_net:caif_netlink_parms(): no params data found
[  345.703647][ T9186] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.793583][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  345.829325][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  345.978532][ T4288] Bluetooth: hci0: command 0x040f tx timeout
[  346.018269][ T9186] 8021q: adding VLAN 0 to HW filter on device team0
[  346.183650][ T4287] Bluetooth: hci2: command 0x0409 tx timeout
[  346.217718][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  346.264063][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  346.332980][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.340198][ T7275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.403832][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  346.424538][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  346.433441][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  346.450328][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.457546][ T7275] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.503330][ T4287] Bluetooth: hci1: command 0x041b tx timeout
[  346.596889][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  346.615854][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  346.637848][   T32] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  346.643500][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  346.671815][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  346.697515][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.713477][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.731695][ T9211] device bridge_slave_0 entered promiscuous mode
[  346.750499][ T9186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  346.793122][ T9186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  346.852753][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  346.872343][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  346.883230][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  346.892350][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  346.905803][   T32] usb 5-1: Using ep0 maxpacket: 32
[  346.934109][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  346.973094][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  347.001496][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  347.017950][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.031700][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.049832][ T9211] device bridge_slave_1 entered promiscuous mode
[  347.052705][   T32] usb 5-1: unable to get BOS descriptor or descriptor too short
[  347.143563][   T27] INFO: task syz.5.685:6866 blocked for more than 143 seconds.
[  347.148713][   T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  347.161401][   T27]       Not tainted syzkaller #0
[  347.191814][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  347.240425][   T27] task:syz.5.685       state:D stack:27088 pid:6866  ppid:5239   flags:0x00004004
[  347.283476][   T32] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  347.287020][   T27] Call Trace:
[  347.292544][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.292567][   T32] usb 5-1: Product: syz
[  347.292580][   T32] usb 5-1: Manufacturer: syz
[  347.319199][   T27]  <TASK>
[  347.327210][   T27]  __schedule+0x107f/0x4030
[  347.346555][   T27]  ? release_firmware_map_entry+0x187/0x187
[  347.365884][   T27]  ? __mutex_trylock_common+0x86/0x260
[  347.392164][   T27]  ? trace_raw_output_contention_end+0xd0/0xd0
[  347.411959][   T27]  schedule+0xb9/0x180
[  347.413330][   T32] usb 5-1: SerialNumber: syz
[  347.430579][   T27]  schedule_preempt_disabled+0xf/0x20
[  347.449466][   T27]  __mutex_lock+0x548/0xae0
[  347.477331][   T27]  ? __mutex_lock+0x3ba/0xae0
[  347.499820][   T27]  ? write_ports+0xb3/0xb80
[  347.519104][   T27]  ? mutex_lock_nested+0x10/0x10
[  347.543418][   T27]  write_ports+0xb3/0xb80
[  347.553192][   T27]  ? write_versions+0xbb0/0xbb0
[  347.568497][   T27]  ? __lock_acquire+0x7c40/0x7c40
[  347.582267][   T27]  ? __virt_addr_valid+0x188/0x540
[  347.596140][   T27]  ? __might_fault+0xc2/0x120
