last executing test programs:

7.704188232s ago: executing program 3 (id=22):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000c00)={0x4, 0x0, [{0x1, 0x0, 0x0, 0x6f2, 0x0, 0xffffffff, 0xffffffff}, {0x7, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}, {0x40000001, 0x0, 0x0, 0x31237648}, {0x40000004, 0x0, 0x0, 0xffffffff, 0xffffffff}]})

7.342324556s ago: executing program 3 (id=23):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)

7.132158508s ago: executing program 3 (id=24):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0)
write(r0, &(0x7f0000002400)="2bcb", 0x2)

6.785836071s ago: executing program 3 (id=25):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000140190933334000000000010902"], 0x0)
syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

6.476320129s ago: executing program 0 (id=26):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232", 0x88, 0xfffffffffffffffd)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6)
write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='wl,,'], 0x8)

6.339310265s ago: executing program 0 (id=27):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\x00\x00!\x00'}, @local=@item_4={0x3, 0x2, 0x0, "034d2500"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x2, 0xffffffff, 0x2, 0x3918, 0xfffffd6c, 0x5})

4.097334326s ago: executing program 2 (id=33):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

3.924995282s ago: executing program 2 (id=34):
unshare(0x20000400)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TCSETS(r0, 0x545c, &(0x7f00000006c0)={0x20000000, 0x0, 0x1ffffe, 0x0, 0x7, "43e6323cce19dceaa867c4e745c80552a500"})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001)

3.696710997s ago: executing program 2 (id=35):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4)
write$binfmt_misc(r0, &(0x7f0000000300), 0x6)
recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x10000)

3.499614959s ago: executing program 2 (id=36):
r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3.454685824s ago: executing program 0 (id=37):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)

3.421747574s ago: executing program 3 (id=38):
r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.223673136s ago: executing program 0 (id=39):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000f6000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff00000000002000000000000000000000abcdad6d873200002f00000000000000050000000000000002000000000000080100000000000000010000000000000044000500e0000002000000000000000000000000000000003c00000002000000ac141424000000000040000000000000af060000000401000000000000000000000000000081f376c1dc5e3149b9e45aa12923a23138bee2ccf13a9950b6b196e3a70375"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050)
r2 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file1', [{0x20, 'cpuset.effective_cpus\x00'}]}, 0x22)
clock_gettime(0x0, &(0x7f0000001bc0))
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2004000)
llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/150, 0x96)

2.921265093s ago: executing program 0 (id=40):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001ffffff40460801100001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000440)={0x14, 0x0, 0x0}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.821057432s ago: executing program 1 (id=41):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0)

2.596023368s ago: executing program 1 (id=42):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x17, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

2.466596001s ago: executing program 1 (id=43):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, &(0x7f0000000700), 0x0)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r3, &(0x7f0000000900)='0', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r4, &(0x7f0000000d00)='0\n', 0x2)
close(r4)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000001600)='usbip-vudc.0\n', 0xd)
close(r5)
nanosleep(&(0x7f0000001700)={0x0, 0x5f5e100}, 0x0)

2.174407054s ago: executing program 1 (id=44):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000000280)="d08908650d227775", 0x8, 0x0)

2.071036729s ago: executing program 1 (id=45):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="391106"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="4031ec0000"], 0x0, 0x0, 0x0, 0x0, 0x0})

1.848072403s ago: executing program 2 (id=46):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000682000/0x1000)=nil, 0x1000}})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
connect$inet6(r3, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, &(0x7f0000000380))
r5 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006000000693574"], 0x1c}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0)
fstat(r1, &(0x7f0000000300))
sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800)
stat(0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB])
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)

1.18304016s ago: executing program 3 (id=47):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f00000009c0)={0x0, 0xe, 0x2, "810b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x40, 0xf, 0xf, "aa63c2a22a007afb3282cf2f77dfb1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

785.123981ms ago: executing program 0 (id=48):
chown(0x0, 0x0, 0xffffffffffffffff)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x2, "fd"}, @main=@item_012={0x2, 0x0, 0xb, '\x004'}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x20, 0x3, 0x6, "88b87637197a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

