last executing test programs:

3m27.465352644s ago: executing program 32 (id=451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x673d}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

2m58.742230529s ago: executing program 0 (id=625):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425", @ANYRES64=r1], 0x4c}}, 0x0)

2m58.586577151s ago: executing program 0 (id=627):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

2m57.495857228s ago: executing program 0 (id=636):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)

2m57.27377244s ago: executing program 0 (id=639):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000b40)={{0x2, 0x88b2601a1770305, 0x0, 0x4, 0x80, 0x2}, 0x339, [0x6f04a337, 0x2, 0xfe, 0x2, 0xe251, 0x7fff, 0xc0000000, 0xfffffffc, 0x573, 0x3, 0x8000, 0x8001, 0x4, 0x4, 0x5f49, 0x5, 0x7, 0x5, 0xffff4d6a, 0x5, 0xe451, 0x4, 0x3, 0x8001, 0xb1, 0xb, 0x7, 0x10000, 0x1, 0x100, 0x7fffffff, 0x1, 0x8, 0x3, 0x200, 0x7, 0x854, 0x9, 0x8, 0x80, 0x1, 0xfffffffd, 0xffffffff, 0x5, 0x280, 0x80, 0xcded, 0x3ff, 0x866, 0x1, 0x1c0000, 0x6, 0x7, 0x0, 0x7, 0x7, 0x83, 0x2, 0x9, 0x3, 0x1, 0x8, 0x81, 0x3ff, 0x2, 0xffffff5f, 0x8000, 0x4, 0x7, 0x3, 0x4, 0x5c0, 0x9, 0x71, 0x1, 0x7fff, 0xfffffeff, 0x7, 0xe5, 0xffffffff, 0x7, 0xd24f, 0xfff, 0x1, 0x0, 0x2, 0x1, 0x8ec, 0x3, 0x0, 0x9, 0x10, 0xe, 0x7, 0x2, 0x5, 0x4, 0x9, 0xf, 0x7, 0x3, 0xff, 0xc, 0x6, 0x1, 0x9, 0x80, 0x81, 0x2, 0x9, 0x153, 0xffff, 0x42, 0x1, 0xfff, 0x52f2, 0x80ba, 0x2, 0x1ff, 0x3, 0x8000, 0xb45f, 0x7, 0x3ff, 0x5, 0x7, 0x2, 0x80000001, 0x7, 0x2501d1ec, 0x8, 0x8000, 0x8, 0x200000, 0x1, 0xfffffffc, 0xc5, 0xa9b, 0xb30, 0x80, 0x2, 0x2, 0x3, 0xf79, 0x4, 0x0, 0x2, 0xffff, 0x38, 0x1, 0x6, 0x4, 0xed02, 0x4, 0x1ff, 0xfffff57e, 0x8c4a, 0x3, 0x5, 0xffff, 0x5, 0x6, 0xff, 0x9, 0xb4, 0x81, 0x7, 0x1ff, 0x0, 0x7, 0x8, 0x10, 0x6b, 0xc, 0x1, 0xffffffd6, 0x9, 0x2, 0xda4b, 0x6, 0x5, 0x4, 0xea7, 0x311b5937, 0x2, 0x4, 0x8, 0x800, 0xd6ec, 0x80000000, 0x9, 0x3, 0x51a, 0x6, 0x80000000, 0x3, 0x3, 0x9, 0x7, 0x7, 0xe, 0x9, 0x1, 0x0, 0x5, 0x4, 0x10, 0xb, 0x3, 0xffffffff, 0xe, 0xffffffff, 0x86, 0x9, 0x4c72, 0x10000, 0x2, 0x4, 0x6, 0x9, 0x9, 0x6, 0xb9, 0x9f, 0x9, 0x8, 0x0, 0x7, 0x1, 0x1, 0x1a04, 0xffffffff, 0xe, 0x100, 0x1f66, 0x6, 0x8001, 0x401, 0x3, 0x85a, 0x6, 0xa, 0x6, 0xb3, 0xc56, 0x7ff, 0x6, 0x2, 0x9, 0x1, 0x2, 0x4, 0x800, 0x4, 0xa0000000, 0x6, 0x4, 0xfffffff7, 0xe, 0x1, 0x0, 0x2, 0x4, 0x4, 0x6, 0x5, 0x3, 0x7, 0x7, 0x7, 0x80000001, 0x1, 0x1, 0x7, 0x0, 0x8, 0x8, 0x0, 0x3, 0x8, 0x800, 0x3, 0x8, 0x5, 0x5, 0x4, 0xc75, 0x0, 0x10000000, 0x9, 0xf2a, 0x3, 0xffff0513, 0x1, 0x7, 0x0, 0x8, 0x0, 0x3, 0xb, 0x7, 0x5, 0x6, 0x80000001, 0x7ff, 0x6, 0x2, 0x8, 0x3, 0x2, 0x4, 0x4, 0x2, 0x7, 0x1, 0x3, 0x8, 0x200, 0x2, 0x41, 0x2000, 0x2, 0x0, 0xfffffff8, 0x922, 0x6, 0x7, 0x5, 0x0, 0x8, 0x9, 0xce, 0x8, 0xbd5, 0x9, 0x9, 0x4, 0x8, 0x1, 0x0, 0x800, 0xd04, 0x5, 0x8, 0xf1c9, 0x4, 0xf786, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x1, 0x0, 0x6, 0x3, 0x8000, 0x8, 0xa9c9, 0x8, 0x4, 0x58, 0x1, 0x3, 0x8, 0xffff28ae, 0xffffffff, 0x4, 0x3ff, 0x9, 0xea97, 0x9, 0x7fff, 0x2, 0x9c3b, 0x5, 0x2, 0xfffff000, 0x7, 0x93d3, 0x446e, 0x3ff, 0xe, 0x7, 0xfae1, 0x5, 0x2, 0x9, 0x1, 0x6, 0xa, 0x2, 0xfffffffe, 0x5, 0x100, 0x8, 0x7fff, 0xd, 0x80, 0x1, 0x1, 0xd, 0x3, 0x54, 0x3, 0x78, 0x9, 0x9, 0x4, 0x146, 0x101, 0xa25, 0xf1, 0x0, 0xa, 0x80000000, 0x6, 0x6, 0x9, 0x2008, 0x6, 0x2, 0x7, 0x5, 0x0, 0x9, 0x7, 0x1, 0x7c, 0x6e, 0xd, 0x3, 0x9, 0x5, 0x5, 0x7, 0x4, 0x2, 0x40ec, 0x6, 0x5, 0x701, 0x0, 0x200, 0x1, 0x2, 0x4, 0xbb3, 0x9, 0x5, 0x7, 0x8, 0x100, 0x10, 0x6, 0x3ff, 0x1, 0xd, 0x7, 0x9, 0x2, 0x2, 0x3, 0x3e8b, 0x0, 0x5, 0xeb, 0x1, 0x4, 0x0, 0xd, 0x7ff, 0x7, 0x81, 0x4, 0x7, 0xfff, 0xa, 0x5, 0x10001, 0x760c, 0x2, 0xe0000000, 0xceb0, 0x6d, 0xfffffffe, 0x2, 0x101, 0x9, 0x8, 0xc, 0x7fff, 0x0, 0x2, 0x2, 0xfffffff8, 0x3, 0x6, 0x9, 0x2, 0x53, 0xfff, 0x3, 0x4, 0x3, 0x9, 0x4, 0x3d6e, 0x8000, 0x3, 0x9, 0x2, 0x14, 0x3, 0x0, 0x1, 0x40, 0x0, 0x0, 0x5, 0x5, 0x2, 0x0, 0x40, 0x0, 0x4, 0xffffff00, 0xffff, 0x4, 0xfffffff7, 0x5, 0x2, 0xb3, 0x7, 0x8, 0x10000, 0x3, 0xb0b, 0xf087, 0x8, 0xa48, 0x23, 0x1, 0x10000, 0xb, 0x0, 0x1, 0x4, 0x5, 0xff, 0x9, 0x9, 0x4, 0x0, 0xcb8, 0x9, 0x9, 0x5a32, 0x1908, 0x6, 0x10000, 0x400, 0x5, 0x0, 0xc9, 0xae, 0xe193, 0xfffffffa, 0x3ff, 0x8001, 0x7, 0x6, 0xd3b, 0xfffffffb, 0xe, 0x4, 0x3, 0x4, 0x4, 0x2800000, 0x7ff, 0xb0, 0x2, 0x9, 0x6, 0x2, 0x3eb, 0x0, 0x6, 0x8, 0x1, 0x3, 0x9, 0x800, 0x8, 0x3, 0x0, 0x6, 0x7, 0xaf326984, 0x4, 0x6, 0x8, 0x6, 0x6, 0x4, 0x0, 0x8000, 0xd2, 0x9, 0x7, 0x2, 0x8, 0x6, 0x3, 0x4, 0x2, 0x5, 0xffffff7a, 0x1, 0x7, 0x5, 0x9, 0x9, 0x40, 0x4213, 0x66, 0x2, 0x4, 0x2, 0x8, 0x5, 0xffffffff, 0x9, 0x7fffffff, 0x7, 0x8a, 0x7fffffff, 0x4, 0x2, 0x257, 0x0, 0x325, 0x1, 0x2, 0x0, 0x4, 0x7f, 0x5, 0xa, 0x7, 0x7, 0x2, 0x9, 0x7ff, 0x7, 0x45e, 0x0, 0x0, 0x1, 0x998, 0x6, 0x4, 0x3, 0x7, 0x0, 0x2, 0x400, 0x7, 0x8, 0x7ff, 0x3, 0x3, 0x5, 0xba44, 0x10000, 0x6, 0xc, 0x607c, 0xfffff800, 0xdc6, 0x6, 0xd0d2, 0x7d, 0x5976, 0x200, 0x8, 0x2, 0x2, 0x5, 0x7, 0x7, 0x2, 0x9, 0x9, 0x7ff, 0x3322, 0x7f, 0x4, 0x4, 0x7, 0x10, 0xfff, 0x401, 0x80000000, 0xd85, 0x1, 0x9, 0x5, 0x8, 0x1, 0xb70f, 0x4, 0x9, 0xffffffff, 0x1, 0x6e70000, 0x0, 0x1000, 0x101, 0x100, 0x10001, 0xfff, 0x7, 0x98f, 0x101, 0x6, 0x6a, 0x3, 0xffffff50, 0x6de09127, 0x2, 0x4, 0x3, 0x1000, 0x7ff, 0xd1c, 0xff, 0x0, 0x7, 0x5, 0x3, 0x7fff, 0x4, 0x4, 0x15, 0x8000, 0x5, 0x10000000, 0x8, 0x7, 0x80, 0x9, 0x2, 0xe1, 0x9, 0xf, 0xa13, 0xfffffffb, 0x800, 0x7, 0x8, 0x4, 0x2, 0x7fffffff, 0xf9, 0x8, 0x7, 0x55ffecf9, 0x7, 0x8, 0x5b9, 0x9, 0x100, 0x680f, 0x1, 0x8, 0x6, 0x1ff, 0x4cc4, 0x2, 0x6366, 0x6, 0x8, 0x2b8, 0x4, 0x1, 0x4, 0x0, 0x8, 0x9, 0x3, 0x5, 0x1, 0x1, 0x80, 0x9, 0x1, 0x2, 0x0, 0x2, 0x4, 0x9, 0x7, 0x2, 0xb, 0x6, 0x4, 0xfff, 0x0, 0x7, 0x8, 0x7, 0x3, 0x3, 0x35, 0x80, 0x9, 0x1, 0x2, 0x3, 0xf3, 0x2, 0x0, 0x8, 0x6, 0x0, 0xfffffffb, 0x5d, 0x6, 0xffff, 0xe7, 0x6, 0x44, 0x6, 0xffff, 0x100, 0x7, 0x3c19, 0x9, 0x7, 0xeb98, 0x80, 0x6, 0x4, 0x7, 0xfde, 0x1, 0x8, 0xff, 0x2, 0x7, 0x0, 0x4, 0x5, 0x7, 0x9, 0x10000, 0x5, 0x0, 0x5, 0x7, 0x400, 0xd, 0x9, 0x6, 0x9, 0xc6da, 0x0, 0x5, 0x5, 0x1, 0x5, 0x0, 0x1, 0x7, 0xffffa3a8, 0x6, 0xaf8e, 0x0, 0x9, 0xaf, 0x1, 0x6, 0x4d, 0xfffffe1b, 0x1ff, 0x10001, 0xd, 0x1, 0xf63, 0x9, 0x1b9f, 0xc4f0, 0x6, 0x80000000, 0xfff, 0x200, 0xfd, 0x3, 0x4, 0x7, 0x100, 0x7, 0x3, 0x8, 0x1000, 0xfffffd86, 0x1, 0x80, 0x5, 0x5, 0x8, 0xf, 0x6, 0xe0ae, 0x2, 0xf, 0x80000001, 0x7, 0x7a, 0xff, 0x58e, 0x9e4, 0x0, 0x81, 0x8, 0x9, 0x1, 0x8, 0x0, 0x2000000, 0x0, 0x8, 0x5, 0xb, 0xfa6, 0x0, 0x6, 0x0, 0xc, 0x8, 0x3, 0x3, 0x4, 0x3, 0x6, 0x5, 0x4800, 0xf, 0x3, 0x10000, 0xfc, 0x0, 0x7, 0xfaf1, 0x5, 0xe40, 0xfffffff7, 0x2, 0xfa, 0x1, 0x6, 0x484, 0x2, 0x2, 0xf, 0x6, 0x1000, 0x6000000, 0xd, 0x7, 0x0, 0x7, 0xda, 0x987, 0xc, 0xc, 0x3, 0x1000, 0x43, 0xe99, 0x6ad, 0x1200000, 0x8, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0x400, 0xfff, 0x3, 0x18000, 0x6, 0x200, 0x4, 0x80000000, 0x572e, 0x1, 0x7fff, 0x7f, 0x4, 0x6d9, 0x9, 0x4, 0x6920, 0x1, 0xfff, 0x8, 0x7fffffff, 0x2, 0x3, 0x2, 0x1ff, 0x5, 0xfffffff7, 0x1, 0xe, 0x9, 0x9, 0x0, 0x3, 0x5]})

2m55.481317647s ago: executing program 0 (id=652):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41})
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe8000000000"], 0x64)

2m55.270398226s ago: executing program 0 (id=653):
pipe(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='4', 0x1)

2m40.217020577s ago: executing program 33 (id=653):
pipe(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='4', 0x1)

2m35.526276746s ago: executing program 3 (id=758):
epoll_create1(0x80000)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="60000000000e3340fe8000000000000000000000000020bbfe8000000000000000000000000000aa3b01000000"], 0x36)

