last executing test programs:

3m26.439939489s ago: executing program 32 (id=60):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='disk\n\x00\x00\x00', 0x8)

3m20.317800678s ago: executing program 4 (id=116):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='0\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='processors\n', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='mem\n', 0x4)

3m11.317759816s ago: executing program 0 (id=129):
pipe2$9p(&(0x7f0000000000)={<r0=>0x0, <r1=>0x0}, 0x0)
pipe2$9p(&(0x7f0000000008)={0x0, <r2=>0x0}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15)
write$P9_RATTACH(r1, &(0x7f0000000240)={0x14, 0x69, 0x1, {0x80}}, 0x14)
write$P9_RGETATTR(r1, &(0x7f0000000280)={0xa0, 0x19, 0x2, {0x7ff, {0x80}, 0x41ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000}}, 0xa0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
mount$9p_fd(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff)
write(r3, &(0x7f00000001c0)='data', 0x4)

3m11.057125856s ago: executing program 0 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/vtconsole/vtcon0/bind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/bochs-drm/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='0000:00:02.0\x00', 0xd)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/bochs-drm/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd)
close(r3)

3m10.636407276s ago: executing program 0 (id=131):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="fe03")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0399")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="039a")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0346")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0346")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0346")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0389")
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/hwmon/hwmon3/curr1_input\x00', 0x0, 0x0)

3m9.643768762s ago: executing program 5 (id=136):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0), 0x30)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x2a, 0x0, &(0x7f0000000400)="00000000000000000000000008004500001c00000000401184cf7f0000017f0000011234567800089933", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

3m9.549252931s ago: executing program 5 (id=137):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='disk\x00', 0x4)

3m6.950502535s ago: executing program 2 (id=138):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10)
listen(r2, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000600)='hello', 0x5, 0x0, 0x0, 0x0)
r4 = accept$inet(r2, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000700)=""/5, 0x5, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000800)='world', 0x5, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000900)=""/5, 0x5, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)={0x40, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x40}}, 0x0)
nanosleep(&(0x7f0000000e00)={0x0, 0x10000000}, 0x0)

3m6.636853151s ago: executing program 0 (id=139):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/dlm/cluster/spaces/foo\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/dlm/cluster/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='1\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r1, &(0x7f0000000900)="020000007f00000100"/128, 0x80)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/dlm/cluster/spaces/foo/nodes/1\x00', 0x1ff)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
write(r2, &(0x7f0000000d00)="060000000000000002000000040100000000000000000000666f6f00"/128, 0x80) (async)
nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000f00)='./sys\x00', &(0x7f0000001000)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./sys/kernel/dlm/foo/event_done\x00', 0x2, 0x0)
write(r3, &(0x7f0000001200)='0\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/kernel/dlm/foo/control\x00', 0x2, 0x0)
write(r4, &(0x7f0000001400)='1\x00', 0x2)
close(r4)
nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/dlm_foo\x00', 0x2, 0x0)
write(r5, &(0x7f0000001800)="060000000000000002000000010100000503000080000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000626172", 0x7b)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/dlm_foo\x00', 0x2, 0x0)
write(r6, &(0x7f0000001900)="060000000000000002000000010100000503000000400000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000626172", 0x7b)

3m6.094757234s ago: executing program 2 (id=140):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)
rmdir(&(0x7f0000000080)='./cgroup.cpu/syz0\x00')
nanosleep(&(0x7f0000000000)={0x5}, 0x0) (async)

3m5.188512929s ago: executing program 2 (id=141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000180)='./power/state\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='disk\n', 0x5)

3m5.186844382s ago: executing program 33 (id=116):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='0\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='processors\n', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='mem\n', 0x4)

2m59.896080621s ago: executing program 34 (id=120):
syslog(0x9, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='devices\x00', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='mem\n', 0x4)

2m54.031652503s ago: executing program 35 (id=137):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='disk\x00', 0x4)

2m51.381152996s ago: executing program 36 (id=139):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/dlm/cluster/spaces/foo\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/dlm/cluster/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='1\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r1, &(0x7f0000000900)="020000007f00000100"/128, 0x80)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/dlm/cluster/spaces/foo/nodes/1\x00', 0x1ff)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
write(r2, &(0x7f0000000d00)="060000000000000002000000040100000000000000000000666f6f00"/128, 0x80) (async)
nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000f00)='./sys\x00', &(0x7f0000001000)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./sys/kernel/dlm/foo/event_done\x00', 0x2, 0x0)
write(r3, &(0x7f0000001200)='0\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/kernel/dlm/foo/control\x00', 0x2, 0x0)
write(r4, &(0x7f0000001400)='1\x00', 0x2)
close(r4)
nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/dlm_foo\x00', 0x2, 0x0)
write(r5, &(0x7f0000001800)="060000000000000002000000010100000503000080000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000626172", 0x7b)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/dlm_foo\x00', 0x2, 0x0)
write(r6, &(0x7f0000001900)="060000000000000002000000010100000503000000400000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000626172", 0x7b)

2m50.459754345s ago: executing program 7 (id=150):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint}]})

2m49.510375176s ago: executing program 37 (id=141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000180)='./power/state\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='disk\n', 0x5)

2m49.463149629s ago: executing program 7 (id=152):
syz_usb_connect(0x5, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x100], [0x1]], '\x00', [{0x8, 0x8, 0x0, 0x0, 0x1}, {0x10, 0x10, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}], '\x00', 0xffffffff})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)

2m49.241354474s ago: executing program 8 (id=145):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705010200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)={0x40, 0x41, 0x8, "0102030405060708"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000400)={0x40, 0x50, 0x5, '\v\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)={0x40, 0x51}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000600)={0x40, 0x54, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000700)={0x40, 0x56, 0x7d, "00ffffffffffff0004430100000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00324b1e53110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m47.031341677s ago: executing program 7 (id=153):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="fe03")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0399")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="039a")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344")
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(&(0x7f0000000480)=@filename='sysfs\x00', &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/name\x00', 0x0, 0x0)
read(r1, &(0x7f0000000600)=""/64, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/hwmon/hwmon1/name\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600)=""/64, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/hwmon/hwmon2/name\x00', 0x0, 0x0)
read(r3, &(0x7f0000000600)=""/64, 0x40)
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/hwmon/hwmon3/name\x00', 0x0, 0x0)

2m44.738179883s ago: executing program 8 (id=154):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

2m22.785479421s ago: executing program 38 (id=154):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

2m22.468468451s ago: executing program 39 (id=153):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="fe03")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0399")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="039a")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344")
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(&(0x7f0000000480)=@filename='sysfs\x00', &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/name\x00', 0x0, 0x0)
read(r1, &(0x7f0000000600)=""/64, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/hwmon/hwmon1/name\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600)=""/64, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/hwmon/hwmon2/name\x00', 0x0, 0x0)
read(r3, &(0x7f0000000600)=""/64, 0x40)
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/hwmon/hwmon3/name\x00', 0x0, 0x0)

2m22.214882853s ago: executing program 40 (id=144):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='core', 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ed)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/kernel/printk\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1 1 1 1', 0x7)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/power/state\x00', 0x2, 0x0)

2m5.624190844s ago: executing program 9 (id=147):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000280)='mydomain / 2147483647 8192 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff)

2m2.940457918s ago: executing program 9 (id=158):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x42, 0x1ff)
pwrite64(r1, &(0x7f0000000500)='\nBTO', 0x4, 0x0)
pwrite64(r1, &(0x7f0000000510)="000000a0", 0x4, 0x4)
pread64(r1, &(0x7f000000a040)=""/4, 0x4, 0x0)
pread64(r1, &(0x7f000000a010)=""/4, 0x4, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='0000:00:02.0\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0)
write(r3, &(0x7f0000000900)='dwc2-pci\x00', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x2, 0x0)
write(r4, &(0x7f0000000b00)='0000:00:02.0\x00', 0xc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x11, r5, 0x0)
pread64(r1, &(0x7f000000b040)=""/4, 0x4, 0x0)
pread64(r1, &(0x7f000000b010)=""/4, 0x4, 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x2, 0x0)
write(r6, &(0x7f0000001700)='0000:00:03.0\x00', 0xc)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0)
write(r7, &(0x7f0000001900)='dwc2-pci\x00', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x2, 0x0)
write(r8, &(0x7f0000001b00)='0000:00:03.0\x00', 0xc)

2m2.55564062s ago: executing program 9 (id=160):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='thunderbolt\x00', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:03.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/thunderbolt/devices/0-0/authorized\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

2m2.253547359s ago: executing program 9 (id=162):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='freeze\x00', 0x6)

2m2.095839402s ago: executing program 9 (id=163):
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/dlm\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/dlm/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/dlm/mycluster/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/dlm/mycluster/comms/1/local\x00', 0x1, 0x0)
write(r0, &(0x7f0000001000)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/dlm/mycluster/comms/1/addr\x00', 0x1, 0x0)
write(r1, &(0x7f0000001200)="020000007f00000100"/128, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
write(r2, &(0x7f0000001300)="0600000000000000020000000400"/120, 0x78)
nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/dlm/myls/nodir\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='1\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/dlm/myls/control\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='1\x00', 0x2)