554.286427ms ago: executing program 2 (id=49):
socket$netlink(0x10, 0x3, 0x10)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="4006e4000000e410"], 0x0, 0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 1 (id=50):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000200), 0x0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000400)='./file0', 0x7)
close(0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='1', 0x1)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubsys', 0x1d)
nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts.
[   72.280098][ T5604] cgroup: Unknown subsys name 'net'
[   72.406839][ T5604] cgroup: Unknown subsys name 'cpuset'
[   72.410044][ T5604] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   74.072981][ T5604] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   77.665895][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.666766][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.669106][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.669215][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.670580][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.670680][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.671173][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.671882][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.672087][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.674910][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.675395][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.676086][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.677307][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.678001][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.681314][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.681788][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.683370][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.702028][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.722204][ T4931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.733325][ T4931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.330433][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.330566][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.333397][ T5615] bridge_slave_0: entered allmulticast mode
[   79.335632][ T5615] bridge_slave_0: entered promiscuous mode
[   79.362353][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.362676][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.362841][ T5615] bridge_slave_1: entered allmulticast mode
[   79.365101][ T5615] bridge_slave_1: entered promiscuous mode
[   79.429277][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.429408][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.429493][ T5614] bridge_slave_0: entered allmulticast mode
[   79.430696][ T5614] bridge_slave_0: entered promiscuous mode
[   79.475455][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.475558][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.475943][ T5614] bridge_slave_1: entered allmulticast mode
[   79.477433][ T5614] bridge_slave_1: entered promiscuous mode
[   79.506872][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.545786][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.612718][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.645538][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.645798][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.645941][ T5617] bridge_slave_0: entered allmulticast mode
[   79.647746][ T5617] bridge_slave_0: entered promiscuous mode
[   79.651792][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.652042][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.652135][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.652248][ T5616] bridge_slave_0: entered allmulticast mode
[   79.655401][ T5616] bridge_slave_0: entered promiscuous mode
[   79.660352][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.660459][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.660592][ T5616] bridge_slave_1: entered allmulticast mode
[   79.663669][ T5616] bridge_slave_1: entered promiscuous mode
[   79.726338][ T5615] team0: Port device team_slave_0 added
[   79.726499][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.726569][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.726915][ T5617] bridge_slave_1: entered allmulticast mode
[   79.730245][ T5617] bridge_slave_1: entered promiscuous mode
[   79.733611][ T4931] Bluetooth: hci0: command tx timeout
[   79.734074][ T4931] Bluetooth: hci1: command tx timeout
[   79.734797][ T5623] Bluetooth: hci2: command tx timeout
[   79.738560][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.745377][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.777085][ T5615] team0: Port device team_slave_1 added
[   79.813016][   T53] Bluetooth: hci3: command tx timeout
[   79.858065][ T5616] team0: Port device team_slave_0 added
[   79.860215][ T5614] team0: Port device team_slave_0 added
[   79.879710][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.882137][ T5616] team0: Port device team_slave_1 added
[   79.899935][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.901955][ T5614] team0: Port device team_slave_1 added
[   79.903750][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.903767][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.903789][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.907545][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.907561][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.907584][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.005236][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.005256][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.005278][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.059375][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.059397][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.059424][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.060605][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.060621][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.060646][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.061749][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.061764][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.061788][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.065844][ T5617] team0: Port device team_slave_0 added
[   80.098032][ T5617] team0: Port device team_slave_1 added
[   80.143715][ T5615] hsr_slave_0: entered promiscuous mode
[   80.145032][ T5615] hsr_slave_1: entered promiscuous mode
[   80.180407][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.180426][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.180448][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.279284][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.279303][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.279329][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.286729][ T5614] hsr_slave_0: entered promiscuous mode
[   80.287714][ T5614] hsr_slave_1: entered promiscuous mode
[   80.288771][ T5614] debugfs: 'hsr0' already exists in 'hsr'
[   80.288847][ T5614] Cannot create hsr debugfs directory
[   80.297242][ T5616] hsr_slave_0: entered promiscuous mode
[   80.298244][ T5616] hsr_slave_1: entered promiscuous mode
[   80.298986][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   80.299003][ T5616] Cannot create hsr debugfs directory
[   80.481342][ T5617] hsr_slave_0: entered promiscuous mode
[   80.482038][ T5617] hsr_slave_1: entered promiscuous mode
[   80.494536][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   80.494561][ T5617] Cannot create hsr debugfs directory