2m35.404975108s ago: executing program 3 (id=759):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in=@rand_addr=0x64010101, 0x100, 0xd, 0x400, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x5}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@empty, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x48, 0x4, 0xffff, 0x5}, {{@in=@private=0xa010100, 0x20004d4, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2, 0x1, 0x3, 0x2, 0x2, 0x6}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

2m35.292937972s ago: executing program 3 (id=760):
fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xacab, 0x800, 0x1, 0xcc, 0x0, 0x0}, 0x0, 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x2, 0x10001}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

2m34.13012614s ago: executing program 3 (id=761):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x8, 0x4d, 0x2ba8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000640)={0x1, 0x3, 0x9})
r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x4, 0x7, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x4, 0x52a1, 0x74})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2m33.697072937s ago: executing program 3 (id=764):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}], 0x4, 0x40480c0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xa0}}, 0x0)

2m33.545169401s ago: executing program 3 (id=765):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
open(0x0, 0x60840, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='tcp 2', 0x5)
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}})

2m18.390104224s ago: executing program 34 (id=765):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
open(0x0, 0x60840, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='tcp 2', 0x5)
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}})

1m12.509600836s ago: executing program 4 (id=1320):
eventfd2(0xf, 0x1)
epoll_create1(0x80000)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/115, &(0x7f0000000080)=0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000100, 0x0, 0x1, 0x1}, 0x20)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2404c845)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r2, &(0x7f00000059c0)={0x2020}, 0x2020)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020)

1m12.38617012s ago: executing program 4 (id=1321):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1m11.340193012s ago: executing program 5 (id=1331):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x275a, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
sendfile(r2, r1, 0x0, 0xffff)

1m11.248879253s ago: executing program 5 (id=1333):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x28, 0x19, 0x7, 0xd1, 0x8, 0x10, 0xaa, 0x6, 0xff, 0x8, 0x6, 0x40, 0x0, 0xf}, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000040)=0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
accept(r2, 0x0, 0x0)

1m11.065935012s ago: executing program 5 (id=1335):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m10.929340558s ago: executing program 5 (id=1337):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

1m10.341182676s ago: executing program 5 (id=1342):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000000)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1m9.784905437s ago: executing program 5 (id=1343):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
write(r0, 0x0, 0x0)

1m7.614989358s ago: executing program 4 (id=1348):
openat$kvm(0x0, &(0x7f0000000040), 0x2a0142, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x580, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x103001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x4, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x80000004000000, 0x80000000], 0xeeee8000, 0x2010d3})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x8ee, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x42, {"3e0f005c7c002ef3643e640f064734000f23e8460f22470f013a8af50f005481bf67f2410f7082a9e70000f56736670f07"}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x0, 0x1}}, @in_dx={0x69, 0x20, {0xd21c, 0x2}}], 0xd2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10204, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000002340)=@x86={0xff, 0x9, 0x2, 0x0, 0x2, 0xbd, 0x80, 0x3, 0x2, 0x2, 0xfd, 0xa, 0x0, 0x7, 0x6, 0x0, 0x40, 0x8c, 0x8, '\x00', 0x8, 0x8})
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000002c0)=@vmx={0x3, 0x0, 0x2080, {0x70000, 0x3b3fb005, {0x2}, 0x1, 0x521a}, {"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", "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"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m7.497674937s ago: executing program 4 (id=1349):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m7.284345473s ago: executing program 4 (id=1351):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
gettid()
timer_create(0x1, 0x0, 0x0)
timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r0 = epoll_create1(0x0)
epoll_pwait2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000001800)={'syz1\x00', {0x7164, 0x0, 0x2}, 0x2, [0x4, 0x4, 0x1, 0x8001, 0x2, 0x5, 0x1e6e4fe3, 0x200, 0x1, 0x1, 0x9, 0x7, 0x6, 0x0, 0x1ff, 0x90a3, 0x3, 0x0, 0x8, 0xbb, 0x2, 0x3, 0xf2, 0x5, 0x9473, 0x58, 0x6, 0x63d5, 0x0, 0x10, 0x0, 0x6, 0x7, 0x609, 0x3, 0x9e2a, 0xc, 0xfffffffd, 0x80000001, 0xfffffffa, 0x4, 0x5c, 0x35eaa46e, 0x39c, 0x5, 0x5, 0x8, 0xfffffffb, 0x8, 0x3, 0x7, 0x81, 0x80000001, 0x80000001, 0x3, 0x635, 0x4, 0x6, 0xf, 0x4, 0xfffffff7, 0x3ff, 0x9, 0x8000], [0x3, 0x5, 0x7, 0x3, 0xff, 0x3, 0xfffff72d, 0xffff, 0x8, 0x4, 0x9, 0x4, 0x3, 0x3, 0x5, 0xd07, 0x6, 0x2, 0x0, 0x8, 0x8001, 0x5, 0x1ff, 0x0, 0x1, 0xfff, 0x6, 0x3, 0x4, 0xb12, 0xffff, 0x1000, 0x4, 0x9, 0xb850, 0x8, 0xc1, 0x0, 0xd39, 0x6b, 0x7, 0x5, 0x4, 0x6a, 0xfa72, 0xd, 0x3, 0x1, 0xf80, 0x0, 0x5, 0x9, 0x3, 0x9, 0xfff, 0x0, 0xff, 0x5, 0x2, 0xd, 0x0, 0x4, 0x6], [0x0, 0x0, 0x7ff, 0x5, 0x1, 0xfffffffd, 0x2, 0xa9, 0x7, 0xd0, 0x6, 0xaf, 0x36, 0x2, 0x5, 0x8, 0x1, 0x3, 0x3, 0x3, 0x4a, 0x1000, 0x8, 0x8, 0x81, 0x8, 0x7fff, 0x30e, 0x1, 0x4, 0xffffff01, 0x101, 0x669, 0x4, 0x7f, 0x6022, 0x9, 0x5, 0x7, 0x8, 0x10001, 0xd, 0x8001, 0xa7, 0x2, 0x10, 0x7fff, 0xd83, 0x6, 0x80000000, 0x4, 0x4, 0x0, 0x1f, 0x4, 0x2, 0x4, 0x7, 0x9, 0x1, 0xffffffff, 0x400, 0x0, 0x4], [0x69e, 0xf53a, 0x2, 0xfff, 0x3, 0x4, 0x8000, 0x7f, 0x8, 0xb, 0x8, 0x8, 0xd6b, 0x5, 0x10, 0x7fffffff, 0x0, 0x2, 0x0, 0xa30c, 0x5, 0xd, 0x41c, 0x59d9, 0x9, 0xcb, 0xfffffffc, 0x2, 0x65, 0xde, 0x6, 0x8, 0xf, 0x5b, 0x4, 0xa, 0x3e2, 0x0, 0xc, 0x10000, 0x4, 0x51c2, 0x1ff, 0x6, 0x20003, 0x4, 0x10001, 0x7fde, 0x7ff, 0xffffffff, 0x4, 0x9, 0x6, 0x9e11, 0x4, 0x6, 0x2, 0x4, 0x1, 0xccb, 0x80000000, 0x51, 0x3, 0x3fe]}, 0x45c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a80)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0)

1m7.118298285s ago: executing program 4 (id=1353):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000340)='4', 0x1)

1m1.138037136s ago: executing program 6 (id=1366):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000380)={@fd, @fda={0x66646185, 0x9, 0x0, 0x1c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x14}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m1.041177421s ago: executing program 6 (id=1367):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000100000)=""/8192, 0x6000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'vxcan1\x00', <r2=>0x0})
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0)
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000001780), 0x40080, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000001c0)={0x33, @broadcast, 0x4e23, 0x0, 'dh\x00', 0x20, 0x1, 0x44}, 0x2c)
ioctl$TCSETS(0xffffffffffffffff, 0x4b72, 0x0)

1m0.16723258s ago: executing program 6 (id=1368):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
r3 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50)
read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r5, r1, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
r7 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000040)={0x80000010})

59.966267239s ago: executing program 6 (id=1369):
setresuid(0x0, 0xee01, 0x0)
set_mempolicy(0x3, 0x0, 0x40)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

53.785510615s ago: executing program 35 (id=1343):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
write(r0, 0x0, 0x0)

53.779237764s ago: executing program 6 (id=1372):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff8e}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810)

53.570820627s ago: executing program 6 (id=1373):
mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_dir/portlist\x00', 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
write(r0, &(0x7f0000000700)='tcp 2', 0x5)

51.420783965s ago: executing program 36 (id=1353):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000340)='4', 0x1)

38.448051258s ago: executing program 37 (id=1373):
mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_dir/portlist\x00', 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
write(r0, &(0x7f0000000700)='tcp 2', 0x5)

34.664381188s ago: executing program 8 (id=1442):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2)

34.271183669s ago: executing program 8 (id=1444):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x38, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x34}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

33.124353837s ago: executing program 8 (id=1448):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="503bfde51b25", 0x6}], 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x2, 0x1000000000000002, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000002b40)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x1, 0x26, 0x800})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r2 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r5, 0xc008aec1, &(0x7f0000000480)={0xa, 0x0, [{0xc0000001, 0x20, 0x2, 0xfffffff8, 0x4, 0x101, 0x5}, {0x80000007, 0x6, 0x4, 0xffffe341, 0x0, 0x1, 0xffff}, {0x80000008, 0x8000, 0x2, 0x4, 0x4, 0xc1df, 0x9}, {0x2, 0x7, 0x3, 0x8000, 0xd0d7, 0x10003, 0x7d}, {0x80000001, 0x7, 0x6, 0x7, 0x20001, 0x9, 0x80000001}, {0x40000011, 0xc0, 0x7, 0x401, 0x7, 0x10001, 0x480003}, {0x80000001, 0x400, 0x0, 0x3, 0xcaa4, 0x0, 0x1ff}, {0xd, 0x9, 0x0, 0x9, 0x0, 0x3, 0xf403}, {0x80000019, 0x278, 0x5, 0x2, 0x5, 0xe9, 0x8}, {0x80000008, 0xfffffff7, 0x4, 0x8a, 0x2, 0x2, 0x1}]})

28.376917057s ago: executing program 8 (id=1455):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

28.11486485s ago: executing program 8 (id=1458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

27.713218373s ago: executing program 8 (id=1461):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
dup(r0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket(0x400000000010, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000))

27.212642934s ago: executing program 38 (id=1461):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
dup(r0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket(0x400000000010, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000))

2.76626047s ago: executing program 7 (id=1617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

2.586287987s ago: executing program 7 (id=1620):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

2.559561131s ago: executing program 1 (id=1622):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x7, 0xffffffff, 0x6, 0x2, 0xd1, 0x8, 0x30, {0x9d, 0x2}, 0x1d}})

2.543656544s ago: executing program 9 (id=1623):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001000)='/sys/kernel/uevent_helper', 0x0, 0x0)
read(r0, &(0x7f0000001040)=""/4096, 0x1000)

2.345228065s ago: executing program 1 (id=1625):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003002000000014000000110001"], 0xec}}, 0x0)

2.311822363s ago: executing program 9 (id=1626):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000580)={0xc, 0x2, 0x0, {0x6, 0x8, 0x2, 0x8}})

2.164933876s ago: executing program 1 (id=1628):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

2.128795444s ago: executing program 9 (id=1629):
syz_usb_connect(0x0, 0x5a, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)

1.905623624s ago: executing program 1 (id=1631):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425", @ANYRES64=r1], 0x4c}}, 0x0)

1.644787652s ago: executing program 1 (id=1634):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0)

1.539104555s ago: executing program 2 (id=1635):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10)

1.429734504s ago: executing program 1 (id=1636):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f400070581020002000705020200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1.376702769s ago: executing program 2 (id=1637):
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425", @ANYRES64=r1], 0x4c}}, 0x0)

1.278829982s ago: executing program 9 (id=1638):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00')
preadv(r0, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x3, 0x80)

1.15980677s ago: executing program 2 (id=1639):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb08004500e4140000000001170000010203040506070800000c00020006000600080000000c00030008000c000400"], 0x68}}, 0x0)

1.07806795s ago: executing program 9 (id=1640):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

533.890017ms ago: executing program 7 (id=1641):
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183842, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10)
listen(r0, 0x6)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00')
r1 = accept(r0, 0x0, 0x0)
write(r1, &(0x7f0000000240)="00000080fe534d42400000008c010000000001000100020000000000000000000000000000000000000000000000009e000000000000000000000000000000000000000041000100000300008000000000000000000000413100000000000000000000001000000010000000100000000000008600000000000000000000800000000000", 0x84)

533.731511ms ago: executing program 2 (id=1642):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008010)

423.935749ms ago: executing program 2 (id=1643):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0)

308.177667ms ago: executing program 7 (id=1644):
syz_emit_vhci(0x0, 0x0)
syz_emit_vhci(&(0x7f0000000b00)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "8a34d6", 0x1}}}, 0xd)

130.299939ms ago: executing program 7 (id=1645):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000240)="009fcf50f4", 0x5, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x5)
sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="04", 0x1}], 0x1}}], 0x1, 0x0)

130.058996ms ago: executing program 2 (id=1646):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1fa, 0x0, 0x0, 0x17, 0x4, "339f020bbe82b398000001000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x0, 0x3fd]}})
r2 = dup(r1)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x185202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)

17.484852ms ago: executing program 9 (id=1647):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, 0x8})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x1, 0x0, 0x0, 0x200000}]})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"})

0s ago: executing program 7 (id=1648):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000100)={@void, @void, @eth={@broadcast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x38, 0x68, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010101, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x4, 0x6, 0x65, 0x1, 0x8, 0x2, 0xf, @local, @dev={0xac, 0x14, 0x14, 0xf}}, "ec07f50000000000"}}}}}}, 0x4a)

kernel console output (not intermixed with test programs):