1m46.100286244s ago: executing program 41 (id=163):
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/dlm\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/dlm/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/dlm/mycluster/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/dlm/mycluster/comms/1/local\x00', 0x1, 0x0)
write(r0, &(0x7f0000001000)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/dlm/mycluster/comms/1/addr\x00', 0x1, 0x0)
write(r1, &(0x7f0000001200)="020000007f00000100"/128, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
write(r2, &(0x7f0000001300)="0600000000000000020000000400"/120, 0x78)
nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/dlm/myls/nodir\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='1\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/dlm/myls/control\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='1\x00', 0x2)

1m36.54177901s ago: executing program 3 (id=156):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000290101020301010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0)
close(r0)

1m33.219005634s ago: executing program 3 (id=184):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/infiniband/syz0/node_type\x00', 0x0, 0x0)

1m32.736289365s ago: executing program 3 (id=185):
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x7ffffffffffff000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000001000), &(0x7f0000001100), 0x0)

1m32.565186434s ago: executing program 1 (id=186):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
chmod(&(0x7f0000000080)='./sys/module/cx231xx/parameters/transfer_mode\x00', 0x1b6)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/cx231xx/parameters/transfer_mode\x00', 0x1, 0x0)
r0 = syz_usb_connect(0x0, 0x45, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040191d086100000000000109023300030100c000080b01020000000009040000000000000009040100000000000009040200010000000007058102000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0xc0, 0x0, 0x4, "c0000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000500), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0)

1m32.263541388s ago: executing program 3 (id=187):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='10\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='10\n\x00', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./rpc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./rpc\x00', &(0x7f0000000740)='rpc_pipefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='1\n\x00', 0x2) (async)
nanosleep(&(0x7f0000000900)={0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./rpc/nfsd4_cld/cld\x00', 0x0, 0x0)
read(r5, &(0x7f0000000800)=""/1024, 0x400)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./export\x00', &(0x7f0000000640)='tmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r7, &(0x7f00000003c0)='mydomain ./export 2147483647 8192 0 0 0\n\x00', 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)

1m29.711509017s ago: executing program 1 (id=188):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil)

1m29.01830882s ago: executing program 3 (id=189):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='vfio-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='0000:00:02.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='vfio-pci\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='0000:00:03.0\x00', 0xd)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0)
ioctl(r5, 0x3b76, &(0x7f0000000000)="1800"/24)
ioctl(r4, 0x3b70, &(0x7f0000000040)='\f\x00'/12)
ioctl(r5, 0x3b77, &(0x7f0000000080)="10000000000000000100000000000000")

1m28.992812794s ago: executing program 5 (id=157):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000), &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/spaces/ls1/nodes/1\x00', 0x1ff)

1m28.753145818s ago: executing program 5 (id=190):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='0x0499\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='3\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/num_groups\x00', 0x2, 0x0)
write(r4, &(0x7f00000004c0)='1\n', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0)
write(r5, &(0x7f0000000540)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0)
write(r6, &(0x7f0000000640)='3\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/num_groups\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='1\n', 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0)
write(r8, &(0x7f0000000780)='1\n', 0x2)
symlinkat(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r9, &(0x7f0000000880)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

1m28.448948671s ago: executing program 1 (id=191):
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@random="112233445566", 0x6, 0x0)
syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@mgmt_frame=@beacon={{{}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, &(0x7f0000000240))
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000340)=@mgmt_frame=@action={{{}, {}, @device_a, @device_b, @from_mac=@device_b, {0x0, 0x3}}, @sa_query_req={0x8, 0x0, 0x1234}}, 0x1c)

1m28.435715068s ago: executing program 3 (id=192):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
listen(r1, 0x1)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4002, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
nanosleep(&(0x7f0000000080)={0x0, 0x20000000}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)

1m27.305793086s ago: executing program 5 (id=193):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m26.975536643s ago: executing program 1 (id=194):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0000000000010902270001010080320904000003ffffff00070581034000010705020200020007058602000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000500)="ffffffff")
syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000500)="ffffffff")
syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000500)="ffffffff")
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

1m26.871411222s ago: executing program 4 (id=155):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendto(r0, &(0x7f0000000000)="2c0000000314050000000000000000000900020073797a30000000000800410072786500070033006c6f0000", 0x2c, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10)
listen(r1, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10)
accept4(r1, 0x0, 0x0, 0x0)

1m25.886859311s ago: executing program 4 (id=195):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x5c}}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

1m24.918044116s ago: executing program 4 (id=196):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x24}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10)
listen(r2, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000600)='hel', 0x3, 0x0, 0x0, 0x0)
r4 = accept$inet(r2, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000700)=""/5, 0x5, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000800)='world', 0x5, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000900)=""/5, 0x5, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)={0x40, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x40}}, 0x0)
nanosleep(&(0x7f0000000e00)={0x0, 0x10000000}, 0x0)

1m24.532402954s ago: executing program 5 (id=197):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705010200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)={0x40, 0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000400)={0x40, 0x51, 0x8, "0102030405060708"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)={0x40, 0x54, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000600)={0x40, 0x56, 0x7d, "00ffffffffffff0004430100000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00324b1e53110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m24.38948322s ago: executing program 4 (id=198):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000), &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/spaces/ls1/nodes/1\x00', 0x1ff)

1m24.137605424s ago: executing program 4 (id=199):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='mydomain ./nfs_share 2147483647 8192 0 0 0\n', 0x2b)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000840)='-2 -3 +4\n', 0x9)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./rpc_pipefs\x00', &(0x7f0000000940)='rpc_pipefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='1\n', 0x2)
close(r4)
nanosleep(&(0x7f0000000380)={0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/v4_end_grace\x00', 0x1, 0x0)
write(r5, &(0x7f0000000640)='Y\n', 0x2)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049\x00'])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0x42, 0x1ff)
close(r6)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file2\x00', 0x0)

1m23.716166442s ago: executing program 1 (id=200):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write(r1, &(0x7f0000000100)="1500000065ffff0020000008003950323030302e4c1400000069000080000000000000000000000000a0000000190100ff1700000000000080000000000000000000000000ed4100000000000000000000020000000000000000000000000000000010000000000000001000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000702005f000000", 0xd4)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,version=9p2000.L,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

1m23.390613094s ago: executing program 1 (id=201):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1001})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'wlan1\x00', 0x1001})

1m1.085676973s ago: executing program 42 (id=199):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='mydomain ./nfs_share 2147483647 8192 0 0 0\n', 0x2b)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000840)='-2 -3 +4\n', 0x9)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./rpc_pipefs\x00', &(0x7f0000000940)='rpc_pipefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='1\n', 0x2)
close(r4)
nanosleep(&(0x7f0000000380)={0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/v4_end_grace\x00', 0x1, 0x0)
write(r5, &(0x7f0000000640)='Y\n', 0x2)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049\x00'])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0x42, 0x1ff)
close(r6)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file2\x00', 0x0)

1m0.67693909s ago: executing program 43 (id=201):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1001})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'wlan1\x00', 0x1001})

1m0.303360507s ago: executing program 44 (id=192):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
listen(r1, 0x1)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4002, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
nanosleep(&(0x7f0000000080)={0x0, 0x20000000}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)

1m0.120819993s ago: executing program 45 (id=197):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705010200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)={0x40, 0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000400)={0x40, 0x51, 0x8, "0102030405060708"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)={0x40, 0x54, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000600)={0x40, 0x56, 0x7d, "00ffffffffffff0004430100000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00324b1e53110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11.6364066s ago: executing program 6 (id=213):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f0000000180)='`', 0x4ca, 0x0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14)

11.194648691s ago: executing program 6 (id=214):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write(r0, &(0x7f0000000100)="0b0000004c6f676974656368204849442b2b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006d04000012b0000000000000000000000600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c000"/4372, 0x1114)
write(r0, &(0x7f0000000100)="0b0000004c6f676974656368204849442b2b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006d04000012b0000000000000000000000600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c000"/4376, 0x1118)
write(r0, &(0x7f0000000100)="0b0000004c6f676974656368204849442b2b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006d04000012b0000000000000000000000600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c000"/4380, 0x111c)
write(r0, &(0x7f0000000100)="0b0000004c6f676974656368204849442b2b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006d04000012b0000000000000000000000600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c000"/4384, 0x1120)
write(r0, &(0x7f0000000100)="0b0000004c6f676974656368204849442b2b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006d04000012b0000000000000000000000600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c000"/4388, 0x1124)
write(r0, &(0x7f0000000100)="0b0000004c6f676974656368204849442b2b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006d04000012b0000000000000000000000600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c000"/4392, 0x1128)
write(r0, &(0x7f0000000100)="0b0000004c6f676974656368204849442b2b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006d04000012b0000000000000000000000600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c000"/4396, 0x112c)
write(r0, &(0x7f0000000100)="0b0000004c6f676974656368204849442b2b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006d04000012b0000000000000000000000600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c000"/4400, 0x1130)

11.008338872s ago: executing program 6 (id=215):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000b00)='-2 -3 +4\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000500)='8\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./nfs4\x00', 0x1ff)
mount$nfs4(&(0x7f0000000700)='127.0.0.1:/\x00', &(0x7f0000000600)='./nfs4\x00', &(0x7f0000000800), 0x0, &(0x7f0000000900)={[{'addr=127.0.0.1'}, {'vers=4'}]})