[   80.860871][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.876816][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   80.877824][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.881372][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   80.890853][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.918559][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   80.919987][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.940171][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.023988][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.027600][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.029170][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.056480][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.061037][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.068504][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.071707][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.084291][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.196759][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.202172][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.223238][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.228494][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.250398][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.261060][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.276744][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.280413][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.342161][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.381710][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.394650][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.414731][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.418255][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.441005][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.451209][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.470235][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[   81.470506][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.488869][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.503968][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.524911][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.525008][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.558494][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.558572][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.625535][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   81.653231][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.653301][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.654907][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.654968][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.754185][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.812729][   T53] Bluetooth: hci2: command tx timeout
[   81.812765][   T53] Bluetooth: hci1: command tx timeout
[   81.812789][   T53] Bluetooth: hci0: command tx timeout
[   81.854332][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   81.888648][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.888770][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.892903][ T5623] Bluetooth: hci3: command tx timeout
[   81.943798][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.943923][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.985849][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.056884][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   82.154470][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.154584][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.179075][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.179168][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.895749][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.119986][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.128158][ T5616] veth0_vlan: entered promiscuous mode
[   83.204403][ T5616] veth1_vlan: entered promiscuous mode
[   83.300885][ T5616] veth0_macvtap: entered promiscuous mode
[   83.346196][ T5616] veth1_macvtap: entered promiscuous mode
[   83.394904][ T5615] veth0_vlan: entered promiscuous mode
[   83.428968][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.445692][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.454805][ T5615] veth1_vlan: entered promiscuous mode
[   83.493770][ T1156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.527486][   T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.541829][ T1156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.555980][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.595485][ T5615] veth0_macvtap: entered promiscuous mode
[   83.616357][ T5615] veth1_macvtap: entered promiscuous mode
[   83.713647][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.717414][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.764934][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.801002][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.801026][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.854665][ T1156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.854892][ T1156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.855062][ T1156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.872663][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.872685][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.872949][   T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.893460][   T53] Bluetooth: hci1: command tx timeout
[   83.893497][   T53] Bluetooth: hci2: command tx timeout
[   83.893639][ T5623] Bluetooth: hci0: command tx timeout
[   83.895510][  T705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.914265][ T5614] veth0_vlan: entered promiscuous mode
[   83.973532][ T5623] Bluetooth: hci3: command tx timeout
[   83.991901][ T5614] veth1_vlan: entered promiscuous mode
[   84.012325][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   84.111636][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.111660][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.216489][ T5614] veth0_macvtap: entered promiscuous mode
[   84.224460][  T705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.224481][  T705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.246875][ T5617] veth0_vlan: entered promiscuous mode
[   84.274648][ T5614] veth1_macvtap: entered promiscuous mode
[   84.340608][ T5617] veth1_vlan: entered promiscuous mode
[   84.395400][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.425654][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.526758][ T5617] veth0_macvtap: entered promiscuous mode
[   84.583944][ T5617] veth1_macvtap: entered promiscuous mode
[   84.585877][   T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.608947][   T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.648025][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.693892][ T1219] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   84.703434][  T705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.704500][ T1167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.711591][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.715481][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.715503][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.815151][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.815176][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.875315][ T1219] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[   84.896236][ T1219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.924643][ T1219] usb 1-1: config 0 descriptor??
