last executing test programs:

13.193552215s ago: executing program 3 (id=117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dir0\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='ubi0:testvol\x00', &(0x7f0000000080)='./dir0\x00', &(0x7f0000000100)='ubifs\x00', 0x0, 0x0)
syz_clone3(&(0x7f0000000380)={0x80, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dir0\x00', 0x1ff) (async)
mount(&(0x7f0000000040)=@filename='ubi0:testvol\x00', &(0x7f0000000080)='./dir0\x00', &(0x7f0000000100)='ubifs\x00', 0x0, 0x0) (async)
syz_clone3(&(0x7f0000000380)={0x80, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) (async)

12.32672946s ago: executing program 3 (id=120):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x2, &(0x7f00000000c0)='usrquota')
chdir(&(0x7f0000000100)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x1000, 0xe4, 0x8, 0xfffd}, 0x3c, [0x6, 0x7, 0x5a0, 0x3, 0x3, 0x1, 0xd377, 0x100, 0x7, 0x7, 0x80, 0xbb5, 0xfffff801, 0x8, 0x0, 0x2, 0x6, 0x5, 0xa84, 0x7, 0x3, 0x416c, 0x3, 0x7, 0x1ff, 0xe8, 0xfffffff9, 0x4, 0x7, 0x417b, 0x6, 0x5, 0x7, 0x3, 0xb338, 0x397, 0xe, 0x0, 0x7f, 0xd3d9, 0x7eaa7fd5, 0x8, 0x8, 0x1, 0x8, 0x80000001, 0x9cff, 0x70, 0xffff8000, 0x9, 0x2, 0xc6e, 0x75e8, 0xff, 0x3, 0x100, 0xe, 0xb, 0x6, 0x400, 0x1d, 0x4, 0x1, 0xa4], [0x40, 0x0, 0x7, 0x3, 0x5f93, 0x8, 0x2, 0xb5, 0x401, 0x0, 0xfffffff1, 0xffffff9f, 0xfffffff9, 0x5, 0x81, 0x9, 0x2, 0x7fffffff, 0x3, 0xb7d, 0xffff, 0x5, 0xff, 0x2, 0x8, 0x2b, 0x5, 0x10, 0xf40, 0x40a, 0x1, 0x1ff, 0xa, 0xd2a, 0x3, 0x40, 0x1, 0xfff, 0x7, 0x9, 0x8, 0x6, 0x9c05, 0xc27, 0xcda, 0x9, 0xb, 0xe, 0x6, 0x615, 0x7, 0x81, 0x0, 0xffff, 0x0, 0x3, 0x6, 0x80000000, 0x56194447, 0x4, 0x10001, 0x2, 0x8, 0x9], [0xb, 0x7, 0xeb, 0x4, 0xcb, 0x0, 0x7, 0x6, 0x3, 0x3, 0x0, 0x7, 0xffffdfea, 0x913, 0x8, 0x81, 0x2, 0xffffffff, 0x3, 0x6, 0xff, 0x4, 0x3, 0x3f0, 0x80, 0x1, 0x100, 0x0, 0x3, 0x6, 0x100, 0xe, 0x3, 0x9761, 0x0, 0x7, 0x9, 0x8, 0xfffffffb, 0x4, 0x3822, 0x892, 0xbbfc, 0x3, 0x1, 0x4, 0x8, 0xbe1, 0x0, 0x0, 0x1, 0xa412, 0xfffffc01, 0x4, 0xa, 0x0, 0xf2bf, 0x1, 0x7, 0x5, 0x7, 0x9, 0x5, 0xd081], [0x8, 0x401, 0xa, 0x5, 0x10, 0xfff, 0x7ff, 0xfffffffc, 0x5, 0x4, 0x40c1, 0x10000, 0x2, 0x81, 0x3, 0x6, 0x6, 0x5, 0x80000001, 0x5, 0x3685, 0x1000, 0xced8, 0x6, 0x9, 0x7, 0x30, 0x0, 0xa, 0x52cb83c8, 0x24, 0xb, 0x3, 0x6, 0x2, 0x4, 0x10000, 0x5, 0x9, 0x6, 0xf, 0x5, 0x9, 0xa6d8, 0x4, 0xdf, 0x5615, 0x2, 0x7, 0x7, 0x81, 0x800, 0x9, 0x6, 0x401, 0x4, 0x3, 0x51, 0x2, 0x370, 0x5, 0x7, 0x2, 0x7]}, 0x45c)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x24, 0x5, 0x6, 0x40000000032a, 0x2, 0x2, 0xfffffffffffffffd, 0x6, 0x7fff})
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2d41, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000006c0)={0x0, 0x10000, 0x7ff})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18)

11.31762077s ago: executing program 3 (id=125):
r0 = socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) (async)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_async', 0x400000, 0x40)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x11) (async)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x11)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
setns(0xc9, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cgroup.events\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cgroup.events\x00', 0x275a, 0x0)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000740)={0x0, 0x824c, 0x400, 0x1, 0x279, 0x0, r1}, &(0x7f00000007c0)=<r6=>0x0, &(0x7f0000000800)=<r7=>0x0, &(0x7f0000000840)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000880)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10000004, 0x0, <r9=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000900)=@new_dev={0x805, 0xdac, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x3}}}, &(0x7f0000000940)=<r10=>0x0)
syz_ublk_setup_queues(r4, r10, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, r5}, &(0x7f0000000a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b15, 0x1, 0x0, 0x8000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fe3, 0x1000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40006253, 0x4000, 0x0, 0xfffffffb}}], 0x1, &(0x7f0000000c80)={0x2e, 0x4c, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r9, '\x00', {0x0, 0xdb9, 0x0, 0x0}}, 0x0) (async)
syz_ublk_setup_queues(r4, r10, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, r5}, &(0x7f0000000a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b15, 0x1, 0x0, 0x8000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fe3, 0x1000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40006253, 0x4000, 0x0, 0xfffffffb}}], 0x1, &(0x7f0000000c80)={0x2e, 0x4c, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r9, '\x00', {0x0, 0xdb9, 0x0, 0x0}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000dc0)=""/77, 0x4d}], 0x6}}], 0x1, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000004240)=""/4116, &(0x7f0000005280)=0x1037) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000004240)=""/4116, &(0x7f0000005280)=0x1037)
ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000600)={0x0, 0x3b9e})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./sec\x00', &(0x7f00000004c0)='securityfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000480)='./sec\x00', &(0x7f00000004c0)='securityfs\x00', 0x0, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r12, &(0x7f0000000540)="3c6b646f6d61696ed595696c652072656164202f6574632f707764287461736b2e7569643d30207461736b2e657569643d300a73656c65637420646f6d61696e3d3cb2a8c809656c3e202f6e65775f646f6d61696e0a", 0x56)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000e40)={'wpan3\x00', <r14=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r11, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x3c, r13, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004090}, 0x40000c4)
r15 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b9040a1d08020a00000004001ca1180002000511000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e", 0xbe}, {&(0x7f0000000380)="1cc4488d5e4ef24d4c6afe6d614da92c05fc9b73d35c5a528052", 0x1a}], 0x2, 0x0, 0x0, 0x7400}, 0x0) (async)
sendmsg$kcm(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b9040a1d08020a00000004001ca1180002000511000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e", 0xbe}, {&(0x7f0000000380)="1cc4488d5e4ef24d4c6afe6d614da92c05fc9b73d35c5a528052", 0x1a}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/48, 0xffffffac}, {&(0x7f0000001000)=""/4092, 0xffc}, {&(0x7f0000002000)=""/98, 0x62}, {&(0x7f0000002080)=""/249, 0xf9}, {&(0x7f0000003240)=""/4088, 0xff0}, {&(0x7f0000003180)=""/131, 0x83}], 0x6}, 0x12000)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000fc0)={{0x12, 0x1, 0x110, 0xe, 0x73, 0x1b, 0x8, 0xf11, 0x1031, 0x2f8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x7, 0x95, 0x70, 0x1, "", [{{0x9, 0x4, 0x6b, 0x2, 0x2, 0xd6, 0xff, 0xd0, 0x81, [], [{{0x9, 0x5, 0x80, 0x2, 0x20, 0x7f, 0x8, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x77, 0x3, 0x3, [@generic={0x7, 0x5, "d75eef973c"}]}}]}}]}}]}}, 0x0)

7.07311397s ago: executing program 3 (id=136):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10)
sendto$inet6(r3, &(0x7f00000002c0)="8f6bb66f", 0x5ac, 0x0, 0x0, 0xfffffffffffffec8)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a0088a8ffffffffffffcd1008a2dc5886dd61fdeb4a001800d0fe8000000000000000000000000000aa00000000000000000000ffffac1e000132020000000000000708000000a40d"], 0x52)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2180, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})

6.872466862s ago: executing program 0 (id=137):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0x0, &(0x7f0000000000)=0xfffffdb4)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000003c0)={0xb0000004})
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'fl512\x00', [0x100, 0x6, 0xf3, 0xc, 0x8, 0x5, 0x79, 0x3, 0x3, 0x100, 0x1000, 0x5, 0x6, 0x80000001, 0x0, 0xfd, 0xfffffffc, 0xf3, 0x10, 0x2, 0x8, 0x0, 0x0, 0x20001e58, 0xffffffff, 0x8000003, 0x6, 0x80000008, 0xa6b5, 0x4, 0xffffffff]})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000400)={0xa0000001})
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0x0, &(0x7f0000000000)=0xfffffdb4) (async)
epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000003c0)={0xb0000004}) (async)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'fl512\x00', [0x100, 0x6, 0xf3, 0xc, 0x8, 0x5, 0x79, 0x3, 0x3, 0x100, 0x1000, 0x5, 0x6, 0x80000001, 0x0, 0xfd, 0xfffffffc, 0xf3, 0x10, 0x2, 0x8, 0x0, 0x0, 0x20001e58, 0xffffffff, 0x8000003, 0x6, 0x80000008, 0xa6b5, 0x4, 0xffffffff]}) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000400)={0xa0000001}) (async)

6.457405668s ago: executing program 0 (id=138):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
socket$inet6(0xa, 0x5, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x20, 0x0)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r4)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^=\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
renameat2(r4, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file0\x00', 0x7)

6.456308214s ago: executing program 2 (id=139):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, &(0x7f0000000040), 0x0, 0x8)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000440))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
syz_usb_connect(0x2, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f00000005c0)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000640), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000680), 0x3, 0xbc01)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000006c0)=""/138)
get_mempolicy(0x0, 0x0, 0xe, &(0x7f0000fec000/0x1000)=nil, 0x74a9a0d4687c6ab1)
r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
pwrite64(r3, &(0x7f0000000380)="1e17cf7739f53f04fb2177ac5014bb32f1809676884a75c5ff82e5e3a5fbd5af767bc367d68ec1b34294ef827871d8c07ea0ec96c3e2f70c4011489aa3dedfbfe592c84457df8c546e85ab96424024ed115d22a250c53d8a9b1055a35ee8ab55c367", 0x62, 0x6)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x401)
r6 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c)
sendmsg$inet_sctp(r6, &(0x7f00000004c0)={&(0x7f0000000500)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000a00)="e6", 0xfffd}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052)
recvmmsg$unix(r6, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)=""/4089, 0xff9}, {&(0x7f0000001b40)=""/191, 0xbf}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65}}], 0x400000000000242, 0x40010040, 0x0)
write$tun(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="141bdf000029", @ANYRES64=r5], 0xb2)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c020000190001000000000010000000e00000010000000000000000000000000a0101000000000000000000000000004e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000900000000000000800000000000000000000000000000000000000000000000000000000000000084010500fc000000000000000000000000000000000000003c00000000000000ac1414bb000000000000000000000000ff3400000003000000000000000000006e000000ac1414aa000000000000000000000000000000003c0000000000000000000000000000000000000000000001fdffffff0203000007000000000800000200000000000000000000000000000000000001000000003200000000000000000000000000000000000000000000000335000001050000000000000000000000000000ac14142100000000000000000000008e4126f89425f993778d00000000003300000000000000e0000002000000000000000000000000043500000000040000000000ce40000000000000e0000001000000000000000000000000000004d43200000000000000ac1414aa0000000000000000000000000500000004010700000000000000000000040000ff020000000000000000000000000001000000006c00000002000000e0000002000000000000000000000000ffffffff01020000000001000000000001000000"], 0x23c}}, 0x80c4)
write$cgroup_type(r3, &(0x7f0000000200), 0x9)
r7 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}], 0x2c)
sendto$inet(r7, &(0x7f0000000140)='\a', 0x1, 0x40, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20042004}, 0x4004880)

5.600263238s ago: executing program 1 (id=141):
r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000080)={0xdce, "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"})
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80840)
syz_usb_disconnect(r2)