33431][ T8559] rust_binder: 8557:8559 transaction call to 8557:0 failed EINVAL, code 0 size 104-4224
[  219.276228][ T5676] rust_binder: 8557: undelivered TRANSACTION_ERROR: 29201
[  219.498946][ T5676] hid_parser_main: 516 callbacks suppressed
[  219.512274][ T5676] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  219.512324][ T5676] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  219.546450][ T5676] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  219.706434][ T8568] fido_id[8568]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  220.034415][ T5676] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  220.194239][ T5676] usb 5-1: Using ep0 maxpacket: 8
[  220.199671][ T5676] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  220.209733][ T5676] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  220.209771][ T5676] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  220.209792][ T5676] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  220.209807][ T5676] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  220.209821][ T5676] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  220.209845][ T5676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.328395][ T8583] syzkaller0: entered promiscuous mode
[  220.335350][ T8583] syzkaller0: entered allmulticast mode
[  220.575252][ T5676] usb 5-1: usb_control_msg returned -32
[  220.575289][ T5676] usbtmc 5-1:16.0: can't read capabilities
[  221.238547][ T8604] rust_binder: Write failure EFAULT in pid:110
[  221.238854][ T5676] rust_binder: 8603: undelivered TRANSACTION_COMPLETE
[  221.270659][ T5676] rust_binder: 8603: undelivered transaction 104, process died
[  221.295878][ T8605] usbtmc 5-1:16.0: CHECK_CLEAR_STATUS returned 0
[  221.567504][ T5676] usb 5-1: USB disconnect, device number 25
[  221.654939][ T5607] Bluetooth: hci5: command tx timeout
[  221.768264][ T4979] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  221.768290][ T4979] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[  221.768306][ T4979] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  221.768343][ T4979]  loop0:
[  221.919726][ T8620] zram0: detected capacity change from 0 to 8
[  222.074067][ T5676] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  222.236539][ T5676] usb 3-1: Using ep0 maxpacket: 8
[  222.242722][ T5676] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  222.252232][ T5776] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  222.262034][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079a13c00: rx timeout, send abort
[  222.277203][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.277227][ T5676] usb 3-1: Product: syz
[  222.277243][ T5676] usb 3-1: Manufacturer: syz
[  222.277254][ T5676] usb 3-1: SerialNumber: syz
[  222.305527][ T5676] usb 3-1: config 0 descriptor??
[  222.364008][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  222.394044][ T5776] usb 6-1: Using ep0 maxpacket: 8
[  222.401452][ T5776] usb 6-1: unable to get BOS descriptor or descriptor too short
[  222.409212][ T5776] usb 6-1: New USB device found, idVendor=534d, idProduct=0021, bcdDevice= 0.40
[  222.421811][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.429965][ T5776] usb 6-1: Product: syz
[  222.434659][ T5776] usb 6-1: Manufacturer: syz
[  222.440274][ T5776] usb 6-1: SerialNumber: syz
[  222.515644][ T5676] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  222.525080][    T9] usb 7-1: Using ep0 maxpacket: 32
[  222.530575][    T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  222.541701][    T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  222.554939][    T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  222.563174][    T9] usb 7-1: Product: syz
[  222.563184][    T9] usb 7-1: Manufacturer: syz
[  222.563192][    T9] usb 7-1: SerialNumber: syz
[  222.581213][    T9] usb 7-1: config 0 descriptor??
[  222.588599][ T8624] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  222.598220][    T9] hub 7-1:0.0: bad descriptor, ignoring hub
[  222.606057][    T9] hub 7-1:0.0: probe with driver hub failed with error -5
[  222.746893][ T5776] usb 6-1: USB disconnect, device number 13
[  222.760365][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801c295800: rx timeout, send abort
[  222.768788][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079a13c00: abort rx timeout. Force session deactivation
[  222.810625][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  222.850295][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.864399][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.261420][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801c295800: abort rx timeout. Force session deactivation
[  223.382188][ T5676] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  223.395185][ T5676] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  223.403108][ T5676] usb 3-1: media controller created
[  223.431418][ T5676] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  223.618969][ T5676] i2c i2c-1: Added multiplexed i2c bus 2
[  223.628611][ T5676] rtl2830 1-0010: Realtek RTL2830 successfully attached
[  223.628941][ T5676] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))...
[  223.629106][ T5676] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered.
[  223.739106][ T5676] DVB: Unable to find symbol mxl5005s_attach()
[  223.756938][ T8632] raw-gadget.2 gadget.6: failed to queue suspend event
[  223.757005][ T8632] raw-gadget.2 gadget.6: failed to queue disconnect event
[  223.846114][ T8649] jffs2: notice: (8649) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  223.879478][ T5676] usb 3-1: USB disconnect, device number 30
[  224.425143][ T5676] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  224.438889][ T8667] netlink: 'syz.5.1008': attribute type 10 has an invalid length.
[  224.439056][ T8667] veth0_macvtap: entered allmulticast mode
[  224.500149][ T5776] usb 7-1: USB disconnect, device number 7
[  224.575052][ T5676] usb 5-1: Using ep0 maxpacket: 16
[  224.580546][ T5676] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  224.592639][ T5676] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  224.592661][ T5676] usb 5-1: config 0 has no interface number 0
[  224.592692][ T5676] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  224.592715][ T5676] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  224.633346][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.633369][ T5676] usb 5-1: Product: syz
[  224.633385][ T5676] usb 5-1: Manufacturer: syz
[  224.633395][ T5676] usb 5-1: SerialNumber: syz
[  224.662422][ T5676] usb 5-1: config 0 descriptor??
[  224.675669][ T8655] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  224.675770][ T8655] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  224.691567][ T5776] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  224.756131][ T5691] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  224.847401][ T5776] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  224.859768][ T5776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  224.873624][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  224.873664][ T5776] usb 7-1: Product: syz
[  224.873681][ T5776] usb 7-1: Manufacturer: syz
[  224.873691][ T5776] usb 7-1: SerialNumber: syz
[  224.906068][ T5776] usb 7-1: config 0 descriptor??
[  224.911494][ T8632] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  224.921070][ T5691] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  224.931177][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 32770, setting to 64
[  224.947805][ T5776] hub 7-1:0.0: bad descriptor, ignoring hub
[  224.959258][ T5776] hub 7-1:0.0: probe with driver hub failed with error -5
[  224.968475][ T8655] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  224.968561][ T8655] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  224.983070][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.983092][ T5691] usb 6-1: Product: syz
[  224.983112][ T5691] usb 6-1: Manufacturer: syz
[  224.983122][ T5691] usb 6-1: SerialNumber: syz
[  225.020153][ T5691] usb 6-1: config 0 descriptor??
[  225.031145][ T5691] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0206
[  225.232983][ T5676] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  225.264526][ T5776] usb 6-1: USB disconnect, device number 14
[  225.297917][ T5691] usb 7-1: USB disconnect, device number 8
[  225.490116][ T8683] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1010'.
[  226.108372][ T5691] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  226.268869][ T5691] usb 6-1: Using ep0 maxpacket: 8
[  226.274755][ T5691] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  226.306475][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.306502][ T5691] usb 6-1: Product: syz
[  226.306519][ T5691] usb 6-1: Manufacturer: syz
[  226.306529][ T5691] usb 6-1: SerialNumber: syz
[  226.333112][ T5691] usb 6-1: config 0 descriptor??
[  226.340274][ T5691] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  226.619666][ T5607] Bluetooth: hci5: command 0x0406 tx timeout
[  227.277262][ T5676] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  227.277424][ T5676] asix 5-1:0.34: probe with driver asix failed with error -71
[  227.298989][ T5676] usb 5-1: USB disconnect, device number 26
[  227.865889][   T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  228.037315][   T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  228.047779][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.047817][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.078365][   T10] usb 7-1: config 0 descriptor??
[  228.231870][ T8712] device-mapper: thin metadata: sb_check failed: magic 0: wanted 27022010
[  228.232057][ T8712] device-mapper: block manager: superblock validator check failed for block 0
[  228.232084][ T8712] device-mapper: thin metadata: couldn't read superblock
[  228.359708][ T8712] device-mapper: table: 248:2: thin-pool: Error creating metadata object (-EILSEQ)
[  228.372367][ T8712] device-mapper: ioctl: error adding target to table
[  228.520906][   T10] savu 0003:1E7D:2D5A.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[  228.789116][ T4940] usb 7-1: USB disconnect, device number 9
[  228.799653][ T5691] gspca_sonixj: reg_w1 err -71
[  228.835282][ T5691] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  228.849713][ T5691] usb 6-1: USB disconnect, device number 15
[  228.916156][   T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  229.075968][   T10] usb 5-1: Using ep0 maxpacket: 8
[  229.081854][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  229.095790][   T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  229.095850][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  229.095865][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  229.095880][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  229.095895][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  229.095919][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.423025][   T10] usb 5-1: GET_CAPABILITIES returned 0
[  229.423067][   T10] usbtmc 5-1:16.0: can't read capabilities
[  229.645258][ T4940] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  229.653807][   T10] usb 5-1: USB disconnect, device number 27
[  229.807867][ T4940] usb 3-1: unable to get BOS descriptor or descriptor too short
[  229.818859][ T4940] usb 3-1: not running at top speed; connect to a high speed hub
[  229.818889][ T4940] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  229.839628][ T4940] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  229.839652][ T4940] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  229.839672][ T4940] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  229.839685][ T4940] usb 3-1: config 14 has no interface number 0
[  229.839696][ T4940] usb 3-1: config 14 has no interface number 1
[  229.839731][ T4940] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  229.839746][ T4940] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  229.839761][ T4940] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  229.839776][ T4940] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[  229.839792][ T4940] usb 3-1: config 14 interface 57 has no altsetting 0
[  229.839804][ T4940] usb 3-1: config 14 interface 228 has no altsetting 0
[  229.949090][ T4940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.949114][ T4940] usb 3-1: Product: syz
[  229.949132][ T4940] usb 3-1: Manufacturer: syz
[  229.949142][ T4940] usb 3-1: SerialNumber: syz
[  230.025668][ T5691] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  230.186693][ T5691] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  230.198598][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.212948][ T5691] usb 7-1: config 0 descriptor??
[  230.226725][ T5691] cp210x 7-1:0.0: cp210x converter detected
[  230.443778][ T8749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.457754][ T8749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.472174][ T4940] legousbtower 3-1:14.57: interrupt endpoints not found
[  230.493791][ T4940] legousbtower 3-1:14.228: get version request failed: -71
[  230.493916][ T4940] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71
[  230.519980][ T4940] usb 3-1: USB disconnect, device number 31
[  230.653877][ T8780] fuse: fd is not a fuse device
[  230.756508][ T8784] rust_binder: Write failure EINVAL in pid:383
[  230.784297][ T4940] rust_binder: 8783: undelivered TRANSACTION_COMPLETE
[  230.784348][ T4940] rust_binder: 8783: undelivered TRANSACTION_ERROR: 29189
[  230.843008][ T5691] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71
[  230.843051][ T5691] cp210x 7-1:0.0: GPIO initialisation failed: -71
[  230.887316][ T5691] usb 7-1: cp210x converter now attached to ttyUSB0
[  230.901966][ T5691] usb 7-1: USB disconnect, device number 10
[  230.915380][ T5691] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  230.923723][ T5691] cp210x 7-1:0.0: device disconnected
[  231.334221][    T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  231.438152][ T8809] sctp: [Deprecated]: syz.5.1048 (pid 8809) Use of int in max_burst socket option.
[  231.438152][ T8809] Use struct sctp_assoc_value instead
[  231.485117][    T9] usb 5-1: Using ep0 maxpacket: 8
[  231.491598][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  231.505284][    T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  231.505323][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  231.505345][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  231.505361][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  231.505375][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  231.505399][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.749573][ T8815] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.961977][ T8819] kvm: pic: single mode not supported
[  231.966144][ T8819] kvm: pic: level sensitive irq not supported
[  231.966274][ T8819] kvm: pic: single mode not supported
[  231.966294][ T8819] kvm: pic: level sensitive irq not supported
[  231.966900][ T8819] kvm: pic: single mode not supported
[  231.967002][ T8819] kvm: pic: level sensitive irq not supported
[  232.002896][ T8819] kvm: pic: single mode not supported
[  232.002916][ T8819] kvm: pic: level sensitive irq not supported
[  232.003488][ T8819] kvm: pic: single mode not supported
[  232.003574][ T8819] kvm: pic: level sensitive irq not supported
[  232.003664][ T8819] kvm: pic: single mode not supported
[  232.003673][ T8819] kvm: pic: level sensitive irq not supported
[  232.050175][ T8819] kvm: pic: single mode not supported
[  232.060481][ T8819] kvm: pic: level sensitive irq not supported
[  232.060589][ T8819] kvm: pic: single mode not supported
[  232.060606][ T8819] kvm: pic: level sensitive irq not supported
[  232.061082][ T8819] kvm: pic: single mode not supported
[  232.061171][ T8819] kvm: pic: level sensitive irq not supported
[  232.061263][ T8819] kvm: pic: single mode not supported
[  232.061272][ T8819] kvm: pic: level sensitive irq not supported
[  232.118636][ T4940] usb 5-1: USB disconnect, device number 28
[  232.745638][ T8845] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  233.159185][ T8867] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1075'.
[  233.169394][ T8867] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1075'.
[  233.184198][    T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  233.349000][    T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  233.363400][    T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  233.363440][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.383166][    T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  233.383189][    T9] usb 5-1: Manufacturer: syz
[  233.406846][    T9] usb 5-1: config 0 descriptor??
[  233.546467][    T9] rc_core: IR keymap rc-hauppauge not found
[  233.546497][    T9] Registered IR keymap rc-empty
[  233.547144][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  233.577452][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input38
[  233.647202][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.647485][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.875823][    C0] igorplugusb 5-1:0.0: receive overflow invalid: 112
[  234.090813][ T4940] usb 5-1: USB disconnect, device number 29
[  234.314036][    T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  234.466327][    T9] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  234.476619][    T9] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.476646][    T9] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  234.476669][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  234.476690][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.519778][    T9] usb 7-1: config 0 descriptor??
[  234.965868][ T4940] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  235.043765][ T8914] kvm: requested 79619 ns i8254 timer period limited to 200000 ns
[  235.055414][ T8914] kvm: requested 167619 ns i8254 timer period limited to 200000 ns
[  235.063888][ T8914] kvm: requested 163428 ns i8254 timer period limited to 200000 ns
[  235.072192][ T8914] kvm: requested 25980 ns i8254 timer period limited to 200000 ns
[  235.082282][ T8914] kvm: requested 170971 ns i8254 timer period limited to 200000 ns
[  235.092270][ T8914] kvm: requested 175162 ns i8254 timer period limited to 200000 ns
[  235.104811][ T8914] kvm: requested 80457 ns i8254 timer period limited to 200000 ns
[  235.113492][ T8914] kvm: requested 158400 ns i8254 timer period limited to 200000 ns
[  235.123634][ T8914] kvm: requested 141638 ns i8254 timer period limited to 200000 ns
[  235.131879][ T4940] usb 3-1: Using ep0 maxpacket: 8
[  235.139463][ T8914] kvm: requested 125714 ns i8254 timer period limited to 200000 ns
[  235.147777][ T4940] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  235.158604][ T4940] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  235.158627][ T4940] usb 3-1: config 0 has no interface number 0
[  235.158658][ T4940] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  235.159701][ T4940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.206582][ T4940] usb 3-1: config 0 descriptor??