[   84.961502][ T1219] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[   85.124051][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.124105][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.124120][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.124351][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.142695][ T1156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.143629][ T1156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.187642][ T1219] gp8psk: usb in 128 operation failed.
[   85.238260][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.238285][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.391852][ T1219] gp8psk: FW Version = 216.162.133 (0xd8a285)  Build 2187/109/55
[   85.469874][ T5790] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.595352][ T1219] gp8psk: usb in 149 operation failed.
[   85.595374][ T1219] gp8psk: failed to get FPGA version
[   85.596967][ T1219] gp8psk: usb in 138 operation failed.
[   85.596985][ T1219] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   85.597146][ T1219] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[   85.615199][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.656779][ T1219] usb 1-1: USB disconnect, device number 2
[   85.694144][ T5348] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   85.794931][ T5796] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   85.822140][    T9] usb 4-1: Using ep0 maxpacket: 8
[   85.830091][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   85.831660][    T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[   85.831707][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[   85.831724][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   85.831739][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[   85.831754][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   85.831767][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   85.831793][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.853560][ T5348] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   85.854806][ T5348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.854849][ T5348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.861069][ T5348] usb 3-1: config 0 descriptor??
[   85.973320][ T4931] Bluetooth: hci2: command tx timeout
[   85.973360][ T4931] Bluetooth: hci1: command tx timeout
[   85.973418][ T5623] Bluetooth: hci0: command tx timeout
[   86.053159][ T5623] Bluetooth: hci3: command tx timeout
[   86.190057][    T9] usb 4-1: usb_control_msg returned -32
[   86.190112][    T9] usbtmc 4-1:16.0: can't read capabilities
[   86.336683][ T5348] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[   86.342986][ T1219] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   86.345473][ T5348] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5
[   86.489230][ T5348] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[   86.525299][ T1219] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   86.526692][ T1219] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   86.526720][ T1219] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   86.552237][ T1219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.552268][ T1219] usb 2-1: Product: syz
[   86.552283][ T1219] usb 2-1: Manufacturer: syz
[   86.552297][ T1219] usb 2-1: SerialNumber: syz
[   86.685575][    C1] Mem-Info:
[   86.685594][    C1] active_anon:5547 inactive_anon:0 isolated_anon:0
[   86.685594][    C1]  active_file:0 inactive_file:42167 isolated_file:0
[   86.685594][    C1]  unevictable:0 dirty:1789 writeback:0
[   86.685594][    C1]  slab_reclaimable:9783 slab_unreclaimable:89043
[   86.685594][    C1]  mapped:24474 shmem:522 pagetables:1075
[   86.685594][    C1]  sec_pagetables:0 bounce:0
[   86.685594][    C1]  kernel_misc_reclaimable:0
[   86.685594][    C1]  free:1348622 free_pcp:14950 free_cma:0
[   86.685659][    C1] Node 0 active_anon:22188kB inactive_anon:0kB active_file:0kB inactive_file:168472kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97896kB dirty:7144kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11540kB pagetables:4212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   86.685734][    C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:88kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   86.685795][    C1] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   86.685866][    C1] lowmem_reserve[]: 0 2482 2483 2483 2483
[   86.685912][    C1] Node 0 DMA32 free:1439264kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22188kB inactive_anon:0kB active_file:0kB inactive_file:168472kB unevictable:0kB writepending:7144kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:59780kB local_pcp:16088kB free_cma:0kB
[   86.685986][    C1] lowmem_reserve[]: 0 0 1 1 1
[   86.686030][    C1] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   86.686094][    C1] lowmem_reserve[]: 0 0 0 0 0
[   86.686136][    C1] Node 1 Normal free:3939864kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:12kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   86.686213][    C1] lowmem_reserve[]: 0 0 0 0 0
[   86.686255][    C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   86.686432][    C1] Node 0 DMA32: 421*4kB (UM) 195*8kB (UM) 47*16kB (UME) 35*32kB (ME) 17*64kB (UME) 14*128kB (UME) 7*256kB (ME) 10*512kB (UME) 7*1024kB (UM) 6*2048kB (UM) 343*4096kB (M) = 1439292kB
[   86.686628][    C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   86.686747][    C1] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 4*16kB (UM) 6*32kB (UM) 4*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3939864kB
[   86.686935][    C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   86.686959][    C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   86.686978][    C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   86.686997][    C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   86.687015][    C1] 42685 total pagecache pages
[   86.687024][    C1] 0 pages in swap cache
[   86.687033][    C1] Free swap  = 124996kB
[   86.687042][    C1] Total swap = 124996kB
[   86.687051][    C1] 2097051 pages RAM
[   86.687059][    C1] 0 pages HighMem/MovableOnly
[   86.687066][    C1] 429554 pages reserved
[   86.687075][    C1] 0 pages cma reserved
[   86.743841][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   87.100878][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[   87.100939][    T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[   87.131739][ T1219] usblp 2-1:1.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   87.147594][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   87.147624][    T9] usb 1-1: Product: syz
[   87.147640][    T9] usb 1-1: Manufacturer: syz
[   87.197809][    T9] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (8086:0ad2)
[   87.221897][ T5348] usb 3-1: USB disconnect, device number 2
[   87.249708][   T25] cfg80211: failed to load regulatory.db
[   87.331433][ T1219] usb 2-1: USB disconnect, device number 2
[   87.366758][ T1219] usblp1: removed
Stopping sshd: stopped /usr/sbin/sshd (pid 5373)
OK
[   88.364553][ T5700] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   88.409192][ T5721] usb 4-1: USB disconnect, device number 2
[   88.474140][ T5348] usb 2-1: new high-speed USB device number 3 using dummy_hcd
Stopping crond: [   88.524102][ T5700] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[   88.529678][ T5700] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[   88.529715][ T5700] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[   88.529741][ T5700] usb 3-1: config 1 interface 0 has no altsetting 0
[   88.537045][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.537072][ T5700] usb 3-1: Product: syz