4.705992443s ago: executing program 2 (id=142):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r0, 0x891e, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x6, 0x60000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x1c0)
setxattr$security_evm(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
r3 = syz_usb_connect$hid(0x5, 0x36, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1b, 0x0, 0x6, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x804}}, {0x0, 0x0}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x20, &(0x7f0000000700)=ANY=[@ANYBLOB="20033ca41000973486ac095656589df28ee78dca1438d8e41df0e8aa7b8a044d"]}, {0x13, &(0x7f0000000f00)=ANY=[@ANYBLOB="130323100000000000000007cc70c3e06b6492521faa1ee37b8a71824cc8422b8ca53549fa96fac4b6da63cad95040324fee24c31c8ab51445ef80f35db1c72a4e0539da72458a5d1a107926dec040f1d6be9dc8523d991e687e1ca92e8fb3325f82fde4c81daa172ed47f9e3d06fdfcee1ac2212aa4452d14b79c276bd4e25886491155f92fffb9b175ed25dde697502f35311422afb05477da26930ee03f57ddcba210db508f70265345d6973106e0e8e56b65ee122e"]}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0)
close(0x3)
sysfs$3(0x3)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setregset(0x4205, r8, 0x1, &(0x7f00000001c0)={&(0x7f0000000380)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000480)={&(0x7f00000004c0)="c945221e000000105900001979eb6959374fcb87f4a562c077e9eaf40f04cbe83b385670dec4a4da37410e0cfd627cea5cbcaae69f890112d563f24e000000000000000000000000413b77cc5f7605024be360ef7f73e88031bb3e1c5549a9ab60d72c8b07fa5c1e1f8d474853cdc69ddf32c39473293611621d107247df2cd07dc629696402c15a0ce4a90ab904a5de77bcc6bbb3e315f0f6f70320b0d44147fe61e48920d8fc22ab927ab1004f102478625f8f95df03437e4cb8e979011dd877a8d5a2dc1247358607ddcb5db5ee975a02ce594291ede0c1747acef70fdb1c45787e9d6745b3982d5957d48fc31ad6c86c5364e390f1d5", 0xf8})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0x200, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000a80), {[{{@arp={@local, @dev={0xac, 0x14, 0x14, 0x19}, 0xff, 0x0, 0x1, 0x10, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x9bd1fd71348bb325]}}, {@empty, {[0xff, 0xff, 0x0, 0x63cd8d22cce95faa, 0xff, 0xff]}}, 0xfffc, 0x5, 0x7f, 0x3, 0x7, 0x8001, 'veth1\x00', 'bond0\x00', {}, {0xff}, 0x0, 0x80}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffd, 0x3, 0xfffffffa, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010100, @rand_addr=0x64010102, 0x1}}}, {{@arp={@remote, @empty, 0xff000000, 0x0, 0xf, 0x10, {@mac=@local}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0xfee8, 0x7, 0x6, 0x8, 0x2, 0x0, 'team_slave_0\x00', 'veth0_virt_wifi\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420)
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES8=r9, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080110001004af4000000000000000000000000000005000200020000000800030008ac0f000800090001ac0f0004005080"], 0x50}, 0x1, 0x0, 0x0, 0x4000811}, 0x8080)
syz_usb_connect(0x5, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303"], 0x0)
r10 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x800)
setsockopt$inet_buf(r10, 0x0, 0x26, &(0x7f0000000280)="55033b5a00000000000000002504ea3916243056fe0a3a89da2cfaed8669ca0223d5ef1cce816068f5219f4b720c4734aabab8431dffe004e9faa41671c34851c8e0aeefcf7df569c98a581af8d408adb1ed94b33c7deec3d207100b56377ad01a41655a8886307a1f23e9e0c59f48cfb440852b84742c6b5360bd0b71e3e8b5d1ab762192089de5fd5b7152fdbaf5dc151b949b2a5da8fcb323b811f67555fde79196a383ba5db9da0f547d52694822db77a14f8c573a79b7302f6c5c1be747bfa0850c267ab44eeb70fb946c820735103583696b23bf5b207947ff9b03", 0x70)

4.691583259s ago: executing program 1 (id=143):
sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="8ce2", 0x2, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x20000)
ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000040)=""/225)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f0000000180)=0x37)
r3 = dup2(r1, r1)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x200000014)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f00000006c0))
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24)
mknod(&(0x7f0000000280)='./file0\x00', 0x8000, 0xfffff7fd)
mknodat(r3, &(0x7f00000002c0)='./file1\x00', 0x2000, 0x103)
landlock_create_ruleset(&(0x7f0000000780)={0x1fff, 0x0, 0x2, 0x0, 0xd}, 0x30, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x18)
renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x2)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000700), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/117, 0x75}, {&(0x7f0000000800)=""/144, 0x90}, {&(0x7f00000008c0)=""/91, 0x5b}, {&(0x7f0000000ac0)=""/131, 0x83}], 0x4, &(0x7f0000000a40)=[@cred={{0x1c}}], 0x20}, 0x10021)
r7 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/prev\x00')
getdents(r7, 0xffffffffffffffff, 0x5a)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r8, &(0x7f0000000540)=[{&(0x7f0000000580)="2e9bbd3507f03dd65193dfb6c575963f86dd606712e90d000000000000000000ee", 0x21}, {&(0x7f00000005c0)="17a8a7c41e580900000000000000c064116e4c4cbb04627d314abb", 0x1b}], 0x2)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f00000001c0)="3e67f30fc7360c0000000fc79e8b000f01c80f01c9660f38db9900000f3801280f225f0f799e7800f00fab1bba2100bad842c8c8", 0x34}], 0x1, 0x34, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={<r10=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000680)={r10, 0x1, r3, 0xf3, 0x80000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4.47728882s ago: executing program 1 (id=144):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
unshare(0x6020400)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, 0x0, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000280)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, r2, &(0x7f00000002c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe70a, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003b7ff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)
add_key(&(0x7f0000000640)='asymmetric\x00', 0x0, &(0x7f0000000680)="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", 0x1d8, 0xffffffffffffffff)
r3 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f00000005c0)={0x0, 0x7, 0x2, '\x00', &(0x7f0000000600)=0x8})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r5, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0x6, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c)

3.869419538s ago: executing program 0 (id=145):
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
chdir(&(0x7f00000006c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

3.800611266s ago: executing program 3 (id=146):
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0xf6, 0x20b0, 0xffff, 0x5, 0x155, 0xfffff801, 0xffffff90, 0x2dc, 0x9, 0x100, 0x7, 0x8, 0xfffffffd, 0x5e7, 0x80000001, 0xffffd2fe, 0xffffffff, 0x3, 0xd, 0xf, 0xfffffffe, 0x4, 0x1ff, 0xc, 0xffffffff, 0x6, 0xf, 0xa, 0x1, 0x7fff, 0xfd, 0x9]})
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x50)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/gnss0\x00', 0x1001, 0x0)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000040)={0xffffffffffff8001})
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0xf6, 0x20b0, 0xffff, 0x5, 0x155, 0xfffff801, 0xffffff90, 0x2dc, 0x9, 0x100, 0x7, 0x8, 0xfffffffd, 0x5e7, 0x80000001, 0xffffd2fe, 0xffffffff, 0x3, 0xd, 0xf, 0xfffffffe, 0x4, 0x1ff, 0xc, 0xffffffff, 0x6, 0xf, 0xa, 0x1, 0x7fff, 0xfd, 0x9]}) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x50) (async)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/gnss0\x00', 0x1001, 0x0) (async)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000040)={0xffffffffffff8001}) (async)

3.481077203s ago: executing program 1 (id=147):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x105100)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f00000001c0)=[<r1=>0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x5})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000400)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000440)={0x0, 0x0, <r4=>0x0})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0)
ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000480)={0x0, 0x0, <r6=>0x0})
r7 = syz_open_dev$dri(&(0x7f00000004c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000500)={&(0x7f0000000540)="a6", 0x1, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000000580)={r8, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000006c0)={&(0x7f0000000640)=[0x0, 0x0, <r9=>0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x5, 0x0, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000780)={&(0x7f0000000700)=[<r10=>0x0], &(0x7f0000000740)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f0000000980)=[<r11=>0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], 0x5, 0x1, 0x5})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000b00)={&(0x7f0000000a80)=[0x0, 0x0, <r12=>0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0xdededede})
r13 = syz_open_dev$dri(&(0x7f0000000b40), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r13, 0xc01064c8, &(0x7f0000000b80)={0x1, 0x0, &(0x7f0000000bc0)=[<r14=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r13, 0xc02064b6, &(0x7f0000000c00)={r14, 0x0, r14, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000e00)={&(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[{}, {}, {}], &(0x7f0000000d80)=[0x0, 0x0, 0x0, <r15=>0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x6})
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001340)='./proc\x00', &(0x7f0000001380)='proc\x00', 0x0, 0x0)
r16 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./proc/bus/pci/devices\x00', 0x0, 0x0)
pread64(r16, &(0x7f0000001400)=""/26, 0xfdef, 0xff)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000010c0)={&(0x7f0000000e80)=[0x0], &(0x7f0000000ec0)=[{}, {}, {}, {}, {}], &(0x7f0000001040)=[<r17=>0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000011c0)={&(0x7f0000001140)=[<r18=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xe0e0e0e0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000001280)={0x600, 0x7, &(0x7f00000005c0)=[r1, r2, r3, r4, 0x0, r6, r8], &(0x7f0000000600)=[0x7fff], &(0x7f0000001200)=[r9, r10, r11, 0x0, r12, r14, r15, r17, r18], &(0x7f0000001240)=[0x1d1d, 0x7, 0x1, 0x38, 0x4, 0x2], 0x0, 0x8000})

3.310908749s ago: executing program 2 (id=148):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x8001, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000880)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000204e0000", 0x58}], 0x1)
ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x7a5)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x4)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000180)=0xffff0080)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r8, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x24044080)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r9)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000580)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="546095539f8f81e0ed71cca6000001", @ANYRES16=r10, @ANYRES8=r4, @ANYRES32=r11, @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000880)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
r12 = syz_usb_connect(0x2, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r12, 0x0, 0x0)
syz_usb_control_io(r12, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r12, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r12, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x40, 0x0, 0x1, 0x70bd25, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}]}, 0x40}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

3.284275048s ago: executing program 1 (id=149):
r0 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x80ec0)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000040)={0x7fffffff, 0x2, 0xe, 0x80000000, 0x5, 0x0, 0x80000000})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r3=>0x0)
connect$nfc_llcp(r2, &(0x7f0000000180)={0x27, r3, 0xffffffffffffffff, 0x6, 0x9, 0x4d, "3f6329f151f674dc5391e99de93588c152a44c2f94c6b958ff1dc72d84ad8b4a2eb50fe809215809b0f6dd2567df0ebed7517a98247f1e71a576acd2d4f550", 0x12}, 0x60)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x18080, 0xa1)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000240)={0xffd, 0x0, 0x2, {0x2, @raw_data="e38b8f349e1969f9ce4ad1d7bf82e068967296e4f6049da2572c588c3e36e1c2e2c9d065a2bb80b35577b5d27edacba26bb1cf1f2e80e5fc749891ce27bb38e58fe7222ffe8f077eff3cb11f7da07fc97fb48f1e5cdcede8553ed673b41a08c5ed570426441eb424937f9eb8493ce499f6adf567f34555446f5a630c7d0bc6ec6f8bee664e9b9e90df8b53cbac7e161a47070a60435fb1944d5a7824677a251546ba6614deee3483ff500144f781d7a43d74b43d2998bb128e51f47b19ed8ebe157d040f0676e055"}, 0x1})
r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc51b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x10, 0xa, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0xcd, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x103}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x4, 0xf6}}, [{{0x9, 0x5, 0x2, 0x3, 0x218, 0x0, 0x6, 0x5}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0xe, 0xc8, 0x0, 0x8, 0x1}, 0xd1, &(0x7f00000003c0)={0x5, 0xf, 0xd1, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xbd, "c1578bd69cc06caf8a1c6d76474dc3a6"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x5, 0xb8, 0x3}, @generic={0xa7, 0x10, 0x0, "5cd69dbc53159f9861c6da6ab48d6ead3c9e78ed10657d0caa09cf700d7a79e1bf39f74d2ee27a333c8ce064fe9dcab62f5d80440f5305851eec9b2ba3ce8354f9c2c9389d6c54c98c2af7e487d13a261a0aa715b0f43cba12e9bf449f64e05fd7dd3e8c0f42f1fe9c2d20b7ff947da14c5c5f282e425f569bd60e6c3c2504e212fbd9983067c5162d0370c1ba9af5a607bece502957fd907b5fab228842ed06486cc122"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x4, 0x3}]}, 0x8, [{0xbd, &(0x7f00000004c0)=@string={0xbd, 0x3, "9c8ff988ceb2640eb659072d63389eee481cb6ce133bd9ffb3b1d485dc5f50c4f3c593f4a8d19109c6eb7bef09c990d54ce9baab4c2d12806108a00f636bf7af1020591e3198333fa131f6e1feb86eeb1c0aa19f364e51a07018bdc941ff80fa47d4c11b8cad7010b57e51a18ba7144aee2e1fe8d1b260bd336fae567a6f23141acfc635d4619a7836e0da41fcea728c2b3c2a8890314cec9f65940ed563fa2a5de2c1e2b42d84fec7f40fead2b99f107da3aa52372bb6089974a8"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x443}}, {0x2, &(0x7f00000005c0)=@string={0x2}}, {0xfb, &(0x7f0000000600)=@string={0xfb, 0x3, "fe037235ba46ea8c96a57a02077b6483a8ecfc8ff02e3d825c360a6a4af0dfab5137b68b671fe87a37720f3d4dec681870fddd0e617779a1a5cfd2fd20b66be7a04532e303d9781259f84f28bf672da964fa47e97e67bbad110fe66955130c11edd426144a3c8486a7bdca34da34c0068e6634f3e03354c06d60472d59e1ebee7292e466ea501f63799a6003044111db2851f3afb66d4cfb838e41ee91e0c42c0141d91454179b4167f75edd8802f4bdd35c4b36996946089ea635f7b6e2b90450c4c85361b9f45506eb65bfd9347777a26b5f7c94a0ff72cd8713c845e447eb85012c6e788af068d79a803acfc492010b71fedf5bdf3418f1"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x2434}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x44d}}]})
syz_usb_control_io$hid(r5, &(0x7f0000000a00)={0x24, &(0x7f0000000880)={0x0, 0x6, 0x97, {0x97, 0xd0720f1736356351, "78a97641b180fbe51c66632175cf0683c8da0e504dca5d2f59170d2afdc5610cf643f12b31254ff9ca3e3b1c414f3ffe7df46cf429c0f0cff2c091feb7ab3802b15418ceb5ba7f6a09a16834d137d27e728cf02a8b5773152530e584583672c990be24a3268604ea425c32ea7c64aaccbcf373232fb66950c735307e57e7555b94183a5d55296be077ddd5c6b674a5dc8f06faeb07"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000000980)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "c8621a0c"}, @global=@item_4={0x3, 0x1, 0x4, "0a97570c"}]}}, &(0x7f00000009c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x588}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000a40)={0x40, 0xd, 0xa1, "d548805c1389866f2a22461124ae54002341a1ea2c7af97a780aa06d5ee906d22058910f5eebf7d2ea41aa0a18f8758791871ee242ed576da15d5a6a58f5df05faac10754ef42f6f16016c856188788065c8cec0ff8f50cb5105ae69e5c400d1fef7cdb071d68739cc94226e6ffba4257477debd21eee5e8bb5ee85e8319a6992bbc4057f49cf11f4db5e49c2e7878bf8c85230df3e5cfaf146e609122c4dcf1eb"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000b80)={0x20, 0x1, 0xf5, "e313b4c27c19fcbfa3036ca4ffa4b368357cce4c04ea11f2f82c844cd12fc63b6e209a21de422b8954e9abf23986ab640fb6d4acf157be7cdebce29fd6630ed869e89c6a9c4804cb81fe0faabd5db82adbc386f9dd571f850a3aed2f9b763d0fddfda8a4cb93acf2cc78c8c97c08da910e057306693e8d33edcf7ff5052c371e7e4ac3c4f18bf38cf645b8c9bed25ddcbc7217884a50bb7747d679f7dba528ba7207051e0e55a9d46387083d4a2702ee86b1a19ece4956f33f9cf92ec30e1e6d22823314bdbdd1359da7ac2489b2aaa08cdec1acf5b19465e66164d52a1003148bb5911f62ccc3a275e828c435e9f8d5a719a3934d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x2}})
r6 = accept$inet6(r1, &(0x7f0000000d00)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000d40)=0x1c)
getsockopt$inet6_int(r6, 0x29, 0x38, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4)
ioctl$TIOCSCTTY(r4, 0x540e, 0x2)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x40, 0x0)
ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000e40)={0x800, 0xdb0, 0x401})
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000e80))
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000ec0)={0x0, 0x0, {0x24, 0x37, 0xb, 0x1d, 0xa, 0x5, 0x3, 0x164}})
r8 = syz_open_pts(r7, 0x208400)
connect$inet6(r6, &(0x7f0000000f00)={0xa, 0x4e24, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000fc0)={0x14, &(0x7f0000000f40)={0xe0, 0x1, 0xc, {0xc, 0x5, "ddb39067af19adf01f3d"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f0000001200)={0x34, &(0x7f0000001000)={0x20, 0xf, 0xa7, "d546c5d6b85e748b0629b3c04539f35a3cff9bd9dba11d85c398266e4ff2f2a69cfc8cddf39ae6e5b3d35c92b916eebb7bbda0d89fa446d187c5f0e5e61117e1de9478b6ba853b1caae6c0dd52a3a8c5633c59c8d503bb9811dba27f921c420e75ed2c2e0190a6161a42f427bd7f83a932c4b7e76e54b1723cc9efeaafaf88eaf86b66385f53f4de8aa891c84f4b233d8a8a0885cdbcca577c31a0eb3f4294c4cb933b513f04ce"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001140)={0xc0, 0xa1, 0x4, 0xfffffc00}, &(0x7f0000001180)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000011c0)={0xc0, 0xa2, 0x2f, "56d45c172a5fbbc2b39fd528abe82adc0eb6adead19b21920f18d064bee69b45e3489809b1f446a60d05d3ac449d5f"}})
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000c, 0x4000010, r8, 0x10fc9000)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x0, 0x22, 0x43, {0x43, 0x84c67c17bdba4dcc, "4efcbe10207a67b4f830a95a5d6e9e1b2f29c93660bcb4bbfccb68ade802b575b18f6ccf6d717700597651d555225c879e1e4afbea84d66f40570c72c5920acd3d"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001600)={0x44, &(0x7f0000001340)={0x60, 0x30, 0xdf, "fbe9694a50e07eb31aeaa751c73c1923e7c93edf18085d2a2eaf50538e5c4dbdabfe9818738dbf5a1aa3f0feb35f57cfeb93e88002bd6a1c9876886c373029e589dc1698512bbdaf7d68d8fff0bb3de55df99bc6e5554c61ae8756f14daed0d2985d4987fbde76b25cac798c4aff1d43ca232286b515ae1e75f51d393e2279b27f071243a014ffec48ccfde3c4b26bc324ce6721c0547fe046a0d8fcc721ad006ef9039d6fd0c1e086f18b64e8580a94656a1fb726464bdc7c353b3d42a8e62080fefe4c43e5e006e128aaecc2dd6fbc10a2a0423fb4118b6b0eedf2351027"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000014c0)={0x20, 0x80, 0x1c, {0xc583, 0x5, 0x3, 0x7b, 0xa, 0x0, 0xe912, 0x3, 0x5, 0x6, 0xc96e, 0x2}}, &(0x7f0000001500)={0x20, 0x85, 0x4}, &(0x7f0000001540)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001580)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000015c0)={0x20, 0x89, 0x2, 0x1}})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000001680))
r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0)
ioctl$GIO_CMAP(r9, 0x4b70, &(0x7f0000001700))
ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f0000001740)={0x3, 0x7, 0x2, 0x200, 0x2, [0xfff, 0x2, 0x5, 0x8]})
epoll_create1(0x80000)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001b00)={0x14, &(0x7f0000001a80)={0x20, 0x8, 0x2e, {0x2e, 0x3, "fc8f1fa9126d310d10bd4111c537751491f857b2df8e0c98dca578f19e16383cb080d578590478524c57266d"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}}, &(0x7f0000001d40)={0x44, &(0x7f0000001b40)={0x40, 0x5, 0x1e, "f61e7d5dfb2e7df363652405185b7904e260a05f19fb2837b3489ebf3928"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001c00)={0x20, 0x81, 0x3, "f5ca02"}, &(0x7f0000001c40)={0x20, 0x82, 0x3, "17c666"}, &(0x7f0000001c80)={0x20, 0x83, 0x1, "01"}, &(0x7f0000001cc0)={0x20, 0x84, 0x4, "f973e4eb"}, &(0x7f0000001d00)={0x20, 0x85, 0x3, "291682"}})