[  347.606590][   T27]  ? __might_fault+0xa6/0x120
[  347.612767][   T27]  ? _copy_from_user+0x10b/0x170
[  347.623596][   T27]  ? simple_transaction_get+0x119/0x140
[  347.639405][   T27]  nfsctl_transaction_write+0x105/0x150
[  347.651806][   T27]  ? nfsctl_transaction_read+0x1b0/0x1b0
[  347.667673][   T27]  vfs_write+0x2dc/0x9a0
[  347.677910][   T27]  ? file_end_write+0x250/0x250
[  347.688541][   T27]  ? __fget_files+0x28/0x460
[  347.698920][   T27]  ? __fget_files+0x3fc/0x460
[  347.709467][   T27]  ? __fdget_pos+0x2ae/0x360
[  347.720021][   T27]  ? ksys_write+0x70/0x260
[  347.730191][   T27]  ksys_write+0x14d/0x260
[  347.750271][   T27]  ? __ia32_sys_read+0x80/0x80
[  347.771550][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  347.784224][   T27]  do_syscall_64+0x4c/0xa0
[  347.799011][   T27]  ? clear_bhb_loop+0x60/0xb0
[  347.808588][   T27]  ? clear_bhb_loop+0x60/0xb0
[  347.818994][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  347.831838][   T27] RIP: 0033:0x7f46ccd9e159
[  347.846388][   T27] RSP: 002b:00007f46cdd33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  347.891734][   T27] RAX: ffffffffffffffda RBX: 00007f46cd025fa0 RCX: 00007f46ccd9e159
[  347.913478][   T32] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  347.917839][   T27] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000005
[  347.951172][   T27] RBP: 00007f46cce3506b R08: 0000000000000000 R09: 0000000000000000
[  347.975576][   T32] usb 5-1: USB disconnect, device number 40
[  347.997243][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  348.037138][ T4287] Bluetooth: hci0: command 0x0419 tx timeout
[  348.047497][   T27] R13: 00007f46cd026038 R14: 00007f46cd025fa0 R15: 00007ffe588b4708
[  348.056483][   T27]  </TASK>
[  348.059760][   T27] 
[  348.059760][   T27] Showing all locks held in the system:
[  348.069416][   T27] 1 lock held by rcu_tasks_kthre/12:
[  348.075149][   T27]  #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  348.086601][   T27] 1 lock held by rcu_tasks_trace/13:
[  348.092034][   T27]  #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  348.113062][   T27] 1 lock held by khungtaskd/27:
[  348.121961][   T27]  #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  348.132734][   T27] 3 locks held by kworker/1:1/32:
[  348.138144][   T27] 3 locks held by kworker/1:2/127:
[  348.143647][   T27]  #0: ffff88802f408138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.155959][   T27]  #1: ffffc90002e47d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.179308][   T27]  #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500
[  348.200550][   T27] 3 locks held by kworker/0:3/4284:
[  348.212575][   T27]  #0: ffff88802f408138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.236835][   T27]  #1: ffffc90004587d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.262819][   T27]  #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500
[  348.280123][ T4287] Bluetooth: hci2: command 0x041b tx timeout
[  348.300513][   T27] 2 locks held by kworker/1:9/4351:
[  348.306122][   T27]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.316985][   T27]  #1: ffffc90004817d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.318862][ T4368] udevd[4368]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  348.328928][   T27] 3 locks held by udevd/4368:
[  348.349073][   T27] 3 locks held by kworker/0:6/4375:
[  348.354405][   T27]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.365429][   T27]  #1: ffffc90004c77d00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.375899][   T27]  #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20
[  348.400651][   T27] 3 locks held by syz.3.161/4894:
[  348.405802][   T27]  #0: ffff88807827b768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360
[  348.453358][   T27]  #1: ffff888052cc4460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0
[  348.462858][   T27]  #2: ffffffff8cdcce48 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80
[  348.516639][   T27] 2 locks held by getty/6201:
