last executing test programs:

1m12.732254068s ago: executing program 0 (id=1):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='disk\n\x00', 0x7)

57.093521237s ago: executing program 32 (id=1):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='disk\n\x00', 0x7)

51.544032554s ago: executing program 3 (id=79):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/a\x00', 0x42, 0x1ff)
sendfile(r1, r0, 0x0, 0x800)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/b\x00', 0x42, 0x1ff)
sendfile(r2, r0, 0x0, 0x800)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/c\x00', 0x42, 0x1ff)
sendfile(r3, r0, 0x0, 0x800)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/d\x00', 0x42, 0x1ff)
sendfile(r4, r0, 0x0, 0x800)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/e\x00', 0x42, 0x1ff)
sendfile(r5, r0, 0x0, 0x800)
unlinkat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/e\x00', 0x0)

51.370403028s ago: executing program 3 (id=82):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x0499\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='ep0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='3\n', 0x2)
write(0xffffffffffffffff, &(0x7f00000004c0)='blk0\n', 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0)
write(r5, &(0x7f0000000640)='ep1\n', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0)
write(r6, &(0x7f00000006c0)='3\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0)
write(r7, &(0x7f0000000740)='blk1\n', 0x5)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0)
write(r8, &(0x7f00000007c0)='1\n', 0x2)
symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
write(0xffffffffffffffff, &(0x7f00000008c0)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

50.611525264s ago: executing program 3 (id=92):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/a\x00', 0x42, 0x1ff)
sendfile(r1, r0, 0x0, 0x800)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/b\x00', 0x42, 0x1ff)
sendfile(r2, r0, 0x0, 0x800)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/c\x00', 0x42, 0x1ff)
sendfile(r3, r0, 0x0, 0x800)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/d\x00', 0x42, 0x1ff)
sendfile(r4, r0, 0x0, 0x800)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/e\x00', 0x42, 0x1ff)
close(r5)
unlinkat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/e\x00', 0x0)

50.529494939s ago: executing program 3 (id=94):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x0499\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='ep0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='3\n', 0x2)
write(0xffffffffffffffff, &(0x7f00000004c0)='blk0\n', 0x5)
write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0)
write(r5, &(0x7f0000000640)='ep1\n', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0)
write(r6, &(0x7f00000006c0)='3\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0)
write(r7, &(0x7f00000007c0)='1\n', 0x2)
symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r8, &(0x7f00000008c0)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

49.899945746s ago: executing program 3 (id=104):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/a\x00', 0x42, 0x1ff)
sendfile(r1, r0, 0x0, 0x800)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/b\x00', 0x42, 0x1ff)
sendfile(r2, r0, 0x0, 0x800)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/c\x00', 0x42, 0x1ff)
sendfile(r3, r0, 0x0, 0x800)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/d\x00', 0x42, 0x1ff)
sendfile(r4, r0, 0x0, 0x800)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/e\x00', 0x42, 0x1ff)
close(r5)
unlinkat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/e\x00', 0x0)

49.773708484s ago: executing program 3 (id=105):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write(r0, &(0x7f0000000100)="0101", 0x2)
write(r0, &(0x7f0000000102)='\x00\x00', 0x2)
write(r0, &(0x7f0000000104)="02fa", 0x2)
write(r0, &(0x7f0000000106)="02aa", 0x2)
write(r0, &(0x7f0000000108)="0200", 0x2)
write(r0, &(0x7f000000010a)="02fa", 0x2)
write(r0, &(0x7f000000010c)="0200", 0x2)
write(r0, &(0x7f000000010e)="02fa", 0x2)
write(r0, &(0x7f0000000110)="02fa", 0x2)
write(r0, &(0x7f0000000112)="02fa", 0x2)
write(r0, &(0x7f0000000114)="02fa", 0x2)
write(r0, &(0x7f0000000116)="0273", 0x2)
write(r0, &(0x7f0000000118)="0202", 0x2)
write(r0, &(0x7f000000011a)="0264", 0x2)

46.103615494s ago: executing program 4 (id=126):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband/syz0\x00', 0x0, 0x0)

45.888866784s ago: executing program 4 (id=127):
r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0)
ftruncate(r0, 0x10000)
pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008)
pwrite64(r0, &(0x7f0000001020)="800000008000000001000000001000000004000004", 0x15, 0x2024)
pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00"/24, 0x18, 0x2048)
pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068)
pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098)
pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0)
pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc)
pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0)
pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554)
pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c)
pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818)
pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828)
pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854)
pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0)
pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0)
pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00)
pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08)
pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28)
pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000)
r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000007000)='A', 0x1)

45.759792088s ago: executing program 4 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='acpi-battery\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/acpi-battery/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='pcspkr\x00', 0x7)

45.672616659s ago: executing program 4 (id=131):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x0)
read(r0, &(0x7f0000001000)=""/4380, 0x111c)
read(r0, &(0x7f0000001000)=""/4380, 0x111c)
write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11)

44.706468539s ago: executing program 2 (id=136):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000400))

44.65221746s ago: executing program 4 (id=137):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x0499\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='ep0\n', 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0)
write(r4, &(0x7f00000004c0)='blk0\n', 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0)
write(r5, &(0x7f0000000640)='ep1\n', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0)
write(r6, &(0x7f00000006c0)='3\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0)
write(r7, &(0x7f0000000740)='blk1\n', 0x5)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0)
write(r8, &(0x7f00000007c0)='1\n', 0x2)
symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
write(0xffffffffffffffff, &(0x7f00000008c0)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

44.652025973s ago: executing program 2 (id=138):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x0499\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='ep0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='3\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0)

44.556655671s ago: executing program 2 (id=140):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r0, &(0x7f0000000000)="30000000100001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000040)="30000000110001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000080)="30000000120001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000000c0)="30000000130001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000100)="30000000140001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000140)="30000000150001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000180)="30000000160001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000001c0)="30000000170001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000200)="30000000180001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000240)="30000000190001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000280)="300000001a0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)="300000001b0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000300)="300000001c0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000340)="300000001d0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000380)="300000001e0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000003c0)="300000001f0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000400)="30000000200001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000500)={0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tmp\x00', 0x42, 0x1ff)
write(r1, &(0x7f0000000700)="110000000000000000000000000000000000000080000000000000000000000080000000", 0x24)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl(r2, 0x8946, &(0x7f0000000600)="65746831000000000000000000000000000700000000007f")

44.264269245s ago: executing program 1 (id=144):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0xd8}}, 0x0)

44.194317997s ago: executing program 1 (id=145):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x3, 0x46d, 0xc21c}}, 0x118)
read(r0, &(0x7f0000001000)=""/4380, 0x111c)
read(r0, &(0x7f0000001000)=""/4380, 0x111c)
write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11)

44.064019115s ago: executing program 4 (id=146):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040641122060000000000010902270001010080fa0904000003ffffff00070502020002000705810200020007058402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

43.533813835s ago: executing program 2 (id=147):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x0499\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='ep0\n', 0x4)
write(0xffffffffffffffff, &(0x7f0000000440)='3\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0)
write(r4, &(0x7f00000004c0)='blk0\n', 0x5)
write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0)
write(r5, &(0x7f0000000640)='ep1\n', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0)
write(r6, &(0x7f00000006c0)='3\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0)
write(r7, &(0x7f00000007c0)='1\n', 0x2)
symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r8, &(0x7f00000008c0)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

43.234116664s ago: executing program 1 (id=148):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='mem', 0x3)

43.174279432s ago: executing program 1 (id=149):
r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0)
ftruncate(r0, 0x10000)
pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008)
pwrite64(r0, &(0x7f0000001020)="800000008000000001000000001000000004000004", 0x15, 0x2024)
pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a000000000000000000000002000000", 0x1c, 0x2048)
pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068)
pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098)
pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0)
pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc)
pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0)
pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554)
pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c)
pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818)
pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828)
pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854)
pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0)
pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0)
pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00)
pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08)
pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28)
pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000)
r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000007000)='A', 0x1)

43.113698357s ago: executing program 1 (id=150):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x0499\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='ep0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='3\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0)

43.113034209s ago: executing program 1 (id=151):
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xa1, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2)
read(r1, &(0x7f0000000300)=""/4096, 0x1000)

42.730778091s ago: executing program 2 (id=152):
r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0)
ftruncate(r0, 0x10000)
pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008)
pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005", 0x19, 0x2024)
pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a0000000000000000000000020000000100", 0x1e, 0x2048)
pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068)
pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088)
pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098)
pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0)
pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554)
pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804)
pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c)
pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818)
pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828)
pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854)
pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00)
pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08)
pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28)
pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000)
r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00')

42.729522624s ago: executing program 2 (id=153):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='10\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='10\n\x00', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='-2 -3 +4\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='tcp 2049\n\x00', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f00000002c0)='1\n\x00', 0x2) (async)
nanosleep(&(0x7f0000001000)={0x4}, 0x0)
nanosleep(&(0x7f0000001000)={0x4}, 0x0)
nanosleep(&(0x7f0000001000)={0x4}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='addr=127.0.0.1,nolock\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff)
fchmod(r5, 0x1ff)

21.441997608s ago: executing program 33 (id=146):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040641122060000000000010902270001010080fa0904000003ffffff00070502020002000705810200020007058402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

21.392837655s ago: executing program 34 (id=151):
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xa1, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2)
read(r1, &(0x7f0000000300)=""/4096, 0x1000)

21.381841788s ago: executing program 35 (id=153):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='10\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='10\n\x00', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='-2 -3 +4\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='tcp 2049\n\x00', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f00000002c0)='1\n\x00', 0x2) (async)
nanosleep(&(0x7f0000001000)={0x4}, 0x0)
nanosleep(&(0x7f0000001000)={0x4}, 0x0)
nanosleep(&(0x7f0000001000)={0x4}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='addr=127.0.0.1,nolock\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff)
fchmod(r5, 0x1ff)

21.22255382s ago: executing program 36 (id=105):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write(r0, &(0x7f0000000100)="0101", 0x2)
write(r0, &(0x7f0000000102)='\x00\x00', 0x2)
write(r0, &(0x7f0000000104)="02fa", 0x2)
write(r0, &(0x7f0000000106)="02aa", 0x2)
write(r0, &(0x7f0000000108)="0200", 0x2)
write(r0, &(0x7f000000010a)="02fa", 0x2)
write(r0, &(0x7f000000010c)="0200", 0x2)
write(r0, &(0x7f000000010e)="02fa", 0x2)
write(r0, &(0x7f0000000110)="02fa", 0x2)
write(r0, &(0x7f0000000112)="02fa", 0x2)
write(r0, &(0x7f0000000114)="02fa", 0x2)
write(r0, &(0x7f0000000116)="0273", 0x2)
write(r0, &(0x7f0000000118)="0202", 0x2)
write(r0, &(0x7f000000011a)="0264", 0x2)

6.464678505s ago: executing program 6 (id=211):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1b, 0x3, 0x46d, 0xc21c, 0x0, 0x0, "0600ff0900a10185010901150026ff007508950781028502090275"}}, 0x133)
read(r0, &(0x7f0000001000)=""/4380, 0x111c)
read(r0, &(0x7f0000001000)=""/4380, 0x111c)
write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11)

5.901394373s ago: executing program 8 (id=212):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xb, 0x2)
r2 = memfd_create(&(0x7f0000000200)='memfd\x00', 0x0)
ftruncate(r2, 0x1000)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000300)=""/4096, 0x1000)

5.853388027s ago: executing program 8 (id=213):
r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0)
ftruncate(r0, 0x10000)
pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008)
pwrite64(r0, &(0x7f0000001020)="800000008000000001000000001000000004000004", 0x15, 0x2024)
pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a000000000000000000000002000000010000", 0x1f, 0x2048)
pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068)
pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098)
pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0)
pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc)
pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0)
pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554)
pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c)
pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818)
pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828)
pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854)
pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0)
pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0)
pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00)
pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08)
pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28)
pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000)
r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000007000)='A', 0x1)

5.783585678s ago: executing program 8 (id=214):
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='8086 100e', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='0000:00:04.0', 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='0000:00:04.0', 0xc)

5.783437682s ago: executing program 8 (id=215):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='freeze\n', 0x7)

5.703585579s ago: executing program 8 (id=216):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt(r0, 0x0, 0x40, &(0x7f0000000000)="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000200000030010000000000000000000000000000000000000000000098000000980000009800000098000000980000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000700098000000000000000000000000000000000000000000280045434e0000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000", 0x190)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4d2, @local}, 0x10)
listen(r1, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4d2, @local}, 0x10)

5.703107074s ago: executing program 8 (id=218):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='0\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='platform\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='mem\n', 0x4) (async)

5.551912336s ago: executing program 6 (id=219):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='ep0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='3\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0)

5.551246504s ago: executing program 6 (id=220):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x0499\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r3, &(0x7f0000000440)='3\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0)
write(r4, &(0x7f00000004c0)='blk0\n', 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0)
write(r5, &(0x7f0000000640)='ep1\n', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0)
write(r6, &(0x7f00000006c0)='3\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0)
write(r7, &(0x7f0000000740)='blk1\n', 0x5)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0)
write(r8, &(0x7f00000007c0)='1\n', 0x2)
symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
write(0xffffffffffffffff, &(0x7f00000008c0)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