9.842230546s ago: executing program 2 (id=202):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x1c)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='01234567', 0x8, r1)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000180)='syz \x00', 0x5)
listen(r0, 0xa)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="0100000002000800ffffff7f0100000030313233343536373031323334353637", 0x20, 0xfffffffffffffffe)
setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f00000003c0)='syz \x00', 0x5)
connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x1c)
sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, 0x0, 0x0)

9.134644508s ago: executing program 2 (id=216):
syz_usb_connect(0x5, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010103000b2402010204200100112b09050109000201000007250100000000090401020101020000072401010103000b2402010204200100112b09050109000201000007250100000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x800], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x2b1100, 0x2b1100, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}], '\x00', 0xf07})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)

7.9285479s ago: executing program 6 (id=217):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x2, 0x0)
write(r0, &(0x7f0000000d00)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0)
write(r4, &(0x7f0000000800)='101:0:1\x00', 0x7)
close(r4)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write(r5, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1)
clock_nanosleep(0x0, 0x0, &(0x7f0000000b00)={0x2}, 0x0)
getpid()
close(r5)

6.524596422s ago: executing program 2 (id=218):
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='1\n\x00', 0x2)

6.31627598s ago: executing program 6 (id=219):
r0 = memfd_create(&(0x7f0000000000)='test\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x8a48640)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)='1048576\x00', 0x8)

5.60612158s ago: executing program 6 (id=220):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='+4\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='+2049\n\x00', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='8\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00'])

3.254401293s ago: executing program 7 (id=204):
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101408d0e08060001000000010902270001010080fa0904000003e0010100070581024000000705020240000007058303100001"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

2.713080494s ago: executing program 0 (id=173):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000100)="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", 0x4454)
r1 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
pwrite64(r1, &(0x7f0000001000)='\x00\x00\x00\x00', 0x4, 0x400)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dir0\x00', 0x1ff)
mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./dir0\x00', &(0x7f0000000500)='ocfs2\x00', 0x0, &(0x7f0000000600)='heartbeat=none\x00')

2.063898542s ago: executing program 8 (id=203):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018101c1b031c000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)

1.766047223s ago: executing program 0 (id=221):
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000290101020301010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0)
clock_nanosleep(0x1, 0x0, &(0x7f0000000200)={0x2}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5446, 0x0)

606.819389ms ago: executing program 7 (id=222):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='devtmpfs\x00', &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000001000)="040000000000000000000000380100000000000000000000000000000000000000000000000000006d7964657600")
ioctl(r0, 0xc180fd09, &(0x7f0000002000)="040000000000000000000000800100003801000001000000000000000000000000000000000000006d7964657600")
ioctl(r0, 0xc138fd06, &(0x7f0000003000)="040000000000000000000000380100000000000000000000000000000000000000000000000000006d7964657600")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/mapper/mydev\x00', 0x0, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000004000)=0x1000)

405.121561ms ago: executing program 7 (id=223):
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) (async)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)