2.980609559s ago: executing program 0 (id=150):
setresgid(0xee00, 0xee01, 0x0)
r0 = msgget(0x3, 0x220)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x0, 0x1, {0xffffffffffffffff}, {<r1=>0xee01}, 0xffffffff, 0x1})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, <r3=>0x0, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f00000024c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000002540)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004640)="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", 0x2000, &(0x7f0000006640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006700)={0x78, 0x0, 0x80, {0xe, 0x7, 0x0, {0xfffffffffffffffd, 0x200000000c3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0xfffffffe, 0x0, r4, 0x2, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getresuid(&(0x7f0000006780)=<r5=>0x0, &(0x7f00000067c0), &(0x7f0000006800))
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200000, 0x82)
statx(r6, &(0x7f0000006840)='./file0\x00', 0x2000, 0x182a6dbb9e37e3e9, &(0x7f0000006880)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000006a80)={0x2020, 0x0, 0x0, <r9=>0x0}, 0x2020)
mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x84, &(0x7f0000008ac0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x537df037f2c1ec65}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize}, {}, {@max_read={'max_read', 0x3d, 0x7f}}], [{@context={'context', 0x3d, 'sysadm_u'}}]}})
r10 = fcntl$getown(0xffffffffffffffff, 0x9)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
ioctl$IOMMU_IOAS_COPY$syz(r11, 0x3b83, 0xfffffffffffffffe)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006980)={<r12=>0x0}, &(0x7f00000069c0)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r13 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x1, 0x0)
write(r13, &(0x7f0000000300)='event', 0x5)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000006a00)={{0x2, r1, r4, r5, r7, 0x15, 0x1c55}, 0x0, 0x0, 0x5, 0x3, 0x3ff, 0x100, 0x3ff8000000001, 0x5, 0x81, 0x4, r10, r12})
setgroups(0x0, 0x0)
setuid(0xee00)
shmget$private(0x0, 0x1000, 0x78001e8b, &(0x7f0000008000/0x1000)=nil)
syz_usb_connect(0x5, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303"], 0x0)
socket$packet(0x11, 0x0, 0x300)

2.355748028s ago: executing program 0 (id=151):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89fd, &(0x7f00000000c0)={'bond0\x00', @multicast}) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600040001", 0x37}], 0x1}, 0x0) (async)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x8, 0xc, 0x63}) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

2.200758489s ago: executing program 0 (id=152):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x301002, 0x0)
close(r0) (async)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x0, 0x7}]})
ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) (async)
ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r2, &(0x7f0000000200), 0x9)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) (async)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
chdir(0x0) (async)
chdir(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r4 = open(&(0x7f0000000280)='.\x00', 0x80000, 0x103)
getdents(r4, &(0x7f00000005c0)=""/184, 0xb8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0)
getdents(r4, &(0x7f0000000680)=""/184, 0xb8)
r5 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0)
syz_usb_control_io$uac3(r3, &(0x7f00000002c0)={0x14, 0x0, 0x0}, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x20, 0x18, 0x4, "3c43eac4"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x84, 0x1, "9a"}, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={&(0x7f0000000440), 0xc, 0x0}, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
syz_usb_control_io$uac2(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac2(r3, 0x0, 0x0)

1.493033446s ago: executing program 1 (id=153):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040e604050000ec0102030109022000010100803209040000020806"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r1, 0x8004b707, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400"], 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81)
r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece)
preadv(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/4097, 0x1001}], 0x1, 0x1b, 0x10) (async)
r6 = syz_open_dev$dvb_dvr(&(0x7f0000000080), 0x3, 0x88e00)
ioctl$DVB_DVR_DMX_QBUF(r6, 0xc0186f3f, &(0x7f00000000c0)={0x3, 0x754e, 0x1, 0x0, 0x8, 0x1})

1.205319117s ago: executing program 2 (id=154):
r0 = socket$inet(0x2, 0x80001, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xe, 0x5a3d718726dcd9cb, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e2102020102"], 0x24) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000028000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15930395916e2b388abc3d6ce2316330b00010068656c70657200000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
fstat(r1, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) (rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000780)=@filename='./dev/sda1\x00', &(0x7f00000007c0)='./mnt\x00', &(0x7f0000000800)='ext4\x00', 0x8410, 0x0) (async, rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0xc0185879, 0x0) (async, rerun: 32)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') (rerun: 32)
r5 = openat(r4, &(0x7f0000000040)='volumes\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000300)=""/159, 0x9f}], 0x1, 0x1000044, 0xd3) (async, rerun: 32)
recvfrom$l2tp(r5, &(0x7f00000003c0)=""/148, 0x94, 0x20, 0x0, 0x0) (async, rerun: 32)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB="be66c50e0b53d170b173602d89f3e2b1ff7a6d33399d966d791a96189e6036f04483e1374bab45e471bd14555f5802c373b181418a26b71d44f22faecc25759e47901ebf02b6e7130dfbfd9bc5abedbba9cda0ac9e842f32c5b6619af6814da060ed8d5d507f2d989ab26213a9e3fd25611c9e23155cbe7f295390268eab07e98bec7990e00a275377da7d1b33c3c426bdf96bb83d44de14", @ANYBLOB="f348b2431545c3f8fa653e21f79fd775ac46e090cfc5eeecab2e46563228e6ef330d94d34db0ac63d06c6b377be0f3f0b715c21d37d475b9ad8f7df6790c113d9680c4aa4d10d803b63280a9656ccac3fca45a727c72d803519918a1e16937281f01f4a8fd60d7c9264d5053837e94f9b65491ec04889b29f5b222af7f18c3d088301f546ceb9a927285159962327a584ee07383827321959ec86d13f7fcbc5b975002aafb91d6ccf0abc1c6875fdcdcb7b1bad568445dce95fea1ae5a9494b0dfaa9f1a8e4e8b0ed56966e51bd38ec19d134a9eea18e2a4e8eb4e143929a5746014d1e714ac0ff51bca243f31bb6280c4171058431f15805c68", @ANYRESDEC=r0, @ANYRESDEC=r0], 0x48)

931.267495ms ago: executing program 3 (id=155):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42002, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9)
ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000400)={&(0x7f00000002c0)=[{0x2, 0x3, 0x5, 0x1f, 0x2}, {0x7, 0xfffffffffffffff9, 0x30, 0x97f, 0x8}, {0x8, 0xdc30, 0x4b, 0x9, 0x7fff}, {0x3, 0x3, 0x2, 0x8001, 0x9}, {0x720c, 0x3, 0xfffffffffffffe69, 0x0, 0x7}, {0x0, 0x3, 0x6, 0x6, 0x1}, {0x80000000, 0x6, 0x0, 0x5, 0xfffffff7}, {0x8000000000000000, 0xe000, 0xffff, 0x4, 0x3}], 0x8, 0x28, 0x5, 0x777150d2})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/slabinfo\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f00000005c0)='3', 0x4e)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x4000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x4)
write(r4, &(0x7f0000000900)='3', 0x4e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000940)={'bridge_slave_0\x00'})
openat$cuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
kexec_load(0x2, 0x8, &(0x7f0000000600)=[{0x0, 0xb, 0x8000000000, 0x80000000}], 0x0)
keyctl$session_to_parent(0x12)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000640)={0x1, 0x3, 0x9})
syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0)
pselect6(0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000633fa640402000558b4d000000010902240001000000000904000002214c6a0009050702000000da00090581a5c297c89a507df7a71f4e172a51f8eb6ce30200b9d0548621eaec090000000000977867f85634f60579bf56cbe73d04a315464387bce0be498f7bad0c8802dd791c06e2dd864ead6b39909e"], 0x0)
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

105.387797ms ago: executing program 2 (id=156):
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x2400c041) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (async, rerun: 32)
r1 = socket$inet6(0xa, 0x3, 0x3c) (rerun: 32)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @local, 0x9}, 0x1c) (async, rerun: 32)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (rerun: 32)