4.973929136s ago: executing program 6 (id=225):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x8)

4.97303517s ago: executing program 6 (id=227):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x28, 0x3, 0x46d, 0xc21c, 0x0, 0x0, "0600ff0900a10185010901150026ff007508950781028502090275089501b1028505090575089504"}}, 0x140)
read(r0, &(0x7f0000001000)=""/4380, 0x111c)
read(r0, &(0x7f0000001000)=""/4380, 0x111c)
write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11)

4.053822152s ago: executing program 6 (id=228):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)

3.852913733s ago: executing program 7 (id=229):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x04', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='ep0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='3\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0)

3.851833745s ago: executing program 7 (id=230):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x0499\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
write(r2, &(0x7f00000003c0)='ep0\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r3, &(0x7f0000000440)='3\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0)
write(r4, &(0x7f00000004c0)='blk0\n', 0x5)
write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0)
write(r5, &(0x7f0000000640)='ep1\n', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0)
write(r6, &(0x7f00000006c0)='3\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0)
write(r7, &(0x7f00000007c0)='1\n', 0x2)
symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r8, &(0x7f00000008c0)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

3.253064029s ago: executing program 7 (id=231):
r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0)
ftruncate(r0, 0x10000)
pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008)
pwrite64(r0, &(0x7f0000001020)="800000008000000001000000001000000004000004", 0x15, 0x2024)
pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048)
pwrite64(r0, 0x0, 0x0, 0x2068)
pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098)
pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0)
pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc)
pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0)
pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554)
pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c)
pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818)
pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828)
pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854)
pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0)
pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0)
pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00)
pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08)
pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28)
pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000)
r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000007000)='A', 0x1)

3.204056935s ago: executing program 7 (id=232):
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004044332211000101020301090227000101008032090400000300000000070501020002000705810200020007058602000200"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000003000)=@lang_id={0x4, 0x3, 0x409}}, {0x3, &(0x7f0000003100)=@string={0x3, 0x3, '\x00'}}, {0x6, &(0x7f0000003200)=@string={0x6, 0x3, 'G\x00\x00\x00'}}]})
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1.933896778s ago: executing program 7 (id=233):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x0499\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r3, &(0x7f0000000440)='3\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0)
write(r4, &(0x7f00000004c0)='blk0\n', 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0)
write(r5, &(0x7f0000000640)='ep1\n', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0)
write(r6, &(0x7f00000006c0)='3\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0)
write(r7, &(0x7f0000000740)='blk1\n', 0x5)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0)
write(r8, &(0x7f00000007c0)='1\n', 0x2)
symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
write(0xffffffffffffffff, &(0x7f00000008c0)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

1.394062646s ago: executing program 7 (id=235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2)
writev(r0, &(0x7f0000001000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000102)="02ff", 0x2}, {&(0x7f0000000104)="0247", 0x2}, {&(0x7f0000000106)="0280", 0x2}, {&(0x7f0000000108)="02fa", 0x2}, {&(0x7f000000010a)="02ff", 0x2}, {&(0x7f000000010c)="0247", 0x2}, {&(0x7f000000010e)="0280", 0x2}], 0x8)
nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0)
writev(r0, &(0x7f0000001000), 0x8)
nanosleep(&(0x7f0000000200), 0x0)
writev(r0, &(0x7f0000001000), 0x8)
nanosleep(&(0x7f0000000200), 0x0)
writev(r0, &(0x7f0000001000), 0x8)
nanosleep(&(0x7f0000000200), 0x0)
writev(r0, &(0x7f0000001000), 0x8)
nanosleep(&(0x7f0000000200), 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/serio/devices/serio0/protocol\x00', 0x2, 0x0)
write(r1, &(0x7f0000000440)='synaptics\x00', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0)
write(r2, &(0x7f0000000440)='synaptics\x00', 0xa)
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/serio/devices/serio2/protocol\x00', 0x2, 0x0)
write(r3, &(0x7f0000000440)='synaptics\x00', 0xa)

1.033510593s ago: executing program 5 (id=236):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x28, 0x3, 0x46d, 0xc21c, 0x0, 0x0, "0600ff0900a10185010901150026ff007508950781028502090275089501b1028505090575089504"}}, 0x140)
read(r0, &(0x7f0000001000)=""/4380, 0x111c)
read(r0, &(0x7f0000001000)=""/4380, 0x111c)
write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11)

163.793009ms ago: executing program 5 (id=237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/self/ns/net\x00', 0x0, 0x0)
unshare(0x40000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000100005040000000000000000000000000000000000000000000000000000100012800c00010064756d6d79000000"], 0x30}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c001000010000000000000000000000000000000000000001000000010000000c00030064756d6d79300000"], 0x2c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/dummy0/force_mld_version\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='2', 0x1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x14, &(0x7f0000000240)="ff02000000000000000000000000000202000000", 0x14)
sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x20}}, 0x0)

74.09156ms ago: executing program 5 (id=238):
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./md1\x00', 0x81b6, 0x901)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./md1\x00', 0x2, 0x0)
ioctl(r0, 0x923, &(0x7f0000000100)='\x00')

73.912089ms ago: executing program 5 (id=239):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x04', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x1000\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='ep0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='3\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0)

785.781µs ago: executing program 5 (id=240):
r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0)
ftruncate(r0, 0x10000)
pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008)
pwrite64(r0, &(0x7f0000001020)="800000008000000001000000001000000004000004", 0x15, 0x2024)
pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048)
pwrite64(r0, 0x0, 0x0, 0x2068)
pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098)
pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0)
pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc)
pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0)
pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554)
pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c)
pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818)
pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828)
pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854)
pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0)
pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0)
pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00)
pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08)
pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28)
pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000)
r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000007000)='A', 0x1)

0s ago: executing program 5 (id=241):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)
rmdir(&(0x7f0000000080)='./cgroup.cpu/syz0\x00')
nanosleep(&(0x7f0000000000)={0x0, 0x35a4e900}, 0x0)