[   88.537085][ T5700] usb 3-1: Manufacturer: syz
[   88.537125][ T5700] usb 3-1: SerialNumber: syz
[   88.551111][ T5816] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   88.551266][ T5816] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
stopped /usr/sbin/crond (pid 5356)
OK
[   88.698951][ T5348] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[   88.700186][ T5348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.700242][ T5348] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   88.700264][ T5348] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   88.701803][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   88.701828][ T5348] usb 2-1: Product: syz
[   88.701842][ T5348] usb 2-1: Manufacturer: syz
[   88.773661][ T5819] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   88.777080][ T5348] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected
[   88.805877][ T5348] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[   89.041069][    T9] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[   89.041134][    T9] uvcvideo 1-1:1.1: Failed to initialize the device (-71).
[   89.044302][    T9] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71
[   89.068493][    T9] usb 1-1: USB disconnect, device number 3
[   89.138248][ T1219] usb 2-1: USB disconnect, device number 3
Stopping dhcpcd...
[   89.194089][ T1219] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[   89.200096][ T1219] garmin_gps 2-1:1.0: device disconnected
stopped /sbin/dhcpcd (pid 5276)
Stopping network: [   89.637467][ T5700] (unnamed net_device) (uninitialized): Assigned a random MAC address: 22:ab:5a:60:5a:60
[   89.667195][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   89.691089][ T5700] rtl8150 3-1:1.0: eth1: rtl8150 is detected
[   89.788090][ T5700] usb 3-1: USB disconnect, device number 3
[   89.835462][    T9] usb 4-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40
[   89.836032][    T9] usb 4-1: config 0 has no interfaces?
[   89.836067][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.891748][    T9] usb 4-1: config 0 descriptor??
[   90.139773][ T5840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.149897][ T5840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.153728][ T1219] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   90.181650][    T9] usb 4-1: USB disconnect, device number 3
[   90.312735][ T1219] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   90.314880][ T1219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.314915][ T1219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.314936][ T1219] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   90.314979][ T1219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.325539][ T1219] usb 1-1: config 0 descriptor??
[   90.465020][ T5707] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   90.628433][ T5707] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[   90.630744][ T5707] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13056, setting to 1024
[   90.630777][ T5707] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[   90.662542][ T5700] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   90.680172][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.680192][ T5707] usb 2-1: Product: syz
[   90.680206][ T5707] usb 2-1: Manufacturer: syz
[   90.680220][ T5707] usb 2-1: SerialNumber: syz
[   90.705450][ T5860] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   90.713275][ T5707] usb 2-1: NFC: intf ffff888028a76000 id ffffffff8fa729e0
[   90.816913][ T5700] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[   90.822819][ T5700] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.822863][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.831515][ T5707] nfcmrvl 2-1:1.0: NFC: registered with nci successfully
[   90.867984][ T5700] hub 4-1:1.0: bad descriptor, ignoring hub
[   90.868017][ T5700] hub 4-1:1.0: probe with driver hub failed with error -5
[   90.904160][ T5700] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[   90.914396][ T1219] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
OK
[   90.994000][  T705] nfcmrvl 2-1:1.0: NFC: send entry, len 4
[   90.994542][    C0] nfcmrvl 2-1:1.0: NFC: urb ffff888028c3e300 status -71 count 0
Stopping iptables: OK
[   91.307058][   T31] audit: type=1326 audit(1788927158.458:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5880 comm="syz.2.32" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89fb99e159 code=0x0
Stopping system message bus: done
[   92.084909][    C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1
[   92.215798][ T5700] usb 4-1: USB disconnect, device number 4
[   92.230574][ T5700] idmouse 4-1:1.0: disconnected
[   92.527129][ T5900] Bluetooth: MGMT ver 1.23
Stopping klogd: [   92.769110][ T5906] FAULT_INJECTION: forcing a failure.
[   92.769110][ T5906] name failslab, interval 1, probability 0, space 0, times 1
[   92.769162][ T5906] CPU: 1 UID: 0 PID: 5906 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) 
[   92.769186][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   92.769199][ T5906] Call Trace:
[   92.769208][ T5906]  <TASK>
[   92.769218][ T5906]  dump_stack_lvl+0xe8/0x150
[   92.769252][ T5906]  should_fail_ex+0x3eb/0x540
[   92.769281][ T5906]  should_failslab+0xa8/0x100
[   92.769305][ T5906]  ? security_inode_alloc+0x39/0x310
[   92.769331][ T5906]  kmem_cache_alloc_noprof+0x9c/0x600
[   92.769362][ T5906]  ? __pfx_make_kgid+0x10/0x10
[   92.769388][ T5906]  ? security_inode_alloc+0x39/0x310
[   92.769421][ T5906]  security_inode_alloc+0x39/0x310
[   92.769448][ T5906]  inode_init_always_gfp+0x97e/0xd30
[   92.769480][ T5906]  ? __pfx_shmem_alloc_inode+0x10/0x10
[   92.769506][ T5906]  alloc_inode+0x82/0x1b0
[   92.769532][ T5906]  new_inode+0x1f/0x170
[   92.769554][ T5906]  ? shmem_get_inode+0x29a/0x1030
[   92.769584][ T5906]  shmem_get_inode+0x3a4/0x1030
[   92.769633][ T5906]  ? __pfx_shmem_get_inode+0x10/0x10
[   92.769667][ T5906]  ? __vm_enough_memory+0x11a/0x380
[   92.769693][ T5906]  __shmem_file_setup+0x20b/0x370
[   92.769719][ T5906]  ? __pfx___shmem_file_setup+0x10/0x10
[   92.769748][ T5906]  ? vma_set_pgoff+0x163/0x2d0
[   92.769776][ T5906]  shmem_zero_setup+0x90/0x130
[   92.769802][ T5906]  mmap_region+0x18bb/0x2270
[   92.769842][ T5906]  ? __pfx_mmap_region+0x10/0x10
[   92.769866][ T5906]  ? hrtimer_start_range_ns_common+0x83b/0xb90
[   92.769907][ T5906]  ? finish_task_switch+0x40e/0xc60
[   92.770007][ T5906]  ? mt_find+0x186/0x630
[   92.770054][ T5906]  ? bpf_lsm_mmap_addr+0x9/0x50
[   92.770079][ T5906]  ? security_mmap_addr+0x71/0x240
[   92.770119][ T5906]  do_mmap+0xe0a/0x1300
[   92.770152][ T5906]  ? __pfx_do_mmap+0x10/0x10
[   92.770188][ T5906]  ? vm_mmap_pgoff+0x1dd/0x4e0
[   92.770209][ T5906]  ? down_write_killable+0x179/0x230
OK[   92.770237][ T5906]  ? __pfx_down_write_killable+0x10/0x10
[   92.770260][ T5906]  ? apparmor_mmap_file+0x1cc/0x390
[   92.770286][ T5906]  ? security_mmap_file+0x4df/0xa20
[   92.770321][ T5906]  vm_mmap_pgoff+0x272/0x4e0
[   92.770350][ T5906]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   92.770373][ T5906]  ? rcu_is_watching+0x16/0xb0
[   92.770398][ T5906]  ? ksys_mmap_pgoff+0xf3/0x760
[   92.770423][ T5906]  ? __x64_sys_mmap+0x7f/0x140
[   92.770456][ T5906]  do_syscall_64+0x166/0x520
[   92.770475][ T5906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.770497][ T5906]  ? clear_bhb_loop+0x70/0xc0
[   92.770523][ T5906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.770543][ T5906] RIP: 0033:0x7f5f7319e159
[   92.770564][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48