[  235.233895][ T4940] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  235.408671][    T9] sony 0003:054C:0268.001A: can't set operational mode: step 1
[  235.408716][    T9] sony 0003:054C:0268.001A: Failed to set controller into operational mode
[  235.458330][    T9] sony 0003:054C:0268.001A: hiddev1,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.6-1/input0
[  235.458368][    T9] sony 0003:054C:0268.001A: failed to claim input
[  235.531690][    T9] usb 7-1: USB disconnect, device number 11
[  235.564560][   T10] usb 3-1: USB disconnect, device number 32
[  235.687555][ T8922] fido_id[8922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  236.036415][   T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  236.197519][   T10] usb 5-1: Using ep0 maxpacket: 32
[  236.206130][   T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  236.232919][   T10] usb 5-1: config index 0 descriptor too short (expected 27632, got 27)
[  236.232947][   T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  236.232968][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  236.232981][   T10] usb 5-1: config 1 has no interface number 0
[  236.233007][   T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  236.233023][   T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  236.233048][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.324104][   T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  236.537211][   T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  236.759340][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.769248][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.001254][ T4940] usb 5-1: USB disconnect, device number 30
[  237.002300][ T4940] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  237.035218][   T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  237.115149][    T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  237.189620][   T10] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  237.200972][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  237.200997][   T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  237.226120][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.226144][   T10] usb 7-1: Product: syz
[  237.226160][   T10] usb 7-1: Manufacturer: syz
[  237.226170][   T10] usb 7-1: SerialNumber: syz
[  237.257587][   T10] ums-sddr09 7-1:1.0: USB Mass Storage device detected
[  237.269057][    T9] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  237.282027][   T10] ums-sddr09 7-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  237.282027][   T10]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  237.309770][    T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  237.309801][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  237.309814][    T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  237.309834][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.356633][ T8973] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  237.810622][   T52] Bluetooth: hci6: Reading Intel version command failed (-71)
[  237.823880][    T9] usb 3-1: USB disconnect, device number 33
[  238.080326][   T10] scsi host1: usb-storage 7-1:1.0
[  238.112553][   T10] usb 7-1: USB disconnect, device number 12
[  239.041840][ T9037] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  239.049634][    T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  239.205037][    T9] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  239.215770][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.215797][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.215826][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.253214][    T9] usb 7-1: config 0 descriptor??
[  239.277397][   T10] rust_binder: 9017: undelivered TRANSACTION_COMPLETE
[  239.277444][   T10] rust_binder: 9017: undelivered TRANSACTION_ERROR: 29189
[  239.696308][    T9] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0
[  239.709004][    T9] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0
[  239.709043][    T9] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0
[  239.709062][    T9] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0
[  239.709080][    T9] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0
[  239.749373][    T9] playstation 0003:054C:0DF2.001B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0
[  239.892934][    T9] playstation 0003:054C:0DF2.001B: Invalid byte count transferred, expected 20 got 0
[  239.892961][    T9] playstation 0003:054C:0DF2.001B: Failed to retrieve DualSense pairing info: -22
[  239.892998][    T9] playstation 0003:054C:0DF2.001B: Failed to get MAC address from DualSense
[  239.893010][    T9] playstation 0003:054C:0DF2.001B: Failed to create dualsense.
[  239.903909][    T9] playstation 0003:054C:0DF2.001B: probe with driver playstation failed with error -22
[  240.181049][    T9] usb 7-1: USB disconnect, device number 13
[  240.966175][ T9087] syzkaller0: entered promiscuous mode
[  240.973398][ T9087] syzkaller0: entered allmulticast mode
[  241.036152][   T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  241.194642][   T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  241.206050][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.206095][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.229046][   T10] usb 7-1: config 0 descriptor??
[  241.237394][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  241.307690][ T4940] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  241.464027][ T4940] usb 5-1: Using ep0 maxpacket: 16
[  241.469493][ T4940] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  241.482323][ T4940] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.494128][ T4940] usb 5-1: config 0 interface 0 has no altsetting 0
[  241.494152][ T4940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.522708][ T4940] usb 5-1: config 0 descriptor??
[  241.660964][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  241.874999][   T10] pwc: recv_control_msg error -71 req 02 val 2c00
[  241.881715][   T10] pwc: recv_control_msg error -71 req 04 val 1000
[  241.891634][   T10] pwc: recv_control_msg error -71 req 04 val 1300
[  241.901006][   T10] pwc: recv_control_msg error -71 req 04 val 1400
[  241.907946][   T10] pwc: recv_control_msg error -71 req 02 val 2000
[  241.915252][   T10] pwc: recv_control_msg error -71 req 02 val 2100
[  241.922112][   T10] pwc: recv_control_msg error -71 req 04 val 1500
[  241.931233][   T10] pwc: recv_control_msg error -71 req 02 val 2500
[  241.938851][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[  241.945761][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[  241.953170][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  241.961800][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  241.969413][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  241.978258][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  242.001978][   T10] pwc: Registered as video103.
[  242.010466][ T4940] mcp2221 0003:04D8:00DD.001C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  242.024567][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input41
[  242.049712][   T10] usb 7-1: USB disconnect, device number 14
[  242.382435][ T9117] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in;
[  242.382435][ T9117]    program syz.2.1181 not setting count and/or reply_len properly
[  242.442485][   T10] usb 5-1: USB disconnect, device number 31
[  242.865656][ T4940] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  242.944352][   T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  243.025451][ T4940] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  243.036438][ T4940] usb 7-1: config 0 has an invalid interface number: 214 but max is 0
[  243.036461][ T4940] usb 7-1: config 0 has no interface number 0
[  243.036493][ T4940] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  243.036510][ T4940] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  243.077823][ T4940] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  243.077847][ T4940] usb 7-1: Manufacturer: syz
[  243.077864][ T4940] usb 7-1: SerialNumber: syz
[  243.102310][ T4940] usb 7-1: config 0 descriptor??
[  243.107607][   T10] usb 3-1: Using ep0 maxpacket: 16
[  243.108619][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  243.125995][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.126009][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  243.152081][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.152104][   T10] usb 3-1: Product: syz
[  243.152120][   T10] usb 3-1: Manufacturer: syz
[  243.152130][   T10] usb 3-1: SerialNumber: syz
[  243.191167][   T10] usb 3-1: 0:2 : does not exist
[  243.389797][   T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  243.434299][   T10] usb 3-1: USB disconnect, device number 34
[  243.462782][ T7602] udevd[7602]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  243.604070][    T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  243.757130][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  243.769470][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.777541][    T9] usb 5-1: Product: syz
[  243.777551][    T9] usb 5-1: Manufacturer: syz
[  243.777559][    T9] usb 5-1: SerialNumber: syz
[  243.793187][ T4940] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71
[  243.811219][ T4940] usb 7-1: USB disconnect, device number 15
[  244.224683][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  244.238882][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  244.667829][ T9179] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16)
[  244.801292][   T31] audit: type=1400 audit(1787935456.965:10): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9182 comm="syz.6.1214" name="unknown" offset=16
[  244.885719][ T9185] bonding: bond0 is being deleted...
[  244.943830][ T9185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.974201][ T9185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.992733][ T9185] bond0 (unregistering): Released all slaves
[  245.434103][   T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  245.454030][ T5776] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  245.496611][   T31] audit: type=1326 audit(1787935457.655:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.5.1225" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51b0b9e159 code=0x0
[  245.605785][   T10] usb 7-1: Using ep0 maxpacket: 16
[  245.611326][   T10] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  245.620842][ T5776] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  245.631298][   T10] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  245.631313][   T10] usb 7-1: config 0 has no interface number 0
[  245.631335][   T10] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  245.641336][ T5776] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  245.641350][ T5776] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  245.679407][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  245.679422][ T5776] usb 3-1: SerialNumber: syz
[  245.696162][   T10] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  245.696222][   T10] usb 7-1: Product: syz
[  245.696252][   T10] usb 7-1: SerialNumber: syz
[  245.722127][   T10] usb 7-1: config 0 descriptor??
[  245.733303][   T10] cm109 7-1:0.8: invalid payload size 8, expected 4
[  245.747832][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input43
[  245.948415][ T5776] usb 3-1: 0:2 : does not exist
[  245.995877][ T5776] usb 3-1: USB disconnect, device number 35
[  246.028181][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  246.313624][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO
[  246.313670][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  246.313708][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  246.361770][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  246.378637][    C0] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71
[  246.378819][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  246.378994][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  246.379167][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  246.379335][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  246.379500][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  246.387593][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  246.387770][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  246.387944][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  246.388116][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  246.388288][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  246.407418][ T5776] usb 7-1: USB disconnect, device number 16
[  246.407505][    C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  246.498789][    T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  246.513417][ T5776] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  246.530116][    T9] usb 5-1: USB disconnect, device number 32
[  246.977898][ T9226] netlink: 'syz.4.1233': attribute type 13 has an invalid length.
[  247.033637][ T9228] kvm [9227]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7
[  247.360756][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'.
[  247.415239][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  248.014402][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1241'.
[  248.195820][ T5607] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  248.207546][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  248.207565][ T5607] Tainted: [L]=SOFTLOCKUP
[  248.207570][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  248.207578][ T5607] Workqueue: hci4 hci_rx_work
[  248.207605][ T5607] Call Trace:
[  248.207611][ T5607]  <TASK>
[  248.207617][ T5607]  dump_stack_lvl+0xe8/0x150
[  248.207634][ T5607]  sysfs_create_dir_ns+0x271/0x2a0
[  248.207652][ T5607]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  248.207669][ T5607]  ? do_raw_spin_unlock+0xf5/0x200
[  248.207686][ T5607]  kobject_add_internal+0x622/0xcd0
[  248.207708][ T5607]  kobject_add+0x163/0x240
[  248.207725][ T5607]  ? __pfx_kobject_add+0x10/0x10
[  248.207743][ T5607]  ? get_device_parent+0x366/0x3a0
[  248.207763][ T5607]  device_add+0x3fa/0xb80
[  248.207780][ T5607]  hci_conn_add_sysfs+0xd5/0x210
[  248.207800][ T5607]  le_conn_complete_evt+0x10b2/0x17a0
[  248.207818][ T5607]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  248.207833][ T5607]  ? __mutex_unlock_slowpath+0x731/0x900
[  248.207849][ T5607]  ? skb_pull_data+0xf0/0x200
[  248.207867][ T5607]  hci_le_enh_conn_complete_evt+0x189/0x490
[  248.207882][ T5607]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  248.207898][ T5607]  hci_event_packet+0x67a/0xf10
[  248.207913][ T5607]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  248.207926][ T5607]  ? __pfx_hci_event_packet+0x10/0x10
[  248.207940][ T5607]  ? kcov_remote_start+0x420/0x7e0
[  248.207957][ T5607]  ? hci_send_to_monitor+0xe2/0x590
[  248.207974][ T5607]  hci_rx_work+0x3ee/0x1020
[  248.207989][ T5607]  ? process_scheduled_works+0x97a/0x1630
[  248.208003][ T5607]  process_scheduled_works+0xc3d/0x1630
[  248.208032][ T5607]  ? __pfx_process_scheduled_works+0x10/0x10
[  248.208048][ T5607]  ? assign_work+0x3cf/0x5d0
[  248.208064][ T5607]  worker_thread+0xa47/0xfb0
[  248.208096][ T5607]  ? __kthread_parkme+0x71/0x1f0
[  248.208116][ T5607]  kthread+0x38b/0x480
[  248.208132][ T5607]  ? __pfx_worker_thread+0x10/0x10
[  248.208144][ T5607]  ? __pfx_kthread+0x10/0x10
[  248.208160][ T5607]  ret_from_fork+0x514/0xb70
[  248.208178][ T5607]  ? __pfx_ret_from_fork+0x10/0x10
[  248.208193][ T5607]  ? __switch_to+0xc89/0x1420
[  248.208208][ T5607]  ? __pfx_kthread+0x10/0x10
[  248.208224][ T5607]  ret_from_fork_asm+0x1a/0x30
[  248.208248][ T5607]  </TASK>
[  248.208312][ T5607] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  248.208336][ T5607] Bluetooth: hci4: failed to register connection device
[  248.312581][ T9253] rust_binder: 9249:9253 got reply transaction with no transaction stack
[  248.312598][ T9253] rust_binder: 9249:9253 transaction reply to 0:0 failed EINVAL, code 0 size 0-0
[  248.715843][ T9265] tipc: Started in network mode
[  248.720832][ T9265] tipc: Node identity ac1414aa, cluster identity 4711
[  248.729628][ T9265] tipc: New replicast peer: 172.20.20.187
[  248.737895][ T9265] tipc: Enabled bearer <udp:syz0>, priority 10
[  248.754817][ T5776] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  248.914041][ T5776] usb 5-1: Using ep0 maxpacket: 32
[  248.919990][ T5776] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  248.930795][ T5776] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  248.930830][ T5776] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  248.956313][ T4940] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  248.965143][ T5776] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  248.965179][ T5776] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  248.994976][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.994999][ T5776] usb 5-1: Product: syz
[  248.995014][ T5776] usb 5-1: Manufacturer: syz
[  248.995031][ T5776] usb 5-1: SerialNumber: syz
[  249.038947][    C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  249.106172][ T5776] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input44
[  249.135866][ T4940] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  249.146320][ T4940] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  249.146358][ T4940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.166666][ T4940] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  249.166680][ T4940] usb 3-1: Manufacturer: syz
[  249.186125][   T10] rust_binder: 9249: undelivered TRANSACTION_ERROR: 29201
[  249.213463][ T4940] usb 3-1: config 0 descriptor??
[  249.275379][ T5776] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  249.275403][ T5776]  (id 0x00)
[  249.385147][ T4940] rc_core: IR keymap rc-hauppauge not found
[  249.385168][ T4940] Registered IR keymap rc-empty
[  249.385830][ T4940] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  249.409520][ T5776] rc_core: IR keymap rc-imon-pad not found
[  249.409539][ T5776] Registered IR keymap rc-empty
[  249.409607][ T5776] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  249.409619][ T5776] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  249.446175][ T4940] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45
[  249.505647][ T4940] usb 3-1: USB disconnect, device number 36
[  249.515477][ T5776] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc1
[  249.576925][ T5776] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc1/input46
[  249.636297][ T5776] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:33> initialized
[  249.863648][ T5776] tipc: Node number set to 2886997162
[  250.226573][ T5776] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  250.384562][ T5776] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  250.397051][ T5776] usb 7-1: config 1 has an invalid interface number: 3 but max is 0
[  250.397075][ T5776] usb 7-1: config 1 has no interface number 0
[  250.413407][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.423272][ T5776] usb 7-1: Product: syz
[  250.423299][ T5776] usb 7-1: Manufacturer: syz
[  250.423309][ T5776] usb 7-1: SerialNumber: syz