0s ago: executing program 5 (id=242):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='rd_pages=32768\x00', 0xe)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r2, &(0x7f0000000500)='0x1d6b\x00', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r3, &(0x7f0000000580)='0x0104\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff)
symlinkat(&(0x7f0000000840)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0)
write(r4, &(0x7f0000000940)='naa.6001405123456789\x00', 0x14)
symlinkat(&(0x7f0000000980)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r5, &(0x7f0000000a40)='dummy_udc.0\x00', 0xb)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r6 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f0000000200)=""/28}, &(0x7f0000000300)="5f000000000000001c00", &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45115' (ED25519) to the list of known hosts.
[   41.282541][ T5686] cgroup: Unknown subsys name 'net'
[   41.439358][ T5686] cgroup: Unknown subsys name 'cpuset'
[   41.443393][ T5686] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.352404][ T5686] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.685763][ T5756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.690401][ T5756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.693501][ T5756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   46.694487][ T5757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.698379][ T5758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.701131][ T5759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   46.706386][ T5757] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.706502][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.711226][ T5757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.712619][ T5760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.714519][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.715126][ T5758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.717826][ T5759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   46.723241][ T5759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   46.725954][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.729209][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.732522][ T5757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.735188][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.739940][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   46.743562][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.358647][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.361850][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.364287][ T5743] bridge_slave_0: entered allmulticast mode
[   47.367597][ T5743] bridge_slave_0: entered promiscuous mode
[   47.394780][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.397532][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.399944][ T5743] bridge_slave_1: entered allmulticast mode
[   47.402789][ T5743] bridge_slave_1: entered promiscuous mode
[   47.476224][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.479208][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.481765][ T5745] bridge_slave_0: entered allmulticast mode
[   47.485497][ T5745] bridge_slave_0: entered promiscuous mode
[   47.489744][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.492600][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.495414][ T5745] bridge_slave_1: entered allmulticast mode
[   47.499490][ T5745] bridge_slave_1: entered promiscuous mode
[   47.510712][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.516530][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.551004][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.553932][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.557721][ T5744] bridge_slave_0: entered allmulticast mode
[   47.560612][ T5744] bridge_slave_0: entered promiscuous mode
[   47.581350][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.587711][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.590770][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.593662][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.597508][ T5744] bridge_slave_1: entered allmulticast mode
[   47.600759][ T5744] bridge_slave_1: entered promiscuous mode
[   47.637389][ T5743] team0: Port device team_slave_0 added
[   47.642451][ T5743] team0: Port device team_slave_1 added
[   47.677757][ T5745] team0: Port device team_slave_0 added
[   47.724021][ T5745] team0: Port device team_slave_1 added
[   47.727808][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.736198][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.740541][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.743667][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.753872][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.760480][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.764086][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.767097][ T5742] bridge_slave_0: entered allmulticast mode
[   47.770082][ T5742] bridge_slave_0: entered promiscuous mode
[   47.792782][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.796667][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.805806][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.815275][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.818321][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.821300][ T5742] bridge_slave_1: entered allmulticast mode
[   47.825166][ T5742] bridge_slave_1: entered promiscuous mode
[   47.848274][ T5744] team0: Port device team_slave_0 added
[   47.863188][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.865454][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.873739][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.878454][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.880684][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.889119][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.893729][ T5744] team0: Port device team_slave_1 added
[   47.928722][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.944187][ T5743] hsr_slave_0: entered promiscuous mode
[   47.947839][ T5743] hsr_slave_1: entered promiscuous mode
[   47.951486][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.953681][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.961903][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.968165][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.984953][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.987334][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.994695][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.020087][ T5742] team0: Port device team_slave_0 added
[   48.042941][ T5745] hsr_slave_0: entered promiscuous mode
[   48.046730][ T5745] hsr_slave_1: entered promiscuous mode
[   48.048800][ T5745] debugfs: 'hsr0' already exists in 'hsr'
[   48.050585][ T5745] Cannot create hsr debugfs directory
[   48.053377][ T5742] team0: Port device team_slave_1 added
[   48.095953][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.099091][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.107270][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.133592][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.135856][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.143967][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.165686][ T5744] hsr_slave_0: entered promiscuous mode
[   48.169298][ T5744] hsr_slave_1: entered promiscuous mode
[   48.172234][ T5744] debugfs: 'hsr0' already exists in 'hsr'
[   48.174598][ T5744] Cannot create hsr debugfs directory
[   48.266208][ T5742] hsr_slave_0: entered promiscuous mode
[   48.268893][ T5742] hsr_slave_1: entered promiscuous mode
[   48.271069][ T5742] debugfs: 'hsr0' already exists in 'hsr'
[   48.272876][ T5742] Cannot create hsr debugfs directory
[   48.426935][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.436856][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.451327][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.456261][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.472965][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.480998][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.495103][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.504345][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.559253][ T5745] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.567055][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.569973][ T5745] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.575586][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.578462][ T5745] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.583215][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.586039][ T5745] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.590885][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.657266][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.663324][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.667419][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.672231][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.675654][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.680000][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.683419][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.687634][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.737372][   T64] Bluetooth: hci1: command tx timeout
[   48.772910][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   48.779763][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.783489][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   48.790152][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.797851][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.805584][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   48.812222][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.817038][   T64] Bluetooth: hci0: command tx timeout
[   48.817905][ T5754] Bluetooth: hci2: command tx timeout
[   48.823198][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   48.826724][ T5754] Bluetooth: hci3: command tx timeout
[   48.833766][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.860721][ T5743] 8021q: adding VLAN 0 to HW filter on device team0
[   48.873032][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.876710][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.889343][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.910951][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.913299][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.935234][ T5745] 8021q: adding VLAN 0 to HW filter on device team0
[   48.952240][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.955222][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.971067][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.977072][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.979919][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.008901][ T5744] 8021q: adding VLAN 0 to HW filter on device team0
[   49.025853][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.028179][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.041592][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.043936][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.124855][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.159122][ T5742] 8021q: adding VLAN 0 to HW filter on device team0
[   49.174398][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.177374][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.189650][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.192669][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.386667][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.425736][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.435330][ T5743] veth0_vlan: entered promiscuous mode
[   49.452583][ T5743] veth1_vlan: entered promiscuous mode
[   49.483904][ T5745] veth0_vlan: entered promiscuous mode
[   49.496867][ T5743] veth0_macvtap: entered promiscuous mode
[   49.502926][ T5745] veth1_vlan: entered promiscuous mode
[   49.510295][ T5743] veth1_macvtap: entered promiscuous mode
[   49.519396][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.537375][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.549082][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.557561][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.590048][ T5745] veth0_macvtap: entered promiscuous mode
[   49.616040][ T5745] veth1_macvtap: entered promiscuous mode
[   49.620904][ T5744] veth0_vlan: entered promiscuous mode
[   49.655271][ T5744] veth1_vlan: entered promiscuous mode
[   49.684132][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.687460][ T5742] veth0_vlan: entered promiscuous mode
[   49.688024][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.692287][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.702083][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.716917][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.734670][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.738451][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.740307][ T5742] veth1_vlan: entered promiscuous mode
[   49.768931][ T5744] veth0_macvtap: entered promiscuous mode
[   49.789548][ T5744] veth1_macvtap: entered promiscuous mode
[   49.790927][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.810636][ T5743] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   49.816337][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.821056][ T5743] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   49.826919][ T5743] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   49.840482][ T5743] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   49.840618][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.866525][ T5742] veth0_macvtap: entered promiscuous mode
[   49.885849][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.886860][ T5593] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.892525][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.899555][ T5593] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.918317][ T5742] veth1_macvtap: entered promiscuous mode
[   49.926411][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.943085][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.950845][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.963561][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.966355][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.980430][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.988243][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.993596][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.023959][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.039064][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.042844][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.047188][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.106247][ T5593] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.107248][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.112770][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.170097][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.176962][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.196404][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.268737][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.277949][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.347144][ T5593] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.352952][ T5593] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.375924][ T5901] PM: hibernation: hibernation entry
[   50.386330][ T5593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.393393][ T5593] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.398893][ T5593] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.446320][ T5752] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   50.537683][   T10] lg-g15 0003:046D:C21C.0002: hidraw1: USB HID v0.00 Device [syz0] on syz0
[   50.547899][   T10] lg-g15 0003:046D:C21C.0002: Error getting macro LED brightness: -5
[   50.553029][   T10] lg-g15 0003:046D:C21C.0002: probe with driver lg-g15 failed with error -5
[   50.598632][ T5891] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   50.631207][ T5752] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01
[   50.635924][ T5752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.665386][ T5752] pvrusb2: Hardware description: Terratec Grabster AV400
[   50.668041][ T5752] pvrusb2: **********
[   50.669740][ T5752] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   50.672928][ T5752] pvrusb2: Important functionality might not be entirely working.
[   50.673261][ T5908] fido_id[5908]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   50.675248][ T5752] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   50.683898][ T5752] pvrusb2: **********
[   50.759578][ T5891] usb 7-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 0.00
[   50.763227][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.816324][ T5754] Bluetooth: hci1: command tx timeout
[   50.837035][ T5837] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   50.896444][ T5754] Bluetooth: hci3: command tx timeout
[   50.896624][   T64] Bluetooth: hci2: command tx timeout
[   50.981520][ T5891] usb 7-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state