0s ago: executing program 8 (id=224):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
unshare(0x40000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000010000500000000000000000000000000000000000000000000000000100012000a00010064756d6d79000000"], 0x30}], 0x1}, 0x0)
sendmsg$netlink(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="2c000000100001000000000000000000000000000000000001000000010000000b00030064756d6d79300000"], 0x2c}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/dummy0/force_mld_version\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='2', 0x1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x14, &(0x7f0000000240)="ff02000000000000000000000000000202000000", 0x14)
sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f0000000900)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, 0x2}, @IFLA_NET_NS_FD={0x8, 0x22, r0}]}, 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts.
[   75.911403][ T5584] cgroup: Unknown subsys name 'net'
[   76.160988][ T5584] cgroup: Unknown subsys name 'cpuset'
[   76.237895][ T5584] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   77.780674][ T5584] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   81.642657][ T4916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.658766][ T4916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.662861][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.712834][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.730070][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.754659][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.764114][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.781303][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.791519][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.792553][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.793807][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.795350][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.795531][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.795860][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.800501][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.807409][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.807886][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.809674][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.809964][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.810787][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.811914][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.813584][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.814532][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.822566][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.965623][ T4916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.880065][   T59] Bluetooth: hci4: command tx timeout
[   83.957442][   T59] Bluetooth: hci3: command tx timeout
[   83.957601][   T59] Bluetooth: hci1: command tx timeout
[   84.038404][ T5608] Bluetooth: hci0: command tx timeout
[   84.038535][ T5608] Bluetooth: hci2: command tx timeout
[   84.399209][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.399928][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.400042][ T5600] bridge_slave_0: entered allmulticast mode
[   84.401519][ T5600] bridge_slave_0: entered promiscuous mode
[   84.459361][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.459456][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.459904][ T5600] bridge_slave_1: entered allmulticast mode
[   84.461337][ T5600] bridge_slave_1: entered promiscuous mode
[   84.478967][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.479132][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.479268][ T5596] bridge_slave_0: entered allmulticast mode
[   84.481980][ T5596] bridge_slave_0: entered promiscuous mode
[   84.507092][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.507201][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.509477][ T5597] bridge_slave_0: entered allmulticast mode
[   84.512467][ T5597] bridge_slave_0: entered promiscuous mode
[   84.560915][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.561033][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.561172][ T5596] bridge_slave_1: entered allmulticast mode
[   84.563016][ T5596] bridge_slave_1: entered promiscuous mode
[   84.563840][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.563935][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.564033][ T5598] bridge_slave_0: entered allmulticast mode
[   84.565321][ T5598] bridge_slave_0: entered promiscuous mode
[   84.566771][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.566885][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.567020][ T5597] bridge_slave_1: entered allmulticast mode
[   84.576252][ T5597] bridge_slave_1: entered promiscuous mode
[   84.601250][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.601361][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.601831][ T5599] bridge_slave_0: entered allmulticast mode
[   84.606012][ T5599] bridge_slave_0: entered promiscuous mode
[   84.655380][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.655492][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.655984][ T5598] bridge_slave_1: entered allmulticast mode
[   84.661779][ T5598] bridge_slave_1: entered promiscuous mode
[   84.669798][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.670004][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.670119][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.670263][ T5599] bridge_slave_1: entered allmulticast mode
[   84.674901][ T5599] bridge_slave_1: entered promiscuous mode
[   84.758351][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.775017][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.781640][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.933388][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.935354][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.939323][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.970483][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.002159][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.003926][ T5600] team0: Port device team_slave_0 added
[   85.006755][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.055210][ T5600] team0: Port device team_slave_1 added
[   85.073461][ T5596] team0: Port device team_slave_0 added
[   85.075373][ T5597] team0: Port device team_slave_0 added
[   85.116852][ T5596] team0: Port device team_slave_1 added
[   85.120095][ T5597] team0: Port device team_slave_1 added
[   85.123348][ T5598] team0: Port device team_slave_0 added
[   85.142669][ T5599] team0: Port device team_slave_0 added
[   85.170314][ T5598] team0: Port device team_slave_1 added
[   85.171226][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.171236][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.171249][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.174701][ T5599] team0: Port device team_slave_1 added
[   85.235232][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.235245][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.235259][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.254627][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.254642][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.254666][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.256407][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.256420][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.256443][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.322000][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.322016][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.322039][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.328589][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.328604][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.328627][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.331760][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.331773][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.331796][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.336884][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.336896][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.336919][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.368590][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.368606][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.368629][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.370150][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.370162][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.370185][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.526392][ T5600] hsr_slave_0: entered promiscuous mode
[   85.528391][ T5600] hsr_slave_1: entered promiscuous mode
[   85.622223][ T5596] hsr_slave_0: entered promiscuous mode
[   85.623794][ T5596] hsr_slave_1: entered promiscuous mode
[   85.625651][ T5596] debugfs: 'hsr0' already exists in 'hsr'
[   85.625777][ T5596] Cannot create hsr debugfs directory
[   85.636474][ T5597] hsr_slave_0: entered promiscuous mode
[   85.638375][ T5597] hsr_slave_1: entered promiscuous mode
[   85.639241][ T5597] debugfs: 'hsr0' already exists in 'hsr'
[   85.639275][ T5597] Cannot create hsr debugfs directory
[   85.718636][ T5598] hsr_slave_0: entered promiscuous mode
[   85.719433][ T5598] hsr_slave_1: entered promiscuous mode
[   85.720009][ T5598] debugfs: 'hsr0' already exists in 'hsr'
[   85.720026][ T5598] Cannot create hsr debugfs directory
[   85.725578][ T5599] hsr_slave_0: entered promiscuous mode
[   85.729783][ T5599] hsr_slave_1: entered promiscuous mode
[   85.730708][ T5599] debugfs: 'hsr0' already exists in 'hsr'
[   85.730729][ T5599] Cannot create hsr debugfs directory
[   85.957426][   T59] Bluetooth: hci4: command tx timeout
[   86.037468][   T59] Bluetooth: hci1: command tx timeout
[   86.037532][   T59] Bluetooth: hci3: command tx timeout
[   86.117680][ T5608] Bluetooth: hci2: command tx timeout
[   86.117701][   T59] Bluetooth: hci0: command tx timeout
[   86.818274][  T821] cfg80211: failed to load regulatory.db
[   86.991453][ T5600] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.031142][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.048414][ T5600] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.095037][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.107023][ T5600] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.134073][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.158027][ T5600] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.192073][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.316673][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.345350][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.355309][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.380529][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.386227][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.412292][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.432257][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.473949][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.595962][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.622039][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.626065][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.663863][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.667260][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.701070][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.723901][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.759773][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.927671][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.960598][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.968307][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.004084][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.010616][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.040458][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.046808][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.047450][   T59] Bluetooth: hci4: command tx timeout
[   88.081913][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.111038][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.118666][ T5608] Bluetooth: hci1: command tx timeout
[   88.118743][   T59] Bluetooth: hci3: command tx timeout
[   88.197583][ T5608] Bluetooth: hci2: command tx timeout
[   88.197729][   T59] Bluetooth: hci0: command tx timeout
[   88.266457][ T5600] 8021q: adding VLAN 0 to HW filter on device team0
[   88.274621][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.300343][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.313080][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.342700][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.346453][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.388097][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.395805][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.421155][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.445952][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.446093][ T1503] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.500098][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.505454][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.505630][ T1503] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.602769][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[   88.641436][  T210] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.641567][  T210] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.645656][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.700386][  T210] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.700479][  T210] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.776708][ T5598] 8021q: adding VLAN 0 to HW filter on device team0
[   88.839565][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.841156][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.896500][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.936107][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.936305][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.065950][ T5599] 8021q: adding VLAN 0 to HW filter on device team0