[  348.533465][   T27]  #0: ffff888030225098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  348.560930][   T27]  #1: ffffc9000cd2b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  348.585340][ T4287] Bluetooth: hci1: command 0x040f tx timeout
[  348.608569][   T27] 3 locks held by syz.5.685/6866:
[  348.613953][   T27]  #0: ffff88807dea1768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360
[  348.641285][   T27]  #1: ffff888051834460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0
[  348.678003][   T27]  #2: ffffffff8cdcce48 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80
[  348.714728][   T27] 3 locks held by kworker/u4:12/7266:
[  348.743509][   T27]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.781163][   T27]  #1: ffffc9000e3afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.813892][   T27]  #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[  348.823726][   T27] 2 locks held by kworker/u4:42/8157:
[  348.829138][   T27] 5 locks held by kworker/u4:44/8161:
[  348.845540][   T27]  #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.863444][   T27]  #1: ffffc9000cd97d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  348.883501][   T27]  #2: ffffffff8dd48210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0
[  348.892985][   T27]  #3: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd2/0x370
[  348.912859][   T27]  #4: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890
[  348.936666][   T27] 1 lock held by syz-executor/9186:
[  348.941919][   T27]  #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0
[  348.959738][   T27] 1 lock held by syz-executor/9211:
[  348.968471][   T27]  #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0
[  348.988061][   T27] 1 lock held by syz-executor/9246:
[  348.997422][   T27]  #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0
[  349.015464][   T27] 2 locks held by syz.6.1322/9268:
[  349.020628][   T27]  #0: ffff888053950810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210
[  349.042208][   T27]  #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890
[  349.064000][   T27] 
[  349.066375][   T27] =============================================
[  349.066375][   T27] 
[  349.085643][   T27] NMI backtrace for cpu 0
[  349.090036][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  349.097226][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  349.107268][   T27] Call Trace:
[  349.110537][   T27]  <TASK>
[  349.113459][   T27]  dump_stack_lvl+0x188/0x24e
[  349.118131][   T27]  ? irq_work_queue+0xb8/0x140
[  349.122894][   T27]  ? show_regs_print_info+0x12/0x12
[  349.128079][   T27]  ? load_image+0x410/0x410
[  349.132577][   T27]  ? vprintk_emit+0x59f/0x6a0
[  349.137252][   T27]  ? printk_sprint+0x460/0x460
[  349.142015][   T27]  nmi_cpu_backtrace+0x3e6/0x460
[  349.146942][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  349.153085][   T27]  ? _printk+0xda/0x130
[  349.157233][   T27]  ? load_image+0x410/0x410
[  349.161727][   T27]  ? load_image+0x410/0x410
[  349.166220][   T27]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  349.172275][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  349.178336][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  349.184311][   T27]  watchdog+0xf0e/0xf50
[  349.188458][   T27]  ? watchdog+0x1ed/0xf50
[  349.192778][   T27]  kthread+0x29d/0x330
[  349.196836][   T27]  ? hungtask_pm_notify+0x40/0x40
[  349.201847][   T27]  ? kthread_blkcg+0xd0/0xd0
[  349.206422][   T27]  ret_from_fork+0x1f/0x30
[  349.210837][   T27]  </TASK>
[  349.215001][   T27] Sending NMI from CPU 0 to CPUs 1:
[  349.220261][    C1] NMI backtrace for cpu 1
[  349.220270][    C1] CPU: 1 PID: 32 Comm: kworker/1:1 Not tainted syzkaller #0
[  349.220284][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  349.220293][    C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
[  349.220319][    C1] RIP: 0010:unwind_next_frame+0x77e/0x1fd0
[  349.220339][    C1] Code: 75 9a 00 4c 89 ea 48 8b 04 24 48 8d 68 f8 4c 8b 6b 10 48 8b 44 24 10 42 0f b6 04 20 84 c0 0f 85 b5 12 00 00 83 3b 00 0f 95 c0 <48> 39 ea 0f 96 c1 20 c1 49 39 ed 0f 97 c0 20 c8 3c 01 75 18 48 8d
[  349.220351][    C1] RSP: 0018:ffffc900001dfbb0 EFLAGS: 00000202