[   50.989216][ T5837] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[   50.992123][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.167300][ T5901] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   51.169491][ T5901] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   51.176650][ T5901] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   51.182701][ T5901] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   51.184979][ T5901] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   51.193810][ T5901] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   51.199738][ T5901] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   51.202310][ T5901] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   51.205801][ T5901] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   51.209750][ T5901] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   51.211636][ T5901] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   51.214531][ T5901] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   51.235679][ T5821] Filesystems sync: 0.014 seconds
[   51.409464][ T5837] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[   51.417603][ T5837] wacom 0003:056A:033B.0003: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0
[   51.424718][ T5837] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/0003:056A:033B.0003/input/input7
[   52.028585][ T5891] dvb_usb_rtl28xxu 7-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[   52.292106][ T2513] pvrusb2: Module ID 2 (cx25840) for device Terratec Grabster AV400 failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[   52.297818][ T2513] pvrusb2: Device being rendered inoperable
[   52.300647][ T2513] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[   52.305076][ T2513] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[   52.496324][   T64] Bluetooth: hci0: command 0x040f tx timeout
[   52.614493][   T34] usb 8-1: USB disconnect, device number 2
[   53.216655][ T5754] Bluetooth: hci1: command 0x0419 tx timeout
[   53.216699][ T5748] Bluetooth: hci2: command 0x0419 tx timeout
[   53.218812][   T64] Bluetooth: hci3: command 0x0419 tx timeout
[   53.346863][   T41] usb 7-1: USB disconnect, device number 2
[   53.396222][ T5752] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   53.411221][   T42] audit: type=1800 audit(1785860990.821:2): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="idVendor" dev="configfs" ino=9084 res=0 errno=0
[   53.418978][   T42] audit: type=1800 audit(1785860990.821:3): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="idProduct" dev="configfs" ino=9085 res=0 errno=0
[   53.425040][   T42] audit: type=1800 audit(1785860990.821:4): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="process_ump" dev="configfs" ino=9091 res=0 errno=0
[   53.431838][   T42] audit: type=1800 audit(1785860990.821:5): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="ep_name" dev="configfs" ino=9092 res=0 errno=0
[   53.438908][   T42] audit: type=1800 audit(1785860990.821:6): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="direction" dev="configfs" ino=9093 res=0 errno=0
[   53.445866][   T42] audit: type=1800 audit(1785860990.831:7): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="name" dev="configfs" ino=9094 res=0 errno=0
[   53.452809][   T42] audit: type=1800 audit(1785860990.831:8): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="UDC" dev="configfs" ino=9096 res=0 errno=0
[   53.565129][ T5752] usb 8-1: New USB device found, idVendor=2040, idProduct=2900, bcdDevice= 1.00
[   53.569106][ T5752] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.572413][ T5752] usb 8-1: Product: syz
[   53.574129][ T5752] usb 8-1: Manufacturer: syz
[   53.576198][ T5752] usb 8-1: SerialNumber: syz
[   53.588921][ T5752] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[   53.736154][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   53.907118][   T10] usb 5-1: Dual-Role OTG device on HNP port
[   53.909299][   T10] usb 5-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice= 7.02
[   53.912202][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.927503][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   53.930674][   T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[   53.941515][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   54.256857][ T5114] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   54.423146][ T5114] usb 7-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[   54.427061][ T5114] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.429983][ T5114] usb 7-1: Product: syz
[   54.431426][ T5114] usb 7-1: Manufacturer: syz
[   54.432889][ T5114] usb 7-1: SerialNumber: syz
[   54.491763][   T10] usb 6-1: USB disconnect, device number 2
[   54.587623][   T64] Bluetooth: hci0: command 0x040f tx timeout
[   54.849625][ T5114] dvbdev: DVB: registering new adapter (DEC3000-s)
[   54.859721][ T5114] usb 7-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)...
[   55.052228][ T5114] usb 7-1: selecting invalid altsetting 8
[   55.156146][ T2513] pvrusb2: Failed to submit write-control URB status=-2
[   55.163815][ T5752] usb 8-1: USB disconnect, device number 3
[   55.167561][ T2513] usb 8-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[   55.170919][ T2513] usb 8-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[   55.256502][   T24] usb 7-1: USB disconnect, device number 3
[   55.305545][ T5754] Bluetooth: hci3: command 0x0419 tx timeout
[   55.306787][   T64] Bluetooth: hci2: command 0x0419 tx timeout
[   55.307712][ T5748] Bluetooth: hci1: command 0x0419 tx timeout
[   55.776415][ T5937] NFSD: Unable to initialize client recovery tracking! (-110)
[   55.780684][ T5937] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   55.785308][ T5937] NFSD: starting 90-second grace period (net f0000480)
[   56.036216][ T5114] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   56.209992][ T5114] usb 7-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00
[   56.213066][ T5114] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.215826][ T5114] usb 7-1: Product: syz
[   56.217631][ T5114] usb 7-1: Manufacturer: syz
[   56.219319][ T5114] usb 7-1: SerialNumber: syz
[   56.227448][ T5114] gspca_main: spca500-2.14.0 probing 046d:0900
[   56.657000][   T64] Bluetooth: hci0: command 0x040f tx timeout
[   57.336313][ T5891] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   57.376260][   T64] Bluetooth: hci3: command 0x0419 tx timeout
[   57.376315][ T5748] Bluetooth: hci1: command 0x0419 tx timeout
[   57.379284][ T5754] Bluetooth: hci2: command 0x0419 tx timeout
[   57.976714][ T5891] usb 6-1: unable to read config index 0 descriptor/start: -71
[   57.979359][ T5891] usb 6-1: can't read configurations, error -71
[   58.620338][   T42] audit: type=1800 audit(1785860996.031:9): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19" name="idVendor" dev="configfs" ino=8028 res=0 errno=0
[   58.627088][   T42] audit: type=1800 audit(1785860996.031:10): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19" name="idProduct" dev="configfs" ino=8029 res=0 errno=0
[   58.633085][   T42] audit: type=1800 audit(1785860996.031:11): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19" name="process_ump" dev="configfs" ino=8030 res=0 errno=0
[   58.639371][   T42] audit: type=1800 audit(1785860996.031:12): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19" name="ep_name" dev="configfs" ino=8031 res=0 errno=0
[   58.645299][   T42] audit: type=1800 audit(1785860996.041:13): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19" name="direction" dev="configfs" ino=8032 res=0 errno=0
[   58.651404][   T42] audit: type=1800 audit(1785860996.041:14): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19" name="name" dev="configfs" ino=8033 res=0 errno=0
[   58.657380][   T42] audit: type=1800 audit(1785860996.041:15): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19" name="UDC" dev="configfs" ino=8034 res=0 errno=0
[   58.736273][ T5754] Bluetooth: hci0: command 0x040f tx timeout
[   59.456288][ T5754] Bluetooth: hci2: command 0x0419 tx timeout
[   59.456490][ T5748] Bluetooth: hci3: command 0x0419 tx timeout
[   59.458131][ T5754] Bluetooth: hci1: command 0x0419 tx timeout
[   59.536211][   T41] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   59.698279][   T41] usb 6-1: New USB device found, idVendor=17e9, idProduct=0000, bcdDevice= 0.00
[   59.701399][   T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.801455][ T5114] usb 7-1: USB disconnect, device number 4
[   60.819297][ T5754] Bluetooth: hci0: command 0x040f tx timeout
[   61.161150][ T5985] lo speed is unknown, defaulting to 1000
[   61.164853][   T41] udl 6-1:1.0: [drm] Unrecognized vendor firmware descriptor
[   61.168557][ T5985] lo speed is unknown, defaulting to 1000
[   61.171173][   T41] [drm:udl_init] *ERROR* Selecting channel failed
[   61.172355][ T5985] lo speed is unknown, defaulting to 1000
[   61.186539][   T41] [drm] Initialized udl 0.0.1 for 6-1:1.0 on minor 3
[   61.188618][   T41] [drm] Initialized udl on minor 3
[   61.191622][   T41] udl 6-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   61.195656][   T41] udl 6-1:1.0: [drm] Cannot find any crtc or sizes
[   61.198886][ T1481] udl 6-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   61.208062][   T41] usb 6-1: USB disconnect, device number 5
[   61.212106][ T1481] udl 6-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[   61.218089][ T1481] udl 6-1:1.0: [drm] Cannot find any crtc or sizes
[   61.312716][ T5114] lo speed is unknown, defaulting to 1000
[   61.315426][ T5985] infiniband syz1: set active
[   61.317018][ T5985] infiniband syz1: added lo
[   61.328551][ T5985] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   61.333201][ T5985] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   61.339346][ T5985] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   61.364670][ T5985] RDS/IB: syz1: added
[   61.366323][ T5985] smc: adding ib device syz1 with port count 1
[   61.368783][ T5985] smc:    ib device syz1 port 1 has no pnetid
[   61.371815][ T5114] lo speed is unknown, defaulting to 1000
[   61.377222][ T5985] lo speed is unknown, defaulting to 1000
[   61.552222][ T5985] lo speed is unknown, defaulting to 1000
[   61.643600][ T5985] lo speed is unknown, defaulting to 1000
[   61.730607][ T5985] lo speed is unknown, defaulting to 1000
[   61.864130][   T42] audit: type=1800 audit(1785860999.271:16): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.26" name="zoned" dev="configfs" ino=8051 res=0 errno=0
[   61.870328][   T42] audit: type=1800 audit(1785860999.281:17): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.26" name="zone_nr_conv" dev="configfs" ino=10415 res=0 errno=0
[   61.875651][ T5989] null_blk: nullb1: using native zone append
[   61.877556][   T42] audit: type=1800 audit(1785860999.281:18): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.26" name="power" dev="configfs" ino=10416 res=0 errno=0
[   61.906159][ T5989] null_blk: disk nullb1 created
[   61.950546][ T5989] null_blk: nullb2: using native zone append
[   61.981918][ T5989] null_blk: disk nullb2 created
[   62.011141][ T5995] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   62.058639][ T5995] md: invalid raid superblock magic on ram1
[   62.061066][ T5995] md: ram1 does not have a valid v0.90 superblock, not importing!
[   63.354784][ T6013] loop0: detected capacity change from 0 to 128
[   63.521755][ T6017] MTDSB: Device #1 doesn't appear to exist
[   63.521755][ T6017] 
[   63.579445][ T6013] ftl_cs: FTL header not found.
[   63.621846][ T6013] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096]
[   63.701365][ T6021] siw: device registration error -23
[   63.824077][   T42] kauditd_printk_skb: 10 callbacks suppressed
[   63.824092][   T42] audit: type=1800 audit(1785861001.231:29): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.40" name="idVendor" dev="configfs" ino=9195 res=0 errno=0
[   63.832283][   T42] audit: type=1800 audit(1785861001.231:30): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.40" name="idProduct" dev="configfs" ino=10644 res=0 errno=0
[   63.838646][   T42] audit: type=1800 audit(1785861001.231:31): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.40" name="process_ump" dev="configfs" ino=10645 res=0 errno=0
[   63.844867][   T42] audit: type=1800 audit(1785861001.231:32): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.40" name="ep_name" dev="configfs" ino=10646 res=0 errno=0
[   63.851623][   T42] audit: type=1800 audit(1785861001.241:33): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.40" name="direction" dev="configfs" ino=8074 res=0 errno=0
[   63.859586][   T42] audit: type=1800 audit(1785861001.241:34): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.40" name="name" dev="configfs" ino=10647 res=0 errno=0
[   63.865917][   T42] audit: type=1800 audit(1785861001.241:35): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.40" name="UDC" dev="configfs" ino=10648 res=0 errno=0
[   64.046316][ T5850] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   64.256867][ T5850] usb 6-1: Using ep0 maxpacket: 16
[   64.260067][ T5850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.263550][ T5850] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   64.267831][ T5850] usb 6-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[   64.270936][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.276954][ T5850] usb 6-1: config 0 descriptor??
[   64.529187][ T6033] overlayfs: failed to decode file handle (len=16, type=0, flags=0, err=-22)
[   64.826262][ T1481] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   64.896287][ T5754] Bluetooth: hci3: command 0x0419 tx timeout
[   64.981638][ T1481] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00
[   64.984673][ T1481] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   64.987334][ T1481] usb 7-1: Product: syz
[   64.988627][ T1481] usb 7-1: Manufacturer: syz
[   65.025998][ T1481] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input10
[   65.789924][ T5850] usbhid 6-1:0.0: can't add hid device: -71
[   65.792495][ T5850] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   65.799055][ T5850] usb 6-1: USB disconnect, device number 6
[   65.892911][   T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   65.898568][   T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   65.901437][   T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   65.904652][   T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   65.908826][   T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   66.172405][ T6038] lo speed is unknown, defaulting to 1000
[   66.485818][   T42] audit: type=1800 audit(1785861003.891:36): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.46" name="idVendor" dev="configfs" ino=11291 res=0 errno=0
[   66.501164][ T1481] usb 7-1: USB disconnect, device number 5
[   66.502364][   T42] audit: type=1800 audit(1785861003.911:37): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.46" name="idProduct" dev="configfs" ino=11292 res=0 errno=0
[   66.517268][   T42] audit: type=1800 audit(1785861003.911:38): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.46" name="process_ump" dev="configfs" ino=11293 res=0 errno=0
[   66.616269][ T5850] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   66.697852][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.700097][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.703429][ T6038] bridge_slave_0: entered allmulticast mode
[   66.708600][ T6038] bridge_slave_0: entered promiscuous mode
[   66.713446][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.716397][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.718879][ T6038] bridge_slave_1: entered allmulticast mode
[   66.722827][ T6038] bridge_slave_1: entered promiscuous mode
[   66.744411][ T6038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.750064][ T6038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.768919][ T5850] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[   66.769274][ T6038] team0: Port device team_slave_0 added
[   66.771758][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.777972][ T6038] team0: Port device team_slave_1 added
[   66.785348][ T5850] usb 6-1: NFC: intf ffff88806b640000 id ffffffff8fc6b7a0
[   66.813338][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.816571][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.822735][ T5850] nfcmrvl 6-1:1.0: NFC: registered with nci successfully
[   66.826830][ T6038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.835729][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.839475][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.850106][ T6038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.893822][ T6038] hsr_slave_0: entered promiscuous mode
[   66.897938][ T6038] hsr_slave_1: entered promiscuous mode
[   66.900880][ T6038] debugfs: 'hsr0' already exists in 'hsr'
[   66.903108][ T6038] Cannot create hsr debugfs directory
[   66.977823][   T64] Bluetooth: hci3: command 0x0419 tx timeout
[   67.028128][ T6038] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   67.039422][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   67.043333][ T6038] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   67.057479][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   67.065335][ T6038] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   67.086769][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   67.096519][ T6038] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   67.104343][ T6067] jffs2: notice: (6067) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   67.114341][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   67.126907][   T10] usb 6-1: USB disconnect, device number 7
[   67.141890][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.145717][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.146598][   T10] usb 6-1: NFC: intf ffff88806b640000
[   67.149432][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.153296][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.214117][ T6038] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.221838][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.224710][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.233041][ T6038] 8021q: adding VLAN 0 to HW filter on device team0