[   89.120349][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.156846][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.157052][ T1503] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.291701][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.291888][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.382899][ T5597] 8021q: adding VLAN 0 to HW filter on device team0
[   89.470587][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.474858][ T1442] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.535440][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.535555][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.664021][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.088980][ T5600] veth0_vlan: entered promiscuous mode
[   90.117420][   T59] Bluetooth: hci4: command tx timeout
[   90.180911][ T5600] veth1_vlan: entered promiscuous mode
[   90.197440][ T5608] Bluetooth: hci1: command tx timeout
[   90.197483][   T59] Bluetooth: hci3: command tx timeout
[   90.279137][ T5608] Bluetooth: hci2: command tx timeout
[   90.279184][   T59] Bluetooth: hci0: command tx timeout
[   90.283161][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.464748][ T5600] veth0_macvtap: entered promiscuous mode
[   90.525913][ T5600] veth1_macvtap: entered promiscuous mode
[   90.585628][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.693095][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.701528][ T5596] veth0_vlan: entered promiscuous mode
[   90.737756][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.782523][ T5596] veth1_vlan: entered promiscuous mode
[   91.016144][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.032369][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.073456][ T5598] veth0_vlan: entered promiscuous mode
[   91.215609][ T5596] veth0_macvtap: entered promiscuous mode
[   91.259246][ T5598] veth1_vlan: entered promiscuous mode
[   91.274913][ T5596] veth1_macvtap: entered promiscuous mode
[   91.468153][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.512806][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.536347][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.536370][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.576913][ T5597] veth0_vlan: entered promiscuous mode
[   91.611933][ T5598] veth0_macvtap: entered promiscuous mode
[   91.641497][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.641516][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.644038][ T5598] veth1_macvtap: entered promiscuous mode
[   91.671123][ T5597] veth1_vlan: entered promiscuous mode
[   91.936014][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.100648][ T5599] veth0_vlan: entered promiscuous mode
[   92.114361][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.239010][ T5599] veth1_vlan: entered promiscuous mode
[   92.250875][ T5597] veth0_macvtap: entered promiscuous mode
[   92.270982][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.271001][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.336405][ T5597] veth1_macvtap: entered promiscuous mode
[   92.652892][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.652909][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.843564][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.924592][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.958764][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   93.100536][ T5599] veth0_macvtap: entered promiscuous mode
[   93.128042][  T210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.128063][  T210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.189795][ T5599] veth1_macvtap: entered promiscuous mode
[   93.266636][   T10] usb 3-1: config index 0 descriptor too short (expected 75, got 74)
[   93.271330][   T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00
[   93.271358][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.271377][   T10] usb 3-1: Product: syz
[   93.271390][   T10] usb 3-1: Manufacturer: syz
[   93.271402][   T10] usb 3-1: SerialNumber: syz
[   93.336592][ T5799] CIFS: Attempting to mount //127.0.0.1/share
[   93.720389][ T1442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.720408][ T1442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.013580][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.149993][ T5799] CIFS: VFS: cifs_mount failed w/return code = -512
[   94.155872][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.206182][   T10] ath6kl: Unsupported hardware version: 0x0
[   94.262177][ T5799] syz.3.4 (5799) used greatest stack depth: 18320 bytes left
[   94.367116][   T10] ath6kl: Failed to init ath6kl core: -22
[   94.421924][ T1308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.422392][ T1308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.422580][ T1308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.422882][ T1308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.579016][   T10] ath6kl_usb 3-1:1.0: probe with driver ath6kl_usb failed with error -22
[   94.957085][ T5807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.011409][ T5807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.064125][ T5805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.070752][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.070769][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.640442][ T5728] usb 3-1: USB disconnect, device number 2
[   95.654133][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.654151][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.673347][ T5714] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   95.688090][ T1308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.745824][   T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.769832][   T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.770012][   T83] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.770572][   T83] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.770726][   T83] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.937930][ T5714] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00
[   95.937959][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.937979][ T5714] usb 1-1: Product: syz
[   95.937992][ T5714] usb 1-1: Manufacturer: syz
[   95.938005][ T5714] usb 1-1: SerialNumber: syz
[   96.190598][ T5714] gspca_main: spca500-2.14.0 probing 046d:0900
[   96.323467][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.323483][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.467628][ T5616] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   96.601309][  T210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.601947][  T210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.662530][ T5616] usb 4-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 0.00
[   96.662558][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.682325][  T210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.682343][  T210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.682570][  T210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.690132][ T1442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.724358][ T5728] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   96.776609][ T1398] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.779397][   T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.779700][   T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.780098][   T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.951059][ T5728] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config
[   96.951170][ T5728] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[   96.967625][ T5714] gspca_spca500: reg write: error -110
[   96.968008][ T5714] gspca_spca500: reg write: error -32
[   96.975314][ T5714] gspca_spca500: reg write: error -32
[   97.003250][ T5714] gspca_spca500: reg write: error -32
[   97.003644][ T5714] gspca_spca500: reg write: error -32
[   97.004080][ T5714] gspca_spca500: reg write: error -32
[   97.004474][ T5714] gspca_spca500: reg write: error -32
[   97.005846][ T5714] gspca_spca500: reg write: error -32
[   97.035600][ T5714] gspca_spca500: reg write: error -32
[   97.036809][ T5714] gspca_spca500: reg write: error -32
[   97.037255][ T5714] gspca_spca500: reg write: error -32
[   97.042902][ T5728] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00
[   97.042927][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.042945][ T5728] usb 3-1: Product: syz
[   97.042959][ T5728] usb 3-1: Manufacturer: syz
[   97.042972][ T5728] usb 3-1: SerialNumber: syz
[   97.094253][ T5714] gspca_spca500: reg write: error -32
[   97.351494][ T1442] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.792162][ T5728] ath6kl: Unsupported hardware version: 0x0
[   97.830441][ T5728] ath6kl: Failed to init ath6kl core: -22
[   97.863891][ T1442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.897677][ T5728] ath6kl_usb 3-1:1.0: probe with driver ath6kl_usb failed with error -22
[   98.964857][ T5728] hid-generic 0003:046D:1234.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   99.127862][ T5728] usb 1-1: USB disconnect, device number 2
[   99.197416][  T197] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   99.463848][  T197] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00
[   99.463877][  T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.463945][  T197] usb 5-1: Product: syz
[   99.463959][  T197] usb 5-1: Manufacturer: syz
[   99.463972][  T197] usb 5-1: SerialNumber: syz
[   99.596634][   T36] usb 3-1: USB disconnect, device number 3
[   99.702178][ T5842] fido_id[5842]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  100.162686][  T197] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (046d:0821)
[  100.170448][  T197] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770.
[  100.550415][ T5728] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  100.769664][ T5728] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  100.769697][ T5728] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  100.769733][ T5728] usb 1-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00
[  100.769756][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.865807][ T5849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  100.866055][ T5849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  101.298341][   T36] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  101.440920][ T5868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.474638][ T5728] mxuport 1-1:1.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-32)
[  101.474749][ T5728] mxuport 1-1:1.0: probe with driver mxuport failed with error -5
[  101.481498][ T5872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.539542][   T36] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00
[  101.539571][   T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.576223][ T5864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.685654][   T36] snd-ua101 3-1:1.0: probe with driver snd-ua101 failed with error -2
[  101.752600][ T5867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.015024][ T5616] usb 4-1: USB disconnect, device number 2
[  102.779238][ T5714] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  102.894379][ T5586] usb 5-1: USB disconnect, device number 2
[  102.999194][ T5714] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  102.999235][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.325239][  T197] usb 1-1: USB disconnect, device number 3
[  103.478947][ T5586] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  103.677420][ T5586] usb 5-1: Using ep0 maxpacket: 32
[  103.874580][  T197] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  103.992693][ T5714] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0002/input/input5
[  104.049590][  T197] usb 1-1: not running at top speed; connect to a high speed hub
[  104.055819][  T197] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  104.055846][  T197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.055865][  T197] usb 1-1: Product: syz
[  104.055878][  T197] usb 1-1: Manufacturer: syz
[  104.055891][  T197] usb 1-1: SerialNumber: syz
[  104.417878][ T5714] rc_core: IR keymap rc-rc6-mce not found
[  104.417900][ T5714] Registered IR keymap rc-empty
[  104.701302][ T5741] usb 3-1: USB disconnect, device number 4
[  104.751071][ T5714] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0002/rc/rc0
[  104.813719][    C0] usb 1-1: received EP1 urb->status = -2
[  104.813791][  T197] usb 1-1: unable to init card! (ret=-110)
[  104.835951][  T197] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  104.861526][ T5586] usb 5-1: unable to get BOS descriptor or descriptor too short
[  104.862661][ T5586] usb 5-1: unable to read config index 0 descriptor/start: -71
[  104.862691][ T5586] usb 5-1: can't read configurations, error -71
[  105.055708][ T5714] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0002/rc/rc0/input6
[  105.150999][ T5897] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  105.220136][ T5714] hid-picolcd 0003:04D8:C002.0002: No report with id 0x81 found
[  105.830672][ T5741] usb 1-1: USB disconnect, device number 4
[  105.980097][   T37] audit: type=1800 audit(1785856393.960:2): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.25" name="ipv4_port" dev="configfs" ino=9374 res=0 errno=0
[  106.322340][ T5714] usb 2-1: USB disconnect, device number 2
[  106.494897][   T37] audit: type=1800 audit(1785856394.520:3): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.30" name="attr_allow_any_host" dev="configfs" ino=8618 res=0 errno=0
[  106.578942][ T5922] nvmet: adding nsid 1 to subsystem testnqn