0s ago: executing program 2 (id=157):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev_mnt\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000002c0)='./dev_mnt\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x2b, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040990a01000000010200010902190001010080320904000001ff00000007058103"], 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev_mnt/ttyUSB0\x00', 0x802, 0x58) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xf0) (async)
mount(&(0x7f00000005c0)=@filename='mtd0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='jffs2\x00', 0x0, 0x0) (async)
r1 = open$dir(&(0x7f0000000680)='./file0\x00', 0x40000, 0x4)
getdents64(r1, &(0x7f00000006c0)=""/41, 0x29) (async)
r2 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1], 0x0)
r3 = syz_open_dev$audion(&(0x7f0000000180), 0x3, 0x1)
write$P9_RVERSION(r3, 0x0, 0xfffffcd9) (async)
syz_usb_disconnect(r2)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
setresuid(0x0, 0xee01, 0xee00) (async)
r4 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) (async)
r5 = socket(0x10, 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x2, 0x2}, 0x10) (async)
write(r5, &(0x7f0000000080)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="98000000210081044e81f782db44b90402000000000300000000150010001800feff578d09000d2000000401a800ba0000000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b480ef88e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e", 0x98}], 0x1}, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x400000000000ec0, 0x2, &(0x7f0000000140)={0x77359400}) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x20080, 0x0)
r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000400), 0xa0201, 0x0)
dup2(r8, r9) (async)
setsockopt$inet_int(r7, 0x0, 0x13, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0xb0}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts.
[   81.385342][ T5599] cgroup: Unknown subsys name 'net'
[   81.495105][ T5599] cgroup: Unknown subsys name 'cpuset'
[   81.505110][ T5599] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.110083][ T5599] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.578229][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.579427][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.581590][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.590635][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.592159][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.592988][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.593589][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.593949][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.594392][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.596089][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.596495][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.596891][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.605503][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.606333][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.607472][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.608888][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.615199][ T4928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.617726][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.682434][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.706502][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.417855][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.418034][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.418171][ T5610] bridge_slave_0: entered allmulticast mode
[   88.419958][ T5610] bridge_slave_0: entered promiscuous mode
[   88.479766][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.479872][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.479973][ T5610] bridge_slave_1: entered allmulticast mode
[   88.481930][ T5610] bridge_slave_1: entered promiscuous mode
[   88.605886][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.641847][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.643508][   T55] Bluetooth: hci2: command tx timeout
[   88.670905][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.671010][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.674328][ T5609] bridge_slave_0: entered allmulticast mode
[   88.678456][ T5609] bridge_slave_0: entered promiscuous mode
[   88.715970][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.716102][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.716440][ T5611] bridge_slave_0: entered allmulticast mode
[   88.717964][ T5611] bridge_slave_0: entered promiscuous mode
[   88.726288][   T55] Bluetooth: hci1: command tx timeout
[   88.727622][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.728281][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.743706][ T5609] bridge_slave_1: entered allmulticast mode
[   88.757842][ T5609] bridge_slave_1: entered promiscuous mode
[   88.801726][   T55] Bluetooth: hci3: command tx timeout
[   88.801849][   T55] Bluetooth: hci0: command tx timeout
[   88.808552][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.808660][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.808801][ T5611] bridge_slave_1: entered allmulticast mode
[   88.810426][ T5611] bridge_slave_1: entered promiscuous mode
[   88.853797][ T5610] team0: Port device team_slave_0 added
[   88.854053][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.854182][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.854389][ T5608] bridge_slave_0: entered allmulticast mode
[   88.855938][ T5608] bridge_slave_0: entered promiscuous mode
[   88.896131][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.898174][ T5610] team0: Port device team_slave_1 added
[   88.898398][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.898549][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.898650][ T5608] bridge_slave_1: entered allmulticast mode
[   88.899843][ T5608] bridge_slave_1: entered promiscuous mode
[   88.946202][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.978408][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.021802][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.042147][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.042161][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.042180][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.046707][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.117420][ T5609] team0: Port device team_slave_0 added
[   89.118174][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.118190][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.118217][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.120556][ T5609] team0: Port device team_slave_1 added
[   89.131257][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.137709][ T5611] team0: Port device team_slave_0 added
[   89.219893][ T5611] team0: Port device team_slave_1 added
[   89.281888][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.281907][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.281931][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.316464][ T5608] team0: Port device team_slave_0 added
[   89.344488][ T5610] hsr_slave_0: entered promiscuous mode
[   89.345307][ T5610] hsr_slave_1: entered promiscuous mode
[   89.347323][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.347340][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.347370][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.348539][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.348550][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.348572][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.350103][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.350113][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.350132][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.382715][ T5608] team0: Port device team_slave_1 added
[   89.593659][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.593679][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.593706][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.661974][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.661993][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.662020][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.690946][ T5609] hsr_slave_0: entered promiscuous mode
[   89.697473][ T5609] hsr_slave_1: entered promiscuous mode
[   89.702598][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[   89.702820][ T5609] Cannot create hsr debugfs directory
[   89.772098][ T5611] hsr_slave_0: entered promiscuous mode
[   89.772869][ T5611] hsr_slave_1: entered promiscuous mode
[   89.774062][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   89.774094][ T5611] Cannot create hsr debugfs directory
[   89.885490][ T5608] hsr_slave_0: entered promiscuous mode
[   89.886292][ T5608] hsr_slave_1: entered promiscuous mode
[   89.886829][ T5608] debugfs: 'hsr0' already exists in 'hsr'
[   89.886849][ T5608] Cannot create hsr debugfs directory
[   90.261569][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.278221][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.283104][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.298898][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.309330][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.323853][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.338701][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.349322][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.415255][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.422426][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.431689][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.448308][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.449346][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.458230][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.476712][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.489132][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.576854][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.591324][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.592418][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.595619][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.624442][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.629268][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.633201][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.656174][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.722048][ T5614] Bluetooth: hci2: command tx timeout
[   90.771868][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.775487][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.776634][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.779467][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.802943][ T5614] Bluetooth: hci1: command tx timeout
[   90.811473][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.826037][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.837790][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.850478][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.881264][   T55] Bluetooth: hci3: command tx timeout
[   90.881481][ T5614] Bluetooth: hci0: command tx timeout
[   90.903411][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.957636][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.978254][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   91.005749][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.005870][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.033588][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   91.057939][  T168] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.058018][  T168] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.061141][  T168] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.061275][  T168] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.121666][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.121742][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.159658][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.219983][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   91.264340][  T168] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.264460][  T168] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.311119][ T1388] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.311226][ T1388] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.375130][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.466443][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   91.498284][  T168] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.498394][  T168] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.566666][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.566780][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.945001][   T51] cfg80211: failed to load regulatory.db
[   92.279524][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.423748][ T5610] veth0_vlan: entered promiscuous mode
[   92.457093][ T5610] veth1_vlan: entered promiscuous mode
[   92.557964][ T5610] veth0_macvtap: entered promiscuous mode
[   92.583095][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.610007][ T5610] veth1_macvtap: entered promiscuous mode
[   92.659584][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.687410][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.717845][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.794990][ T5609] veth0_vlan: entered promiscuous mode
[   92.803023][ T5614] Bluetooth: hci2: command tx timeout
[   92.856010][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.872895][ T5609] veth1_vlan: entered promiscuous mode
[   92.882279][ T5614] Bluetooth: hci1: command tx timeout
[   92.934802][ T5611] veth0_vlan: entered promiscuous mode
[   92.961840][   T55] Bluetooth: hci3: command tx timeout
[   92.961930][ T5614] Bluetooth: hci0: command tx timeout
[   92.997168][ T5611] veth1_vlan: entered promiscuous mode
[   93.014738][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.014769][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.090779][ T5609] veth0_macvtap: entered promiscuous mode
[   93.108025][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.108065][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.142375][ T5609] veth1_macvtap: entered promiscuous mode
[   93.151652][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.153001][  T168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.153049][  T168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.153168][  T168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.215609][ T5608] veth0_vlan: entered promiscuous mode
[   93.249043][ T5611] veth0_macvtap: entered promiscuous mode
[   93.268529][ T5608] veth1_vlan: entered promiscuous mode
[   93.291777][ T5611] veth1_macvtap: entered promiscuous mode
[   93.316066][ T5610] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.317388][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.356572][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.409309][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.455597][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.508745][ T5608] veth0_macvtap: entered promiscuous mode
[   93.519147][ T5608] veth1_macvtap: entered promiscuous mode
[   93.602169][  T168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.602259][  T168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.602343][  T168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.602383][  T168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.602421][  T168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.603333][  T168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.603373][  T168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.603411][  T168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.622252][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.639146][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.639169][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.736766][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.793810][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.793833][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.843610][ T5698] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   93.862964][  T168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.863014][  T168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.863050][  T168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.913891][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.913914][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.981716][ T1388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.006552][ T5698] usb 2-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00
[   94.020756][ T5698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26432, setting to 1024
[   94.020808][ T5698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   94.020836][ T5698] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   94.020876][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.080568][ T5763] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   94.107955][ T5698] spcp8x5 2-1:1.0: SPCP8x5 converter detected
[   94.125753][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.125776][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.176550][ T5698] usb 2-1: SPCP8x5 converter now attached to ttyUSB0
[   94.217495][ T5765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.217514][ T5765] IPv6: NLM_F_CREATE should be set when creating new route
[   94.217609][ T5765] IPv6: NLM_F_CREATE should be set when creating new route
[   94.217634][ T5765] IPv6: NLM_F_CREATE should be set when creating new route
[   94.289847][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.289870][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.380841][ T1388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.380900][ T1388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.491942][ T5768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.717656][ T5774] =======================================================
[   94.717656][ T5774] WARNING: The mand mount option has been deprecated and
[   94.717656][ T5774]          and is ignored by this kernel. Remove the mand
[   94.717656][ T5774]          option from the mount to silence this warning.
[   94.717656][ T5774] =======================================================
[   94.717888][ T5774] binder: Unknown parameter 'pcr'
[   94.783452][ T5773] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET)
[   94.789182][   T10] usb 2-1: USB disconnect, device number 2
[   94.844229][   T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[   94.847568][   T10] spcp8x5 2-1:1.0: device disconnected
[   94.882653][ T5614] Bluetooth: hci2: command tx timeout
[   94.924905][ T5776] Zero length message leads to an empty skb
[   94.972170][ T5614] Bluetooth: hci1: command tx timeout
[   95.041525][ T5614] Bluetooth: hci3: command tx timeout
[   95.204005][ T5784] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   95.418887][ T5784] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   95.561342][   T32] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   95.717158][ T5792] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.12'.
[   95.728240][   T32] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[   95.733233][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   95.733321][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10
[   95.733437][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.805837][   T32] usb 3-1: config 0 descriptor??
[   96.038758][ T5798] FAULT_INJECTION: forcing a failure.
[   96.038758][ T5798] name failslab, interval 1, probability 0, space 0, times 1
[   96.039150][ T5798] CPU: 0 UID: 0 PID: 5798 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) 
[   96.039182][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   96.039204][ T5798] Call Trace:
[   96.039217][ T5798]  <TASK>
[   96.039226][ T5798]  dump_stack_lvl+0xe8/0x150
[   96.039256][ T5798]  should_fail_ex+0x3eb/0x540
[   96.039286][ T5798]  should_failslab+0xa8/0x100
[   96.039310][ T5798]  __kmalloc_cache_noprof+0x9e/0x600
[   96.039333][ T5798]  ? assoc_array_insert+0x90/0x2f60
[   96.039352][ T5798]  ? assoc_array_insert+0x90/0x2f60
[   96.039381][ T5798]  assoc_array_insert+0x90/0x2f60
[   96.039403][ T5798]  ? __key_link_lock+0x9b/0xb0
[   96.039429][ T5798]  ? __pfx___mutex_lock+0x10/0x10
[   96.039464][ T5798]  ? __pfx_down_write+0x10/0x10
[   96.039482][ T5798]  ? _get_random_bytes+0x1e7/0x260
[   96.039506][ T5798]  ? __pfx__get_random_bytes+0x10/0x10
[   96.039532][ T5798]  __key_link_begin+0xd6/0x1f0
[   96.039557][ T5798]  key_instantiate_and_link+0x235/0x4b0
[   96.039587][ T5798]  ? __pfx_key_instantiate_and_link+0x10/0x10
[   96.039635][ T5798]  keyring_alloc+0x6f/0xb0
[   96.039660][ T5798]  keyctl_get_persistent+0x558/0x7b0
[   96.039692][ T5798]  ? __pfx_keyctl_get_persistent+0x10/0x10
[   96.039712][ T5798]  ? futex_wait+0x2a2/0x390
[   96.039737][ T5798]  ? __pfx_futex_wait+0x10/0x10
[   96.039778][ T5798]  __se_sys_keyctl+0x83e/0xbc0
[   96.039808][ T5798]  ? __pfx___se_sys_keyctl+0x10/0x10
[   96.039833][ T5798]  ? __pfx_do_futex+0x10/0x10
[   96.039852][ T5798]  ? __fget_files+0x3a2/0x420
[   96.039872][ T5798]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   96.039903][ T5798]  ? __se_sys_futex+0x3a8/0x450
[   96.039935][ T5798]  ? rcu_is_watching+0x16/0xb0
[   96.039964][ T5798]  ? __x64_sys_keyctl+0x20/0xc0
[   96.039994][ T5798]  do_syscall_64+0x166/0x520
[   96.040009][ T5798]  ? trace_irq_disable+0x3b/0x140
[   96.040023][ T5798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.040040][ T5798]  ? clear_bhb_loop+0x70/0xc0
[   96.040083][ T5798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.040105][ T5798] RIP: 0033:0x7f58baf9e1d9
[   96.040132][ T5798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.040154][ T5798] RSP: 002b:00007f58bbf2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[   96.040174][ T5798] RAX: ffffffffffffffda RBX: 00007f58bb225fa0 RCX: 00007f58baf9e1d9
[   96.040186][ T5798] RDX: 0000000011a14d4a RSI: 0000000000000000 RDI: 0000000000000016
[   96.040196][ T5798] RBP: 00007f58bb035888 R08: 0000000000000000 R09: 0000000000000000
[   96.040221][ T5798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.040235][ T5798] R13: 00007f58bb226038 R14: 00007f58bb225fa0 R15: 00007ffd8681c808
[   96.040270][ T5798]  </TASK>
[   96.159758][ T5698] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   96.319888][ T5698] usb 4-1: device descriptor read/64, error -71
[   96.551164][ T5698] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   96.596163][   T32] ath6kl: Failed to read usb control message: -71
[   96.596215][   T32] ath6kl: Unable to read the bmi data from the device: -71
[   96.596232][   T32] ath6kl: Unable to recv target info: -71
[   96.624446][   T32] ath6kl: Failed to init ath6kl core: -71
[   96.630210][   T32] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[   96.681251][ T5698] usb 4-1: device descriptor read/64, error -71
[   96.687435][   T32] usb 3-1: USB disconnect, device number 2
[   96.793048][ T5698] usb usb4-port1: attempt power cycle
[   96.899670][ T5810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.900248][ T5810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.131167][ T5698] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   97.131796][ T5713] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   97.156910][ T5698] usb 4-1: device descriptor read/8, error -71
[   97.172991][   T51] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   97.335058][   T51] usb 1-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00
[   97.336552][   T51] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.336602][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.391146][ T5698] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   97.411870][ T5698] usb 4-1: device descriptor read/8, error -71
[   97.523669][ T5698] usb usb4-port1: unable to enumerate USB device
[   97.561225][   T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   97.732719][   T32] usb 3-1: Using ep0 maxpacket: 32