[   67.239545][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.241985][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.249045][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.251349][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.280983][ T6038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.769798][ T6038] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.947576][ T5754] Bluetooth: hci4: command tx timeout
[   67.996249][ T5822] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   67.997212][ T6038] veth0_vlan: entered promiscuous mode
[   68.005301][ T6038] veth1_vlan: entered promiscuous mode
[   68.021819][ T6038] veth0_macvtap: entered promiscuous mode
[   68.026027][ T6038] veth1_macvtap: entered promiscuous mode
[   68.034887][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.045344][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.107236][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.114894][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.126536][ T5593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.129787][ T5593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.145436][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.146183][ T5593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.150241][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.151655][ T5593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.155338][ T5822] usb 6-1: config index 0 descriptor too short (expected 75, got 74)
[   68.160348][ T5822] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00
[   68.163446][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.170635][ T5822] usb 6-1: Product: syz
[   68.172063][ T5822] usb 6-1: Manufacturer: syz
[   68.173571][ T5822] usb 6-1: SerialNumber: syz
[   68.525780][ T5114] lg-g15 0003:046D:C21C.0004: hidraw1: USB HID v0.00 Device [syz0] on syz0
[   68.534234][ T5114] input: Logitech G13 Gaming Keypad as /devices/virtual/misc/uhid/0003:046D:C21C.0004/input/input11
[   68.546273][ T6081] NFSD: Unable to initialize client recovery tracking! (-110)
[   68.550576][ T5114] input: Logitech G13 Thumbstick as /devices/virtual/misc/uhid/0003:046D:C21C.0004/input/input12
[   68.554158][ T6081] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   68.558329][ T6081] NFSD: starting 90-second grace period (net f00003f7)
[   68.730491][ T6129] fido_id[6129]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   68.966562][ T6134] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   68.981124][ T6134] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   69.944728][ T5822] ath6kl: Failed to read usb control message: -71
[   69.947740][ T5822] ath6kl: Unable to read the bmi data from the device: -71
[   69.950277][ T5822] ath6kl: Unable to recv target info: -71
[   69.960782][ T5822] ath6kl: Failed to init ath6kl core: -71
[   69.977741][   T42] kauditd_printk_skb: 17 callbacks suppressed
[   69.977761][   T42] audit: type=1800 audit(1785861007.381:56): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.66" name="ipv4_address" dev="configfs" ino=11598 res=0 errno=0
[   69.977873][ T5822] ath6kl_usb 6-1:1.0: probe with driver ath6kl_usb failed with error -71
[   69.995340][ T5822] usb 6-1: USB disconnect, device number 8
[   70.016256][ T5754] Bluetooth: hci4: command tx timeout
[   70.021447][   T42] audit: type=1800 audit(1785861007.431:57): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.66" name="ipv4_port" dev="configfs" ino=12308 res=0 errno=0
[   70.033335][   T42] audit: type=1800 audit(1785861007.431:58): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.66" name="num" dev="configfs" ino=12309 res=0 errno=0
[   70.042796][   T42] audit: type=1800 audit(1785861007.431:59): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.66" name="local" dev="configfs" ino=12310 res=0 errno=0
[   70.051679][   T42] audit: type=1800 audit(1785861007.461:60): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.66" name="block_bytes" dev="configfs" ino=11600 res=0 errno=0
[   70.059605][   T42] audit: type=1800 audit(1785861007.471:61): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.66" name="blocks" dev="configfs" ino=10962 res=0 errno=0
[   70.064210][ T6144] syz.3.66: attempt to access beyond end of device
[   70.064210][ T6144] loop0: rw=0, sector=1, nr_sectors = 128 limit=128
[   70.069487][   T42] audit: type=1800 audit(1785861007.471:62): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.66" name="start_block" dev="configfs" ino=10963 res=0 errno=0
[   70.072676][ T6144] (syz.3.66,6144,3):o2hb_bio_end_io:499 ERROR: IO Error 10
[   70.080646][   T42] audit: type=1800 audit(1785861007.471:63): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.66" name="dev" dev="configfs" ino=10964 res=0 errno=0
[   70.093039][ T6144] syz.3.66: attempt to access beyond end of device
[   70.093039][ T6144] loop0: rw=0, sector=129, nr_sectors = 127 limit=128
[   70.100345][ T6144] (syz.3.66,6144,3):o2hb_bio_end_io:499 ERROR: IO Error 10
[   70.104770][ T6144] (syz.3.66,6144,2):o2hb_region_dev_store:1850 ERROR: status = -5
[   70.289879][ T1362] lg-g15 0003:046D:C21C.0005: hidraw1: USB HID v0.00 Device [syz0] on syz0
[   70.294947][ T1362] lg-g15 0003:046D:C21C.0005: Error getting macro LED brightness: -5
[   70.300658][ T1362] lg-g15 0003:046D:C21C.0005: probe with driver lg-g15 failed with error -5
[   70.355043][ T6152] jffs2: notice: (6152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   70.387491][ T6150] fido_id[6150]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   70.416260][ T6122] NFSD: Unable to initialize client recovery tracking! (-110)
[   70.420229][ T6122] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   70.423650][ T6122] NFSD: starting 90-second grace period (net f0000781)
[   70.433222][   T42] audit: type=1800 audit(1785861007.841:64): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="idVendor" dev="configfs" ino=9868 res=0 errno=0
[   70.441149][   T42] audit: type=1800 audit(1785861007.841:65): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="idProduct" dev="configfs" ino=9869 res=0 errno=0
[   70.980336][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[   70.983689][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[   71.226270][ T5822] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   71.240670][ T5934] lg-g15 0003:046D:C21C.0006: hidraw1: USB HID v0.00 Device [syz0] on syz0
[   71.251785][ T5934] lg-g15 0003:046D:C21C.0006: Error getting macro LED brightness: -5
[   71.265253][ T5934] lg-g15 0003:046D:C21C.0006: probe with driver lg-g15 failed with error -5
[   71.387517][ T5822] usb 6-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00
[   71.390433][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.404935][ T5822] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
[   71.468304][ T6178] jffs2: notice: (6178) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   71.477865][ T6174] fido_id[6174]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   71.938529][    T9] lg-g15 0003:046D:C21C.0007: hidraw1: USB HID v0.00 Device [syz0] on syz0
[   72.014748][    T9] input: Logitech G13 Gaming Keypad as /devices/virtual/misc/uhid/0003:046D:C21C.0007/input/input17
[   72.039714][    T9] input: Logitech G13 Thumbstick as /devices/virtual/misc/uhid/0003:046D:C21C.0007/input/input18
[   72.096728][ T5754] Bluetooth: hci4: command tx timeout
[   72.325734][ T6203] fido_id[6203]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   72.369148][ T6211] jffs2: notice: (6211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   72.566640][ T5891] lg-g15 0003:046D:C21C.0008: hidraw1: USB HID v0.00 Device [syz0] on syz0
[   72.575614][ T5891] input: Logitech G13 Gaming Keypad as /devices/virtual/misc/uhid/0003:046D:C21C.0008/input/input19
[   72.585732][ T5891] input: Logitech G13 Thumbstick as /devices/virtual/misc/uhid/0003:046D:C21C.0008/input/input20
[   72.708519][ T6225] fido_id[6225]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   73.093971][ T6239] jffs2: notice: (6239) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   73.583603][ T6252] lo speed is unknown, defaulting to 1000
[   73.587840][ T6252] lo speed is unknown, defaulting to 1000
[   73.590394][ T6252] lo speed is unknown, defaulting to 1000
[   73.734399][ T6252] infiniband syz0: set active
[   73.736631][    T9] lo speed is unknown, defaulting to 1000
[   73.736791][ T6252] infiniband syz0: added lo
[   73.751318][ T6252] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   73.758281][ T6252] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   73.764288][ T6252] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   73.790584][ T6252] RDS/IB: syz0: added
[   73.791977][ T6252] smc: adding ib device syz0 with port count 1
[   73.794235][ T6252] smc:    ib device syz0 port 1 has no pnetid
[   73.798417][    T9] lo speed is unknown, defaulting to 1000
[   73.801834][ T6252] lo speed is unknown, defaulting to 1000
[   73.977290][ T6252] lo speed is unknown, defaulting to 1000
[   74.041707][ T6260] syz.2.111: attempt to access beyond end of device
[   74.041707][ T6260] loop0: rw=0, sector=1, nr_sectors = 255 limit=128
[   74.045695][ T6260] (syz.2.111,6260,0):o2hb_bio_end_io:499 ERROR: IO Error 10
[   74.048041][ T6260] (syz.2.111,6260,0):o2hb_region_dev_store:1850 ERROR: status = -5
[   74.122540][ T5822] usb 6-1: USB disconnect, device number 9
[   74.154834][ T6252] lo speed is unknown, defaulting to 1000
[   74.155105][ T5822] pvrusb2: Device being rendered inoperable
[   74.176937][ T5754] Bluetooth: hci4: command tx timeout
[   74.282750][ T6252] lo speed is unknown, defaulting to 1000
[   74.357324][   T41] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   74.372138][ T6252] lo speed is unknown, defaulting to 1000
[   74.527457][   T41] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   74.530506][   T41] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[   74.533518][   T41] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[   74.537617][   T41] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64
[   74.541096][   T41] usb 7-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[   74.544468][   T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.550675][ T6262] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   74.553700][ T6262] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   74.556899][ T6262] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   74.559983][ T6262] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   74.566687][   T41] mos7720 7-1:1.0: Moschip 2 port adapter converter detected
[   74.996982][ T6277] jffs2: notice: (6277) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   75.159676][   T42] kauditd_printk_skb: 62 callbacks suppressed
[   75.159695][   T42] audit: type=1800 audit(1785861012.571:128): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.119" name="idVendor" dev="configfs" ino=9971 res=0 errno=0
[   75.205885][   T42] audit: type=1800 audit(1785861012.611:129): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.119" name="idProduct" dev="configfs" ino=11067 res=0 errno=0
[   75.212240][   T42] audit: type=1800 audit(1785861012.621:130): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.119" name="process_ump" dev="configfs" ino=11068 res=0 errno=0
[   75.225391][   T42] audit: type=1800 audit(1785861012.621:131): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.119" name="ep_name" dev="configfs" ino=11069 res=0 errno=0
[   75.237027][   T42] audit: type=1800 audit(1785861012.621:132): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.119" name="direction" dev="configfs" ino=9972 res=0 errno=0
[   75.245009][   T42] audit: type=1800 audit(1785861012.621:133): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.119" name="name" dev="configfs" ino=9973 res=0 errno=0
[   75.338011][   T24] misc userio: Buffer overflowed, userio client isn't keeping up
[   75.507012][ T5891] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   75.677753][ T5891] usb 6-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00
[   75.680593][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.682988][ T5891] usb 6-1: Product: syz
[   75.684235][ T5891] usb 6-1: Manufacturer: syz
[   75.685714][ T5891] usb 6-1: SerialNumber: syz
[   76.037061][ T5891] usbhid 6-1:1.0: can't add hid device: -71
[   76.039012][ T5891] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[   76.047917][ T5891] usb 6-1: USB disconnect, device number 10
[   76.242813][ T6293] loop1: detected capacity change from 0 to 2048
[   76.247880][   T42] audit: type=1800 audit(1785861013.661:134): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.123" name="idVendor" dev="configfs" ino=9980 res=0 errno=0
[   76.255565][   T42] audit: type=1800 audit(1785861013.661:135): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.123" name="idProduct" dev="configfs" ino=9981 res=0 errno=0
[   76.264742][ T6293] ./loop1: Can't open blockdev
[   76.268564][   T42] audit: type=1800 audit(1785861013.661:136): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.123" name="process_ump" dev="configfs" ino=9982 res=0 errno=0
[   76.282730][   T42] audit: type=1800 audit(1785861013.661:137): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.123" name="ep_name" dev="configfs" ino=9983 res=0 errno=0
[   77.215460][ T6308] nvmet: adding nsid 1 to subsystem subsys1
[   77.305598][ T6314] PM: suspend entry (s2idle)
[   77.307978][ T6314] PM: suspend exit
[   77.966164][   T41] usb 7-1: mos7720: usb_control_msg() failed: -71
[   77.975422][   T41] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB0
[   77.981512][   T41] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB1
[   77.994271][   T41] usb 7-1: USB disconnect, device number 6
[   78.004002][   T41] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[   78.015613][   T41] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[   78.021394][   T41] mos7720 7-1:1.0: device disconnected
[   78.395346][ T6334] netlink: 'syz.2.140': attribute type 5 has an invalid length.
[   78.539497][ T6338] lo: entered allmulticast mode
[   78.546511][ T6337] lo: left allmulticast mode
[   78.716282][   T24] misc userio: Buffer overflowed, userio client isn't keeping up
[   79.116221][   T41] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   79.300737][   T41] usb 9-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00
[   79.305882][   T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.337133][   T41] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
[   79.731885][ T6356] PM: suspend entry (deep)
[   79.734679][ T6356] PM: suspend exit
[   80.136207][ T5934] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[   80.317165][ T5934] usb 6-1: not running at top speed; connect to a high speed hub
[   80.321908][ T5934] usb 6-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice= 1.00
[   80.324773][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.327286][ T5934] usb 6-1: Product: syz
[   80.328573][ T5934] usb 6-1: Manufacturer: syz
[   80.330184][ T5934] usb 6-1: SerialNumber: syz
[   80.337776][ T5934] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c
[   81.224824][   T56] cfg80211: failed to load regulatory.db
[   81.230084][ T5901] Freezing user space processes
[   81.356353][ T6368] NFSD: Unable to initialize client recovery tracking! (-110)
[   81.359349][ T6368] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   81.362896][ T6368] NFSD: starting 10-second grace period (net f00003f7)
[   81.546499][ T5934] gspca_zc3xx: reg_w_i err -110
[   82.086332][   T24] misc userio: Buffer overflowed, userio client isn't keeping up
[   82.296182][ T5934] gspca_zc3xx: Unknown sensor - set to TAS5130C
[   82.298415][ T5934] gspca_zc3xx 6-1:1.0: probe with driver gspca_zc3xx failed with error -110
[   85.458199][   T24] misc userio: Buffer overflowed, userio client isn't keeping up
[   89.656179][   T24] misc userio: Buffer overflowed, userio client isn't keeping up
[   91.984448][   T24] input: PS/2 Generic Mouse as /devices/serio2/input/input22
[   92.196175][   T24] psmouse serio2: Failed to enable mouse on 
[  101.236474][ T5901] Freezing user space processes failed after 20.004 seconds (1 tasks refusing to freeze, wq_busy=0):
[  101.239733][ T5901] task:syz-executor    state:S stack:23624 pid:5744  tgid:5744  ppid:1      task_flags:0x40054c flags:0x08080001
[  101.243578][ T5901] Call Trace:
[  101.244633][ T5901]  <TASK>
[  101.245553][ T5901]  __schedule+0x125c/0x6730
[  101.247172][ T5901]  ? __pfx___schedule+0x10/0x10
[  101.248663][ T5901]  ? find_held_lock+0x2b/0x80
[  101.251246][ T5901]  ? schedule+0x225/0x2c0
[  101.252691][ T5901]  schedule+0xdd/0x2c0
[  101.253956][ T5901]  do_wait+0x1a7/0x570
[  101.255219][ T5901]  kernel_wait4+0x16d/0x280
[  101.256677][ T5901]  ? __pfx_kernel_wait4+0x10/0x10
[  101.258199][ T5901]  ? lockdep_hardirqs_on+0x78/0x100
[  101.259773][ T5901]  ? __pfx_child_wait_callback+0x10/0x10
[  101.261513][ T5901]  ? find_held_lock+0x2b/0x80
[  101.262946][ T5901]  ? zap_pid_ns_processes+0x286/0x6a0
[  101.264545][ T5901]  ? zap_pid_ns_processes+0x286/0x6a0
[  101.266191][ T5901]  zap_pid_ns_processes+0x2ca/0x6a0
[  101.267744][ T5901]  ? do_raw_write_lock+0x11e/0x260
[  101.269230][ T5901]  ? __pfx_zap_pid_ns_processes+0x10/0x10
[  101.270890][ T5901]  ? do_exit+0x2205/0x2ae0
[  101.272395][ T5901]  ? rcu_is_watching+0x12/0xc0
[  101.273852][ T5901]  do_exit+0x2377/0x2ae0
[  101.275138][ T5901]  ? __pfx_do_exit+0x10/0x10
[  101.276575][ T5901]  ? do_raw_spin_lock+0x128/0x260
[  101.278032][ T5901]  ? find_held_lock+0x2b/0x80
[  101.279466][ T5901]  ? get_signal+0x7e0/0x21e0