[   92.770581][ T5906] RSP: 002b:00007f5f73ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   92.770605][ T5906] RAX: ffffffffffffffda RBX: 00007f5f73425fa0 RCX: 00007f5f7319e159
[   92.770634][ T5906] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000000000000
[   92.770647][ T5906] RBP: 00007f5f7323503b R08: ffffffffffffffff R09: 0000000010000000
[   92.770661][ T5906] R10: 0000000000109031 R11: 0000000000000246 R12: 0000000000000000
[   92.770673][ T5906] R13: 00007f5f73426038 R14: 00007f5f73425fa0 R15: 00007ffcb59daa38
[   92.770706][ T5906]  </TASK>
[   92.832535][   T43] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   92.930343][   T10] usb 1-1: USB disconnect, device number 4
[   92.989818][   T43] usb 3-1: not running at top speed; connect to a high speed hub
[   92.989856][   T43] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[   92.991279][   T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.027147][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.027172][   T43] usb 3-1: Product: syz
[   93.027186][   T43] usb 3-1: Manufacturer: syz
[   93.027199][   T43] usb 3-1: SerialNumber: syz
[   93.046366][   T43] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected
[   93.046806][   T43] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81
[   93.046904][   T43] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88
[   93.057667][   T43] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1
[   93.085612][   T43] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[   93.091336][   T43] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2
[   93.097824][   T43] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[   93.106696][   T43] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4
[   93.114807][   T43] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[   93.122056][   T43] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6
[   93.135395][   T43] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[   93.152538][ T5707] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   93.199162][ T5860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   93.276302][   T10] usb 2-1: USB disconnect, device number 4
[   93.290476][   T10] usb 2-1: NFC: intf ffff888028a76000
[   93.304682][ T5707] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[   93.305715][ T5707] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   93.305742][ T5707] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   93.305776][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
Stopping acpid: [   93.558650][ T5921] loop2: detected capacity change from 0 to 7
[   93.571870][ T5921] Dev loop2: unable to read RDB block 7
[   93.571905][ T5921]  loop2: AHDI p1 p2 p3
[   93.571925][ T5921] loop2: partition table partially beyond EOD, truncated
[   93.572123][ T5921] loop2: p1 start 1601398130 is beyond EOD, truncated
[   93.572140][ T5921] loop2: p2 start 1702059890 is beyond EOD, truncated
[   93.582661][   T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   93.717986][ T5700] usb 3-1: USB disconnect, device number 4
[   93.727973][ T5700] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[   93.731822][ T5700] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[   93.736480][   T43] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[   93.739110][   T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   93.739148][   T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   93.741671][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.741692][   T43] usb 1-1: Product: syz
[   93.741704][   T43] usb 1-1: Manufacturer: syz
[   93.741743][   T43] usb 1-1: SerialNumber: syz
[   93.752213][ T5700] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[   93.762082][ T5700] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[   93.765421][ T5700] keyspan 3-1:1.0: device disconnected
[   93.986125][   T43] kaweth 1-1:1.0: Firmware present in device.
[   94.170293][   T43] kaweth 1-1:1.0: Statistics collection: 0
[   94.170310][   T43] kaweth 1-1:1.0: Multicast filter limit: 0
[   94.170319][   T43] kaweth 1-1:1.0: MTU: 0
[   94.170327][   T43] kaweth 1-1:1.0: Read MAC address 00:00:00:00:00:00
[   94.263336][ T5700] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   94.295788][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'.
[   94.298635][ T5930] Zero length message leads to an empty skb
[   94.381595][ T5707] pegasus 4-1:1.0: probe with driver pegasus failed with error -71
[   94.389761][ T5707] usb 4-1: USB disconnect, device number 5
[   94.424667][ T5700] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   94.425834][ T5700] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   94.425860][ T5700] usb 2-1: config 0 has no interface number 0
[   94.425890][ T5700] usb 2-1: config 0 interface 41 has no altsetting 0
[   94.428074][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.428096][ T5700] usb 2-1: Product: syz
[   94.428110][ T5700] usb 2-1: Manufacturer: syz
[   94.428143][ T5700] usb 2-1: SerialNumber: syz
[   94.431197][ T5700] usb 2-1: config 0 descriptor??