[  106.588985][  T197] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  106.615008][ T5921] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  106.615044][ T5921] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  106.615083][ T5921] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  106.703649][ T5921] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  106.718755][ T5921] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  106.774848][  T197] usb 3-1: not running at top speed; connect to a high speed hub
[  106.785650][  T197] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  106.785679][  T197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.807440][ T5714] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  106.856914][  T197] gspca_main: spca501-2.14.0 probing 0000:0000
[  106.938911][   T36] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  106.986511][ T5714] usb 2-1: New USB device found, idVendor=0424, idProduct=9500, bcdDevice= 0.00
[  106.986593][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.116188][   T36] usb 5-1: New USB device found, idVendor=04ca, idProduct=f001, bcdDevice= 1.00
[  107.116217][   T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.116235][   T36] usb 5-1: Product: syz
[  107.116464][   T36] usb 5-1: Manufacturer: syz
[  107.116480][   T36] usb 5-1: SerialNumber: syz
[  107.300504][   T36] dvb-usb: found a 'LITE-ON USB2.0 DVB-T Tuner' in warm state.
[  107.360988][  T197] gspca_spca501: reg write: error -110
[  107.361007][  T197] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  107.361084][  T197] spca501 3-1:1.0: probe with driver spca501 failed with error -22
[  107.362280][  T197] uvcvideo 3-1:1.0: Found UVC 1.00 device <unnamed> (0000:0000)
[  107.386736][  T197] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  107.387185][  T197] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26).
[  107.387240][  T197] uvcvideo 3-1:1.1: Failed to initialize the device (-5).
[  107.388256][  T197] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -5
[  108.092386][   T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  108.116359][   T36] dvbdev: DVB: registering new adapter (LITE-ON USB2.0 DVB-T Tuner)
[  108.116519][   T36] usb 5-1: media controller created
[  108.133842][  T197] usb 3-1: USB disconnect, device number 5
[  108.240084][   T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  108.493134][   T37] audit: type=1800 audit(1785856396.520:4): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.36" name="size" dev="configfs" ino=9440 res=0 errno=0
[  108.495046][   T37] audit: type=1800 audit(1785856396.520:5): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.36" name="zone_size" dev="configfs" ino=9441 res=0 errno=0
[  108.496031][   T37] audit: type=1800 audit(1785856396.520:6): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.36" name="zoned" dev="configfs" ino=9442 res=0 errno=0
[  108.521979][   T37] audit: type=1800 audit(1785856396.550:7): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.36" name="power" dev="configfs" ino=9443 res=0 errno=0
[  108.540237][ T5956] null_blk: nullb1: using native zone append
[  108.881599][   T37] audit: type=1800 audit(1785856396.910:8): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.38" name="ipv4_port" dev="configfs" ino=8639 res=0 errno=0
[  109.002321][ T5714] smsc95xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  109.002350][ T5714] smsc95xx 2-1:1.0 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  109.003439][ T5714] smsc95xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  109.007050][ T5714] smsc95xx 2-1:1.0: probe with driver smsc95xx failed with error -71
[  109.080583][ T5714] usb 2-1: USB disconnect, device number 3
[  109.227409][ T5741] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  109.290885][ T5972] CIFS: Attempting to mount //127.0.0.1/share
[  109.311971][ T5956] null_blk: disk nullb1 created
[  109.409877][ T5741] usb 3-1: New USB device found, idVendor=2040, idProduct=2900, bcdDevice= 1.01
[  109.409906][ T5741] usb 3-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1
[  109.409924][ T5741] usb 3-1: Product: syz
[  109.409938][ T5741] usb 3-1: Manufacturer: syz
[  109.409951][ T5741] usb 3-1: SerialNumber: syz
[  109.480641][ T5741] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  109.832885][ T2379] pvrusb2: Failed to submit write-control URB status=-2
[  109.879164][   T36] dvb-usb: bulk message failed: -71 (6/0)
[  109.890247][ T5741] usb 3-1: USB disconnect, device number 6
[  109.900250][   T36] dvb-usb: bulk message failed: -71 (6/0)
[  109.900364][   T36] dvb-usb: no frontend was attached by 'LITE-ON USB2.0 DVB-T Tuner'
[  110.055716][   T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7
[  110.088398][ T5972] CIFS: VFS: cifs_mount failed w/return code = -112
[  110.102506][   T36] dvb-usb: schedule remote query interval to 150 msecs.
[  110.102528][   T36] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully initialized and connected.
[  110.152344][ T2379] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  110.152368][ T2379] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  110.215676][   T36] usb 5-1: USB disconnect, device number 5
[  110.368784][ T5586] dvb-usb: bulk message failed: -19 (1/0)
[  110.368852][ T5586] dvb-usb: error while querying for an remote control event.
[  110.630948][   T37] audit: type=1800 audit(1785856398.650:9): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.50" name="ipv4_port" dev="configfs" ino=8689 res=0 errno=0
[  111.094210][   T36] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully deinitialized and disconnected.
[  111.517782][ T6016] siw: device registration error -23
[  113.642229][   T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  113.840634][   T36] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00
[  113.840664][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.892331][   T36] i2c-tiny-usb 1-1:1.0: version 0.00 found at bus 001 address 005
[  114.104551][   T36]  (null): failure reading functionality
[  114.124914][   T36] i2c i2c-1: failure reading functionality
[  114.157199][   T36] i2c i2c-1: connected i2c-tiny-usb device
[  114.648834][   T10] usb 1-1: USB disconnect, device number 5
[  114.687387][ T6000] svc: failed to register lockdv1 RPC service (errno 512).
[  114.725703][ T6000] lockd_up: makesock failed, error=-512
[  115.510079][ T6000] svc: failed to register nfsdv3 RPC service (errno 512).
[  115.510323][ T6000] svc: failed to register nfsaclv3 RPC service (errno 512).
[  115.510338][ T6000] failed to unregister tcp with rpcbind
[  115.520430][ T6000] svc: failed to register nfsdv3 RPC service (errno 97).
[  115.520453][ T6000] svc: failed to register nfsaclv3 RPC service (errno 97).
[  115.520466][ T6000] failed to unregister tcp with rpcbind
[  115.578066][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  115.740666][   T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  115.740700][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.956177][   T37] audit: type=1800 audit(1785856403.980:10): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.61" name="ipv4_port" dev="configfs" ino=8748 res=0 errno=0
[  115.956214][ T6039] PM: hibernation: hibernation entry
[  117.242834][   T10] gud 1-1:1.0: USB-2: Failed to add properties (ret=-71)
[  117.242867][   T10] gud 1-1:1.0: Failed to get connectors (error=-71)
[  117.242887][   T10] gud 1-1:1.0: probe with driver gud failed with error -71
[  117.286070][   T10] usb 1-1: USB disconnect, device number 6
[  120.467519][ T6067] NFSD: Unable to initialize client recovery tracking! (-110)
[  120.467532][ T6067] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  120.467539][ T6067] NFSD: starting 90-second grace period (net f00003eb)
[  121.647426][   T36] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  121.799592][   T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  121.799625][   T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  121.799642][   T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  121.799664][   T36] usb 1-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00
[  121.799676][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.805140][ T6074] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  121.805259][ T6074] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  121.805366][ T6074] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  122.014804][   T36] mxuport 1-1:1.0: mxuport_recv_ctrl_urb - short read (0 / 4)
[  122.014902][   T36] mxuport 1-1:1.0: probe with driver mxuport failed with error -5
[  122.130706][   T36] usb 1-1: USB disconnect, device number 7
[  122.214070][   T37] audit: type=1800 audit(1785856410.230:11): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.72" name="ipv4_port" dev="configfs" ino=9640 res=0 errno=0
[  124.091923][ T6039] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  124.092685][ T6039] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  124.143235][ T6095] PM: suspend entry (deep)
[  124.143260][ T6095] PM: suspend exit
[  124.282491][ T6098] loop0: detected capacity change from 0 to 128
[  124.383762][ T6039] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  124.571496][ T6039] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  124.571621][ T6039] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  124.752600][ T6039] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  124.892178][ T6103] ath9k serial8250: error -EINVAL: invalid resource (null)
[  124.892213][ T6103] ath9k serial8250: ioremap failed
[  124.892225][ T6103] ath9k serial8250: probe with driver ath9k failed with error -22
[  124.950046][ T6039] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  124.950207][ T6039] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  125.039515][ T6039] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  125.130886][ T6039] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  125.130999][ T6039] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  125.221769][ T6039] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  125.277450][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  125.315042][ T6039] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  125.315118][ T6039] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  125.386373][ T6039] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  125.439213][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00
[  125.439240][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.439251][   T10] usb 5-1: Product: syz
[  125.439258][   T10] usb 5-1: Manufacturer: syz
[  125.439265][   T10] usb 5-1: SerialNumber: syz
[  125.491289][   T10] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (046d:0821)
[  125.743707][   T10] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770.
[  126.078112][   T13] Filesystems sync: 0.533 seconds
[  126.117439][   T59] Bluetooth: hci0: command 0x0c1a tx timeout
[  126.252565][   T37] audit: type=1800 audit(1785856414.280:12): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.83" name="ipv4_port" dev="configfs" ino=9712 res=0 errno=0
[  126.547501][   T36] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  126.597441][   T59] Bluetooth: hci3: command 0x0c1a tx timeout
[  126.702003][   T36] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  126.702034][   T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.702051][   T36] usb 4-1: Product: syz
[  126.702058][   T36] usb 4-1: Manufacturer: syz
[  126.702065][   T36] usb 4-1: SerialNumber: syz
[  126.869628][ T5586] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  126.997397][   T59] Bluetooth: hci2: command 0x0c1a tx timeout
[  127.167358][   T59] Bluetooth: hci4: command 0x0c1a tx timeout
[  127.317451][   T59] Bluetooth: hci1: command 0x0c1a tx timeout
[  127.740339][   T36] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  127.921805][   T36] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  127.921835][   T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.921902][   T36] usb 1-1: Product: syz
[  127.921910][   T36] usb 1-1: Manufacturer: syz
[  127.921917][   T36] usb 1-1: SerialNumber: syz
[  128.118187][ T5586] usb 4-1: Service connection timeout for: 256
[  128.118210][ T5586] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  128.193158][ T5586] ath9k_htc: Failed to initialize the device
[  128.207391][   T59] Bluetooth: hci0: command 0x0c1a tx timeout
[  128.240140][ T5586] usb 4-1: ath9k_htc: USB layer deinitialized
[  128.677439][   T59] Bluetooth: hci3: command 0x0c1a tx timeout
[  129.077407][   T59] Bluetooth: hci2: command 0x0c1a tx timeout
[  129.237398][   T59] Bluetooth: hci4: command 0x0c1a tx timeout
[  129.313553][ T5714] usb 4-1: USB disconnect, device number 3
[  129.397464][   T59] Bluetooth: hci1: command 0x0c1a tx timeout
[  129.947840][   T10] usb 5-1: USB disconnect, device number 6
[  130.280981][   T59] Bluetooth: hci0: command 0x0c1a tx timeout
[  130.337433][   T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  130.490585][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  130.492293][   T10] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  130.492316][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.772647][   T59] Bluetooth: hci3: command 0x0c1a tx timeout
[  131.023906][   T10] cxacru 5-1:1.0: invalid response length to cm 0x90: 8
[  131.167359][   T59] Bluetooth: hci2: command 0x0c1a tx timeout
[  131.261706][ T6149] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  131.261729][ T6149] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  131.317574][   T59] Bluetooth: hci4: command 0x0c1a tx timeout
[  131.433172][   T37] audit: type=1800 audit(1785856419.460:13): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.97" name="ipv4_port" dev="configfs" ino=9097 res=0 errno=0
[  131.479706][   T59] Bluetooth: hci1: command 0x0c1a tx timeout
[  131.561112][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.605917][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.651322][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.655470][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.669258][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  132.241206][  T197] usb 5-1: USB disconnect, device number 7