[  101.280878][ T5901]  do_group_exit+0xd5/0x2a0
[  101.282311][ T5901]  get_signal+0x1ec7/0x21e0
[  101.283724][ T5901]  ? __pfx_get_signal+0x10/0x10
[  101.285171][ T5901]  ? __fput+0x68d/0xb50
[  101.286510][ T5901]  arch_do_signal_or_restart+0x91/0x7a0
[  101.288165][ T5901]  ? __pfx___do_compat_sys_wait4+0x10/0x10
[  101.289874][ T5901]  ? __fput+0x692/0xb50
[  101.291110][ T5901]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  101.292995][ T5901]  exit_to_user_mode_loop+0x139/0x6f0
[  101.294642][ T5901]  ? rcu_is_watching+0x12/0xc0
[  101.296197][ T5901]  do_int80_emulation+0x513/0x720
[  101.298020][ T5901]  asm_int80_emulation+0x1a/0x20
[  101.299538][ T5901] RIP: 0023:0xf71873eb
[  101.301060][ T5901] RSP: 002b:00000000ff94bc2c EFLAGS: 00000246 ORIG_RAX: 0000000000000072
[  101.303647][ T5901] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ff94bdc8
[  101.306046][ T5901] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000
[  101.308505][ T5901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  101.310884][ T5901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  101.313360][ T5901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  101.315734][ T5901]  </TASK>
[  101.317831][ T5901] OOM killer enabled.
[  101.319535][ T5901] Restarting tasks: Starting
[  101.342750][ T5901] Restarting tasks: Done
[  101.375883][ T5901] PM: hibernation: hibernation exit
[  101.525308][   T24] usb 6-1: USB disconnect, device number 11
[  101.716369][   T64] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  101.731416][ T5748] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  101.747363][ T5757] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  101.748043][ T5100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  101.751700][ T5757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  101.756530][ T5100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  101.760410][ T5759] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  101.761159][ T5100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  101.762992][ T5759] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  101.765926][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  101.770236][ T5754] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  101.773371][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  101.779540][ T5759] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  101.782506][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  101.785966][ T5757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  101.867828][   T64] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  101.877270][   T64] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  101.881951][   T64] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  101.892130][   T64] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  101.895806][   T64] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  102.062662][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.161852][ T6378] lo speed is unknown, defaulting to 1000
[  102.242847][ T6378] lo speed is unknown, defaulting to 1000
[  102.242915][ T6388] lo speed is unknown, defaulting to 1000
[  102.267834][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.294175][   T24] usb 9-1: USB disconnect, device number 2
[  102.301838][   T24] pvrusb2: Device being rendered inoperable
[  102.347109][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.412065][ T6381] lo speed is unknown, defaulting to 1000
[  102.415569][ T6388] lo speed is unknown, defaulting to 1000
[  102.449652][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.551155][ T6379] lo speed is unknown, defaulting to 1000
[  102.586454][ T6381] lo speed is unknown, defaulting to 1000
[  102.695884][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.698301][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.700713][ T6378] bridge_slave_0: entered allmulticast mode
[  102.703700][ T6378] bridge_slave_0: entered promiscuous mode
[  102.717338][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.719693][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.722061][ T6378] bridge_slave_1: entered allmulticast mode
[  102.724844][ T6378] bridge_slave_1: entered promiscuous mode
[  102.758931][ T6378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.765886][   T13] bridge_slave_1: left allmulticast mode
[  102.767878][   T13] bridge_slave_1: left promiscuous mode
[  102.771441][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.777110][   T13] bridge_slave_0: left allmulticast mode
[  102.778950][   T13] bridge_slave_0: left promiscuous mode
[  102.780893][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.882246][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.887302][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.891950][   T13] bond0 (unregistering): Released all slaves
[  102.902607][ T6378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.907326][ T6379] lo speed is unknown, defaulting to 1000
[  102.970808][ T6378] team0: Port device team_slave_0 added
[  102.976837][ T6378] team0: Port device team_slave_1 added
[  103.018211][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.020620][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.029644][ T6378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.065589][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.068158][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.076787][ T6378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.223862][ T6378] hsr_slave_0: entered promiscuous mode
[  103.227896][ T6378] hsr_slave_1: entered promiscuous mode
[  103.230871][ T6378] debugfs: 'hsr0' already exists in 'hsr'
[  103.233203][ T6378] Cannot create hsr debugfs directory
[  103.309472][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2
[  103.349319][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.351831][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.354260][ T6388] bridge_slave_0: entered allmulticast mode
[  103.360688][ T6388] bridge_slave_0: entered promiscuous mode
[  103.364694][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.367529][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.370241][ T6388] bridge_slave_1: entered allmulticast mode
[  103.374313][ T6388] bridge_slave_1: entered promiscuous mode
[  103.468149][ T6388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.537634][ T6388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.584766][   T13] hsr_slave_0: left promiscuous mode
[  103.587818][   T13] hsr_slave_1: left promiscuous mode
[  103.590766][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.593882][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.598093][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.600672][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.610715][   T13] veth1_macvtap: left promiscuous mode
[  103.612690][   T13] veth0_macvtap: left promiscuous mode
[  103.614809][   T13] veth1_vlan: left promiscuous mode
[  103.617986][   T13] veth0_vlan: left promiscuous mode
[  103.819207][   T13] team0 (unregistering): Port device team_slave_1 removed
[  103.830431][   T13] team0 (unregistering): Port device team_slave_0 removed
[  103.856446][   T64] Bluetooth: hci6: command tx timeout
[  103.856539][ T5748] Bluetooth: hci5: command tx timeout
[  103.860577][ T5757] Bluetooth: hci2: command tx timeout
[  103.936264][ T5757] Bluetooth: hci7: command tx timeout
[  103.963364][ T6388] team0: Port device team_slave_0 added
[  103.985327][ T6388] team0: Port device team_slave_1 added
[  104.030029][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.032979][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.035769][ T6381] bridge_slave_0: entered allmulticast mode
[  104.043405][ T6381] bridge_slave_0: entered promiscuous mode
[  104.049158][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.051782][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.061559][ T6388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.075690][ T6381] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.078704][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.081193][ T6381] bridge_slave_1: entered allmulticast mode
[  104.084169][ T6381] bridge_slave_1: entered promiscuous mode
[  104.104292][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.106667][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.114354][ T6388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.168818][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3
[  104.175835][ T6381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.180608][ T6381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.210586][ T6388] hsr_slave_0: entered promiscuous mode
[  104.212864][ T6388] hsr_slave_1: entered promiscuous mode
[  104.215310][ T6388] debugfs: 'hsr0' already exists in 'hsr'
[  104.217647][ T6388] Cannot create hsr debugfs directory
[  104.240923][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.243311][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.245679][ T6379] bridge_slave_0: entered allmulticast mode
[  104.248808][ T6379] bridge_slave_0: entered promiscuous mode
[  104.281080][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.284322][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.287464][ T6379] bridge_slave_1: entered allmulticast mode
[  104.291368][ T6379] bridge_slave_1: entered promiscuous mode
[  104.307430][ T6381] team0: Port device team_slave_0 added
[  104.309732][ T6378] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  104.315786][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  104.340531][ T6381] team0: Port device team_slave_1 added
[  104.364644][ T6381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.367105][ T6381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.375767][ T6381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.380354][ T6378] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  104.385098][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  104.401989][ T6379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.409771][ T6379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.424224][ T6381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.427067][ T6381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.437370][ T6381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.445786][ T6378] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  104.451920][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  104.457623][ T6378] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  104.464893][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  104.492070][ T6379] team0: Port device team_slave_0 added
[  104.514960][ T6379] team0: Port device team_slave_1 added
[  104.577109][ T6381] hsr_slave_0: entered promiscuous mode
[  104.579588][ T6381] hsr_slave_1: entered promiscuous mode
[  104.581667][ T6381] debugfs: 'hsr0' already exists in 'hsr'
[  104.583397][ T6381] Cannot create hsr debugfs directory
[  104.586809][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.589709][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.597624][ T6379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.615216][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4
[  104.630070][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.632251][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.640266][ T6379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.660971][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.719800][ T6379] hsr_slave_0: entered promiscuous mode
[  104.722824][ T6379] hsr_slave_1: entered promiscuous mode
[  104.725073][ T6379] debugfs: 'hsr0' already exists in 'hsr'
[  104.727906][ T6379] Cannot create hsr debugfs directory
[  104.753583][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.870852][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.883732][ T6388] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  104.890618][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  104.893909][ T6388] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  104.899921][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  104.903186][ T6388] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  104.908779][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  104.913688][ T6388] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  104.918275][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  104.925397][ T5455] 8021q: adding VLAN 0 to HW filter on device eth5
[  104.991963][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.067917][ T6381] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  105.072649][ T6381] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  105.075313][ T6381] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  105.080063][ T6381] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  105.090361][ T6381] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  105.094859][ T6381] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  105.099318][ T6381] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  105.103204][ T6381] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  105.130964][ T6378] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.214024][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.235736][ T6378] 8021q: adding VLAN 0 to HW filter on device team0
[  105.240391][ T6379] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  105.244446][ T6379] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  105.253387][ T6379] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.259574][ T6379] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  105.263317][ T6379] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  105.269407][ T6379] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  105.272177][ T6379] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  105.275797][ T6379] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  105.289405][ T6388] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.293422][  T228] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.295634][  T228] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.311454][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.329677][  T228] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.331914][  T228] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.371068][ T6388] 8021q: adding VLAN 0 to HW filter on device team0
[  105.395319][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.418661][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.420880][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.445940][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.448830][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.473951][ T6381] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.525001][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.553067][ T5455] 8021q: adding VLAN 0 to HW filter on device eth6
[  105.561739][ T6381] 8021q: adding VLAN 0 to HW filter on device team0
[  105.584432][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.586661][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.591087][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.593236][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.603201][ T6379] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.683814][ T6379] 8021q: adding VLAN 0 to HW filter on device team0
[  105.715406][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.718178][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.752719][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.754987][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.782775][ T5455] 8021q: adding VLAN 0 to HW filter on device eth7
[  105.829690][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.936244][ T5757] Bluetooth: hci5: command tx timeout
[  105.938820][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.946383][ T5757] Bluetooth: hci2: command tx timeout
[  105.949393][ T5748] Bluetooth: hci6: command tx timeout
[  105.954943][ T6378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.970508][ T6388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.026317][ T5757] Bluetooth: hci7: command tx timeout
[  106.043401][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.093227][ T5455] 8021q: adding VLAN 0 to HW filter on device eth8
[  106.132643][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.202441][ T6381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.301700][ T6388] veth0_vlan: entered promiscuous mode
[  106.314099][ T6379] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.345182][ T6388] veth1_vlan: entered promiscuous mode
[  106.357584][   T13] bridge_slave_1: left allmulticast mode
[  106.359668][   T13] bridge_slave_1: left promiscuous mode
[  106.361660][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.365551][   T13] bridge_slave_0: left allmulticast mode
[  106.369383][   T13] bridge_slave_0: left promiscuous mode
[  106.371425][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.384859][   T13] bridge_slave_1: left allmulticast mode
[  106.390089][   T13] bridge_slave_1: left promiscuous mode
[  106.392699][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.403450][   T13] bridge_slave_0: left allmulticast mode
[  106.406030][   T13] bridge_slave_0: left promiscuous mode
[  106.413432][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.425699][   T13] bridge_slave_1: left allmulticast mode
[  106.427596][   T13] bridge_slave_1: left promiscuous mode
[  106.429285][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.433774][   T13] bridge_slave_0: left allmulticast mode
[  106.435443][   T13] bridge_slave_0: left promiscuous mode