[  250.450000][ T5776] usb 7-1: 3:1 : does not exist
[  250.450023][ T5776] usb 7-1: 3:2 : does not exist
[  250.525415][ T5676] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  250.668858][ T5776] usb 7-1: USB disconnect, device number 17
[  250.685001][ T5676] usb 3-1: Using ep0 maxpacket: 32
[  250.691563][ T5676] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  250.707510][ T5676] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  250.707533][ T5676] usb 3-1: config 0 has no interface number 0
[  250.729011][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.729037][ T5676] usb 3-1: Product: syz
[  250.729054][ T5676] usb 3-1: Manufacturer: syz
[  250.729064][ T5676] usb 3-1: SerialNumber: syz
[  250.766926][ T5676] usb 3-1: config 0 descriptor??
[  250.883725][ T9306] imon:send_packet: task interrupted
[  250.883814][ T9306] imon:send_packet: packet tx failed (-512)
[  250.884448][ T9306] imon:vfd_write: send packet #3 failed
[  251.058504][ T5776] usb 5-1: USB disconnect, device number 33
[  251.187858][ T5676] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  251.198701][ T5676] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  252.364051][ T5776] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  252.515645][ T5776] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  252.527471][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.527495][ T5776] usb 5-1: Product: syz
[  252.527527][ T5776] usb 5-1: Manufacturer: syz
[  252.527538][ T5776] usb 5-1: SerialNumber: syz
[  252.982521][ T5776] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  252.995825][ T5776] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  253.200307][ T5676] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  253.200481][ T5676] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  253.240651][ T5676] usb 3-1: USB disconnect, device number 37
[  253.562807][   T52] Bluetooth: hci4: Malformed LE Event: 0x0d
[  255.397636][ T5776] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  255.412133][ T5776] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  255.413114][ T5776] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO
[  255.413145][ T5776] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  255.413156][ T5776] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  255.413522][ T5776] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  255.472674][ T5776] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  255.501102][ T5776] usb 5-1: USB disconnect, device number 34
[  255.580983][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  255.581027][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  255.859580][ T9401] fuse: fd is not a fuse device
[  255.964162][ T5776] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  256.125432][ T5776] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  256.145626][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.145655][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.145686][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.186185][ T5776] usb 3-1: config 0 descriptor??
[  256.469589][   T52] Bluetooth: hci5: Unknown advertising packet type: 0x18
[  256.469617][   T52] Bluetooth: hci5: Unknown advertising packet type: 0x1e
[  256.480885][   T52] Bluetooth: hci5: Unknown advertising packet type: 0x30
[  256.480898][   T52] Bluetooth: hci5: Malformed LE Event: 0x0d
[  256.617958][ T9426] create_pit_timer: 7 callbacks suppressed
[  256.618001][ T9426] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  256.657392][ T5776] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0
[  256.665037][ T5776] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0
[  256.681204][ T5776] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001D/input/input47
[  256.751743][ T9426] kvm: pic: non byte read
[  256.751950][ T9426] pic_ioport_write: 53 callbacks suppressed
[  256.751974][ T9426] kvm: pic: level sensitive irq not supported
[  256.752021][ T9426] kvm: pic: non byte read
[  256.752189][ T9426] kvm: pic: level sensitive irq not supported
[  256.752234][ T9426] kvm: pic: non byte read
[  256.792425][ T5776] cm6533_jd 0003:0D8C:0022.001D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  256.823125][ T9426] kvm: pic: level sensitive irq not supported
[  256.871879][ T9426] kvm: pic: non byte read
[  256.924721][   T10] usb 3-1: USB disconnect, device number 38
[  257.008477][ T9432] fido_id[9432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  257.754023][   T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  257.774003][ T5676] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  257.904076][   T10] usb 5-1: Using ep0 maxpacket: 8
[  257.909781][   T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  257.919972][   T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  257.928431][   T10] usb 5-1: config 179 has no interface number 0
[  257.928459][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  257.928473][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  257.928488][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  257.928501][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  257.928515][   T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  257.928539][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.010201][ T5676] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  258.022186][ T5676] usb 3-1: config 1 has an invalid interface number: 3 but max is 0
[  258.022211][ T5676] usb 3-1: config 1 has no interface number 0
[  258.039115][ T9449] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  258.049078][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.059840][ T5676] usb 3-1: Product: syz
[  258.064117][ T5676] usb 3-1: Manufacturer: syz
[  258.064127][ T5676] usb 3-1: SerialNumber: syz
[  258.108582][ T5676] usb 3-1: 3:1 : does not exist
[  258.114872][ T5676] usb 3-1: 3:2 : does not exist
[  258.289728][ T5676] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input48
[  258.470567][ T5676] usb 5-1: USB disconnect, device number 35
[  258.470667][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  258.470696][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  258.648536][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1315'.
[  258.696586][ T9467] fuse: fd is not a fuse device
[  258.920264][ T5676] usb 3-1: USB disconnect, device number 39
[  259.445011][ T5676] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  259.604507][ T5676] usb 5-1: Using ep0 maxpacket: 8
[  259.611529][ T5676] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  259.630686][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.630710][ T5676] usb 5-1: Product: syz
[  259.630727][ T5676] usb 5-1: Manufacturer: syz
[  259.630737][ T5676] usb 5-1: SerialNumber: syz
[  259.660433][ T5676] usb 5-1: config 0 descriptor??
[  259.667827][ T5676] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  259.709280][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1324'.
[  259.774001][ T5776] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  259.925955][ T5776] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  259.935830][ T5776] usb 3-1: config 0 has no interfaces?
[  259.935860][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.956582][ T5776] usb 3-1: config 0 descriptor??
[  260.218795][ T9499] rust_binder: 9481:9499 got reply transaction with no transaction stack
[  260.228088][ T9499] rust_binder: 9481:9499 transaction reply to 0:0 failed EINVAL, code 0 size 0-24
[  260.805627][ T9520] event trace: Could not enable event p
[  261.065212][ T9528] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1340'.
[  261.354676][ T4940] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  261.504500][ T4940] usb 7-1: Using ep0 maxpacket: 32
[  261.510048][ T4940] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  261.520368][ T4940] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  261.530745][ T4940] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  261.530763][ T4940] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  261.530777][ T4940] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  261.572225][ T4940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.580337][ T4940] usb 7-1: Product: syz
[  261.580348][ T4940] usb 7-1: Manufacturer: syz
[  261.580357][ T4940] usb 7-1: SerialNumber: syz
[  261.607328][    C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  261.617453][ T4940] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input49
[  261.826814][ T4940] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  261.835784][ T4940]  (id 0x00)
[  261.904221][ T4940] rc_core: IR keymap rc-imon-pad not found
[  261.912450][ T4940] Registered IR keymap rc-empty
[  261.917762][ T4940] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  261.917775][ T4940] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  262.025336][ T4940] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0
[  262.041129][ T4940] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input50
[  262.061276][ T4940] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:18> initialized
[  262.514794][ T5676] gspca_sonixj: i2c_w8 err -71
[  262.546611][ T4940] usb 3-1: USB disconnect, device number 40
[  262.555221][ T5676] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  262.565526][ T5776] rust_binder: 9481: undelivered TRANSACTION_ERROR: 29201
[  262.565651][ T5776] rust_binder: 9481: undelivered TRANSACTION_COMPLETE
[  262.565669][ T5776] rust_binder: 9481: undelivered TRANSACTION_ERROR: 29189
[  262.598802][ T5676] usb 5-1: USB disconnect, device number 36
[  264.388089][ T9564] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1351'.
[  264.707655][ T9565] imon:send_packet: task interrupted
[  264.707677][ T9565] imon:send_packet: packet tx failed (-512)
[  264.707805][ T9565] imon:vfd_write: send packet #5 failed
[  264.726074][ T4940] usb 7-1: USB disconnect, device number 18
[  265.384073][ T4940] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  265.524208][   T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  265.537016][ T4940] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  265.548616][ T4940] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  265.560425][ T4940] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  265.560442][ T4940] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  265.560468][ T4940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.595234][ T9572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  265.684477][   T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  265.695061][   T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  265.703754][   T10] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  265.703768][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  265.703796][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  265.703810][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  265.752991][   T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  265.753032][   T10] usb 7-1: Product: syz
[  265.753050][   T10] usb 7-1: Manufacturer: syz
[  265.782112][   T10] cdc_wdm 7-1:1.0: skipping garbage
[  265.790539][   T10] cdc_wdm 7-1:1.0: skipping garbage
[  265.802468][   T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  265.808755][   T10] cdc_wdm 7-1:1.0: Unknown control protocol
[  266.015153][   T10] usb 7-1: USB disconnect, device number 19
[  267.601075][ T9595] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  267.601099][ T9595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  267.623173][ T9595] vhci_hcd vhci_hcd.0: Device attached
[  267.632352][ T9595] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5)
[  267.632368][ T9595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  267.647475][ T9595] vhci_hcd vhci_hcd.0: Device attached
[  267.656585][ T9595] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7)
[  267.656601][ T9595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  267.663424][ T9595] vhci_hcd vhci_hcd.0: Device attached
[  267.682427][ T9595] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(10)
[  267.682441][ T9595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  267.689147][ T9595] vhci_hcd vhci_hcd.0: Device attached
[  267.714075][ T9602] vhci_hcd: connection closed
[  267.719047][  T142] vhci_hcd vhci_hcd.6: stop threads
[  267.745553][  T142] vhci_hcd vhci_hcd.6: release socket
[  267.755921][  T142] vhci_hcd vhci_hcd.6: disconnect device
[  267.765780][ T9598] vhci_hcd: connection closed
[  267.765956][ T9596] vhci_hcd: connection closed
[  267.771436][ T6385] vhci_hcd vhci_hcd.6: stop threads
[  267.771459][ T6385] vhci_hcd vhci_hcd.6: release socket
[  267.771488][ T6385] vhci_hcd vhci_hcd.6: disconnect device
[  267.781691][ T9600] vhci_hcd: connection closed
[  267.788538][ T6385] vhci_hcd vhci_hcd.6: stop threads
[  267.788550][ T6385] vhci_hcd vhci_hcd.6: release socket
[  267.789045][ T6385] vhci_hcd vhci_hcd.6: disconnect device
[  267.819679][ T6385] vhci_hcd vhci_hcd.6: stop threads
[  267.819702][ T6385] vhci_hcd vhci_hcd.6: release socket
[  267.819730][ T6385] vhci_hcd vhci_hcd.6: disconnect device
[  267.838672][   T10] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  269.757419][ T4940] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  269.758756][ T4940] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input51
[  269.801889][ T4940] usb 3-1: USB disconnect, device number 41
[  269.802000][    C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  270.259844][ T9610] zonefs (nullb1) ERROR: Not a zoned block device
[  270.436211][ T4940] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  270.594733][ T4940] usb 3-1: Using ep0 maxpacket: 32
[  270.600250][ T4940] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  270.610951][ T4940] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  270.610987][ T4940] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  270.611010][ T4940] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  270.611027][ T4940] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  270.662538][ T4940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.662563][ T4940] usb 3-1: Product: syz
[  270.662578][ T4940] usb 3-1: Manufacturer: syz
[  270.662589][ T4940] usb 3-1: SerialNumber: syz
[  270.692653][    C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  270.727166][ T4940] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input52
[  270.914063][ T4940] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  270.923767][ T4940]  (id 0x00)
[  270.975834][ T4940] rc_core: IR keymap rc-imon-pad not found
[  270.981723][ T4940] Registered IR keymap rc-empty
[  270.981800][ T4940] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  270.981814][ T4940] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  271.117642][ T4940] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0
[  271.130013][ T4940] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input53
[  271.146014][ T4940] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:42> initialized
[  271.520411][   T31] audit: type=1804 audit(1787935483.685:12): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1368" name="/newroot/127/file1" dev="fuse" ino=1 res=1 errno=0
[  273.003328][ T9631] imon:send_packet: task interrupted
[  273.017031][ T9631] imon:send_packet: packet tx failed (-512)
[  273.024673][ T9631] imon:vfd_write: send packet #5 failed
[  273.036183][ T5698] usb 3-1: USB disconnect, device number 42
[  277.880537][ T9636] nbd6: detected capacity change from 0 to 127
[  277.905675][ T9636] block nbd6: NBD_DISCONNECT
[  277.905742][ T9636] block nbd6: Disconnected due to user request.
[  277.905761][ T9636] block nbd6: shutting down sockets
[  278.123354][ T5607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  278.140114][ T5607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  278.149499][ T5607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  278.158914][ T5607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  278.168342][ T5607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  278.626225][ T9644] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.633458][ T9644] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.642261][ T9644] bridge_slave_0: entered allmulticast mode
[  278.649940][ T9644] bridge_slave_0: entered promiscuous mode
[  278.658517][ T9644] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.665723][ T9644] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.665930][ T9644] bridge_slave_1: entered allmulticast mode
[  278.666906][ T9644] bridge_slave_1: entered promiscuous mode
[  278.708029][ T9644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.720814][ T9644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.752447][ T9644] team0: Port device team_slave_0 added
[  278.760920][ T9644] team0: Port device team_slave_1 added
[  278.784351][ T9644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.791327][ T9644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  278.791345][ T9644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.819956][ T9644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.819965][ T9644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  278.819980][ T9644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.906087][ T9644] hsr_slave_0: entered promiscuous mode
[  278.912531][ T9644] hsr_slave_1: entered promiscuous mode
[  278.918984][ T9644] debugfs: 'hsr0' already exists in 'hsr'
[  278.926135][ T9644] Cannot create hsr debugfs directory
[  279.093841][ T9644] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  279.104882][ T9644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  279.113170][ T9644] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  279.122095][ T9644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  279.130367][ T9644] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  279.139627][ T9644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  279.147525][ T9644] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  279.158191][ T9644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  279.183411][ T9644] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.183514][ T9644] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.183657][ T9644] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.183721][ T9644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.251233][ T9644] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.269870][  T164] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.279027][  T164] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.291566][ T9644] 8021q: adding VLAN 0 to HW filter on device team0
[  279.302763][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.302835][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.323582][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.323646][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.628471][ T9644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.797405][ T9644] veth0_vlan: entered promiscuous mode
[  279.808646][ T9644] veth1_vlan: entered promiscuous mode
[  279.836007][ T9644] veth0_macvtap: entered promiscuous mode