[   97.733506][   T32] usb 3-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[   97.738798][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.738837][   T32] usb 3-1: Product: syz
[   97.738848][   T32] usb 3-1: Manufacturer: syz
[   97.738858][   T32] usb 3-1: SerialNumber: syz
[   97.780640][   T32] usb 3-1: config 0 descriptor??
[   97.805185][   T51] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[   97.812880][   T51] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0
[   97.826364][   T51] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0001/input/input6
[   98.181214][ T5713] usb 2-1: device descriptor read/64, error -71
[   98.188134][   T32] airspy 3-1:0.0: Board ID: 00
[   98.188151][   T32] airspy 3-1:0.0: Firmware version: 
[   98.421192][ T5713] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   98.445050][ T4942] usb 1-1: USB disconnect, device number 2
[   98.572882][ T5713] usb 2-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=0.00
[   98.573997][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.574026][ T5713] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   98.576826][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.576859][ T5713] usb 2-1: Product: syz
[   98.576876][ T5713] usb 2-1: Manufacturer: syz
[   98.576897][ T5713] usb 2-1: SerialNumber: syz
[   98.809868][ T5614] Bluetooth: hci4: CSR: Local version failed (-71)
[   98.828367][ T5698] usb 2-1: USB disconnect, device number 4
[   99.240488][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.243622][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.253914][   T32] airspy 3-1:0.0: Registered as swradio24
[   99.253977][   T32] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[   99.273289][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   99.450819][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.460634][    T9] usb 4-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00
[   99.464908][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.479552][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26432, setting to 1024
[   99.479596][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   99.479619][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   99.479647][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.526848][ T5825] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   99.538765][    T9] spcp8x5 4-1:1.0: SPCP8x5 converter detected
[   99.540198][ T5846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.540642][ T5846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.565007][    T9] usb 4-1: SPCP8x5 converter now attached to ttyUSB0
[   99.859431][    T9] usb 4-1: USB disconnect, device number 6
[   99.880109][    T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[   99.880785][    T9] spcp8x5 4-1:1.0: device disconnected
[  100.558087][ T5859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'.
[  100.608396][ T5698] usb 3-1: USB disconnect, device number 3
[  100.681948][   T32] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  100.898415][   T32] usb 2-1: unable to get BOS descriptor or descriptor too short
[  100.914055][   T32] usb 2-1: not running at top speed; connect to a high speed hub
[  100.914084][   T32] usb 2-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00
[  100.955710][   T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.955738][   T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  100.955803][   T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  100.955831][   T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.072746][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  101.072797][   T32] usb 2-1: Product: syz
[  101.072813][   T32] usb 2-1: Manufacturer: syz
[  101.099508][ T5698] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  101.227651][ T4942] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  101.251990][ T5698] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  101.253670][ T5698] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  101.253704][ T5698] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  101.253725][ T5698] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  101.253838][ T5698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  101.253867][ T5698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  101.256113][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  101.256138][ T5698] usb 4-1: Product: syz
[  101.256154][ T5698] usb 4-1: Manufacturer: syz
[  101.373626][ T5698] cdc_wdm 4-1:1.0: skipping garbage
[  101.373696][ T5698] cdc_wdm 4-1:1.0: skipping garbage
[  101.407265][ T5698] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  101.407306][ T5698] cdc_wdm 4-1:1.0: Unknown control protocol
[  101.438986][   T32] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2)
[  101.439079][   T32] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770.
[  101.483587][ T4942] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  101.485100][ T4942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.505124][ T4942] usb 1-1: config 0 descriptor??
[  101.564682][ T5870] netlink: 14 bytes leftover after parsing attributes in process `syz.2.32'.
[  101.591929][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.595286][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.596958][ T5870] bond0 (unregistering): Released all slaves
[  101.687095][ T5852] netlink: 'syz.1.27': attribute type 17 has an invalid length.
[  101.690650][   T32] usb 2-1: USB disconnect, device number 5
[  101.743846][ T4942] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  101.778463][ T5698] usb 4-1: USB disconnect, device number 7
[  101.962677][ T4942] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1
[  101.962708][ T4942] [drm] Initialized udl on minor 1
[  102.091234][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  102.242049][   T10] usb 3-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00
[  102.243969][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26432, setting to 1024
[  102.244007][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  102.244030][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  102.244071][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.251854][ T5874] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  102.312738][   T10] spcp8x5 3-1:1.0: SPCP8x5 converter detected
[  102.328117][   T10] usb 3-1: SPCP8x5 converter now attached to ttyUSB0
[  102.567369][ T5882] kvm: emulating exchange as write
[  102.659320][   T10] usb 3-1: USB disconnect, device number 4
[  102.687697][   T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  102.688423][   T10] spcp8x5 3-1:1.0: device disconnected
[  102.778922][ T5889] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  102.797379][ T5889] netlink: 88 bytes leftover after parsing attributes in process `syz.1.40'.
[  103.791262][ T5713] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  103.941838][ T5713] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  103.948904][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.948935][ T5713] usb 2-1: Product: syz
[  103.948951][ T5713] usb 2-1: Manufacturer: syz
[  103.949011][ T5713] usb 2-1: SerialNumber: syz
[  103.986827][ T5713] usb 2-1: config 0 descriptor??
[  104.211282][ T5713] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  104.455341][ T5909] smpboot: CPU 1 is now offline
[  104.511456][ T5698] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  104.664210][ T5698] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  104.665220][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.668908][ T5698] usb 3-1: config 0 descriptor??
[  105.061265][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  105.126783][ T5909] phram: not enough arguments
[  105.127076][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'.
[  105.127090][ T5909] openvswitch: netlink: Flow actions attr not present in new flow.
[  105.159619][ T5713] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  105.183354][ T5713] usb 2-1: USB disconnect, device number 6
[  105.187818][ T5918] netlink: 'syz.2.48': attribute type 6 has an invalid length.
[  105.187834][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[  105.231407][ T5918] capability: warning: `syz.2.48' uses 32-bit capabilities (legacy support in use)
[  105.231934][    T9] usb 4-1: New USB device found: idVendor=1235, idProduct=8215, bcdDevice=0.40
[  105.267772][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.267793][    T9] usb 4-1: Product: syz
[  105.267804][    T9] usb 4-1: Manufacturer: syz
[  105.267815][    T9] usb 4-1: SerialNumber: syz
[  105.498171][ T5698] ath6kl: Failed to submit usb control message: -71
[  105.498211][ T5698] ath6kl: unable to send the bmi data to the device: -71
[  105.498245][ T5698] ath6kl: Unable to send get target info: -71
[  105.519693][ T5698] ath6kl: Failed to init ath6kl core: -71
[  105.540941][ T5698] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  105.574906][ T5698] usb 3-1: USB disconnect, device number 5
[  105.606979][    T9] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  105.607029][    T9] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  105.713703][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  105.736440][    T9] usb 4-1: USB disconnect, device number 8
[  105.799731][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  105.961402][ T5937] process 'syz.2.52' launched './file0' with NULL argv: empty string added
[  106.164442][   T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  106.312416][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[  106.312461][   T10] usb 2-1: New USB device found: idVendor=18d1, idProduct=5022, bcdDevice=0.40
[  106.313398][   T10] usb 2-1: config 1 interface 0 altsetting 101 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  106.313420][   T10] usb 2-1: config 1 interface 0 has no altsetting 0
[  106.316372][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.316390][   T10] usb 2-1: Product: ࠄ
[  106.316400][   T10] usb 2-1: Manufacturer: Ô酧窐ᏼ閛ꐆ쌉حῩꞭῦᾳ럓봹런旓⃓鋋㘳檮Ȫ賑額䢜糊ᥒߒ鸻÷᭺뵓齥堞훛帖姁駘㿛傈썉鰕炍ၭ浭꺧㶖굒䙌犯ホ趶恫쁇֢휠噛္鳢姲廷몞Ƛ稥躭唫齚렞斞쒰⥆ᨳ튮惒펣殇⌜滏偊홞꿡徜
[  106.316423][   T10] usb 2-1: SerialNumber: О
[  106.333468][ T5934] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  106.583059][   T10] usbhid 2-1:1.0: can't add hid device: -71
[  106.583161][   T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  106.587705][   T10] usb 2-1: USB disconnect, device number 7
[  107.045004][ T4942] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  107.048715][ T4942] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  107.081686][ T4942] usb 1-1: USB disconnect, device number 3
[  107.581170][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  107.581295][    T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  107.711673][   T10] usb 3-1: device descriptor read/64, error -71
[  107.732088][    T9] usb 2-1: New USB device found: idVendor=046d, idProduct=0a07, bcdDevice=0.00
[  107.733473][    T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  107.733495][    T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  107.733515][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  107.733538][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.738465][    T9] usb 2-1: config 0 descriptor??
[  107.787961][ T4942] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  107.951170][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  107.972508][ T4942] usb 1-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00
[  107.973887][ T4942] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26432, setting to 1024
[  107.973911][ T4942] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  107.973926][ T4942] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  107.973953][ T4942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.046619][ T5952] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  108.067173][ T4942] spcp8x5 1-1:1.0: SPCP8x5 converter detected
[  108.110970][ T4942] usb 1-1: SPCP8x5 converter now attached to ttyUSB0
[  108.125344][   T10] usb 3-1: device descriptor read/64, error -71
[  108.125605][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.125979][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.173791][ T5955] netlink: 72 bytes leftover after parsing attributes in process `syz.1.57'.
[  108.218390][    T9] input: HID 046d:0a07 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:0A07.0002/input/input9
[  108.234994][   T10] usb usb3-port1: attempt power cycle
[  108.354520][    T9] lg-g15 0003:046D:0A07.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:0a07] on usb-dummy_hcd.1-1/input0
[  108.398974][    T9] usb 2-1: USB disconnect, device number 8
[  108.575979][ T5960] fido_id[5960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  108.581857][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  108.618979][   T10] usb 3-1: device descriptor read/8, error -71
[  108.637116][ T2238] usb 1-1: USB disconnect, device number 4
[  108.668850][ T2238] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  108.670275][ T2238] spcp8x5 1-1:1.0: device disconnected
[  108.852147][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  108.871890][   T10] usb 3-1: device descriptor read/8, error -71
[  108.981847][   T10] usb usb3-port1: unable to enumerate USB device
[  109.015917][ T5965] netlink: 348 bytes leftover after parsing attributes in process `syz.3.59'.
[  109.292668][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  109.402203][ T5968] syzkaller1: entered promiscuous mode
[  109.402334][ T5968] syzkaller1: entered allmulticast mode
[  109.443025][   T10] usb 2-1: New USB device found: idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  109.443058][   T10] usb 2-1: too many configurations: 164, using maximum allowed: 8
[  109.475765][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.479240][   T10] usb 2-1: config 0 descriptor??
[  109.490826][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  109.651099][    T9] usb 1-1: Using ep0 maxpacket: 16
[  109.651781][    T9] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89
[  109.652689][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.652705][    T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  109.655940][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  109.655958][    T9] usb 1-1: SerialNumber: syz
[  109.728266][    T9] usb 2-1: USB disconnect, device number 9
[  109.929008][  T197] usb 1-1: USB disconnect, device number 5
[  110.789828][ T5997] openvswitch: netlink: Unexpected mask (mask=40010, allowed=10058)
[  110.871515][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  110.980832][ T6001] bridge0: entered allmulticast mode
[  110.995554][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'.
[  110.995628][ T6001] bridge_slave_1: left allmulticast mode
[  110.995648][ T6001] bridge_slave_1: left promiscuous mode
[  110.996773][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.032120][   T10] usb 1-1: Using ep0 maxpacket: 32
[  111.032833][   T10] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  111.037487][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.070230][   T10] usb 1-1: config 0 descriptor??
[  111.106419][ T6001] bridge_slave_0: left allmulticast mode
[  111.106441][ T6001] bridge_slave_0: left promiscuous mode
[  111.106694][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.137991][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'.
[  111.138008][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'.
[  111.138017][ T5999] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22)
[  111.174093][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[  111.218604][ T6001] bridge0 (unregistering): left allmulticast mode
[  111.295673][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  111.326565][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  111.343026][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  111.343066][   T10] usb 1-1: media controller created
[  111.403691][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  111.571708][ T6002] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  111.841731][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  111.971184][    T9] usb 2-1: device descriptor read/64, error -71
[  112.106949][   T10] az6027: usb out operation failed. (-71)
[  112.106963][   T10] stb0899_attach: Driver disabled by Kconfig
[  112.106970][   T10] az6027: no front-end attached
[  112.106970][   T10] 
[  112.108281][   T10] az6027: usb out operation failed. (-71)
[  112.108293][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  112.159241][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  112.212069][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  112.215182][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  112.215198][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  112.257652][   T10] usb 1-1: USB disconnect, device number 6
[  112.341104][    T9] usb 2-1: device descriptor read/64, error -71
[  112.410555][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  112.453389][    T9] usb usb2-port1: attempt power cycle
[  112.794098][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  112.812231][    T9] usb 2-1: device descriptor read/8, error -71
[  113.012454][ T2238] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  113.051992][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  113.072588][    T9] usb 2-1: device descriptor read/8, error -71
[  113.098459][ T6037] warning: `syz.2.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  113.163425][ T2238] usb 4-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00
[  113.164551][ T2238] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  113.164572][ T2238] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  113.164599][ T2238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.192266][    T9] usb usb2-port1: unable to enumerate USB device
[  113.425322][ T2238] ims_pcu 4-1:1.0: Failed to set line coding, error: -71
[  113.428086][ T2238] ims_pcu 4-1:1.0: probe with driver ims_pcu failed with error -71
[  113.466808][ T2238] usb 4-1: USB disconnect, device number 9
[  113.522706][ T6042] netlink: 'syz.2.79': attribute type 39 has an invalid length.
[  113.522857][ T6042] macvlan1: entered promiscuous mode
[  113.523198][ T6042] macvlan1: entered allmulticast mode
[  113.523211][ T6042] veth1_vlan: entered allmulticast mode
[  113.803217][    T9] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  113.931312][    T9] usb 3-1: device descriptor read/64, error -71
[  114.132633][ T2238] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  114.171266][    T9] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  114.281196][ T2238] usb 1-1: Using ep0 maxpacket: 32
[  114.282030][ T2238] usb 1-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=3f.bf
[  114.288493][ T2238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.288527][ T2238] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  114.288542][ T2238] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  114.288560][ T2238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  114.288579][ T2238] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  114.288596][ T2238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  114.288610][ T2238] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  114.310296][    T9] usb 3-1: device descriptor read/64, error -71
[  114.391585][ T2238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.391607][ T2238] usb 1-1: Product: syz
[  114.391617][ T2238] usb 1-1: Manufacturer: syz
[  114.391628][ T2238] usb 1-1: SerialNumber: syz
[  114.417117][    T9] usb usb3-port1: attempt power cycle
[  114.424408][ T2238] usb 1-1: config 0 descriptor??
[  114.425066][ T6044] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  114.445856][ T2238] usb 1-1: NFC: Reader power on cmd error -90
[  114.445873][ T2238] pn533_usb 1-1:0.0: NFC: Couldn't poweron the reader (error -90)
[  114.445959][ T2238] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90
[  114.628889][  T197] usb 1-1: USB disconnect, device number 7
[  114.732381][ T6053] trusted_key: encrypted_key: insufficient parameters specified
[  114.734917][ T6056] netlink: 'syz.1.82': attribute type 1 has an invalid length.
[  114.735285][ T6054] trusted_key: encrypted_key: insufficient parameters specified
[  114.765262][    T9] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  114.781841][    T9] usb 3-1: device descriptor read/8, error -71
[  115.012267][ T6055] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  115.021156][    T9] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  115.042817][    T9] usb 3-1: device descriptor read/8, error -71
[  115.096933][ T6063] netlink: 'syz.3.83': attribute type 6 has an invalid length.
[  115.152041][    T9] usb usb3-port1: unable to enumerate USB device
[  115.170941][ T6055] usb 2-1: New USB device found: idVendor=9710, idProduct=7720, bcdDevice=0.00
[  115.183761][ T6055] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  115.183785][ T6055] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  115.184265][ T6055] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  115.184283][ T6055] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  115.184298][ T6055] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  115.184326][ T6055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.188980][ T6056] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  115.189119][ T6056] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  115.189213][ T6056] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  115.279937][ T6055] mos7720 2-1:1.0: Moschip 2 port adapter converter detected
[  115.897320][ T6055] usb 2-1: mos7720: usb_control_msg() failed: -71
[  115.924360][ T6055] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  115.994507][ T6055] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  116.045934][ T6055] usb 2-1: USB disconnect, device number 14
[  116.046056][    C0] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  116.116838][ T6055] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  116.147519][ T6055] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  116.148169][ T6055] mos7720 2-1:1.0: device disconnected
[  116.310796][ T6085] nvme_fabrics: unknown parameter or missing value 'ctrl_loss_tmo=' in ctrl creation request
[  116.651765][ T6055] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  116.803414][ T6055] usb 2-1: New USB device found: idVendor=2a39, idProduct=3fd2, bcdDevice=0.40
[  116.804287][ T6055] usb 2-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config
[  116.804334][ T6055] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 137, changing to 7
[  116.804360][ T6055] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  116.806241][ T6055] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.806258][ T6055] usb 2-1: Product: syz
[  116.806269][ T6055] usb 2-1: Manufacturer: syz
[  116.806279][ T6055] usb 2-1: SerialNumber: syz
[  116.921140][ T2238] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  117.036082][ T6055] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  117.073489][ T2238] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00
[  117.074748][ T2238] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.074783][ T2238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.078536][ T2238] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected
[  117.078810][ T2238] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81
[  117.078858][ T2238] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1
[  117.150128][ T2238] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84
[  117.150192][ T2238] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2
[  117.174324][ T2238] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  117.206486][ T2238] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88
[  117.206557][ T2238] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6
[  117.236008][ T2238] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  117.444683][ T6055] usb 2-1: USB disconnect, device number 15
[  117.486850][ T6090] input: syz1 as /devices/virtual/input/input11