[  132.871979][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  132.888347][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  133.498442][ T6177] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  133.880634][ T6180] lo speed is unknown, defaulting to 1000
[  133.887660][   T59] Bluetooth: hci5: command tx timeout
[  134.124151][ T6180] lo speed is unknown, defaulting to 1000
[  134.125192][ T6180] lo speed is unknown, defaulting to 1000
[  134.429038][   T36] usb 1-1: USB disconnect, device number 8
[  134.429125][    C1] usb 1-1: comm data receiver aborted.
[  135.156182][ T6205] rdma_rxe: rxe_newlink: failed to add lo
[  135.957361][   T59] Bluetooth: hci5: command tx timeout
[  136.014228][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.014323][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.014533][ T6154] bridge_slave_0: entered allmulticast mode
[  136.050293][ T6180] infiniband syz1: set active
[  136.050307][ T6180] infiniband syz1: added lo
[  136.051975][ T6154] bridge_slave_0: entered promiscuous mode
[  136.055530][   T10] lo speed is unknown, defaulting to 1000
[  136.060568][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.060678][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.060883][ T6154] bridge_slave_1: entered allmulticast mode
[  136.075116][ T6154] bridge_slave_1: entered promiscuous mode
[  136.161196][ T6180] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  136.181129][   T36] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  136.292967][ T6154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.302996][ T6180] infiniband syz1: Couldn't open port 1
[  136.303397][ T6180] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  136.303428][ T6180] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  136.303467][ T6180] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  136.317840][ T6227] svc: failed to register lockdv1 RPC service (errno 111).
[  136.372113][   T36] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  136.372144][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.372511][ T6154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.639271][ T6154] team0: Port device team_slave_0 added
[  136.641531][ T6180] RDS/IB: syz1: added
[  136.643548][ T6180] smc: adding ib device syz1 with port count 1
[  136.643779][ T6180] smc:    ib device syz1 port 1 has no pnetid
[  136.645937][ T6154] team0: Port device team_slave_1 added
[  136.705251][   T10] lo speed is unknown, defaulting to 1000
[  136.727036][ T6180] lo speed is unknown, defaulting to 1000
[  136.728575][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.728587][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.728605][ T6154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.781504][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.781519][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.781543][ T6154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.944715][ T6154] hsr_slave_0: entered promiscuous mode
[  136.946260][ T6154] hsr_slave_1: entered promiscuous mode
[  136.958819][ T6154] debugfs: 'hsr0' already exists in 'hsr'
[  136.958842][ T6154] Cannot create hsr debugfs directory
[  137.128922][ T6227] svc: failed to register nfsdv3 RPC service (errno 512).
[  137.129213][ T6227] svc: failed to register nfsaclv3 RPC service (errno 512).
[  137.129236][ T6227] failed to unregister udp with rpcbind
[  137.130145][ T6227] svc: failed to register nfsdv3 RPC service (errno 97).
[  137.130163][ T6227] svc: failed to register nfsaclv3 RPC service (errno 97).
[  137.130175][ T6227] failed to unregister udp with rpcbind
[  137.425923][ T6237] PM: suspend entry (deep)
[  137.425934][ T6237] PM: suspend exit
[  137.459282][ T6180] lo speed is unknown, defaulting to 1000
[  137.732970][ T6154] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  137.769912][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  137.771691][ T6154] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  137.822512][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  137.823949][ T6154] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  137.893977][ T5714] usb 1-1: USB disconnect, device number 9
[  137.897661][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  137.901753][ T6154] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  137.902207][ T6180] lo speed is unknown, defaulting to 1000
[  137.979622][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  138.037566][   T59] Bluetooth: hci5: command tx timeout
[  138.250213][ T6154] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.295384][ T6154] 8021q: adding VLAN 0 to HW filter on device team0
[  138.307031][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.307191][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.325196][ T6180] lo speed is unknown, defaulting to 1000
[  138.341606][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.345911][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.819738][ T6180] lo speed is unknown, defaulting to 1000
[  138.829794][   T36] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  138.987469][   T36] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  138.987497][   T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.987514][   T36] usb 1-1: Product: syz
[  138.987525][   T36] usb 1-1: Manufacturer: syz
[  138.987535][   T36] usb 1-1: SerialNumber: syz
[  139.109091][ T6154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.220631][   T36] usb 1-1: Invalid number of CPorts: 0
[  139.220674][   T36] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -22
[  139.346261][ T6180] lo speed is unknown, defaulting to 1000
[  139.551574][ T6154] veth0_vlan: entered promiscuous mode
[  139.567221][ T6154] veth1_vlan: entered promiscuous mode
[  139.615879][ T6154] veth0_macvtap: entered promiscuous mode
[  139.629133][ T6154] veth1_macvtap: entered promiscuous mode
[  139.661657][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.719835][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.747763][ T6232] rdma_rxe: rxe_newlink: failed to add veth0
[  140.122762][   T59] Bluetooth: hci5: command tx timeout
[  140.152959][ T5604] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  140.212981][ T1826] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.213637][ T1826] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.213975][ T1826] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.277722][   T83] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.394327][ T5604] usb 4-1: unable to get BOS descriptor or descriptor too short
[  140.405486][ T5604] usb 4-1: not running at top speed; connect to a high speed hub
[  140.443638][ T5604] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  140.443666][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.443684][ T5604] usb 4-1: Product: syz
[  140.443698][ T5604] usb 4-1: Manufacturer: syz
[  140.443711][ T5604] usb 4-1: SerialNumber: syz
[  140.449083][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.449100][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.666816][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.666835][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.217396][ T5714] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  141.369981][ T5714] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  141.370014][ T5714] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  141.370052][ T5714] usb 6-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00
[  141.370074][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.408845][ T6272] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  141.409030][ T6272] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  141.766221][ T5604] usb 4-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  141.766239][ T5604] usb 4-1: found format II with max.bitrate = 512, frame size=4095
[  141.766249][ T5604] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  141.766712][ T5604] usb 4-1: 2:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  141.766729][ T5604] usb 4-1: found format II with max.bitrate = 512, frame size=4095
[  141.766738][ T5604] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  141.824283][ T5714] mxuport 6-1:1.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-32)
[  141.824373][ T5714] mxuport 6-1:1.0: probe with driver mxuport failed with error -5
[  141.858401][ T5604] usb 4-1: 2:0: failed to get current value for ch 0 (-22)
[  141.865697][ T5604] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  141.865724][ T5604] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  141.865740][ T5604] usb 4-1: [2] FU [Mic Playback Volume] ch = 1, val = 0/1/1
[  141.938958][ T5604] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  141.973235][ T5604] usb 4-1: USB disconnect, device number 4
[  142.068182][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  142.373061][ T6276] PM: suspend entry (deep)
[  142.373074][ T6276] PM: suspend exit
[  142.783975][ T5604] usb 1-1: USB disconnect, device number 10
[  143.041075][ T6281] NFSD: Failed to start, no listeners configured.
[  143.257530][   T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  143.411663][   T31] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02
[  143.411692][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.427018][   T31] ums-alauda 1-1:1.0: USB Mass Storage device detected
[  143.442179][   T31] ums-alauda 1-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  143.442179][   T31]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  143.443235][   T31] scsi host1: usb-storage 1-1:1.0
[  143.561821][   T83] scsi 1:0:0:0: Direct-Access     Fujifilm DPC-R1 (Alauda)  0102 PQ: 0 ANSI: 0 CCS
[  143.588422][   T83] scsi 1:0:0:1: Direct-Access     Fujifilm DPC-R1 (Alauda)  0102 PQ: 0 ANSI: 0 CCS
[  143.802805][   T83] sd 1:0:0:0: Attached scsi generic sg1 type 0
[  143.971802][   T83] sd 1:0:0:1: Attached scsi generic sg2 type 0
[  144.066549][   T10] usb 6-1: USB disconnect, device number 2
[  144.235258][ T6294] Zero length message leads to an empty skb
[  144.688163][   T37] audit: type=1800 audit(1785856432.720:14): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.127" name="ipv4_port" dev="configfs" ino=10422 res=0 errno=0
[  145.012005][ T5736] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  145.169681][ T5736] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  145.169711][ T5736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.640534][ T1308] sd 1:0:0:1: [sdc] Media removed, stopped polling
[  145.645202][   T12] sd 1:0:0:0: [sdb] Media removed, stopped polling
[  145.677475][   T31] usb 1-1: USB disconnect, device number 11
[  145.841768][ T5736] input: HID 04d8:c002 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:04D8:C002.0003/input/input22
[  146.178663][ T5736] rc_core: IR keymap rc-rc6-mce not found
[  146.178682][ T5736] Registered IR keymap rc-empty
[  146.341155][   T12] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  146.348842][ T1308] sd 1:0:0:1: [sdc] Attached SCSI removable disk
[  146.385217][ T5736] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:04D8:C002.0003/rc/rc0
[  146.427444][ T6200] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  146.550384][ T5736] input: HID 04d8:c002 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:04D8:C002.0003/rc/rc0/input23
[  147.155880][ T5736] hid-picolcd 0003:04D8:C002.0003: unsupported LED_STATE report
[  147.695300][ T5736] hid-picolcd 0003:04D8:C002.0003: probe with driver hid-picolcd failed with error -22
[  147.726156][ T5736] usb 6-1: USB disconnect, device number 3
[  148.637421][   T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  148.789147][   T31] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00
[  148.789177][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.796683][   T31] usb 1-1: config 0 descriptor??
[  150.997395][   T31] usbhid 1-1:0.0: can't add hid device: -71
[  150.997495][   T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  151.003517][   T31] usb 1-1: USB disconnect, device number 12
[  151.092061][   T37] audit: type=1800 audit(1785856439.120:15): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.139" name="local" dev="configfs" ino=10485 res=0 errno=0
[  151.123307][ T6336] dlm: Using TCP for communications
[  151.182593][ T6336] dlm: foo: joining the lockspace group...
[  151.915521][ T6335] dlm: dlm user daemon left 1 lockspaces
[  152.574749][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  152.594509][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  152.595606][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  152.603158][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  152.632418][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  152.966256][ T6346] lo speed is unknown, defaulting to 1000
[  153.457149][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.464694][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.464916][ T6346] bridge_slave_0: entered allmulticast mode
[  153.466430][ T6346] bridge_slave_0: entered promiscuous mode
[  153.476911][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.477103][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.479706][ T6346] bridge_slave_1: entered allmulticast mode
[  153.482187][ T6346] bridge_slave_1: entered promiscuous mode
[  153.525024][ T6346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.528753][ T6346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.560348][ T6346] team0: Port device team_slave_0 added
[  153.562428][ T6346] team0: Port device team_slave_1 added
[  153.590230][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.590245][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.590258][ T6346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.591606][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.591618][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.591635][ T6346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.719904][ T6346] hsr_slave_0: entered promiscuous mode