[  279.845749][ T9644] veth1_macvtap: entered promiscuous mode
[  279.863879][ T9644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.878252][ T9644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.965166][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.965381][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.965568][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.965590][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.055117][  T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.055147][  T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.098120][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.098142][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.215160][   T52] Bluetooth: hci6: command tx timeout
[  280.392530][ T5607] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  280.412195][ T5607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  280.419925][ T5607] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  280.434688][ T5607] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  280.442088][ T5607] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  280.504626][ T5676] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  280.655673][ T5676] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  280.668729][ T5676] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  280.668764][ T5676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  280.668788][ T5676] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  280.668814][ T5676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.724107][ T5676] usb 3-1: config 0 descriptor??
[  280.738500][ T9687] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  280.843029][   T52] Bluetooth: hci6: Unknown advertising packet type: 0x14
[  280.843054][   T52] Bluetooth: hci6: Unknown advertising packet type: 0x32
[  280.845323][   T52] Bluetooth: hci6: Malformed LE Event: 0x0d
[  281.841241][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.842198][ T9690] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.842285][ T9690] bridge_slave_0: entered allmulticast mode
[  281.868694][ T9690] bridge_slave_0: entered promiscuous mode
[  281.877455][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.885824][ T9690] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.885928][ T9690] bridge_slave_1: entered allmulticast mode
[  281.907570][ T9690] bridge_slave_1: entered promiscuous mode
[  281.995286][ T9690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.009239][ T9690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.092134][ T9690] team0: Port device team_slave_0 added
[  282.104828][ T9690] team0: Port device team_slave_1 added
[  282.200098][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.200120][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.207513][ T9690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.209211][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.209220][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.209234][ T9690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.301517][   T52] Bluetooth: hci6: command tx timeout
[  282.451803][ T9690] hsr_slave_0: entered promiscuous mode
[  282.479745][ T9690] hsr_slave_1: entered promiscuous mode
[  282.491923][ T9690] debugfs: 'hsr0' already exists in 'hsr'
[  282.499457][ T9690] Cannot create hsr debugfs directory
[  282.534483][   T52] Bluetooth: hci7: command tx timeout
[  283.227591][ T9690] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  283.246708][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  283.247324][ T9690] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  283.277577][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  283.290480][ T5676] usbhid 3-1:0.0: can't add hid device: -71
[  283.290554][ T5676] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  283.308038][ T9690] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  283.328994][ T5676] usb 3-1: USB disconnect, device number 43
[  283.339271][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  283.339729][ T9690] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  283.395636][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  283.414846][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  283.480243][ T9690] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.506667][ T9690] 8021q: adding VLAN 0 to HW filter on device team0
[  283.517846][  T118] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.517917][  T118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.540699][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.540798][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.577271][    T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  283.590337][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.590360][    T9] usb 8-1: Product: syz
[  283.590376][    T9] usb 8-1: Manufacturer: syz
[  283.590386][    T9] usb 8-1: SerialNumber: syz
[  283.734891][ T5676] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  283.895056][ T5676] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  283.905629][ T5676] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  283.905668][ T5676] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  283.905687][ T5676] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  283.905714][ T5676] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  283.951290][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  283.951315][ T5676] usb 3-1: Product: syz
[  283.951331][ T5676] usb 3-1: Manufacturer: syz
[  283.981083][ T5676] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  284.041538][    T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  284.041588][    T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  284.078658][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.226749][ T9728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.240077][  T191] usb 3-1: USB disconnect, device number 44
[  284.344362][ T9690] veth0_vlan: entered promiscuous mode
[  284.356658][ T9690] veth1_vlan: entered promiscuous mode
[  284.375412][   T52] Bluetooth: hci6: command tx timeout
[  284.393861][ T9690] veth0_macvtap: entered promiscuous mode
[  284.404787][ T9690] veth1_macvtap: entered promiscuous mode
[  284.423709][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.441230][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.504714][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.504767][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.504795][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.504823][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.615282][   T52] Bluetooth: hci7: command tx timeout
[  284.642884][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.642905][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.699412][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.699433][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.851866][ T9756] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  285.018389][ T9760] random: crng reseeded on system resumption
[  285.054519][ T5698] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  285.206280][ T5698] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  285.220820][ T5698] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.220846][ T5698] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  285.220877][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.258670][ T5698] opticon 9-1:1.0: opticon converter detected
[  285.274548][ T5698] usb 9-1: opticon converter now attached to ttyUSB0
[  285.475574][ T9768] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  285.492500][ T9768] kvm: pic: level sensitive irq not supported
[  285.492671][ T9768] kvm: pic: non byte read
[  285.506315][ T9768] kvm: pic: level sensitive irq not supported
[  285.506448][ T9768] kvm: pic: non byte read
[  285.506645][ T9768] kvm: pic: level sensitive irq not supported
[  285.506748][ T9768] kvm: pic: non byte read
[  285.533307][ T9768] kvm: pic: level sensitive irq not supported
[  285.533448][ T9768] kvm: pic: non byte read
[  285.552088][ T9768] kvm: pic: level sensitive irq not supported
[  285.552259][ T9768] kvm: pic: non byte read
[  285.566458][ T9754] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90
[  285.579440][ T9768] kvm: pic: level sensitive irq not supported
[  285.581953][ T9768] kvm: pic: non byte read
[  285.597881][ T9768] kvm: pic: level sensitive irq not supported
[  285.597959][ T9768] kvm: pic: non byte read
[  285.598105][ T9768] kvm: pic: level sensitive irq not supported
[  285.598169][ T9768] kvm: pic: non byte read
[  285.598374][ T9768] kvm: pic: level sensitive irq not supported
[  285.598431][ T9768] kvm: pic: non byte read
[  285.598601][ T9768] kvm: pic: level sensitive irq not supported
[  285.598645][ T9768] kvm: pic: non byte read
[  285.743696][ T5776] usb 9-1: USB disconnect, device number 2
[  285.764597][ T5776] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  285.773691][ T5776] opticon 9-1:1.0: device disconnected
[  285.820266][ T9773] capability: warning: `syz.2.1389' uses 32-bit capabilities (legacy support in use)
[  286.076103][ T5776] hid-generic 0005:0007:0009.001E: item fetching failed at offset 2/4
[  286.096190][ T5776] hid-generic 0005:0007:0009.001E: probe with driver hid-generic failed with error -22
[  286.404315][ T5776] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  286.454304][   T52] Bluetooth: hci6: command tx timeout
[  286.557669][ T5776] usb 3-1: Using ep0 maxpacket: 8
[  286.563242][ T5776] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  286.573959][ T5776] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  286.573982][ T5776] usb 3-1: config 179 has no interface number 0
[  286.574053][ T5776] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  286.574071][ T5776] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  286.574087][ T5776] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  286.574102][ T5776] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  286.574118][ T5776] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  286.574158][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.613804][ T5698] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[  286.680056][ T9781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  286.696176][   T52] Bluetooth: hci7: command tx timeout
[  286.786648][ T5698] usb 9-1: unable to get BOS descriptor or descriptor too short
[  286.786696][ T5698] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  286.807333][ T5698] usb 9-1: config 100 has an invalid interface number: 173 but max is 0
[  286.807357][ T5698] usb 9-1: config 100 has no interface number 0
[  286.807433][ T5698] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  286.807449][ T5698] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  286.807465][ T5698] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0
[  286.807479][ T5698] usb 9-1: config 100 interface 173 has no altsetting 0
[  286.874913][ T5698] usb 9-1: string descriptor 0 read error: -22
[  286.881385][ T5698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.902003][ T9783] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  286.920576][ T5698] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected
[  286.936832][ T5698] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  286.961505][    T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -EPROTO
[  286.961603][    T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  286.961624][    T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  286.962155][    T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  287.021253][    T9] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71
[  287.048323][    T9] usb 8-1: USB disconnect, device number 2
[  287.078745][ T9638] udevd[9638]: setting mode of /dev/bus/usb/008/002 to 020664 failed: No such file or directory
[  287.078870][ T9638] udevd[9638]: setting owner of /dev/bus/usb/008/002 to uid=0, gid=0 failed: No such file or directory
[  287.141091][ T4940] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input54
[  287.216545][ T9783] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90
[  287.232134][ T5698] usb 9-1: USB disconnect, device number 3
[  287.268997][ T5698] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  287.269456][ T5698] metro_usb 9-1:100.173: device disconnected
[  287.357046][ T4940] usb 3-1: USB disconnect, device number 45
[  287.357146][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  287.357173][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  288.776062][   T52] Bluetooth: hci7: command tx timeout
[  289.166664][ T5698] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  289.337544][ T5698] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  289.350063][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.350088][ T5698] usb 3-1: Product: syz
[  289.350104][ T5698] usb 3-1: Manufacturer: syz
[  289.350115][ T5698] usb 3-1: SerialNumber: syz
[  289.382259][ T5698] usb 3-1: config 0 descriptor??
[  289.389054][ T5698] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  289.934310][ T4940] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  290.084025][ T4940] usb 8-1: Using ep0 maxpacket: 8
[  290.089630][ T4940] usb 8-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00
[  290.100005][ T4940] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  290.108945][ T4940] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  290.108960][ T4940] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  290.108974][ T4940] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  290.108986][ T4940] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  290.109009][ T4940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.224006][    T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  290.374863][    T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  290.388800][    T9] usb 9-1: config 0 has an invalid interface number: 50 but max is 0
[  290.388831][    T9] usb 9-1: config 0 has no interface number 0
[  290.388857][    T9] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  290.420951][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.420974][    T9] usb 9-1: Product: syz
[  290.420990][    T9] usb 9-1: Manufacturer: syz
[  290.421001][    T9] usb 9-1: SerialNumber: syz
[  290.448756][    T9] usb 9-1: config 0 descriptor??
[  290.472757][    T9] yurex 9-1:0.50: USB YUREX device now attached to Yurex #1
[  290.667239][    T9] usb 9-1: USB disconnect, device number 4
[  290.677388][    T9] yurex 9-1:0.50: USB YUREX #1 now disconnected
[  291.005322][ T9845] usbtmc 8-1:16.0: simple usb_control_msg failed -32
[  291.013079][    T9] usb 8-1: USB disconnect, device number 3
[  291.804123][ T4940] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  291.954474][ T4940] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  291.971399][ T4940] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  291.971425][ T4940] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.971445][ T4940] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  291.971471][ T4940] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  292.015229][ T4940] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  292.023270][ T4940] usb 9-1: Product: syz
[  292.023286][ T4940] usb 9-1: Manufacturer: syz
[  292.037875][ T4940] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  292.268377][ T9853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  292.281701][ T4940] usb 9-1: USB disconnect, device number 5
[  292.804014][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  292.955010][    T9] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  292.970514][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.970567][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.999136][    T9] usb 8-1: config 0 descriptor??
[  293.219670][    T9] usbhid 8-1:0.0: can't add hid device: -71
[  293.219758][    T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  293.242466][    T9] usb 8-1: USB disconnect, device number 4
[  293.252386][ T5698] gspca_stk1135: reg_w 0x1b err -71
[  293.253422][ T5698] gspca_stk1135: serial bus timeout: status=0x00
[  293.253431][ T5698] gspca_stk1135: Sensor write failed
[  293.253448][ T5698] gspca_stk1135: serial bus timeout: status=0x00
[  293.253456][ T5698] gspca_stk1135: Sensor write failed
[  293.253472][ T5698] gspca_stk1135: serial bus timeout: status=0x00
[  293.253480][ T5698] gspca_stk1135: Sensor read failed
[  293.253496][ T5698] gspca_stk1135: serial bus timeout: status=0x00
[  293.253503][ T5698] gspca_stk1135: Sensor read failed
[  293.253509][ T5698] gspca_stk1135: Detected sensor type unknown (0x0)
[  293.253527][ T5698] gspca_stk1135: serial bus timeout: status=0x00
[  293.253535][ T5698] gspca_stk1135: Sensor read failed
[  293.253551][ T5698] gspca_stk1135: serial bus timeout: status=0x00
[  293.253559][ T5698] gspca_stk1135: Sensor read failed
[  293.253575][ T5698] gspca_stk1135: serial bus timeout: status=0x00
[  293.253582][ T5698] gspca_stk1135: Sensor write failed
[  293.253598][ T5698] gspca_stk1135: serial bus timeout: status=0x00
[  293.253605][ T5698] gspca_stk1135: Sensor write failed
[  293.253648][ T5698] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[  293.398174][ T5698] usb 3-1: USB disconnect, device number 46
[  293.553524][ T5607] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  293.568547][ T5607] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  293.577864][ T5607] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  293.586650][ T5607] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  293.594260][ T5607] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  293.796046][    T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  293.958529][    T9] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  293.969703][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  293.969740][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.003145][    T9] usb 8-1: config 0 descriptor??
[  294.427408][ T5676] usb 9-1: new low-speed USB device number 6 using dummy_hcd
[  294.437987][    T9] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor
[  294.461101][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.001F/input/input55
[  294.595428][ T5676] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  294.611505][ T5676] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  294.611543][ T5676] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  294.611582][ T5676] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  294.611599][ T5676] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  294.611615][ T5676] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  294.648206][    T9] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0
[  294.695663][ T5676] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  294.696348][ T5676] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  294.696379][ T5676] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  294.696395][ T5676] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  294.696410][ T5676] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  294.728587][ T5676] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  294.728660][ T5676] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  294.728676][ T5676] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  294.728690][ T5676] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  294.728703][ T5676] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  294.846862][ T5676] usb 9-1: string descriptor 0 read error: -22