[  349.220362][    C1] RAX: 0000000000000001 RBX: ffffc900001dfca8 RCX: ffffffff8e2ff008
[  349.220372][    C1] RDX: ffffc900001d9000 RSI: ffffffff8e2fefe4 RDI: ffffc900001dfcb8
[  349.220383][    C1] RBP: ffffc900001dfca0 R08: 0000000000000009 R09: ffffc900001dfca8
[  349.220392][    C1] R10: dffffc0000000000 R11: fffff5200003bfa1 R12: dffffc0000000000
[  349.220403][    C1] R13: ffffc900001e1000 R14: 1ffff9200003bf97 R15: 1ffff9200003bf96
[  349.220413][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  349.220425][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  349.220435][    C1] CR2: 00007ff21f7ef2f8 CR3: 0000000072a6e000 CR4: 00000000003506e0
[  349.220448][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  349.220456][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  349.220465][    C1] Call Trace:
[  349.220469][    C1]  <IRQ>
[  349.220477][    C1]  ? __unwind_start+0xe1/0x650
[  349.220495][    C1]  __unwind_start+0x51a/0x650
[  349.220512][    C1]  ? stack_trace_save+0xf0/0xf0
[  349.220529][    C1]  arch_stack_walk+0xda/0x140
[  349.220548][    C1]  ? __unwind_start+0xe1/0x650
[  349.220564][    C1]  stack_trace_save+0xa6/0xf0
[  349.220581][    C1]  ? stack_trace_snprint+0xe0/0xe0
[  349.220598][    C1]  ? unwind_next_frame+0x1769/0x1fd0
[  349.220615][    C1]  ? memset+0x1e/0x40
[  349.220635][    C1]  kasan_set_track+0x4b/0x70
[  349.220673][    C1]  ? __local_bh_enable_ip+0x180/0x1c0
[  349.220687][    C1]  ? wg_packet_encrypt_worker+0x2d2/0x1550
[  349.220707][    C1]  ? process_one_work+0x8ab/0x1160
[  349.220723][    C1]  __kasan_slab_alloc+0x6b/0x80
[  349.220743][    C1]  slab_post_alloc_hook+0x4b/0x490
[  349.220758][    C1]  ? slab_pre_alloc_hook+0x59/0x300
[  349.220775][    C1]  kmem_cache_alloc_node+0x1ad/0x310
[  349.220790][    C1]  ? __alloc_skb+0xf9/0x7d0
[  349.220805][    C1]  __alloc_skb+0xf9/0x7d0
[  349.220819][    C1]  synproxy_send_client_synack+0x16c/0xd90
[  349.220836][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  349.220858][    C1]  ? synproxy_init_timestamp_cookie+0x2c0/0x2c0
[  349.220873][    C1]  ? synproxy_pernet+0x45/0x270
[  349.220887][    C1]  ? synproxy_pernet+0x45/0x270
[  349.220902][    C1]  nft_synproxy_eval_v4+0x35f/0x4e0
[  349.220919][    C1]  ? nft_synproxy_do_eval+0x550/0x550
[  349.220935][    C1]  ? nf_ip_checksum+0x138/0x520
[  349.220956][    C1]  nft_synproxy_do_eval+0x32e/0x550
[  349.220971][    C1]  ? nft_synproxy_validate+0xc0/0xc0
[  349.220991][    C1]  nft_do_chain+0x4b2/0x16d0
[  349.221012][    C1]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  349.221031][    C1]  ? mark_lock+0x94/0x320
[  349.221065][    C1]  ? nf_nat_inet_fn+0x5fa/0xb30
[  349.221091][    C1]  nft_do_chain_inet+0x25c/0x340
[  349.221105][    C1]  ? nft_do_chain_arp+0xf0/0xf0
[  349.221119][    C1]  ? ipt_do_table+0x2c1/0x1580
[  349.221138][    C1]  ? nf_nat_ipv4_local_in+0x229/0x5d0
[  349.221161][    C1]  ? nft_do_chain_arp+0xf0/0xf0
[  349.221174][    C1]  nf_hook_slow+0xb9/0x200
[  349.221194][    C1]  NF_HOOK+0x219/0x3b0
[  349.221212][    C1]  ? NF_HOOK+0x3b0/0x3b0
[  349.221229][    C1]  ? NF_HOOK+0x9b/0x3b0
[  349.221246][    C1]  ? ip_local_deliver+0x180/0x180
[  349.221266][    C1]  ? NF_HOOK+0x3b0/0x3b0
[  349.221286][    C1]  ? ip_local_deliver+0x107/0x180
[  349.221305][    C1]  NF_HOOK+0x329/0x3b0
[  349.221322][    C1]  ? qdisc_run+0x230/0x230
[  349.221335][    C1]  ? ip_rcv_core+0xb90/0xb90
[  349.221352][    C1]  ? NF_HOOK+0x9b/0x3b0
[  349.221370][    C1]  ? ip_local_deliver+0x180/0x180
[  349.221389][    C1]  ? ip_rcv_core+0xb90/0xb90
[  349.221406][    C1]  ? ip_rcv_core+0x74c/0xb90
[  349.221425][    C1]  ? ip_local_deliver_finish+0x510/0x510
[  349.221444][    C1]  ? ip_local_deliver_finish+0x510/0x510
[  349.221463][    C1]  __netif_receive_skb+0xcc/0x290
[  349.221477][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  349.221498][    C1]  ? process_backlog+0x2cb/0x710
[  349.221512][    C1]  process_backlog+0x37c/0x710
[  349.221532][    C1]  ? trigger_rx_softirq+0x60/0x60