OK
[   94.572642][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
Stopping syslogd: stopped /sbin/syslogd (pid 4964)
OK
[   94.736123][   T10] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[   94.737914][   T10] usb 3-1: config 0 has no interfaces?
[   94.738496][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.767717][   T10] usb 3-1: config 0 descriptor??
[   94.779239][   T43] kaweth 1-1:1.0: Error setting receive filter
[   94.779561][   T43] kaweth 1-1:1.0: probe with driver kaweth failed with error -5
[   94.800799][   T43] usb 1-1: USB disconnect, device number 5
umount: can't remount debugfs read-only
[   94.974700][ T5348] usb 3-1: USB disconnect, device number 5
[   95.204985][ T5721] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   95.363801][ T5721] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   95.366343][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.374613][ T5721] usb 4-1: config 0 descriptor??
[   95.377790][ T5721] cp210x 4-1:0.0: cp210x converter detected
[   95.466810][ T5700] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[   95.471190][ T5700] usb 2-1: USB disconnect, device number 5
[   95.617480][ T5348] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   95.762567][ T5348] usb 1-1: Using ep0 maxpacket: 32
[   95.763478][ T5348] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   95.765073][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.765103][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.765170][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.769174][ T5348] usb 1-1: config 0 descriptor??
[   95.823598][ T5721] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[   95.872728][   T30] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   96.034592][   T30] usb 3-1: Using ep0 maxpacket: 16
[   96.039602][   T30] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   96.069800][   T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.069837][   T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.069860][   T30] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   96.069931][   T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.073570][ T5721] usb 4-1: cp210x converter now attached to ttyUSB0
[   96.076386][   T30] usb 3-1: config 0 descriptor??
[   96.200915][ T5348] koneplus 0003:1E7D:2D51.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0
[   96.214275][ T5944] nvmet: adding nsid 1 to subsystem testsubsys
[   96.217026][ T5944] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[   96.235489][ T5944] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   96.244380][ T5944] CPU: 1 UID: 0 PID: 5944 Comm: syz.1.50 Not tainted syzkaller #0 PREEMPT(full) 
[   96.253610][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   96.263701][ T5944] RIP: 0010:strlen+0x29/0x70
[   96.268343][ T5944] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00
[   96.288520][ T5944] RSP: 0018:ffffc90004bbf978 EFLAGS: 00010246
[   96.294634][ T5944] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[   96.302809][ T5944] RDX: ffffc90005781000 RSI: 0000000000000052 RDI: 0000000000000000
[   96.310810][ T5944] RBP: ffffc90004bbfab8 R08: ffffffff909bb37f R09: 1ffffffff213766f
[   96.318999][ T5944] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff92000977f40
[   96.327105][ T5944] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff
[   96.335119][ T5944] FS:  00007f3d7f80b6c0(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000
[   96.344393][ T5944] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.351013][ T5944] CR2: 000000110c3482a9 CR3: 000000007fdb8000 CR4: 00000000003526f0
[   96.359113][ T5944] Call Trace:
[   96.362522][ T5944]  <TASK>
[   96.365720][ T5944]  do_getname_kernel+0x1d/0x230
[   96.370861][ T5944]  ? getname_kernel+0xd/0x20
[   96.375569][ T5944]  filp_open+0x87/0x1d0
umount: sysfs bu[   96.379759][ T5944]  ? __pfx_filp_open+0x10/0x10
[   96.385889][ T5944]  ? __pfx___mutex_lock+0x10/0x10
[   96.390943][ T5944]  nvmet_file_ns_enable+0x74/0x350
sy - remounted r[   96.396171][ T5944]  nvmet_ns_enable+0xaa/0x780
[   96.402834][ T5944]  ? lock_acquire+0x115/0x350
[   96.407741][ T5944]  nvmet_ns_enable_store+0xd7/0x170
[   96.413019][ T5944]  ? __pfx_nvmet_ns_enable_store+0x10/0x10
[   96.418890][ T5944]  ? down_read+0x2b9/0x320
[   96.423687][ T5944]  ? __pfx_nvmet_ns_enable_store+0x10/0x10
ead-only
umount[   96.430019][ T5944]  configfs_write_iter+0x337/0x430
: devtmpfs busy [   96.436775][ T5944]  vfs_write+0x612/0xba0
[   96.442590][ T5944]  ? __pfx_vfs_write+0x10/0x10
[   96.447393][ T5944]  ? __fget_files+0x2a/0x420
- remounted read[   96.452662][ T5944]  ksys_write+0x150/0x270
[   96.458411][ T5944]  ? __pfx_ksys_write+0x10/0x10
-only
umount: c[   96.463310][ T5944]  do_syscall_64+0x166/0x520
[   96.469272][ T5944]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
an't remount /de[   96.475379][ T5944]  ? clear_bhb_loop+0x70/0xc0
[   96.481435][ T5944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
v/root read-only[   96.487633][ T5944] RIP: 0033:0x7f3d7e99e159