syzkaller
syzkaller login: [  117.925155][ T6105] use of bytesused == 0 is deprecated and will be removed in the future,
[  117.925171][ T6105] use the actual size instead.
[  117.957820][ T6103] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.92'.
[  118.371632][ T2238] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  118.501103][ T2238] usb 2-1: device descriptor read/64, error -71
[  118.619980][    T9] usb 3-1: USB disconnect, device number 14
[  118.648689][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  118.676252][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  118.676751][    T9] keyspan 3-1:1.0: device disconnected
[  118.752316][ T2238] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  118.883456][ T2238] usb 2-1: device descriptor read/64, error -71
[  118.996488][ T2238] usb usb2-port1: attempt power cycle
[  119.163878][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'.
[  119.163897][ T6124] netlink: 'syz.0.100': attribute type 1 has an invalid length.
[  119.163906][ T6124] netlink: 224 bytes leftover after parsing attributes in process `syz.0.100'.
[  119.331113][ T2238] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  119.352323][ T2238] usb 2-1: device descriptor read/8, error -71
[  119.586294][ T6127] syzkaller1: entered promiscuous mode
[  119.586314][ T6127] syzkaller1: entered allmulticast mode
[  119.597079][ T2238] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  119.616515][ T2238] usb 2-1: device descriptor read/8, error -71
[  119.722758][ T2238] usb usb2-port1: unable to enumerate USB device
[  120.364915][ T6140] netlink: 'syz.0.104': attribute type 4 has an invalid length.
[  120.462734][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'.
[  120.661140][  T197] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  120.749669][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'.
[  120.813394][  T197] usb 1-1: New USB device found: idVendor=1f4d, idProduct=d220, bcdDevice=93.c9
[  120.814259][  T197] usb 1-1: config 4 has an invalid interface number: 135 but max is 0
[  120.814278][  T197] usb 1-1: config 4 has no interface number 0
[  120.814298][  T197] usb 1-1: config 4 interface 135 has no altsetting 0
[  120.820863][  T197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.820882][  T197] usb 1-1: Product: syz
[  120.820892][  T197] usb 1-1: Manufacturer: syz
[  120.820902][  T197] usb 1-1: SerialNumber: syz
[  121.107260][  T197] dvb-usb: found a 'Geniatech T220 DVB-T/T2 USB2.0' in warm state.
[  121.107296][  T197] dw2102: su3000_power_ctrl: 1, initialized 0
[  121.107537][  T197] dvb-usb: bulk message failed: -22 (2/0)
[  121.160210][  T197] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  121.210690][  T197] dvb-usb: Geniatech T220 DVB-T/T2 USB2.0 error while loading driver (-19)
[  121.228235][  T197] usb 1-1: USB disconnect, device number 8
[  121.694951][ T6137] ovs-system: entered promiscuous mode
[  122.127252][ T6171] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  122.170507][   T41] rtrs_client L2046: <s+>: CM error (CM event: address error, err: -ENODEV)
[  122.198908][ T6171] rtrs_client L2671: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[  122.215583][  T197] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  122.238691][ T6174] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  122.361382][  T197] usb 2-1: Using ep0 maxpacket: 32
[  122.365290][  T197] usb 2-1: unable to get BOS descriptor or descriptor too short
[  122.365326][  T197] usb 2-1: New USB device found: idVendor=09e8, idProduct=0062, bcdDevice=0.40
[  122.371132][  T197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.371152][  T197] usb 2-1: Product: syz
[  122.371163][  T197] usb 2-1: Manufacturer: syz
[  122.371173][  T197] usb 2-1: SerialNumber: syz
[  122.737219][ T6190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.739987][ T6190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.760336][ T6190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.761280][ T2238] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  122.783402][ T6190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.808199][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.808556][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.860848][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.872943][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.876867][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.877245][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.922978][ T2238] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[  122.923898][ T2238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.923931][ T2238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.929286][ T2238] usb 3-1: config 0 descriptor??
[  123.327678][ T6200] overlayfs: missing 'lowerdir'
[  123.557071][ T6206] UBIFS error (pid: 6206): cannot open "ubi0:testvol", error -19
[  123.696899][ T6208] UBIFS error (pid: 6208): cannot open "ubi0:testvol", error -19
[  124.398509][ T6212] netlink: 32 bytes leftover after parsing attributes in process `syz.0.121'.
[  125.076104][  T197] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  125.359421][  T197] usb 2-1: USB disconnect, device number 20
[  125.510826][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  125.649622][ T2238] usbhid 3-1:0.0: can't add hid device: -71
[  125.649703][ T2238] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  125.691836][ T2238] usb 3-1: USB disconnect, device number 15
[  126.322554][  T197] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  126.441126][ T2238] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  126.458988][  T197] usb 2-1: device descriptor read/64, error -71
[  126.476883][ T6242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.125'.
[  126.520438][ T6250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.125'.
[  126.598428][ T2238] usb 3-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  126.600149][ T2238] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  126.600172][ T2238] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  126.641999][ T2238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.642023][ T2238] usb 3-1: Product: syz
[  126.642035][ T2238] usb 3-1: Manufacturer: syz
[  126.642047][ T2238] usb 3-1: SerialNumber: syz
[  126.681419][ T2238] usb 3-1: config 0 descriptor??
[  126.682022][ T6245] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  126.682118][ T6245] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  126.696283][  T197] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  126.825204][  T197] usb 2-1: device descriptor read/64, error -71
[  126.883050][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  126.898325][ T6245] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  126.898433][ T6245] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  126.933454][  T197] usb usb2-port1: attempt power cycle
[  127.042093][    T9] usb 4-1: Using ep0 maxpacket: 8
[  127.043599][    T9] usb 4-1: New USB device found: idVendor=0f11, idProduct=1031, bcdDevice=2f.8e
[  127.044474][    T9] usb 4-1: config 7 has an invalid interface number: 107 but max is 0
[  127.044511][    T9] usb 4-1: config 7 has no interface number 0
[  127.044537][    T9] usb 4-1: config 7 interface 107 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  127.044553][    T9] usb 4-1: config 7 interface 107 altsetting 2 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  127.044572][    T9] usb 4-1: config 7 interface 107 altsetting 2 has an endpoint descriptor with address 0xD7, changing to 0x87
[  127.044590][    T9] usb 4-1: config 7 interface 107 altsetting 2 endpoint 0x87 has invalid maxpacket 38895, setting to 1024
[  127.044609][    T9] usb 4-1: config 7 interface 107 altsetting 2 bulk endpoint 0x87 has invalid maxpacket 1024
[  127.044625][    T9] usb 4-1: config 7 interface 107 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  127.044661][    T9] usb 4-1: config 7 interface 107 has no altsetting 0
[  127.046490][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.046507][    T9] usb 4-1: Product: syz
[  127.046518][    T9] usb 4-1: Manufacturer: syz
[  127.046528][    T9] usb 4-1: SerialNumber: syz
[  127.119373][ T6055] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  127.214946][ T6250] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  127.215120][ T6250] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  127.271297][  T197] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  127.272143][ T6055] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08
[  127.280312][ T6055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.280354][ T6055] usb 1-1: Product: syz
[  127.280365][ T6055] usb 1-1: Manufacturer: syz
[  127.280375][ T6055] usb 1-1: SerialNumber: syz
[  127.300982][  T197] usb 2-1: device descriptor read/8, error -71
[  127.531507][ T6055] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  127.533145][  T197] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  127.561859][  T197] usb 2-1: device descriptor read/8, error -71
[  127.672074][  T197] usb usb2-port1: unable to enumerate USB device
[  127.944883][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.946137][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.054975][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.132'.
[  128.181202][ T2238] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  128.215299][ T2238] usb 3-1: USB disconnect, device number 16
[  128.487001][ T6268] FAULT_INJECTION: forcing a failure.
[  128.487001][ T6268] name failslab, interval 1, probability 0, space 0, times 0
[  128.487037][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.2.133 Not tainted syzkaller #0 PREEMPT(full) 
[  128.487056][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  128.487065][ T6268] Call Trace:
[  128.487072][ T6268]  <TASK>
[  128.487079][ T6268]  dump_stack_lvl+0xe8/0x150
[  128.487110][ T6268]  should_fail_ex+0x3eb/0x540
[  128.487132][ T6268]  should_failslab+0xa8/0x100
[  128.487149][ T6268]  __kmalloc_cache_noprof+0x9e/0x600
[  128.487167][ T6268]  ? assoc_array_insert+0x90/0x2f60
[  128.487181][ T6268]  ? assoc_array_insert+0x90/0x2f60
[  128.487201][ T6268]  assoc_array_insert+0x90/0x2f60
[  128.487215][ T6268]  ? __key_link_lock+0x5e/0xb0
[  128.487232][ T6268]  ? __key_link_lock+0x9b/0xb0
[  128.487404][ T6268]  ? __pfx___mutex_lock+0x10/0x10
[  128.487435][ T6268]  ? __pfx_down_write+0x10/0x10
[  128.487451][ T6268]  ? __pfx_key_set_index_key+0x10/0x10
[  128.487471][ T6268]  __key_link_begin+0xd6/0x1f0
[  128.487490][ T6268]  __key_create_or_update+0x3ef/0xa70
[  128.487514][ T6268]  ? __pfx___key_create_or_update+0x10/0x10
[  128.487545][ T6268]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  128.487569][ T6268]  key_create_or_update+0x42/0x60
[  128.487589][ T6268]  __se_sys_add_key+0x349/0x420
[  128.487640][ T6268]  ? __pfx___se_sys_add_key+0x10/0x10
[  128.487662][ T6268]  ? __x64_sys_add_key+0x20/0xc0
[  128.487679][ T6268]  do_syscall_64+0x166/0x520
[  128.487694][ T6268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.487710][ T6268]  ? clear_bhb_loop+0x70/0xc0
[  128.487731][ T6268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.487748][ T6268] RIP: 0033:0x7f7b1d19e1d9
[  128.487771][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.487784][ T6268] RSP: 002b:00007f7b1e0df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  128.487805][ T6268] RAX: ffffffffffffffda RBX: 00007f7b1d425fa0 RCX: 00007f7b1d19e1d9
[  128.487817][ T6268] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000200000000c00
[  128.487827][ T6268] RBP: 00007f7b1d235888 R08: fffffffffffffffe R09: 0000000000000000
[  128.487838][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.487847][ T6268] R13: 00007f7b1d426038 R14: 00007f7b1d425fa0 R15: 00007ffd8a85e378
[  128.487872][ T6268]  </TASK>
[  128.644150][ T6055] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  128.754728][ T6055] ath9k_htc: Failed to initialize the device
[  128.907864][ T6055] usb 1-1: ath9k_htc: USB layer deinitialized
[  128.981980][ T6262] usb 1-1: USB disconnect, device number 9
[  129.108025][    T9] ldusb 4-1:7.107: Interrupt in endpoint not found
[  129.129603][    T9] usb 4-1: USB disconnect, device number 10