[  349.221546][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  349.221565][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  349.221583][    C1]  ? lock_chain_count+0x20/0x20
[  349.221603][    C1]  __napi_poll+0xbb/0x460
[  349.221617][    C1]  net_rx_action+0x622/0xbc0
[  349.221640][    C1]  ? net_tx_action+0x930/0x930
[  349.221654][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  349.221673][    C1]  ? __bpf_trace_tasklet+0x10/0x10
[  349.221685][    C1]  ? lock_chain_count+0x20/0x20
[  349.221707][    C1]  handle_softirqs+0x291/0x910
[  349.221722][    C1]  ? do_softirq+0x142/0x210
[  349.221736][    C1]  ? do_softirq+0x210/0x210
[  349.221752][    C1]  do_softirq+0x142/0x210
[  349.221764][    C1]  </IRQ>
[  349.221767][    C1]  <TASK>
[  349.221772][    C1]  ? __local_bh_enable_ip+0x1c0/0x1c0
[  349.221785][    C1]  ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0
[  349.221804][    C1]  ? wg_packet_encrypt_worker+0x2d2/0x1550
[  349.221826][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  349.221843][    C1]  ? wg_packet_encrypt_worker+0x2d2/0x1550
[  349.221864][    C1]  __local_bh_enable_ip+0x180/0x1c0
[  349.221877][    C1]  ? _local_bh_enable+0xa0/0xa0
[  349.221889][    C1]  ? __lock_acquire+0x1465/0x7c40
[  349.221909][    C1]  ? wg_packet_encrypt_worker+0x2d2/0x1550
[  349.221930][    C1]  wg_packet_encrypt_worker+0x2d2/0x1550
[  349.221958][    C1]  ? register_lock_class+0xc0/0x870
[  349.221976][    C1]  ? wg_packet_tx_worker+0x7e0/0x7e0
[  349.221995][    C1]  ? __lock_acquire+0x1465/0x7c40
[  349.222014][    C1]  ? is_dynamic_key+0x260/0x260
[  349.222034][    C1]  ? mark_lock+0x94/0x320
[  349.222053][    C1]  ? __lock_acquire+0x1465/0x7c40
[  349.222081][    C1]  ? __update_load_avg_se+0x6dd/0xb40
[  349.222099][    C1]  ? verify_lock_unused+0x140/0x140
[  349.222122][    C1]  ? try_to_wake_up+0x660/0x10b0
[  349.222141][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  349.222166][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  349.222185][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  349.222203][    C1]  ? read_lock_is_recursive+0x10/0x10
[  349.222224][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  349.222243][    C1]  ? process_one_work+0x7b4/0x1160
[  349.222259][    C1]  process_one_work+0x8ab/0x1160
[  349.222281][    C1]  ? worker_detach_from_pool+0x240/0x240
[  349.222299][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  349.222317][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  349.222337][    C1]  ? wq_worker_running+0x97/0x190
[  349.222351][    C1]  worker_thread+0xaf5/0x12a0
[  349.222379][    C1]  kthread+0x29d/0x330
[  349.222390][    C1]  ? worker_clr_flags+0x1a0/0x1a0
[  349.222404][    C1]  ? kthread_blkcg+0xd0/0xd0
[  349.222417][    C1]  ret_from_fork+0x1f/0x30
[  349.222441][    C1]  </TASK>
[  349.986679][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  350.050326][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  350.057215][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  350.064422][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  350.074487][   T27] Call Trace:
[  350.077770][   T27]  <TASK>
[  350.080703][   T27]  dump_stack_lvl+0x188/0x24e
[  350.085392][   T27]  ? memcpy+0x3c/0x60
[  350.089385][   T27]  ? show_regs_print_info+0x12/0x12
[  350.094597][   T27]  ? load_image+0x410/0x410
[  350.099122][   T27]  panic+0x2d3/0x710
[  350.103028][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  350.108679][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  350.113196][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  350.118761][   T27]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  350.124926][   T27]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  350.131534][   T27]  watchdog+0xf4d/0xf50
[  350.135706][   T27]  ? watchdog+0x1ed/0xf50
[  350.140050][   T27]  kthread+0x29d/0x330
[  350.144128][   T27]  ? hungtask_pm_notify+0x40/0x40
[  350.149145][   T27]  ? kthread_blkcg+0xd0/0xd0
[  350.153720][   T27]  ret_from_fork+0x1f/0x30
[  350.158135][   T27]  </TASK>
[  350.161392][   T27] Kernel Offset: disabled
[  350.165710][   T27] Rebooting in 86400 seconds..