[  294.846947][ T5676] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.893878][ T5676] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  295.177021][ T5676] usb 9-1: USB disconnect, device number 6
[  295.219635][ T5698] usb 8-1: USB disconnect, device number 5
[  295.261100][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.268415][ T9873] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.275767][ T9873] bridge_slave_0: entered allmulticast mode
[  295.276747][ T9873] bridge_slave_0: entered promiscuous mode
[  295.297066][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.298801][ T9873] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.298926][ T9873] bridge_slave_1: entered allmulticast mode
[  295.323760][ T9873] bridge_slave_1: entered promiscuous mode
[  295.439740][ T9873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.459178][ T9873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.540753][ T9873] team0: Port device team_slave_0 added
[  295.552929][ T9873] team0: Port device team_slave_1 added
[  295.575754][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'.
[  295.617641][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.626847][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.626880][ T9873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.654513][   T52] Bluetooth: hci8: command tx timeout
[  295.678597][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.687039][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.714878][ T9873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.864842][ T9873] hsr_slave_0: entered promiscuous mode
[  295.874730][ T9873] hsr_slave_1: entered promiscuous mode
[  295.883004][ T9873] debugfs: 'hsr0' already exists in 'hsr'
[  295.883038][ T9873] Cannot create hsr debugfs directory
[  296.916310][ T5698] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  296.961767][ T9873] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  297.001297][ T9873] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  297.011516][ T9873] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  297.036754][ T9873] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  297.037246][ T9873] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  297.072768][ T9873] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  297.081609][ T5698] usb 8-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  297.100442][ T5698] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  297.100486][ T5698] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  297.100504][ T5698] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  297.100529][ T5698] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.139862][ T9873] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  297.167367][ T5698] usb 8-1: config 0 descriptor??
[  297.184276][ T9940] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  297.197679][ T9873] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  297.515164][ T9873] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.590706][ T9873] 8021q: adding VLAN 0 to HW filter on device team0
[  297.631768][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.631845][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.679172][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.679247][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.735009][   T52] Bluetooth: hci8: command tx timeout
[  297.909018][ T5698] usbhid 8-1:0.0: can't add hid device: -71
[  297.909106][ T5698] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  297.937374][ T5698] usb 8-1: USB disconnect, device number 6
[  298.617937][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  298.857264][ T4940] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  299.019686][ T9873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.030553][ T4940] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  299.042485][ T4940] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  299.042511][ T4940] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  299.073788][ T4940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.073811][ T4940] usb 9-1: Product: syz
[  299.073827][ T4940] usb 9-1: Manufacturer: syz
[  299.073838][ T4940] usb 9-1: SerialNumber: syz
[  299.108235][ T4940] usb 9-1: config 0 descriptor??
[  299.113856][ T9992] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  299.114419][ T9992] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  299.202162][T10012] jffs2: notice: (10012) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  299.343758][ T9992] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  299.343854][ T9992] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  299.814345][ T5607] Bluetooth: hci8: command tx timeout
[  300.976682][ T4940] Error reading MAC address
[  301.995514][ T5607] Bluetooth: hci8: command tx timeout
[  303.203825][ T4940] usb 9-1: USB disconnect, device number 7
[  303.434699][ T9873] veth0_vlan: entered promiscuous mode
[  303.456127][ T9873] veth1_vlan: entered promiscuous mode
[  303.549013][ T9873] veth0_macvtap: entered promiscuous mode
[  303.572751][ T9873] veth1_macvtap: entered promiscuous mode
[  303.620581][ T9873] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.656730][ T9873] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.740721][ T6387] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.751288][ T6387] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.857164][  T164] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.857380][  T164] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.061118][ T6388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.061141][ T6388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.239759][   T39] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.355305][   T39] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.370097][ T5698] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  304.443416][ T6388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.443448][ T6388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.505745][   T39] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.536831][ T5698] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  304.548601][ T5698] usb 3-1: config 0 has no interfaces?
[  304.557078][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  304.557101][ T5698] usb 3-1: Product: syz
[  304.557117][ T5698] usb 3-1: Manufacturer: syz
[  304.585506][ T5698] usb 3-1: config 0 descriptor??
[  304.674343][ T5676] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  304.707750][   T39] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.829802][  T191] usb 3-1: USB disconnect, device number 47
[  304.846922][ T5676] usb 8-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  304.858160][   T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  304.874398][ T5676] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  304.874424][ T5676] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  304.874439][ T5676] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  304.874462][ T5676] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.886441][   T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  304.921197][ T5676] usb 8-1: config 0 descriptor??
[  304.930665][T10054] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  304.952049][   T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  304.961374][   T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  304.969570][   T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  305.359108][   T39] bridge_slave_1: left allmulticast mode
[  305.359151][   T39] bridge_slave_1: left promiscuous mode
[  305.359304][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.400247][   T39] bridge_slave_0: left allmulticast mode
[  305.413189][   T39] bridge_slave_0: left promiscuous mode
[  305.414161][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.658175][ T5676] usbhid 8-1:0.0: can't add hid device: -71
[  305.658250][ T5676] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  305.686879][ T5676] usb 8-1: USB disconnect, device number 7
[  306.038070][T10083] CIFS: Attempting to mount //127.0.0.1/share
[  306.079348][   T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.095101][   T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.111018][   T39] bond0 (unregistering): Released all slaves
[  306.592910][   T39] hsr_slave_0: left promiscuous mode
[  306.600123][   T39] hsr_slave_1: left promiscuous mode
[  306.612112][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.612135][   T39] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.628440][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.637295][   T39] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.673124][   T39] veth1_macvtap: left promiscuous mode
[  306.673158][   T39] veth0_macvtap: left promiscuous mode
[  306.673286][   T39] veth1_vlan: left promiscuous mode
[  306.673324][   T39] veth0_vlan: left promiscuous mode
[  306.805444][T10083] CIFS: VFS: cifs_mount failed w/return code = -112
[  307.018660][ T5607] Bluetooth: hci7: command tx timeout
[  307.110909][   T39] team0 (unregistering): Port device team_slave_1 removed
[  307.133665][   T39] team0 (unregistering): Port device team_slave_0 removed
[  307.167420][ T5676] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  307.243806][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5
[  307.338047][ T5676] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  307.350337][ T5676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.366998][ T5676] usb 3-1: config 0 descriptor??
[  307.401852][T10105] configfs-gadget.g1 gadget.0: HOST MAC 52:e7:4d:b9:ce:10
[  307.401880][T10105] configfs-gadget.g1 gadget.0: MAC 66:2a:7a:31:91:66
[  308.025553][ T5676] ath6kl: Failed to submit usb control message: -71
[  308.032568][ T5676] ath6kl: unable to send the bmi data to the device: -71
[  308.043821][ T5676] ath6kl: Unable to send get target info: -71
[  308.051716][ T5676] ath6kl: Failed to init ath6kl core: -71
[  308.052459][ T5676] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  308.095545][ T5676] usb 3-1: USB disconnect, device number 48
[  308.128726][T10058] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.153160][T10058] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.153285][T10058] bridge_slave_0: entered allmulticast mode
[  308.161590][T10058] bridge_slave_0: entered promiscuous mode
[  308.180091][T10058] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.180168][T10058] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.180291][T10058] bridge_slave_1: entered allmulticast mode
[  308.203579][T10058] bridge_slave_1: entered promiscuous mode
[  308.259159][T10058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.272777][T10058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.330852][T10058] team0: Port device team_slave_0 added
[  308.342140][T10058] team0: Port device team_slave_1 added
[  308.388707][T10067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  308.417439][T10058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.417460][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.417483][T10058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.475278][T10058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.475299][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.475322][T10058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.732549][T10058] hsr_slave_0: entered promiscuous mode
[  308.742443][T10058] hsr_slave_1: entered promiscuous mode
[  309.691983][ T5607] Bluetooth: hci7: command tx timeout
[  309.724679][T10058] debugfs: 'hsr0' already exists in 'hsr'
[  309.724706][T10058] Cannot create hsr debugfs directory
[  310.950507][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6
[  310.986722][T10142] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  311.511713][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1480'.
[  311.512798][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1480'.
[  311.594016][ T4940] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  311.735499][   T52] Bluetooth: hci7: command tx timeout
[  311.758561][ T4940] usb 10-1: Using ep0 maxpacket: 32
[  311.764760][ T4940] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  311.776341][ T4940] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[  311.776375][ T4940] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  311.776405][ T4940] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  311.776422][ T4940] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  311.776438][ T4940] usb 10-1: config 0 interface 0 has no altsetting 0
[  311.839461][ T4940] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  311.839488][ T4940] usb 10-1: Product: syz
[  311.839506][ T4940] usb 10-1: Manufacturer: syz
[  311.839517][ T4940] usb 10-1: SerialNumber: syz
[  311.867878][ T4940] usb 10-1: config 0 descriptor??
[  311.885250][ T4940] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  311.918071][ T4940] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  312.195901][T10155] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  312.211871][    T9] usb 10-1: USB disconnect, device number 2
[  312.211923][    C0] ldusb 10-1:0.0: usb_submit_urb failed (-19)
[  312.245176][    T9] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[  312.277045][T10172] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  312.735823][T10058] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  312.755654][ T4940] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  312.768273][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  312.783354][T10058] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  312.802308][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  312.816621][T10058] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  312.850589][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  312.861402][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7
[  312.870623][T10058] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  312.896572][T10188] gadgetfs: bound to dummy_udc driver
[  312.915673][ T4940] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[  312.925557][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  312.934979][ T4940] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  312.935005][ T4940] usb 3-1: config 0 interface 0 has no altsetting 0
[  312.935032][ T4940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.969643][ T4940] usb 3-1: config 0 descriptor??
[  313.348287][T10058] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.430892][T10058] 8021q: adding VLAN 0 to HW filter on device team0
[  313.438211][ T4940] usbhid 3-1:0.0: can't add hid device: -71
[  313.438279][ T4940] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  313.467667][ T4940] usb 3-1: USB disconnect, device number 49
[  313.487161][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.487228][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.542410][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.542479][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.633438][T10205] loop5: detected capacity change from 0 to 4095
[  313.816357][   T52] Bluetooth: hci7: command tx timeout
[  313.990746][ T9750] buffer_io_error: 53 callbacks suppressed
[  313.990779][ T9750] Buffer I/O error on dev loop5, logical block 511, async page read
[  314.109421][   T52] Bluetooth: Unknown LE signaling command 0x09
[  314.109445][   T52] Bluetooth: Wrong link type (-22)
[  314.334945][   T52] Bluetooth: hci8: unexpected event 0x36 length: 65 > 7
[  314.542926][   T52] Bluetooth: hci6: command 0x0406 tx timeout
[  315.264952][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8
[  315.497791][T10058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.730777][T10058] veth0_vlan: entered promiscuous mode
[  315.782522][T10058] veth1_vlan: entered promiscuous mode
[  315.891888][ T5607] Bluetooth: hci8: unexpected cc 0x0c05 length: 4 > 1
[  315.922916][T10058] veth0_macvtap: entered promiscuous mode
[  315.967299][T10058] veth1_macvtap: entered promiscuous mode
[  316.029043][T10058] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.059638][T10058] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.074284][ T5607] Bluetooth: hci8: Malformed Event: 0x02
[  316.084277][    T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  316.104542][  T142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.105030][  T142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.105060][  T142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.105080][  T142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.243488][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01
[  316.262059][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  316.282178][    T9] usb 3-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1
[  316.282202][    T9] usb 3-1: Product: syz
[  316.282219][    T9] usb 3-1: Manufacturer: syz
[  316.282230][    T9] usb 3-1: SerialNumber: syz
[  316.352180][    T9] em28xx 3-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0)
[  316.377764][    T9] em28xx 3-1:1.0: DVB interface 0 found: bulk
[  316.502714][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.502737][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.635491][    T9] em28xx 3-1:1.0: unknown em28xx chip ID (0)
[  316.670626][ T6388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.670649][ T6388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.705646][ T5607] Bluetooth: hci6: unexpected event for opcode 0x203e
[  316.869514][ T5607] Bluetooth: hci6: unexpected event for opcode 0x2060
[  316.989214][    T9] em28xx 3-1:1.0: reading from i2c device at 0xa0 failed (error=-5)
[  316.989243][    T9] em28xx 3-1:1.0: board has no eeprom
[  317.021218][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  317.027940][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  317.064761][    T9] em28xx 3-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44)
[  317.064787][    T9] em28xx 3-1:1.0: dvb set to bulk mode.
[  317.065314][  T191] em28xx 3-1:1.0: Binding DVB extension
[  317.109218][ T5607] Bluetooth: hci6: Malformed MSFT vendor event: 0x02
[  317.116214][    T9] usb 3-1: USB disconnect, device number 50
[  317.140645][    T9] em28xx 3-1:1.0: Disconnecting em28xx
[  317.149069][  T191] em28xx 3-1:1.0: writing to i2c device at 0x1e failed (error=-5)
[  317.149107][  T191] zl10353_read_register: readreg error (reg=127, ret==-5)
[  317.149138][  T191] em28xx 3-1:1.0: frontend initialization failed
[  317.149979][  T191] em28xx 3-1:1.0: Remote control support is not available for this card.
[  317.176789][    T9] em28xx 3-1:1.0: Closing input extension
[  317.345385][    T9] em28xx: Freeing device
[  317.574880][  T191] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  317.591089][ T5607] Bluetooth: Wrong link type (-71)