[  106.437874][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.596454][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.600963][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.607553][   T13] bond0 (unregistering): Released all slaves
[  106.683112][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.688101][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.692088][   T13] bond0 (unregistering): Released all slaves
[  106.760567][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.764845][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.768956][   T13] bond0 (unregistering): Released all slaves
[  106.773611][ T6378] veth0_vlan: entered promiscuous mode
[  106.779729][ T5455] 8021q: adding VLAN 0 to HW filter on device eth9
[  106.801875][ T6378] veth1_vlan: entered promiscuous mode
[  106.854974][ T6381] veth0_vlan: entered promiscuous mode
[  106.906766][ T6388] veth0_macvtap: entered promiscuous mode
[  106.917682][ T6381] veth1_vlan: entered promiscuous mode
[  106.932790][ T6388] veth1_macvtap: entered promiscuous mode
[  106.971228][ T6378] veth0_macvtap: entered promiscuous mode
[  106.981295][ T6378] veth1_macvtap: entered promiscuous mode
[  107.004844][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.014131][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.021526][ T6381] veth0_macvtap: entered promiscuous mode
[  107.041876][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.061383][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.100524][ T6381] veth1_macvtap: entered promiscuous mode
[  107.110796][ T6379] veth0_vlan: entered promiscuous mode
[  107.114113][ T5455] 8021q: adding VLAN 0 to HW filter on device eth10
[  107.156976][ T6609] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.201642][ T6379] veth1_vlan: entered promiscuous mode
[  107.217305][ T5593] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.222222][ T6381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.237036][ T6609] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.269762][ T6381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.291964][  T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.294869][  T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.322065][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.325958][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.394409][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.397777][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.401489][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.402161][ T6379] veth0_macvtap: entered promiscuous mode
[  107.404190][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.439148][ T6379] veth1_macvtap: entered promiscuous mode
[  107.476304][ T6609] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.505414][  T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.518563][  T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.558016][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.573990][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.577247][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.583197][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.646272][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.655080][ T5455] 8021q: adding VLAN 0 to HW filter on device eth11
[  107.728894][ T5821] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.732441][ T5821] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.788201][ T6609] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.832684][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.837966][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.852493][   T42] kauditd_printk_skb: 25 callbacks suppressed
[  107.852511][   T42] audit: type=1800 audit(1785861045.261:163): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.159" name="idProduct" dev="configfs" ino=16625 res=0 errno=0
[  107.865069][   T42] audit: type=1800 audit(1785861045.261:164): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.159" name="process_ump" dev="configfs" ino=16626 res=0 errno=0
[  107.873584][   T42] audit: type=1800 audit(1785861045.261:165): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.159" name="ep_name" dev="configfs" ino=16627 res=0 errno=0
[  107.891740][   T42] audit: type=1800 audit(1785861045.261:166): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.159" name="direction" dev="configfs" ino=16628 res=0 errno=0
[  107.907432][   T42] audit: type=1800 audit(1785861045.261:167): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.159" name="name" dev="configfs" ino=16629 res=0 errno=0
[  107.925402][   T42] audit: type=1800 audit(1785861045.331:168): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.160" name="idVendor" dev="configfs" ino=15548 res=0 errno=0
[  107.935081][ T5821] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.944467][   T42] audit: type=1800 audit(1785861045.331:169): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.160" name="idProduct" dev="configfs" ino=15549 res=0 errno=0
[  107.946178][ T5821] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.961036][   T42] audit: type=1800 audit(1785861045.341:170): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.160" name="process_ump" dev="configfs" ino=15550 res=0 errno=0
[  107.971615][   T42] audit: type=1800 audit(1785861045.341:171): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.160" name="ep_name" dev="configfs" ino=15551 res=0 errno=0
[  107.980554][   T42] audit: type=1800 audit(1785861045.341:172): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.160" name="name" dev="configfs" ino=15552 res=0 errno=0
[  107.994124][  T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.000360][  T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.016333][ T5757] Bluetooth: hci2: command tx timeout
[  108.018705][ T5748] Bluetooth: hci6: command tx timeout
[  108.018753][   T64] Bluetooth: hci5: command tx timeout
[  108.068469][ T6609] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.074425][ T5455] 8021q: adding VLAN 0 to HW filter on device eth12
[  108.097075][   T64] Bluetooth: hci7: command tx timeout
[  108.116388][ T6609] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.124766][ T6609] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.134649][ T6609] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.152794][ T6609] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.169335][ T6609] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.312835][ T5455] 8021q: adding VLAN 0 to HW filter on device eth13
[  108.559769][ T5455] 8021q: adding VLAN 0 to HW filter on device eth14
[  108.684597][   T13] hsr_slave_0: left promiscuous mode
[  108.699752][   T13] hsr_slave_1: left promiscuous mode
[  108.704074][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.712279][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.724100][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.731963][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.761346][   T13] hsr_slave_0: left promiscuous mode
[  108.764485][   T13] hsr_slave_1: left promiscuous mode
[  108.767852][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.770971][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.774814][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.777985][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.790895][   T13] hsr_slave_0: left promiscuous mode
[  108.793970][   T13] hsr_slave_1: left promiscuous mode
[  108.797318][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.800449][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.804095][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.807788][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.839537][   T13] veth1_macvtap: left promiscuous mode
[  108.842008][   T13] veth0_macvtap: left promiscuous mode
[  108.844563][   T13] veth1_vlan: left promiscuous mode
[  108.847139][   T13] veth0_vlan: left promiscuous mode
[  108.850586][   T13] veth1_macvtap: left promiscuous mode
[  108.853155][   T13] veth0_macvtap: left promiscuous mode
[  108.856390][   T13] veth1_vlan: left promiscuous mode
[  108.858562][   T13] veth0_vlan: left promiscuous mode
[  108.863866][   T13] veth1_macvtap: left promiscuous mode
[  108.866590][   T13] veth0_macvtap: left promiscuous mode
[  108.869019][   T13] veth1_vlan: left promiscuous mode
[  108.871182][   T13] veth0_vlan: left promiscuous mode
[  108.966638][   T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  109.119926][   T10] usb 10-1: config index 0 descriptor too short (expected 62, got 18)
[  109.122667][   T10] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  109.128684][   T10] usb 10-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  109.131719][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.134907][   T10] usb 10-1: Product: syz
[  109.136595][   T10] usb 10-1: Manufacturer: syz
[  109.138117][   T10] usb 10-1: SerialNumber: syz
[  109.145393][   T10] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  109.150440][   T10] gspca_mr97310a: reg write [21] error -22
[  109.152389][   T10] mr97310a 10-1:1.0: probe with driver mr97310a failed with error -22
[  109.278448][   T13] team0 (unregistering): Port device team_slave_1 removed
[  109.295086][   T13] team0 (unregistering): Port device team_slave_0 removed
[  109.432340][ T1060] smc: removing ib device syz0
[  109.500585][ T1060] smbdirect: ib_dev[syz0] removed
[  109.737889][   T13] team0 (unregistering): Port device team_slave_1 removed
[  109.755709][   T13] team0 (unregistering): Port device team_slave_0 removed
[  110.096231][   T64] Bluetooth: hci6: command tx timeout
[  110.098096][ T5748] Bluetooth: hci2: command tx timeout
[  110.098567][   T64] Bluetooth: hci5: command tx timeout
[  110.354604][ T5850] usb 10-1: USB disconnect, device number 2
[  110.478597][   T13] team0 (unregistering): Port device team_slave_1 removed
[  110.525670][   T13] team0 (unregistering): Port device team_slave_0 removed
[  110.816430][ T6699] NFSD: Failed to start, no listeners configured.
[  110.829955][   T36] smc: removing ib device syz1
[  110.843508][ T5455] 8021q: adding VLAN 0 to HW filter on device eth15
[  110.848142][ T5822] lo speed is unknown, defaulting to 1000
[  110.852566][ T5891] lo speed is unknown, defaulting to 1000
[  110.853772][   T36] smbdirect: ib_dev[syz1] removed
[  110.855401][ T5822] syz0: Port: 1 Link DOWN
[  110.855756][ T6680] lo: entered allmulticast mode
[  110.855950][ T6680] lo: left allmulticast mode
[  110.865908][ T5891] syz1: Port: 1 Link DOWN
[  111.260804][ T5455] 8021q: adding VLAN 0 to HW filter on device eth16
[  111.515606][ T5455] 8021q: adding VLAN 0 to HW filter on device eth17
[  111.656225][ T6706] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  111.820278][ T6706] usb 11-1: New USB device found, idVendor=2040, idProduct=b120, bcdDevice= 0.00
[  111.825304][ T6741] lo speed is unknown, defaulting to 1000
[  111.828030][ T6706] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.879664][ T6741] lo speed is unknown, defaulting to 1000
[  111.891929][ T6706] cx231xx 11-1:1.1: New device   @ 480 Mbps (2040:b120) with 2 interfaces
[  111.916793][ T6741] lo speed is unknown, defaulting to 1000
[  111.920208][ T6741] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  111.925196][ T6741] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  111.932396][ T6741] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  111.940373][ T6741] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  111.955697][ T6741] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  111.969291][ T6741] lo speed is unknown, defaulting to 1000
[  111.975824][ T6741] lo speed is unknown, defaulting to 1000
[  111.980551][ T6741] lo speed is unknown, defaulting to 1000
[  111.985130][ T6741] lo speed is unknown, defaulting to 1000
[  111.989549][ T6741] lo speed is unknown, defaulting to 1000
[  111.994003][ T6741] lo speed is unknown, defaulting to 1000
[  112.017852][ T6706] cx231xx 11-1:1.1: Failed to read PCB config
[  112.020675][ T6706] cx231xx 11-1:1.1: probe with driver cx231xx failed with error -110
[  112.107037][   T50] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  112.312401][   T24] lg-g15 0003:046D:C21C.0009: item fetching failed at offset 26/27
[  112.315905][   T24] lg-g15 0003:046D:C21C.0009: probe with driver lg-g15 failed with error -22
[  113.278666][   T50] usb 10-1: unable to read config index 0 descriptor/start: -71
[  113.281251][   T50] usb 10-1: can't read configurations, error -71
[  113.384216][   T42] kauditd_printk_skb: 42 callbacks suppressed
[  113.384230][   T42] audit: type=1800 audit(1785861050.791:215): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.196" name="idVendor" dev="configfs" ino=15359 res=0 errno=0
[  113.393041][   T42] audit: type=1800 audit(1785861050.801:216): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.196" name="idProduct" dev="configfs" ino=14266 res=0 errno=0
[  113.399095][   T42] audit: type=1800 audit(1785861050.801:217): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.196" name="process_ump" dev="configfs" ino=14267 res=0 errno=0
[  113.405041][   T42] audit: type=1800 audit(1785861050.801:218): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.196" name="ep_name" dev="configfs" ino=14268 res=0 errno=0
[  113.411584][   T42] audit: type=1800 audit(1785861050.801:219): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.196" name="name" dev="configfs" ino=14269 res=0 errno=0
[  113.419324][   T42] audit: type=1800 audit(1785861050.801:220): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.196" name="active" dev="configfs" ino=14270 res=0 errno=0
[  113.516192][ T5850] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  113.669295][ T5850] usb 12-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice= 0.00
[  113.672576][ T5850] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.675086][ T5850] usb 12-1: Product: syz
[  113.676726][ T5850] usb 12-1: Manufacturer: syz
[  113.678396][ T5850] usb 12-1: SerialNumber: syz
[  113.685697][ T5850] r8152-cfgselector 12-1: Unknown version 0x0000
[  113.832321][   T42] audit: type=1800 audit(1785861051.241:221): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.197" name="direction" dev="configfs" ino=17411 res=0 errno=0
[  113.878538][   T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:200'
[  113.881631][   T64] CPU: 3 UID: 0 PID: 64 Comm: kworker/u34:0 Not tainted syzkaller #0 PREEMPT(full) 
[  113.881648][   T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  113.881656][   T64] Workqueue: hci6 hci_rx_work
[  113.881679][   T64] Call Trace:
[  113.881684][   T64]  <TASK>
[  113.881689][   T64]  dump_stack_lvl+0x100/0x190
[  113.881706][   T64]  sysfs_warn_dup.cold+0x1c/0x28
[  113.881741][   T64]  sysfs_create_dir_ns+0x24b/0x2b0
[  113.881761][   T64]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  113.881777][   T64]  ? find_held_lock+0x2b/0x80
[  113.881791][   T64]  ? kobject_add_internal+0x25f/0x930
[  113.881804][   T64]  ? kobject_add_internal+0x25f/0x930
[  113.881816][   T64]  ? do_raw_spin_unlock+0x145/0x1e0
[  113.881830][   T64]  kobject_add_internal+0x2c8/0x930
[  113.881843][   T64]  kobject_add+0x16a/0x1e0
[  113.881854][   T64]  ? __pfx_kobject_add+0x10/0x10
[  113.881864][   T64]  ? class_to_subsys+0x10f/0x150
[  113.881881][   T64]  ? kobject_put+0xb9/0x640
[  113.881897][   T64]  ? _raw_spin_unlock+0x28/0x50
[  113.881913][   T64]  device_add+0x294/0x1970
[  113.881925][   T64]  ? __pfx_dev_set_name+0x10/0x10
[  113.881938][   T64]  ? __pfx_device_add+0x10/0x10
[  113.881949][   T64]  ? mgmt_send_event_skb+0x2fb/0x460
[  113.881967][   T64]  hci_conn_add_sysfs+0x1a3/0x260
[  113.881985][   T64]  le_conn_complete_evt+0x11eb/0x1f60
[  113.882017][   T64]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  113.882031][   T64]  ? hci_event_packet+0x186/0xcd0
[  113.882047][   T64]  hci_le_conn_complete_evt+0x23c/0x3a0
[  113.882062][   T64]  ? skb_pull_data+0x15f/0x1e0
[  113.882076][   T64]  hci_le_meta_evt+0x34a/0x5f0
[  113.882092][   T64]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  113.882109][   T64]  hci_event_packet+0x51c/0xcd0
[  113.882124][   T64]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  113.882140][   T64]  ? __pfx_hci_event_packet+0x10/0x10
[  113.882157][   T64]  ? kcov_remote_start+0x384/0x670
[  113.882173][   T64]  ? lockdep_hardirqs_on+0x78/0x100
[  113.882193][   T64]  hci_rx_work+0x451/0xfc0
[  113.882209][   T64]  process_one_work+0xa23/0x1940
[  113.882231][   T64]  ? __pfx_process_one_work+0x10/0x10
[  113.882252][   T64]  ? __pfx_hci_rx_work+0x10/0x10
[  113.882266][   T64]  worker_thread+0x5ef/0xe50
[  113.882287][   T64]  ? kthread+0x13a/0x450
[  113.882300][   T64]  ? __pfx_worker_thread+0x10/0x10
[  113.882315][   T64]  kthread+0x370/0x450
[  113.882329][   T64]  ? __pfx_kthread+0x10/0x10
[  113.882345][   T64]  ret_from_fork+0x72b/0xd50
[  113.882360][   T64]  ? __pfx_ret_from_fork+0x10/0x10
[  113.882374][   T64]  ? __switch_to+0x800/0x10f0
[  113.882391][   T64]  ? __pfx_kthread+0x10/0x10
[  113.882406][   T64]  ret_from_fork_asm+0x1a/0x30
[  113.882428][   T64]  </TASK>
[  113.882505][   T64] kobject: kobject_add_internal failed for hci6:200 with -EEXIST, don't try to register things with the same name in the same directory.
[  113.972968][   T64] Bluetooth: hci6: failed to register connection device
[  114.008340][ T6792] netlink: 'syz.8.199': attribute type 5 has an invalid length.
[  114.097972][ T5850] r8152-cfgselector 12-1: reset high-speed USB device number 2 using dummy_hcd
[  114.236223][ T5850] r8152-cfgselector 12-1: device descriptor read/64, error -71
[  114.452450][ T6060] usb 11-1: USB disconnect, device number 2
[  114.488118][ T5850] r8152-cfgselector 12-1: reset high-speed USB device number 2 using dummy_hcd
[  114.490159][   T50] lg-g15 0003:046D:C21C.000A: item fetching failed at offset 26/27