[  129.522398][ T6262] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  129.672761][ T6262] usb 2-1: not running at top speed; connect to a high speed hub
[  129.672788][ T6262] usb 2-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01
[  129.698284][ T6262] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  129.698310][ T6262] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  129.698329][ T6262] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  129.698347][ T6262] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  129.749180][ T6262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.749200][ T6262] usb 2-1: Product: syz
[  129.749210][ T6262] usb 2-1: Manufacturer: syz
[  129.749221][ T6262] usb 2-1: SerialNumber: syz
[  129.778833][ T6274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  129.778934][ T6274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  129.808107][ T6262] ums-onetouch 2-1:1.0: USB Mass Storage device detected
[  129.845748][ T6262] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  129.845824][ T6262] input input12: usb_submit_urb failed
[  129.879249][ T6262] input: failed to attach handler kbd to device input12, error: -5
[  129.889964][ T4963] input input12: usb_submit_urb failed
[  129.914171][ T6262] scsi host1: usb-storage 2-1:1.0
[  129.919798][ T4963] input input12: usb_submit_urb failed
[  130.007524][ T6262] usb 2-1: USB disconnect, device number 25
[  130.521966][ T6055] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  130.689830][ T6055] usb 3-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  130.707666][ T6055] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  130.707687][ T6055] usb 3-1: Product: syz
[  130.707698][ T6055] usb 3-1: Manufacturer: syz
[  130.707708][ T6055] usb 3-1: SerialNumber: syz
[  130.740365][ T6055] usb 3-1: config 0 descriptor??
[  131.004504][ T6291] sg_write: data in/out 600284/136 bytes for SCSI command 0x0-- guessing data in;
[  131.004504][ T6291]    program syz.2.139 not setting count and/or reply_len properly
[  131.054136][ T6262] usb 3-1: USB disconnect, device number 17
[  131.606043][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  131.606088][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  131.870570][ T6305] x_tables: duplicate underflow at hook 1
[  132.113368][ T6311] netlink: 2 bytes leftover after parsing attributes in process `syz.1.144'.
[  132.113390][ T6311] nbd: socks must be embedded in a SOCK_ITEM attr
[  132.119157][ T6311] block nbd0: shutting down sockets
[  132.121323][ T6262] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  132.274976][ T6262] usb 3-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01
[  132.275865][ T6262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  132.275887][ T6262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  132.277647][ T6262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.277664][ T6262] usb 3-1: Product: syz
[  132.277674][ T6262] usb 3-1: Manufacturer: syz
[  132.277685][ T6262] usb 3-1: SerialNumber: syz
[  132.346464][ T6262] ums-onetouch 3-1:1.0: USB Mass Storage device detected
[  132.370428][ T6262] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13
[  132.370490][ T6262] input input13: usb_submit_urb failed
[  132.394130][ T6262] input: failed to attach handler kbd to device input13, error: -5
[  132.395280][ T4963] input input13: usb_submit_urb failed
[  132.395516][ T4963] input input13: usb_submit_urb failed
[  132.423562][ T6262] scsi host1: usb-storage 3-1:1.0
[  132.540562][ T6262] usb 3-1: USB disconnect, device number 18
[  132.592588][ T5616] input input13: usb_submit_urb failed
[  132.617827][ T4963] input input13: usb_submit_urb failed
[  132.619733][ T4963] input input13: usb_submit_urb failed
[  133.489126][ T6330] ACPI: EC: Assuming SCI_EVT clearing on event reads
[  133.491609][ T6262] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  133.531826][ T6055] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  133.652501][ T6262] usb 2-1: New USB device found: idVendor=046d, idProduct=c51b, bcdDevice=0.40
[  133.653375][ T6262] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  133.656737][ T6262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.656756][ T6262] usb 2-1: Manufacturer: у
[  133.656766][ T6262] usb 2-1: SerialNumber: Ͼ㕲䚺質ꖖɺ笇荤迼⻰舽㙜樊ꯟ㝑讶ὧ竨爷㴏ᡨﵰໝ睡ꅹ쾥﷒똠䖠ቸ⡏枿꤭賓松궻༑槦ፕᄌ퓭ᐦ㱊蚄붧㓊㓚ۀ暎㏠쁔恭ⵇ鉲曤僪挟驹͠䄄儨꿳涶בֿ躃Ⳅ䄁ᓙ᝔䆛ʈ뷴峓㙋榙ࡆꚞҹ쑐又륡嗴뽥㓙睷殢籟ꂔ狿蟍젓ƅ測詸棰髗㪀쓏ƒ焋ᠴ
[  133.737461][ T6055] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  133.750935][ T6055] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.750956][ T6055] usb 3-1: Product: syz
[  133.750967][ T6055] usb 3-1: Manufacturer: syz
[  133.750978][ T6055] usb 3-1: SerialNumber: syz
[  133.752402][ T2238] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  133.788551][ T6055] usb 3-1: config 0 descriptor??
[  133.933251][ T2238] usb 4-1: New USB device found: idVendor=1199, idProduct=b000, bcdDevice=0.00
[  133.934239][ T2238] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  133.934258][ T2238] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  133.934285][ T2238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.995564][ T6055] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  134.169490][ T6333] netlink: 'syz.0.151': attribute type 1 has an invalid length.
[  134.247824][ T6262] usbhid 2-1:1.0: can't add hid device: -71
[  134.247921][ T6262] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  134.271925][ T6262] usb 2-1: USB disconnect, device number 26
[  134.366797][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.367213][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.591396][ T2238] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  134.617114][ T6055] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  134.638143][ T6055] usb 3-1: USB disconnect, device number 19
[  134.725134][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.727177][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.729212][  T197] usb 4-1: USB disconnect, device number 11
[  134.743338][ T2238] usb 1-1: Using ep0 maxpacket: 8
[  134.752019][ T2238] usb 1-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  134.782232][ T2238] usb 1-1: config 2 has an invalid interface number: 31 but max is 0
[  134.782254][ T2238] usb 1-1: config 2 has no interface number 0
[  134.782285][ T2238] usb 1-1: config 2 interface 31 has no altsetting 0
[  134.821173][ T2238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.821194][ T2238] usb 1-1: Product: syz
[  134.821206][ T2238] usb 1-1: Manufacturer: syz
[  134.821223][ T2238] usb 1-1: SerialNumber: syz
[  135.191131][ T6055] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  135.344549][ T6055] usb 2-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=ec.00
[  135.347345][ T6055] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.347399][ T6055] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  135.349228][ T6055] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.349246][ T6055] usb 2-1: Product: syz
[  135.349256][ T6055] usb 2-1: Manufacturer: syz
[  135.349267][ T6055] usb 2-1: SerialNumber: syz
[  135.417713][ T6055] usb-storage 2-1:1.0: USB Mass Storage device detected
[  135.622523][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.622904][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.688217][ T6357] FAULT_INJECTION: forcing a failure.
[  135.688217][ T6357] name failslab, interval 1, probability 0, space 0, times 0
[  135.688242][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT(full) 
[  135.688267][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  135.688281][ T6357] Call Trace:
[  135.688290][ T6357]  <TASK>
[  135.688299][ T6357]  dump_stack_lvl+0xe8/0x150
[  135.688325][ T6357]  should_fail_ex+0x3eb/0x540
[  135.688344][ T6357]  should_failslab+0xa8/0x100
[  135.688360][ T6357]  ? do_getname+0x2e/0x250
[  135.688375][ T6357]  kmem_cache_alloc_noprof+0x9c/0x600
[  135.688393][ T6357]  ? do_getname+0x2e/0x250
[  135.688412][ T6357]  do_getname+0x2e/0x250
[  135.688425][ T6357]  ? __se_sys_mkdirat+0x18/0x150
[  135.688443][ T6357]  __se_sys_mkdirat+0x24/0x150
[  135.688460][ T6357]  do_syscall_64+0x166/0x520
[  135.688474][ T6357]  ? trace_irq_disable+0x3b/0x140
[  135.688488][ T6357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.688505][ T6357]  ? clear_bhb_loop+0x70/0xc0
[  135.688521][ T6357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.688537][ T6357] RIP: 0033:0x7f217919e1d9
[  135.688551][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.688564][ T6357] RSP: 002b:00007f217a03d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  135.688581][ T6357] RAX: ffffffffffffffda RBX: 00007f2179425fa0 RCX: 00007f217919e1d9
[  135.688593][ T6357] RDX: 00000000000001ff RSI: 0000200000000800 RDI: ffffffffffffff9c
[  135.688604][ T6357] RBP: 00007f2179235888 R08: 0000000000000000 R09: 0000000000000000
[  135.688613][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.688622][ T6357] R13: 00007f2179426038 R14: 00007f2179425fa0 R15: 00007ffdf3ac4ff8
[  135.688646][ T6357]  </TASK>
[  135.899177][ T2238] ch9200 1-1:2.31: probe with driver ch9200 failed with error -71
[  135.916381][ T2238] usb 1-1: USB disconnect, device number 10
[  135.934374][ T6357] FAULT_INJECTION: forcing a failure.
[  135.934374][ T6357] name failslab, interval 1, probability 0, space 0, times 0
[  135.934399][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT(full) 
[  135.934417][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  135.934426][ T6357] Call Trace:
[  135.934432][ T6357]  <TASK>
[  135.934439][ T6357]  dump_stack_lvl+0xe8/0x150
[  135.934460][ T6357]  should_fail_ex+0x3eb/0x540
[  135.934479][ T6357]  ? __pfx_sock_alloc_inode+0x10/0x10
[  135.934495][ T6357]  should_failslab+0xa8/0x100
[  135.934511][ T6357]  ? __pfx_sock_alloc_inode+0x10/0x10
[  135.934525][ T6357]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  135.934543][ T6357]  ? sock_alloc_inode+0x2c/0x1a0
[  135.934578][ T6357]  ? sock_alloc_inode+0x2c/0x1a0
[  135.934594][ T6357]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  135.934613][ T6357]  ? __pfx_sock_alloc_inode+0x10/0x10
[  135.934627][ T6357]  sock_alloc_inode+0x2c/0x1a0
[  135.934642][ T6357]  ? __pfx_sock_alloc_inode+0x10/0x10
[  135.934656][ T6357]  alloc_inode+0x6a/0x1b0
[  135.934673][ T6357]  __sock_create+0x127/0xac0
[  135.934695][ T6357]  __sys_socket+0xd6/0x1b0
[  135.934712][ T6357]  __x64_sys_socket+0x7a/0x90
[  135.934728][ T6357]  do_syscall_64+0x166/0x520
[  135.934742][ T6357]  ? trace_irq_disable+0x3b/0x140
[  135.934756][ T6357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.934772][ T6357]  ? clear_bhb_loop+0x70/0xc0
[  135.934789][ T6357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.934805][ T6357] RIP: 0033:0x7f217919e1d9
[  135.934819][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.934836][ T6357] RSP: 002b:00007f217a03d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  135.934853][ T6357] RAX: ffffffffffffffda RBX: 00007f2179425fa0 RCX: 00007f217919e1d9
[  135.934864][ T6357] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
[  135.934873][ T6357] RBP: 00007f2179235888 R08: 0000000000000000 R09: 0000000000000000
[  135.934883][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.934892][ T6357] R13: 00007f2179426038 R14: 00007f2179425fa0 R15: 00007ffdf3ac4ff8
[  135.934916][ T6357]  </TASK>
[  135.934924][ T6357] socket: no more sockets
[  136.492346][  T197] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  136.516725][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.517026][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.550130][ T6369] jffs2: notice: (6369) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  136.652177][  T197] usb 4-1: New USB device found: idVendor=2040, idProduct=5500, bcdDevice=4d.8b
[  136.657659][  T197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  136.657681][  T197] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  136.657698][  T197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 200, changing to 7
[  136.657717][  T197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34754, setting to 1024
[  136.657748][  T197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.660763][  T197] usb 4-1: config 0 descriptor??