[  317.740983][  T191] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  317.751309][  T191] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.751345][  T191] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.789034][  T191] usb 10-1: config 0 descriptor??
[  318.053228][  T191] usbhid 10-1:0.0: can't add hid device: -71
[  318.053303][  T191] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  318.090039][  T191] usb 10-1: USB disconnect, device number 3
[  318.564119][  T191] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  318.725779][  T191] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  318.736485][  T191] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.736521][  T191] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.773427][  T191] usb 10-1: config 0 descriptor??
[  319.198408][  T191] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor
[  319.223844][  T191] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0020/input/input56
[  319.237940][ T5676] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  319.355843][  T191] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0
[  319.394638][ T5676] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  319.405064][ T5676] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  319.426664][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  319.426704][ T5676] usb 2-1: Product: syz
[  319.426721][ T5676] usb 2-1: Manufacturer: syz
[  319.426732][ T5676] usb 2-1: SerialNumber: syz
[  319.685888][ T5676] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  319.732300][ T5676] usb 10-1: USB disconnect, device number 4
[  319.758246][T10380] fido_id[10380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[  320.689254][ T5607] Bluetooth: hci8: unexpected cc 0x200b length: 2 > 1
[  320.956142][T10326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  321.259161][  T191] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  321.418281][  T191] usb 10-1: unable to get BOS descriptor or descriptor too short
[  321.418338][  T191] usb 10-1: New USB device found, idVendor=0944, idProduct=0204, bcdDevice= 0.40
[  321.436984][  T191] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  321.458896][  T191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.458920][  T191] usb 10-1: Product: syz
[  321.458936][  T191] usb 10-1: Manufacturer: syz
[  321.458947][  T191] usb 10-1: SerialNumber: syz
[  321.724939][  T191] usb 10-1: unit 4 not found!
[  321.734488][ T5676] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  321.879801][  T191] usb 10-1: USB disconnect, device number 5
[  321.887712][ T5676] usb 3-1: Using ep0 maxpacket: 32
[  321.894924][ T5676] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  321.909311][ T5676] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  321.909343][ T5676] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  321.909373][ T5676] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  321.909389][ T5676] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  321.909403][ T5676] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  321.909434][ T5676] usb 3-1: config 0 interface 0 has no altsetting 0
[  321.985087][ T5676] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  321.985130][ T5676] usb 3-1: Product: syz
[  321.985149][ T5676] usb 3-1: Manufacturer: syz
[  321.985159][ T5676] usb 3-1: SerialNumber: syz
[  322.026669][ T5676] usb 3-1: config 0 descriptor??
[  322.040922][ T5676] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  322.051648][ T5607] Bluetooth: hci6: unexpected event for opcode 0x2027
[  322.068083][ T5676] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  322.088226][ T9750] udevd[9750]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  322.248198][ T5776] usb 3-1: USB disconnect, device number 51
[  322.260241][ T5776] ldusb 3-1:0.0: LD USB Device #1 now disconnected
[  322.324471][ T5607] Bluetooth: hci6: unexpected cc 0x042d length: 1 < 7
[  322.324515][ T5607] Bluetooth: hci6: unexpected event for opcode 0x042d
[  322.468372][ T5607] Bluetooth: hci6: unexpected event for opcode 0x080c
[  322.873465][ T5607] Bluetooth: hci6: unexpected event for opcode 0x0c56
[  322.985684][  T191] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  323.155953][  T191] usb 10-1: unable to get BOS descriptor or descriptor too short
[  323.156010][  T191] usb 10-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6
[  323.174463][  T191] usb 10-1: config 12 has an invalid interface number: 99 but max is 0
[  323.174488][  T191] usb 10-1: config 12 has no interface number 0
[  323.174513][  T191] usb 10-1: config 12 interface 99 has no altsetting 0
[  323.202250][  T191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.202275][  T191] usb 10-1: Product: syz
[  323.202309][  T191] usb 10-1: Manufacturer: syz
[  323.202319][  T191] usb 10-1: SerialNumber: syz
[  323.458327][  T191] usb 10-1: no audio or video endpoints found
[  323.481751][  T191] usb 10-1: USB disconnect, device number 6
[  323.706091][ T5607] Bluetooth: hci6: unexpected event for opcode 0x2043
[  324.874743][ T5676] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  325.035050][ T5676] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  325.047937][ T5676] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  325.047971][ T5676] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  325.048002][ T5676] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.085749][ T5676] spcp8x5 8-1:1.0: SPCP8x5 converter detected
[  325.094286][  T191] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  325.116048][ T5676] usb 8-1: SPCP8x5 converter now attached to ttyUSB0
[  325.255898][  T191] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  325.269659][  T191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  325.285421][  T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.285445][  T191] usb 3-1: Product: syz
[  325.285476][  T191] usb 3-1: Manufacturer: syz
[  325.285487][  T191] usb 3-1: SerialNumber: syz
[  325.314461][  T191] usb 3-1: config 0 descriptor??
[  325.351361][  T191] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  325.351419][  T191] dvb-usb: bulk message failed: -22 (3/0)
[  325.386310][  T191] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  325.397498][  T191] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  325.397560][  T191] usb 3-1: media controller created
[  325.422994][  T191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  325.463496][  T191] dvb-usb: bulk message failed: -22 (6/0)
[  325.463579][  T191] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  325.489100][  T191] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57
[  325.504318][  T191] dvb-usb: schedule remote query interval to 150 msecs.
[  325.511366][  T191] dvb-usb: bulk message failed: -22 (3/0)
[  325.536051][  T191] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  325.562578][  T191] usb 3-1: USB disconnect, device number 52
[  325.661882][  T191] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  325.754178][T10540] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  325.762219][T10540] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  325.770261][T10540] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  325.958484][T10539] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  325.970518][  T191] usb 8-1: USB disconnect, device number 8
[  325.992583][  T191] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  326.003441][  T191] spcp8x5 8-1:1.0: device disconnected
[  326.046128][T10570] device-mapper: ioctl: Unsupported message sent to DM core: @
[  326.517740][ T5776] usb 2-1: USB disconnect, device number 16
[  326.532777][ T5776] usblp0: removed
[  326.994722][ T5776] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  327.104028][   T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  327.159789][ T5776] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  327.173211][ T5776] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  327.173238][ T5776] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  327.173270][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.284124][   T10] usb 10-1: Using ep0 maxpacket: 32
[  327.290819][   T10] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  327.306321][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.306361][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.306392][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.344315][   T10] usb 10-1: config 0 descriptor??
[  327.385626][   T10] hub 10-1:0.0: USB hub found
[  327.429162][ T5776] usb 2-1: usb_control_msg returned -32
[  327.429201][ T5776] usbtmc 2-1:16.0: can't read capabilities
[  327.560645][   T10] hub 10-1:0.0: 26 ports detected
[  327.566731][   T10] hub 10-1:0.0: insufficient power available to use all downstream ports
[  327.781800][   T10] hub 10-1:0.0: config failed, can't get hub status (err -71)
[  327.818483][   T10] usbhid 10-1:0.0: can't add hid device: -71
[  327.818551][   T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  327.856432][   T10] usb 10-1: USB disconnect, device number 7
[  327.976490][ T5776] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  328.110040][  T191] usb 2-1: USB disconnect, device number 17
[  328.136933][ T5776] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  328.148469][ T5776] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  328.148525][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.187342][ T5776] cyberjack 3-1:1.0: required endpoints missing
[  328.230996][ T5607] Bluetooth: hci6: Dropping invalid advertising data
[  328.238030][ T5607] Bluetooth: hci6: Malformed LE Event: 0x02
[  328.400535][ T5776] usb 3-1: USB disconnect, device number 53
[  328.934637][   T52] Bluetooth: hci6: command 0x0406 tx timeout
[  329.109876][T10674] syz.2.1621(10674): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  329.741726][T10693] IPVS: Scheduler module ip_vs_ not found
[  330.474858][  T191] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  330.530396][T10722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1639'.
[  330.530517][T10722] netlink: Unknown conntrack attr (0)
[  330.627494][  T191] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02
[  330.639188][  T191] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  330.639213][  T191] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  330.639242][  T191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.680047][  T191] ums-alauda 2-1:1.0: USB Mass Storage device detected
[  330.707049][  T191] ums-alauda 2-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  330.707049][  T191]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  330.739468][  T191] scsi host1: usb-storage 2-1:1.0
[  330.789614][T10705] syz.7.1620 (10705): drop_caches: 2
[  331.015764][ T4928] Bluetooth: hci6: command 0x0406 tx timeout
[  331.021831][ T5607] Bluetooth: hci8: command tx timeout
[  331.148489][T10737] CIFS: Attempting to mount //127.0.0.1/share
[  331.215668][T10737] CIFS: VFS: cifs_mount failed w/return code = -5
[  331.564995][T10749] loop6: detected capacity change from 0 to 2640
[  331.735871][   T32] INFO: task syz.3.765:7874 blocked for more than 143 seconds.
[  331.735898][   T32]       Tainted: G             L      syzkaller #0
[  331.735913][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  331.735921][   T32] task:syz.3.765       state:D stack:27432 pid:7874  tgid:7873  ppid:5614   task_flags:0x400140 flags:0x00080002
[  331.735961][   T32] Call Trace:
[  331.735968][   T32]  <TASK>
[  331.735977][   T32]  __schedule+0x17db/0x58f0
[  331.736010][   T32]  ? __pfx___schedule+0x10/0x10
[  331.736064][   T32]  ? schedule+0x90/0x2b0
[  331.736078][   T32]  schedule+0x164/0x2b0
[  331.736093][   T32]  schedule_preempt_disabled+0x13/0x30
[  331.736106][   T32]  __mutex_lock+0x7c1/0x1550
[  331.736120][   T32]  ? kasan_save_track+0x3e/0x80
[  331.736141][   T32]  ? __mutex_lock+0x5d4/0x1550
[  331.736156][   T32]  ? write_ports+0xb5/0xd10
[  331.736172][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  331.736196][   T32]  write_ports+0xb5/0xd10
[  331.736211][   T32]  ? __pfx_write_ports+0x10/0x10
[  331.736232][   T32]  ? __might_fault+0xaf/0x130
[  331.736250][   T32]  ? _copy_from_user+0x94/0xb0
[  331.736264][   T32]  ? simple_transaction_get+0x12d/0x160
[  331.736281][   T32]  nfsctl_transaction_write+0x10f/0x160
[  331.736296][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  331.736310][   T32]  vfs_write+0x296/0xba0
[  331.736331][   T32]  ? __pfx_vfs_write+0x10/0x10
[  331.736347][   T32]  ? __fget_files+0x2a/0x420
[  331.736364][   T32]  ? __fget_files+0x3a2/0x420
[  331.736378][   T32]  ? __fget_files+0x2a/0x420
[  331.736403][   T32]  ksys_write+0x150/0x270
[  331.736420][   T32]  ? __pfx_ksys_write+0x10/0x10
[  331.736441][   T32]  do_syscall_64+0x166/0x520
[  331.736455][   T32]  ? trace_irq_disable+0x3b/0x140
[  331.736472][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.736485][   T32]  ? clear_bhb_loop+0x70/0xc0
[  331.736501][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.736513][   T32] RIP: 0033:0x7fa792f9e159
[  331.736526][   T32] RSP: 002b:00007fa793d85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  331.736541][   T32] RAX: ffffffffffffffda RBX: 00007fa793225fa0 RCX: 00007fa792f9e159
[  331.736551][   T32] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000004
[  331.736560][   T32] RBP: 00007fa793035024 R08: 0000000000000000 R09: 0000000000000000
[  331.736569][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.736578][   T32] R13: 00007fa793226038 R14: 00007fa793225fa0 R15: 00007ffe86883568
[  331.736596][   T32]  </TASK>
[  331.736634][   T32] 
[  331.736634][   T32] Showing all locks held in the system:
[  331.736643][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  331.736653][   T32]  #0: ffffffff8ef5c720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  331.736710][   T32] locks held by getty/5367: 2, on CPU#1:
[  331.736719][   T32]  #0: ffff88803557b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  331.736785][   T32]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  331.736826][   T32] locks held by syz.0.653/7529: 3, on CPU#0:
[  331.736836][   T32]  #0: ffff88807a1c09b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  331.736872][   T32]  #1: ffff88807bcb2460 (sb_writers#16){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  331.736913][   T32]  #2: ffffffff8f29e980 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  331.736949][   T32] locks held by syz.3.765/7874: 3, on CPU#0:
[  331.736958][   T32]  #0: ffff88807f61d7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  331.736995][   T32]  #1: ffff88802955c460 (sb_writers#16){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  331.737036][   T32]  #2: ffffffff8f29e980 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  331.737071][   T32] locks held by syz.5.1343/9535: 2, on CPU#0:
[  331.737081][   T32]  #0: ffff888034b480e8 (&type->s_umount_key#58){++++}-{4:4}, at: deactivate_super+0xac/0xe0
[  331.737121][   T32]  #1: ffffffff8f29e980 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  331.737161][   T32] locks held by syz.4.1353/9570: 3, on CPU#0:
[  331.737171][   T32]  #0: ffff888079701b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  331.737206][   T32]  #1: ffff88807cd02460 (sb_writers#16){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  331.737247][   T32]  #2: ffffffff8f29e980 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  331.737282][   T32] locks held by syz.6.1373/9643: 3, on CPU#0:
[  331.737291][   T32]  #0: ffff888076cea470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  331.778844][   T32]  #1: ffff88807e812460 (sb_writers#16){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  331.845924][   T32]  #2: ffffffff8f29e980 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  331.845968][   T32] locks held by syz.2.1646/10747: 2, last CPU#0:
[  331.845977][   T32]  #0: ffff8880262f3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690
[  331.846007][   T32]  #1: ffffffff8ef5c720 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  331.846032][   T32] locks held by cmp/10753: 2, last CPU#0:
[  331.846040][   T32]  #0: ffff88807b51dcf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  331.846067][   T32]  #1: ffffffff8ef5c720 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  331.846093][   T32] locks held by syz.9.1647/10756: 1, on CPU#0:
[  331.846101][   T32]  #0: ffff88820f9f80a0 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_alloc_apic_access_page+0x2e/0x130
[  331.846129][   T32] 
[  331.846132][   T32] =============================================
[  331.846132][   T32] 
[  331.846150][   T32] NMI backtrace for cpu 0
[  331.846161][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.846175][   T32] Tainted: [L]=SOFTLOCKUP
[  331.846179][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  331.846186][   T32] Call Trace:
[  331.846191][   T32]  <TASK>
[  331.846196][   T32]  dump_stack_lvl+0xe8/0x150
[  331.846211][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  331.846227][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  331.846244][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  331.846260][   T32]  sys_info+0x135/0x170
[  331.846274][   T32]  watchdog+0xfd7/0x1030
[  331.846293][   T32]  ? watchdog+0x1c7/0x1030
[  331.846310][   T32]  kthread+0x38b/0x480
[  331.846327][   T32]  ? __pfx_watchdog+0x10/0x10
[  331.846340][   T32]  ? __pfx_kthread+0x10/0x10
[  331.846355][   T32]  ret_from_fork+0x514/0xb70
[  331.846372][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  331.846386][   T32]  ? __switch_to+0xc89/0x1420
[  331.846400][   T32]  ? __pfx_kthread+0x10/0x10
[  331.846415][   T32]  ret_from_fork_asm+0x1a/0x30
[  331.846436][   T32]  </TASK>
[  331.846447][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  332.388507][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  332.399156][   T32] Tainted: [L]=SOFTLOCKUP
[  332.403453][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  332.413483][   T32] Call Trace:
[  332.416741][   T32]  <TASK>
[  332.419655][   T32]  vpanic+0x56d/0xa60
[  332.423637][   T32]  ? __pfx_vpanic+0x10/0x10
[  332.428136][   T32]  ? console_srcu_read_unlock+0x3a/0x60
[  332.433660][   T32]  panic+0xc5/0xd0
[  332.437363][   T32]  ? __pfx_panic+0x10/0x10
[  332.441760][   T32]  ? nmi_cpu_backtrace+0x2b0/0x2d0
[  332.446856][   T32]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  332.452992][   T32]  watchdog+0x1030/0x1030
[  332.457394][   T32]  ? watchdog+0x1c7/0x1030
[  332.461797][   T32]  kthread+0x38b/0x480
[  332.465852][   T32]  ? __pfx_watchdog+0x10/0x10
[  332.470509][   T32]  ? __pfx_kthread+0x10/0x10
[  332.475079][   T32]  ret_from_fork+0x514/0xb70
[  332.479652][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  332.484743][   T32]  ? __switch_to+0xc89/0x1420
[  332.489405][   T32]  ? __pfx_kthread+0x10/0x10
[  332.493992][   T32]  ret_from_fork_asm+0x1a/0x30
[  332.498757][   T32]  </TASK>
[  332.501947][   T32] Kernel Offset: disabled
[  332.506351][   T32] Rebooting in 86400 seconds..