[   96.493450][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.513311][ T5944] RSP: 002b:00007f3d7f80b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   96.521842][ T5944] RAX: ffffffffffffffda RBX: 00007f3d7ec25fa0 RCX: 00007f3d7e99e159
[   96.529958][ T5944] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000004
[   96.537962][ T5944] RBP: 00007f3d7ea3503b R08: 0000000000000000 R09: 0000000000000000
[   96.546117][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.554364][ T5944] R13: 00007f3d7ec26038 R14: 00007f3d7ec25fa0 R15: 00007fff1bf58658
[   96.562347][ T5944]  </TASK>
[   96.565571][ T5944] Modules linked in:
[   96.570895][ T5944] ---[ end trace 0000000000000000 ]---
[   96.578802][ T5700] usb 4-1: USB disconnect, device number 6
[   96.580857][ T5944] RIP: 0010:strlen+0x29/0x70
[   96.580893][ T5944] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00
[   96.580909][ T5944] RSP: 0018:ffffc90004bbf978 EFLAGS: 00010246
[   96.580934][ T5944] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[   96.580949][ T5944] RDX: ffffc90005781000 RSI: 0000000000000052 RDI: 0000000000000000
[   96.580963][ T5944] RBP: ffffc90004bbfab8 R08: ffffffff909bb37f R09: 1ffffffff213766f
[   96.580977][ T5944] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff92000977f40
[   96.580991][ T5944] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff
[   96.581007][ T5944] FS:  00007f3d7f80b6c0(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000
[   96.581025][ T5944] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.581040][ T5944] CR2: 000000110c458725 CR3: 000000007fdb8000 CR4: 00000000003526f0
[   96.581063][ T5944] Kernel panic - not syncing: Fatal exception
[   97.801857][ T5944] Shutting down cpus with NMI
[   97.806906][ T5944] Kernel Offset: disabled
[   97.811322][ T5944] Rebooting in 86400 seconds..