[  153.720744][ T6346] hsr_slave_1: entered promiscuous mode
[  153.721283][ T6346] debugfs: 'hsr0' already exists in 'hsr'
[  153.721302][ T6346] Cannot create hsr debugfs directory
[  154.010369][ T6346] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  154.037213][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  154.047082][ T6346] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  154.094320][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  154.095242][ T6346] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  154.139589][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  154.140495][ T6346] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  154.170018][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  154.209915][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.210097][ T6346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.214388][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.214524][ T6346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.308897][ T1826] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.347826][ T1826] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.544344][ T6346] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.571790][ T6346] 8021q: adding VLAN 0 to HW filter on device team0
[  154.587378][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.587601][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.591661][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.591751][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.760277][   T59] Bluetooth: hci6: command tx timeout
[  155.055665][ T6346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.293823][ T6346] veth0_vlan: entered promiscuous mode
[  155.315956][ T6346] veth1_vlan: entered promiscuous mode
[  155.364520][ T6346] veth0_macvtap: entered promiscuous mode
[  155.371362][ T6346] veth1_macvtap: entered promiscuous mode
[  155.385582][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.405968][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.551173][ T1442] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.551402][ T1442] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.551638][ T1442] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.552011][ T1442] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.954992][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.955012][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.031944][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.031965][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.427443][ T5586] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  156.579694][ T5586] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00
[  156.579719][ T5586] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.838599][   T59] Bluetooth: hci6: command tx timeout
[  157.039503][ T5586] corsair-psu 0003:1B1C:1C03.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.6-1/input0
[  157.902891][ T5608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  157.955068][ T5608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  157.956851][ T5608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  158.005843][ T5608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  158.021633][ T5608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  158.503148][ T6390] lo speed is unknown, defaulting to 1000
[  158.918041][ T5608] Bluetooth: hci6: command tx timeout
[  159.141546][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.141762][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.141911][ T6390] bridge_slave_0: entered allmulticast mode
[  159.143896][ T6390] bridge_slave_0: entered promiscuous mode
[  159.180012][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.180188][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.180365][ T6390] bridge_slave_1: entered allmulticast mode
[  159.182578][ T6390] bridge_slave_1: entered promiscuous mode
[  159.252597][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.256232][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.314856][ T6390] team0: Port device team_slave_0 added
[  159.320504][ T6390] team0: Port device team_slave_1 added
[  159.372965][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.372982][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.373007][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.375172][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.375185][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.375210][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.534404][ T6390] hsr_slave_0: entered promiscuous mode
[  159.535520][ T6390] hsr_slave_1: entered promiscuous mode
[  159.536364][ T6390] debugfs: 'hsr0' already exists in 'hsr'
[  159.536387][ T6390] Cannot create hsr debugfs directory
[  159.943048][ T6390] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  159.973723][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  160.193502][ T6390] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  160.241957][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  160.243469][ T6390] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  160.276445][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  160.277690][ T5608] Bluetooth: hci7: command tx timeout
[  160.307565][ T6390] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  160.379194][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  160.564124][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.607044][ T6390] 8021q: adding VLAN 0 to HW filter on device team0
[  160.626466][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.626595][ T1442] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.656458][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.656543][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.003374][ T5608] Bluetooth: hci6: command tx timeout
[  161.284319][ T5586] usb 7-1: USB disconnect, device number 2
[  337.728989][ T2379] pvrusb2: request_firmware fatal error with code=-110
[  337.729008][ T2379] pvrusb2: Failure uploading firmware1
[  337.729015][ T2379] pvrusb2: Device initialization was not successful.
[  337.729023][ T2379] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  337.729032][ T2379] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  337.735181][ T6345] ------------[ cut here ]------------
[  337.735194][ T6345] debug_locks && p->lockdep_depth
[  337.735252][ T6345] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340, CPU#0: syz.2.141/6345
[  337.735300][ T6345] Modules linked in:
[  337.735331][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  337.735359][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  337.735373][ T6345] RIP: 0010:__set_task_frozen+0x260/0x340
[  337.735408][ T6345] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff
[  337.735426][ T6345] RSP: 0018:ffffc90007897a10 EFLAGS: 00010087
[  337.735443][ T6345] RAX: ffffffff81b0b75f RBX: ffff8880316b1f00 RCX: 0000000000080000
[  337.735459][ T6345] RDX: ffffc900056ea000 RSI: 000000000002b354 RDI: 000000000002b355
[  337.735473][ T6345] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
[  337.735486][ T6345] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff8880316b1f18
[  337.735502][ T6345] R13: 1ffff110062d63e3 R14: 0000000000000000 R15: ffff8880316b2b00
[  337.735516][ T6345] FS:  00007f2bc95366c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000
[  337.735534][ T6345] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  337.735547][ T6345] CR2: 00007ffc60ae2b80 CR3: 000000002c570000 CR4: 00000000003526f0
[  337.735563][ T6345] Call Trace:
[  337.735570][ T6345]  <TASK>
[  337.735581][ T6345]  ? __pfx___set_task_frozen+0x10/0x10
[  337.735610][ T6345]  task_call_func+0x1aa/0x260
[  337.735650][ T6345]  freeze_task+0x216/0x390
[  337.735681][ T6345]  ? __pfx_rt_read_lock+0x10/0x10
[  337.735704][ T6345]  ? __pfx_freeze_task+0x10/0x10
[  337.735787][ T6345]  ? seqcount_lockdep_reader_access+0xea/0x100
[  337.735812][ T6345]  ? ktime_get_with_offset+0x27f/0x2d0
[  337.735841][ T6345]  try_to_freeze_tasks+0x190/0x620
[  337.735881][ T6345]  freeze_processes+0xce/0x1e0
[  337.735911][ T6345]  hibernate+0x247/0x680
[  337.735942][ T6345]  state_store+0x234/0x290
[  337.735968][ T6345]  ? __pfx_sysfs_kf_write+0x10/0x10
[  337.735987][ T6345]  kernfs_fop_write_iter+0x3a5/0x540
[  337.736024][ T6345]  vfs_write+0x61e/0xbb0
[  337.736062][ T6345]  ? __pfx_vfs_write+0x10/0x10
[  337.736093][ T6345]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  337.736122][ T6345]  ? lockdep_hardirqs_on+0x7a/0x110
[  337.736152][ T6345]  ? mutex_lock_nested+0x152/0x1d0
[  337.736173][ T6345]  ? fdget_pos+0x252/0x320
[  337.736220][ T6345]  ksys_write+0x156/0x270
[  337.736250][ T6345]  ? __pfx_ksys_write+0x10/0x10
[  337.736289][ T6345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.736313][ T6345]  do_syscall_64+0x174/0x580
[  337.736342][ T6345]  ? trace_irq_disable+0x3b/0x140
[  337.736364][ T6345]  ? clear_bhb_loop+0x40/0x90
[  337.736390][ T6345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.736411][ T6345] RIP: 0033:0x7f2bcb2de019
[  337.736432][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  337.736449][ T6345] RSP: 002b:00007f2bc9536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  337.736472][ T6345] RAX: ffffffffffffffda RBX: 00007f2bcb565fa0 RCX: 00007f2bcb2de019
[  337.736487][ T6345] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004
[  337.736501][ T6345] RBP: 00007f2bcb37500c R08: 0000000000000000 R09: 0000000000000000
[  337.736514][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  337.736527][ T6345] R13: 00007f2bcb566038 R14: 00007f2bcb565fa0 R15: 00007ffcec7b56c8
[  337.736564][ T6345]  </TASK>
[  337.736584][ T6345] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  337.736601][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  337.736626][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  337.736639][ T6345] Call Trace:
[  337.736647][ T6345]  <TASK>
[  337.736655][ T6345]  vpanic+0x56c/0xa60
[  337.736676][ T6345]  ? __pfx__printk+0x10/0x10
[  337.736699][ T6345]  ? __pfx_vpanic+0x10/0x10
[  337.736716][ T6345]  ? is_bpf_text_address+0x292/0x2b0
[  337.736739][ T6345]  ? is_bpf_text_address+0x26/0x2b0
[  337.736775][ T6345]  panic+0xc5/0xd0
[  337.736795][ T6345]  ? __pfx_panic+0x10/0x10
[  337.736838][ T6345]  __warn+0x315/0x4c0
[  337.736856][ T6345]  ? __set_task_frozen+0x260/0x340
[  337.736891][ T6345]  ? __set_task_frozen+0x260/0x340
[  337.736922][ T6345]  __report_bug+0x276/0x570
[  337.736956][ T6345]  ? __set_task_frozen+0x260/0x340
[  337.736993][ T6345]  ? __pfx___report_bug+0x10/0x10
[  337.737024][ T6345]  ? __lock_acquire+0x683/0x2ce0
[  337.737051][ T6345]  ? __lock_acquire+0x683/0x2ce0
[  337.737082][ T6345]  ? __set_task_frozen+0x260/0x340
[  337.737113][ T6345]  report_bug+0x16a/0x220
[  337.737143][ T6345]  ? __set_task_frozen+0x260/0x340
[  337.737167][ T6345]  ? __set_task_frozen+0x262/0x340
[  337.737230][ T6345]  handle_bug+0x9c/0x200
[  337.737260][ T6345]  exc_invalid_op+0x1a/0x50
[  337.737288][ T6345]  asm_exc_invalid_op+0x1a/0x20
[  337.737307][ T6345] RIP: 0010:__set_task_frozen+0x260/0x340
[  337.737338][ T6345] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff
[  337.737353][ T6345] RSP: 0018:ffffc90007897a10 EFLAGS: 00010087
[  337.737370][ T6345] RAX: ffffffff81b0b75f RBX: ffff8880316b1f00 RCX: 0000000000080000
[  337.737385][ T6345] RDX: ffffc900056ea000 RSI: 000000000002b354 RDI: 000000000002b355
[  337.737399][ T6345] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
[  337.737410][ T6345] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff8880316b1f18
[  337.737423][ T6345] R13: 1ffff110062d63e3 R14: 0000000000000000 R15: ffff8880316b2b00
[  337.737444][ T6345]  ? __pfx___set_task_frozen+0x10/0x10
[  337.737476][ T6345]  ? __set_task_frozen+0x25f/0x340
[  337.737516][ T6345]  ? __pfx___set_task_frozen+0x10/0x10
[  337.737545][ T6345]  task_call_func+0x1aa/0x260
[  337.737581][ T6345]  freeze_task+0x216/0x390
[  337.737609][ T6345]  ? __pfx_rt_read_lock+0x10/0x10
[  337.737631][ T6345]  ? __pfx_freeze_task+0x10/0x10
[  337.737656][ T6345]  ? seqcount_lockdep_reader_access+0xea/0x100
[  337.737677][ T6345]  ? ktime_get_with_offset+0x27f/0x2d0
[  337.737702][ T6345]  try_to_freeze_tasks+0x190/0x620
[  337.737737][ T6345]  freeze_processes+0xce/0x1e0
[  337.737766][ T6345]  hibernate+0x247/0x680
[  337.737792][ T6345]  state_store+0x234/0x290
[  337.737813][ T6345]  ? __pfx_sysfs_kf_write+0x10/0x10
[  337.737829][ T6345]  kernfs_fop_write_iter+0x3a5/0x540
[  337.737859][ T6345]  vfs_write+0x61e/0xbb0
[  337.737891][ T6345]  ? __pfx_vfs_write+0x10/0x10
[  337.737917][ T6345]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  337.737940][ T6345]  ? lockdep_hardirqs_on+0x7a/0x110
[  337.737965][ T6345]  ? mutex_lock_nested+0x152/0x1d0
[  337.737981][ T6345]  ? fdget_pos+0x252/0x320
[  337.738009][ T6345]  ksys_write+0x156/0x270
[  337.738034][ T6345]  ? __pfx_ksys_write+0x10/0x10
[  337.738066][ T6345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.738085][ T6345]  do_syscall_64+0x174/0x580
[  337.738107][ T6345]  ? trace_irq_disable+0x3b/0x140
[  337.738134][ T6345]  ? clear_bhb_loop+0x40/0x90
[  337.738157][ T6345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.738174][ T6345] RIP: 0033:0x7f2bcb2de019
[  337.738197][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  337.738213][ T6345] RSP: 002b:00007f2bc9536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  337.738230][ T6345] RAX: ffffffffffffffda RBX: 00007f2bcb565fa0 RCX: 00007f2bcb2de019
[  337.738243][ T6345] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004
[  337.738254][ T6345] RBP: 00007f2bcb37500c R08: 0000000000000000 R09: 0000000000000000
[  337.738266][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  337.738277][ T6345] R13: 00007f2bcb566038 R14: 00007f2bcb565fa0 R15: 00007ffcec7b56c8
[  337.738308][ T6345]  </TASK>
[  337.738586][ T6345] Kernel Offset: disabled