[  114.495343][   T50] lg-g15 0003:046D:C21C.000A: probe with driver lg-g15 failed with error -22
[  115.408306][   T42] audit: type=1800 audit(1785861052.821:222): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.204" name="idVendor" dev="configfs" ino=17422 res=0 errno=0
[  115.416275][   T42] audit: type=1800 audit(1785861052.821:223): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.204" name="idProduct" dev="configfs" ino=17423 res=0 errno=0
[  115.424010][   T42] audit: type=1800 audit(1785861052.821:224): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.204" name="process_ump" dev="configfs" ino=17424 res=0 errno=0
[  115.556195][   T10] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  116.017024][ T5757] Bluetooth: hci6: command 0x2016 tx timeout
[  116.346251][ T5850] r8152-cfgselector 12-1: device descriptor read/64, error -71
[  116.522023][ T5112] lg-g15 0003:046D:C21C.000B: item fetching failed at offset 26/27
[  116.525920][ T5112] lg-g15 0003:046D:C21C.000B: probe with driver lg-g15 failed with error -22
[  116.586239][ T5850] r8152-cfgselector 12-1: reset high-speed USB device number 2 using dummy_hcd
[  116.607056][ T5850] r8152-cfgselector 12-1: device descriptor read/8, error -71
[  116.717714][   T10] usb 10-1: unable to read config index 0 descriptor/start: -71
[  116.720191][   T10] usb 10-1: can't read configurations, error -71
[  116.846291][ T5850] r8152-cfgselector 12-1: reset high-speed USB device number 2 using dummy_hcd
[  116.868175][ T5850] r8152-cfgselector 12-1: device descriptor read/8, error -71
[  116.981620][ T5850] r8152 12-1:1.0: USB reset failed, errno=-19
[  116.988566][ T5850] r8152-cfgselector 12-1: USB disconnect, device number 2
[  117.040593][ T6834] loop1: detected capacity change from 0 to 8
[  117.126242][ T5850] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  117.266148][ T5850] usb 12-1: device descriptor read/64, error -71
[  117.275980][ T6853] PM: suspend entry (deep)
[  117.304222][   T13] Filesystems sync: 0.024 seconds
[  117.516197][ T5850] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  117.658079][ T5850] usb 12-1: device descriptor read/64, error -71
[  117.776599][ T5850] usb usb12-port1: attempt power cycle
[  117.970255][ T6887] netlink: 108 bytes leftover after parsing attributes in process `syz.6.225'.
[  118.019818][ T5837] lg-g15 0003:046D:C21C.000C: unbalanced collection at end of report description
[  118.023595][ T5837] lg-g15 0003:046D:C21C.000C: probe with driver lg-g15 failed with error -22
[  118.099525][ T5757] Bluetooth: hci6: command 0x2016 tx timeout
[  118.103253][ T6853] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  118.104644][ T6853] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  118.113205][ T6853] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  118.117543][ T6853] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  118.120357][ T6853] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  118.124886][ T6853] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  118.131535][ T6853] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  118.135273][ T6853] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  118.136209][ T5850] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  118.139911][ T6853] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  118.144842][ T6853] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  118.149981][ T6853] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  118.152697][ T6853] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  118.158252][ T6853] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  118.167229][ T5850] usb 12-1: device descriptor read/8, error -71
[  118.226229][   T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  118.388007][   T24] usb 10-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00
[  118.391456][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.400493][   T24] i2c-tiny-usb 10-1:1.0: version 0.00 found at bus 010 address 007
[  118.426316][ T5850] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  118.456852][ T5850] usb 12-1: device descriptor read/8, error -71
[  118.568516][ T5850] usb usb12-port1: unable to enumerate USB device
[  118.606841][   T24]  (null): failure reading functionality
[  118.613123][   T24] i2c i2c-2: failure reading functionality
[  118.618780][   T24] i2c i2c-2: connected i2c-tiny-usb device
[  119.083599][   T42] kauditd_printk_skb: 24 callbacks suppressed
[  119.083613][   T42] audit: type=1800 audit(1785861056.491:249): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.229" name="idVendor" dev="configfs" ino=14335 res=0 errno=0
[  119.092103][   T42] audit: type=1800 audit(1785861056.491:250): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.229" name="idProduct" dev="configfs" ino=14336 res=0 errno=0
[  119.100261][   T42] audit: type=1800 audit(1785861056.491:251): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.229" name="process_ump" dev="configfs" ino=18433 res=0 errno=0
[  119.108404][   T42] audit: type=1800 audit(1785861056.491:252): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.229" name="ep_name" dev="configfs" ino=18434 res=0 errno=0
[  119.114753][   T42] audit: type=1800 audit(1785861056.491:253): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.229" name="direction" dev="configfs" ino=18435 res=0 errno=0
[  119.122226][   T42] audit: type=1800 audit(1785861056.491:254): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.229" name="name" dev="configfs" ino=18436 res=0 errno=0
[  119.144827][   T42] audit: type=1800 audit(1785861056.551:255): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.230" name="idVendor" dev="configfs" ino=15750 res=0 errno=0
[  119.154311][   T42] audit: type=1800 audit(1785861056.551:256): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.230" name="idProduct" dev="configfs" ino=15751 res=0 errno=0
[  119.161994][   T42] audit: type=1800 audit(1785861056.561:257): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.230" name="process_ump" dev="configfs" ino=16823 res=0 errno=0
[  119.169992][   T42] audit: type=1800 audit(1785861056.561:258): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.230" name="ep_name" dev="configfs" ino=16824 res=0 errno=0
[  119.376284][   T64] Bluetooth: hci5: command 0x0c1a tx timeout
[  119.976212][   T34] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  120.129806][   T34] usb 12-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 1.00
[  120.133559][   T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.136944][   T34] usb 12-1: Product: G
[  120.138660][   T34] usb 12-1: SerialNumber: syz
[  120.176179][   T64] Bluetooth: hci7: command 0x0c1a tx timeout
[  120.176395][ T5757] Bluetooth: hci2: command 0x0c1a tx timeout
[  120.176427][ T5748] Bluetooth: hci6: command 0x2016 tx timeout
[  120.450959][   T34] usb 12-1: selecting invalid altsetting 1
[  120.453084][   T34] LME2510(C): Firmware Status: 00 00 00 00 00 00
[  120.453138][   T34] dvb_usb_lmedm04 12-1:1.0: probe with driver dvb_usb_lmedm04 failed with error -22
[  120.461097][   T34] usb 12-1: USB disconnect, device number 7
[  120.993543][ T6508] usb 10-1: USB disconnect, device number 7
[  121.040386][ T6923] netlink: 'syz.5.234': attribute type 5 has an invalid length.
[  121.466322][ T5757] Bluetooth: hci5: command 0x0c1a tx timeout
[  121.766175][   T56] psmouse serio4: Failed to reset mouse on : -5
[  121.910786][ T5112] lg-g15 0003:046D:C21C.000D: unbalanced collection at end of report description
[  121.915300][ T5112] lg-g15 0003:046D:C21C.000D: probe with driver lg-g15 failed with error -22
[  122.256277][ T5757] Bluetooth: hci6: command 0x2016 tx timeout
[  122.268722][ T5757] Bluetooth: hci2: command 0x0c1a tx timeout
[  122.268767][   T64] Bluetooth: hci7: command 0x0c1a tx timeout
[  122.782661][ T6972] lo speed is unknown, defaulting to 1000
[  123.546427][   T64] Bluetooth: hci5: command 0x0c1a tx timeout
[  123.868023][ T7013] 
[  123.868840][ T7013] ======================================================
[  123.870991][ T7013] WARNING: possible circular locking dependency detected
[  123.873087][ T7013] syzkaller #0 Not tainted
[  123.874619][ T7013] ------------------------------------------------------
[  123.876804][ T7013] syz.5.242/7013 is trying to acquire lock:
[  123.878644][ T7013] ffff88801e422280 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0
[  123.882180][ T7013] 
[  123.882180][ T7013] but task is already holding lock:
[  123.884437][ T7013] ffff88802af6b118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620
[  123.887154][ T7013] 
[  123.887154][ T7013] which lock already depends on the new lock.
[  123.887154][ T7013] 
[  123.890331][ T7013] 
[  123.890331][ T7013] the existing dependency chain (in reverse order) is:
SYZFAIL: failed to recv rpc
[  123.893350][ T7013] 
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  123.893350][ T7013] -> #2 (&opts->dep_lock){+.+.}-{4:4}:
[  123.895870][ T7013]        lock_acquire+0x1b9/0x370
[  123.897462][ T7013]        __mutex_lock+0x1a4/0x1bd0
[  123.899041][ T7013]        tcm_set_name+0x29/0xb0
[  123.900518][ T7013]        function_make+0x21c/0x3f0
[  123.902118][ T7013]        configfs_mkdir+0x51e/0xb70
[  123.903752][ T7013]        vfs_mkdir+0x361/0x850
[  123.905324][ T7013]        filename_mkdirat+0x48b/0x5e0
[  123.906937][ T7013]        __ia32_sys_mkdirat+0x88/0xc0
[  123.908584][ T7013]        __do_fast_syscall_32+0xe7/0x970
[  123.910334][ T7013]        do_fast_syscall_32+0x32/0x70
[  123.912026][ T7013]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  123.914162][ T7013] 
[  123.914162][ T7013] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[  123.916764][ T7013]        lock_acquire+0x1b9/0x370
[  123.918359][ T7013]        __mutex_lock+0x1a4/0x1bd0
[  123.920002][ T7013]        uvcg_streaming_header_allow_link+0x7c/0x650
[  123.922170][ T7013]        configfs_symlink+0x540/0x11f0
[  123.923816][ T7013]        vfs_symlink+0x178/0x4d0
[  123.925346][ T7013]        filename_symlinkat+0x2a6/0x560
[  123.927056][ T7013]        __ia32_sys_symlinkat+0x9b/0xe0
[  123.928798][ T7013]        __do_fast_syscall_32+0xe7/0x970
[  123.930546][ T7013]        do_fast_syscall_32+0x32/0x70
[  123.932227][ T7013]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  123.934340][ T7013] 
[  123.934340][ T7013] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}:
[  123.937098][ T7013]        check_prev_add+0xeb/0xe60
[  123.938688][ T7013]        __lock_acquire+0x136c/0x1a40
[  123.940334][ T7013]        lock_acquire+0x1b9/0x370
[  123.941828][ T7013]        down_write+0x8b/0x1f0
[  123.943297][ T7013]        configfs_depend_item_unlocked+0xf3/0x6a0
[  123.945276][ T7013]        usbg_make_tpg+0x261/0x620
[  123.946880][ T7013]        target_fabric_make_tpg+0xab/0x8c0
[  123.948715][ T7013]        configfs_mkdir+0x51e/0xb70
[  123.950338][ T7013]        vfs_mkdir+0x361/0x850
[  123.951849][ T7013]        filename_mkdirat+0x48b/0x5e0
[  123.953524][ T7013]        __ia32_sys_mkdirat+0x88/0xc0
[  123.955173][ T7013]        __do_fast_syscall_32+0xe7/0x970
[  123.956870][ T7013]        do_fast_syscall_32+0x32/0x70
[  123.958502][ T7013]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  123.960610][ T7013] 
[  123.960610][ T7013] other info that might help us debug this:
[  123.960610][ T7013] 
[  123.963758][ T7013] Chain exists of:
[  123.963758][ T7013]   &sb->s_type->i_mutex_key#24 --> gadget_subsys.su_mutex --> &opts->dep_lock
[  123.963758][ T7013] 
[  123.968263][ T7013]  Possible unsafe locking scenario:
[  123.968263][ T7013] 
[  123.970557][ T7013]        CPU0                    CPU1
[  123.972147][ T7013]        ----                    ----
[  123.973748][ T7013]   lock(&opts->dep_lock);
[  123.975199][ T7013]                                lock(gadget_subsys.su_mutex);
[  123.977535][ T7013]                                lock(&opts->dep_lock);
[  123.979688][ T7013]   lock(&sb->s_type->i_mutex_key#24);
[  123.981411][ T7013] 
[  123.981411][ T7013]  *** DEADLOCK ***
[  123.981411][ T7013] 
[  123.983897][ T7013] 5 locks held by syz.5.242/7013:
[  123.985437][ T7013]  #0: ffff888022032450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400
[  123.988300][ T7013]  #1: ffff888012ceba40 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400
[  123.991653][ T7013]  #2: ffffffff8fd8a928 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70
[  123.994650][ T7013]  #3: ffffffff90255c40 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620
[  123.997657][ T7013]  #4: ffff88802af6b118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620
[  124.000446][ T7013] 
[  124.000446][ T7013] stack backtrace:
[  124.002194][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: syz.5.242 Not tainted syzkaller #0 PREEMPT(full) 
[  124.002210][ T7013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  124.002218][ T7013] Call Trace:
[  124.002223][ T7013]  <TASK>
[  124.002229][ T7013]  dump_stack_lvl+0x100/0x190
[  124.002244][ T7013]  print_circular_bug.cold+0x178/0x1c7
[  124.002262][ T7013]  check_noncircular+0x146/0x160
[  124.002284][ T7013]  check_prev_add+0xeb/0xe60
[  124.002302][ T7013]  __lock_acquire+0x136c/0x1a40
[  124.002323][ T7013]  ? rcu_is_watching+0x12/0xc0
[  124.002338][ T7013]  lock_acquire+0x1b9/0x370
[  124.002354][ T7013]  ? configfs_depend_item_unlocked+0xf3/0x6a0
[  124.002368][ T7013]  ? __pfx___might_resched+0x10/0x10
[  124.002386][ T7013]  down_write+0x8b/0x1f0
[  124.002402][ T7013]  ? configfs_depend_item_unlocked+0xf3/0x6a0
[  124.002415][ T7013]  ? __pfx_down_write+0x10/0x10
[  124.002431][ T7013]  configfs_depend_item_unlocked+0xf3/0x6a0
[  124.002443][ T7013]  ? __lock_acquire+0x49f/0x1a40
[  124.002459][ T7013]  usbg_make_tpg+0x261/0x620
[  124.002474][ T7013]  ? __pfx_usbg_make_tpg+0x10/0x10
[  124.002488][ T7013]  ? find_held_lock+0x2b/0x80
[  124.002500][ T7013]  ? __pfx_usbg_make_tpg+0x10/0x10
[  124.002514][ T7013]  target_fabric_make_tpg+0xab/0x8c0
[  124.002533][ T7013]  configfs_mkdir+0x51e/0xb70
[  124.002546][ T7013]  ? __pfx_target_fabric_make_tpg+0x10/0x10
[  124.002562][ T7013]  ? __pfx_configfs_mkdir+0x10/0x10
[  124.002577][ T7013]  vfs_mkdir+0x361/0x850
[  124.002592][ T7013]  filename_mkdirat+0x48b/0x5e0
[  124.002605][ T7013]  ? __pfx_filename_mkdirat+0x10/0x10
[  124.002617][ T7013]  ? strncpy_from_user+0x19d/0x2d0
[  124.002636][ T7013]  ? do_getname+0x191/0x390
[  124.002649][ T7013]  __ia32_sys_mkdirat+0x88/0xc0
[  124.002661][ T7013]  __do_fast_syscall_32+0xe7/0x970
[  124.002677][ T7013]  do_fast_syscall_32+0x32/0x70
[  124.002692][ T7013]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  124.002706][ T7013] RIP: 0023:0xf703efec
[  124.002722][ T7013] Code: Unable to access opcode bytes at 0xf703efc2.
[  124.002728][ T7013] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128
[  124.002738][ T7013] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000740
[  124.002745][ T7013] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000
[  124.002751][ T7013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  124.002757][ T7013] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  124.002763][ T7013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  124.002772][ T7013]  </TASK>
[  124.336249][ T5757] Bluetooth: hci7: command 0x0c1a tx timeout
[  124.337812][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[  124.341932][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.416882][   T56] misc userio: Buffer overflowed, userio client isn't keeping up
[  124.442336][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.531165][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.621419][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.738347][   T13] bridge_slave_1: left allmulticast mode
[  124.740324][   T13] bridge_slave_1: left promiscuous mode
[  124.742344][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.745569][   T13] bridge_slave_0: left allmulticast mode
[  124.747716][   T13] bridge_slave_0: left promiscuous mode
[  124.749613][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.783916][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.787976][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.791133][   T13] bond0 (unregistering): Released all slaves
[  124.899832][ T5455] 8021q: adding VLAN 0 to HW filter on device eth18
[  125.025213][ T5455] 8021q: adding VLAN 0 to HW filter on device eth19
[  125.073467][   T13] hsr_slave_0: left promiscuous mode
[  125.075605][   T13] hsr_slave_1: left promiscuous mode
[  125.079958][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.083030][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.086769][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.089828][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.095631][   T13] veth1_macvtap: left promiscuous mode
[  125.097902][   T13] veth0_macvtap: left promiscuous mode
[  125.100026][   T13] veth1_vlan: left promiscuous mode
[  125.102060][   T13] veth0_vlan: left promiscuous mode
[  125.174123][   T13] team0 (unregistering): Port device team_slave_1 removed
[  125.179406][   T13] team0 (unregistering): Port device team_slave_0 removed
[  125.210740][ T5455] 8021q: adding VLAN 0 to HW filter on device eth20
[  125.334166][ T5455] 8021q: adding VLAN 0 to HW filter on device eth21
[  127.836245][   T56] misc userio: Buffer overflowed, userio client isn't keeping up
[  128.571445][ T5153] udevd[5153]: worker [5751] /devices/platform/dummy_hcd.3/usb8/8-1 is taking a long time
[  131.206266][   T56] misc userio: Buffer overflowed, userio client isn't keeping up
[  132.417912][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[  132.419974][ T1440] ieee802154 phy1 wpan1: encryption failed: -22