[  136.733434][ T2238] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  136.749768][  T197] smsusb:smsusb_probe: board id=8, interface number 0
[  136.766800][  T197] smsusb:siano_media_device_register: media controller created
[  136.795289][  T197] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
[  136.795312][  T197] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
[  136.830462][ T6365] netlink: 108 bytes leftover after parsing attributes in process `syz.2.157'.
[  136.849959][  T197] ------------[ cut here ]------------
[  136.849971][  T197] !PageLargeKmalloc(page)
[  136.849980][  T197] WARNING: mm/slub.c:6855 at free_large_kmalloc+0x97/0x110, CPU#0: kworker/0:2/197
[  136.872499][  T197] Modules linked in:
[  136.876840][  T197] CPU: 0 UID: 0 PID: 197 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
[  136.886655][  T197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  136.897834][  T197] Workqueue: usb_hub_wq hub_event
[  136.903916][  T197] RIP: 0010:free_large_kmalloc+0x97/0x110
[  136.909655][  T197] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 7a af fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 35 94 7e 8e 5b 41 5e 5d e9 a3 15 f8 fe
[  136.929402][  T197] RSP: 0018:ffffc90002fceb08 EFLAGS: 00010206
[  136.935662][  T197] RAX: 00000000ff000000 RBX: ffffea0000e45880 RCX: 0000000000000001
[  136.943961][  T197] RDX: ffffc900180d4000 RSI: ffff888039162000 RDI: ffffea0000e45880
[  136.952078][  T197] RBP: 0000000000000000 R08: ffff888033494b03 R09: 1ffff11006692960
[  136.961362][  T197] R10: dffffc0000000000 R11: ffffed1006692961 R12: 1ffff110477c9182
[  136.969452][  T197] R13: 0000000000000000 R14: ffff888033494b60 R15: dffffc0000000000
[  136.978261][  T197] FS:  0000000000000000(0000) GS:ffff88812341f000(0000) knlGS:0000000000000000
[  136.987269][  T197] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  136.993894][  T197] CR2: 00007f21791eb8c0 CR3: 000000002471a000 CR4: 00000000003526f0
[  137.001985][  T197] Call Trace:
[  137.005272][  T197]  <TASK>
[  137.008385][  T197]  usb_free_urb+0xd0/0x120
[  137.012867][  T197]  smsusb_term_device+0x1d0/0x3d0
[  137.017903][  T197]  smsusb_probe+0x1aba/0x2280
[  137.022634][  T197]  ? __pfx_smsusb_probe+0x10/0x10
[  137.027665][  T197]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  137.033254][  T197]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  137.039093][  T197]  ? __pm_runtime_set_status+0xa96/0xd80
[  137.044995][  T197]  usb_probe_interface+0x788/0xe50
[  137.050166][  T197]  ? __pfx_usb_probe_interface+0x10/0x10
[  137.055841][  T197]  ? kernfs_create_link+0x1cd/0x240
[  137.061104][  T197]  ? sysfs_do_create_link_sd+0xe0/0x110
[  137.067875][  T197]  ? driver_sysfs_add+0x1fe/0x210
[  137.073633][  T197]  ? __pfx_usb_probe_interface+0x10/0x10
[  137.079280][  T197]  really_probe+0x254/0xae0
[  137.083897][  T197]  __driver_probe_device+0x1e8/0x360
[  137.089209][  T197]  driver_probe_device+0x4f/0x240
[  137.094466][  T197]  __device_attach_driver+0x270/0x410
[  137.099874][  T197]  bus_for_each_drv+0x258/0x2f0
[  137.104790][  T197]  ? __pfx___device_attach_driver+0x10/0x10
[  137.110695][  T197]  ? __pfx_bus_for_each_drv+0x10/0x10
[  137.116108][  T197]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  137.122275][  T197]  __device_attach+0x2c4/0x450
[  137.127048][  T197]  ? __pfx___device_attach+0x10/0x10
[  137.132387][  T197]  ? do_raw_spin_unlock+0xf5/0x200
[  137.137502][  T197]  ? _raw_spin_unlock+0x28/0x50
[  137.142399][  T197]  device_initial_probe+0xa1/0xd0
[  137.147440][  T197]  bus_probe_device+0x12a/0x220
[  137.152334][  T197]  device_add+0x7d7/0xb80
[  137.156678][  T197]  usb_set_configuration+0x1bb5/0x2260
[  137.162223][  T197]  usb_generic_driver_probe+0x8d/0x150
[  137.168909][  T197]  usb_probe_device+0x1c3/0x3b0
[  137.174501][  T197]  ? __pfx_usb_probe_device+0x10/0x10
[  137.179885][  T197]  really_probe+0x254/0xae0
[  137.184467][  T197]  __driver_probe_device+0x1e8/0x360
[  137.189770][  T197]  driver_probe_device+0x4f/0x240
[  137.194867][  T197]  __device_attach_driver+0x270/0x410
[  137.200248][  T197]  bus_for_each_drv+0x258/0x2f0
[  137.205317][  T197]  ? __pfx___device_attach_driver+0x10/0x10
[  137.211302][  T197]  ? __pfx_bus_for_each_drv+0x10/0x10
[  137.216697][  T197]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  137.222661][  T197]  __device_attach+0x2c4/0x450
[  137.227434][  T197]  ? __pfx___device_attach+0x10/0x10
[  137.232808][  T197]  ? do_raw_spin_unlock+0xf5/0x200
[  137.237951][  T197]  ? _raw_spin_unlock+0x28/0x50
[  137.242867][  T197]  device_initial_probe+0xa1/0xd0
[  137.247913][  T197]  bus_probe_device+0x12a/0x220
[  137.252827][  T197]  device_add+0x7d7/0xb80
[  137.257167][  T197]  usb_new_device+0x9aa/0x1690
[  137.261964][  T197]  ? __pfx_usb_new_device+0x10/0x10
[  137.268356][  T197]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.274256][  T197]  hub_event+0x28e8/0x4d30
[  137.278680][  T197]  ? do_raw_spin_unlock+0xf5/0x200
[  137.284215][  T197]  ? __pfx_hub_event+0x10/0x10
[  137.289023][  T197]  ? rcu_is_watching+0x16/0xb0
[  137.293878][  T197]  ? process_scheduled_works+0x97a/0x1630
[  137.299619][  T197]  process_scheduled_works+0xc3d/0x1630
[  137.305257][  T197]  ? __pfx_process_scheduled_works+0x10/0x10
[  137.311303][  T197]  ? assign_work+0x3cf/0x5d0
[  137.315906][  T197]  worker_thread+0xa47/0xfb0
[  137.320522][  T197]  kthread+0x38b/0x480
[  137.324630][  T197]  ? __pfx_worker_thread+0x10/0x10
[  137.329745][  T197]  ? __pfx_kthread+0x10/0x10
[  137.334434][  T197]  ret_from_fork+0x514/0xb70
[  137.339036][  T197]  ? __pfx_ret_from_fork+0x10/0x10
[  137.344302][  T197]  ? __switch_to+0xc78/0x1410
[  137.349478][  T197]  ? __pfx_kthread+0x10/0x10
[  137.354151][  T197]  ret_from_fork_asm+0x1a/0x30
[  137.358936][  T197]  </TASK>
[  137.362370][  T197] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  137.369658][  T197] CPU: 0 UID: 0 PID: 197 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
[  137.378944][  T197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  137.389004][  T197] Workqueue: usb_hub_wq hub_event
[  137.394045][  T197] Call Trace:
[  137.397327][  T197]  <TASK>
[  137.400279][  T197]  vpanic+0x26f/0x710
[  137.404285][  T197]  panic+0xc5/0xd0
[  137.408033][  T197]  ? __pfx_panic+0x10/0x10
[  137.412475][  T197]  ? ret_from_fork_asm+0x1a/0x30
[  137.417422][  T197]  __warn+0x315/0x4c0
[  137.421419][  T197]  ? free_large_kmalloc+0x97/0x110
[  137.426532][  T197]  ? free_large_kmalloc+0x97/0x110
[  137.431642][  T197]  __report_bug+0x276/0x570
[  137.436153][  T197]  ? bus_for_each_drv+0x258/0x2f0
[  137.441191][  T197]  ? __device_attach+0x2c4/0x450
[  137.446138][  T197]  ? device_initial_probe+0xa1/0xd0
[  137.451347][  T197]  ? free_large_kmalloc+0x97/0x110
[  137.456477][  T197]  ? __pfx___report_bug+0x10/0x10
[  137.461507][  T197]  ? bus_probe_device+0x12a/0x220
[  137.466532][  T197]  ? device_add+0x7d7/0xb80
[  137.471038][  T197]  ? usb_new_device+0x9aa/0x1690
[  137.475979][  T197]  ? hub_event+0x28e8/0x4d30
[  137.480571][  T197]  ? process_scheduled_works+0xc3d/0x1630
[  137.486292][  T197]  ? worker_thread+0xa47/0xfb0
[  137.491054][  T197]  ? kthread+0x38b/0x480
[  137.495304][  T197]  ? smscore_unregister_device+0x651/0x780
[  137.501119][  T197]  ? free_large_kmalloc+0x97/0x110
[  137.506233][  T197]  report_bug+0x16b/0x220
[  137.510565][  T197]  ? free_large_kmalloc+0x97/0x110
[  137.515700][  T197]  ? free_large_kmalloc+0x99/0x110
[  137.520811][  T197]  handle_bug+0x9c/0x200
[  137.525057][  T197]  exc_invalid_op+0x1a/0x50
[  137.529563][  T197]  asm_exc_invalid_op+0x1a/0x20
[  137.534413][  T197] RIP: 0010:free_large_kmalloc+0x97/0x110
[  137.540135][  T197] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 7a af fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 35 94 7e 8e 5b 41 5e 5d e9 a3 15 f8 fe
[  137.559759][  T197] RSP: 0018:ffffc90002fceb08 EFLAGS: 00010206
[  137.565827][  T197] RAX: 00000000ff000000 RBX: ffffea0000e45880 RCX: 0000000000000001
[  137.573795][  T197] RDX: ffffc900180d4000 RSI: ffff888039162000 RDI: ffffea0000e45880
[  137.581779][  T197] RBP: 0000000000000000 R08: ffff888033494b03 R09: 1ffff11006692960
[  137.589747][  T197] R10: dffffc0000000000 R11: ffffed1006692961 R12: 1ffff110477c9182
[  137.597719][  T197] R13: 0000000000000000 R14: ffff888033494b60 R15: dffffc0000000000
[  137.605711][  T197]  usb_free_urb+0xd0/0x120
[  137.610138][  T197]  smsusb_term_device+0x1d0/0x3d0
[  137.615170][  T197]  smsusb_probe+0x1aba/0x2280
[  137.619859][  T197]  ? __pfx_smsusb_probe+0x10/0x10
[  137.624887][  T197]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  137.630529][  T197]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  137.636605][  T197]  ? __pm_runtime_set_status+0xa96/0xd80
[  137.642248][  T197]  usb_probe_interface+0x788/0xe50
[  137.647891][  T197]  ? __pfx_usb_probe_interface+0x10/0x10
[  137.653607][  T197]  ? kernfs_create_link+0x1cd/0x240
[  137.658817][  T197]  ? sysfs_do_create_link_sd+0xe0/0x110
[  137.664383][  T197]  ? driver_sysfs_add+0x1fe/0x210
[  137.669420][  T197]  ? __pfx_usb_probe_interface+0x10/0x10
[  137.675059][  T197]  really_probe+0x254/0xae0
[  137.679570][  T197]  __driver_probe_device+0x1e8/0x360
[  137.684870][  T197]  driver_probe_device+0x4f/0x240
[  137.689902][  T197]  __device_attach_driver+0x270/0x410
[  137.695281][  T197]  bus_for_each_drv+0x258/0x2f0
[  137.700148][  T197]  ? __pfx___device_attach_driver+0x10/0x10
[  137.706128][  T197]  ? __pfx_bus_for_each_drv+0x10/0x10
[  137.711503][  T197]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  137.717321][  T197]  __device_attach+0x2c4/0x450
[  137.722220][  T197]  ? __pfx___device_attach+0x10/0x10
[  137.727516][  T197]  ? do_raw_spin_unlock+0xf5/0x200
[  137.732638][  T197]  ? _raw_spin_unlock+0x28/0x50
[  137.737517][  T197]  device_initial_probe+0xa1/0xd0
[  137.742664][  T197]  bus_probe_device+0x12a/0x220
[  137.747537][  T197]  device_add+0x7d7/0xb80
[  137.751887][  T197]  usb_set_configuration+0x1bb5/0x2260
[  137.757384][  T197]  usb_generic_driver_probe+0x8d/0x150
[  137.762857][  T197]  usb_probe_device+0x1c3/0x3b0
[  137.767718][  T197]  ? __pfx_usb_probe_device+0x10/0x10
[  137.773095][  T197]  really_probe+0x254/0xae0
[  137.777606][  T197]  __driver_probe_device+0x1e8/0x360
[  137.782894][  T197]  driver_probe_device+0x4f/0x240
[  137.787924][  T197]  __device_attach_driver+0x270/0x410
[  137.793308][  T197]  bus_for_each_drv+0x258/0x2f0
[  137.798156][  T197]  ? __pfx___device_attach_driver+0x10/0x10
[  137.804048][  T197]  ? __pfx_bus_for_each_drv+0x10/0x10
[  137.809441][  T197]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  137.815248][  T197]  __device_attach+0x2c4/0x450
[  137.820014][  T197]  ? __pfx___device_attach+0x10/0x10
[  137.825308][  T197]  ? do_raw_spin_unlock+0xf5/0x200
[  137.830420][  T197]  ? _raw_spin_unlock+0x28/0x50
[  137.835274][  T197]  device_initial_probe+0xa1/0xd0
[  137.840308][  T197]  bus_probe_device+0x12a/0x220
[  137.845160][  T197]  device_add+0x7d7/0xb80
[  137.849491][  T197]  usb_new_device+0x9aa/0x1690
[  137.854265][  T197]  ? __pfx_usb_new_device+0x10/0x10
[  137.859485][  T197]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.864686][  T197]  hub_event+0x28e8/0x4d30
[  137.869107][  T197]  ? do_raw_spin_unlock+0xf5/0x200
[  137.874256][  T197]  ? __pfx_hub_event+0x10/0x10
[  137.879031][  T197]  ? rcu_is_watching+0x16/0xb0
[  137.883809][  T197]  ? process_scheduled_works+0x97a/0x1630
[  137.889543][  T197]  process_scheduled_works+0xc3d/0x1630
[  137.895130][  T197]  ? __pfx_process_scheduled_works+0x10/0x10
[  137.901143][  T197]  ? assign_work+0x3cf/0x5d0
[  137.905762][  T197]  worker_thread+0xa47/0xfb0
[  137.910383][  T197]  kthread+0x38b/0x480
[  137.914458][  T197]  ? __pfx_worker_thread+0x10/0x10
[  137.919572][  T197]  ? __pfx_kthread+0x10/0x10
[  137.924169][  T197]  ret_from_fork+0x514/0xb70
[  137.928809][  T197]  ? __pfx_ret_from_fork+0x10/0x10
[  137.933928][  T197]  ? __switch_to+0xc78/0x1410
[  137.938625][  T197]  ? __pfx_kthread+0x10/0x10
[  137.943217][  T197]  ret_from_fork_asm+0x1a/0x30
[  137.948354][  T197]  </TASK>
[  137.951442][  T197] Kernel Offset: disabled
[  137.955778][  T197] Rebooting in 86400 seconds..