last executing test programs:

6.405665515s ago: executing program 1 (id=15):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0xfffffffd, 0x32}, 0x2, @in=@loopback, 0x0, 0x4, 0x3, 0x0, 0x0, 0x7}}, 0xe8)
write(r0, &(0x7f0000000140)="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef", 0x40)

6.400017636s ago: executing program 0 (id=17):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000540), &(0x7f0000000580)=0x4)
r1 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r2, 0x4)
listen(r2, 0x50)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0)
readv(r1, &(0x7f00000006c0)=[{}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f00000005c0)=""/128, 0x80}, {&(0x7f0000000780)=""/238, 0xee}], 0xa)

6.291515042s ago: executing program 1 (id=18):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect(r4, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x2}, 0x80)
listen(r4, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000080))
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

6.245784569s ago: executing program 0 (id=19):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1}}]}}]}}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080)=0x12, 0x4)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x6, 0x83}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
r3 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000600)={{0xa, 0x3, 0xaa0a, 0x25, 'syz1\x00', 0x9}, 0x1, [0x100000000, 0x2, 0x6, 0x400, 0x7, 0x7, 0x63, 0x80000001, 0xe, 0x4, 0x2, 0x7f, 0x100000001, 0x563, 0x400, 0x100000001, 0x7, 0x7ff, 0x7ff, 0x99c7, 0x8, 0x5, 0x6, 0x1, 0xfffffffffffffff8, 0x2, 0x9, 0x0, 0x101, 0x5, 0x8, 0x3, 0x2, 0xff, 0x3715, 0x3, 0xcac, 0x5, 0x80000001, 0x765a, 0x2, 0x7, 0x1ff, 0x4b15, 0xa804a4f, 0x80000000, 0x4, 0x9, 0x8, 0x7, 0x5, 0x3, 0xffffffffffffb78b, 0x4, 0x10, 0x10, 0x1ff, 0x4, 0x2, 0x9, 0x2, 0x4, 0x2, 0x7, 0x400, 0x3, 0x0, 0x4, 0x1, 0x3, 0x3, 0x4, 0x3, 0x40, 0x6, 0x9, 0x2c5, 0xfffffffffffffff8, 0xfffffffffffff551, 0xfffffffffffffffc, 0x3, 0xffffffff, 0x513, 0x7fff, 0x0, 0x3, 0x7fffffff, 0x10, 0x1, 0xb2ef, 0x240000000000000, 0xf6, 0x4, 0x7, 0x200, 0x7, 0x5, 0xc, 0xfffffffff0000000, 0xfffffffffffffff5, 0x3, 0x0, 0x80, 0xffffffffffffffff, 0x7, 0x16c, 0xffffffff7fffffff, 0x0, 0x5, 0x101, 0xf25, 0x7, 0xf3d, 0x7, 0x800, 0x8, 0x3ff, 0x0, 0x0, 0xe2, 0x8, 0x2, 0x7, 0x80000000, 0xffffffffffffffff, 0x7f, 0x9, 0x8]})
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, 0x0)
syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x16, 0x1a, "4be1d66428d2def806f4a9e9349f74ef117e52a66a2c91894c36"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x1, "b8"}, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
ioctl(r1, 0xc4c85513, &(0x7f0000000200))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
unshare(0x100000)
r7 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x401, 0x78}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4f}], @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x4000)

6.105511556s ago: executing program 1 (id=20):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRES16], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setlease(r5, 0x400, 0x0)
fcntl$setlease(r5, 0x400, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14, r7, 0xfa81c6d76d4f4e97, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0xc4, r7, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x10, 0x3, "b9e88288749cffc6f28f32b7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb62}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7aeb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffeff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc406}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80019}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb748}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1})
clock_gettime(0x0, 0x0)
nanosleep(0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040800)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="00030000000000000000eaff"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r8, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280080, 0x0)

4.307479053s ago: executing program 3 (id=24):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet(0x2, 0x80009, 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)={[0x0]}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, ']\'\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0)
setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0xffff, 0x4)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0xfd78)

3.81001321s ago: executing program 2 (id=25):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000800020104001100ea0981004e22"], 0x36)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0xbe, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x8, 0x0, 0x8}, 0xe)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={<r5=>0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x2, 0x7, 0x9, 0x1, 0x80}, &(0x7f0000000100)=0x14)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x300001c)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

3.567570108s ago: executing program 2 (id=26):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x88)
ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000040)={'vxcan1\x00', 0x48000, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000640)='high-speed', 0xa)
syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000400a1110140000000000010902270001010080320904"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0)
write(r4, &(0x7f0000000540)='adap', 0x4)
symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r5, &(0x7f0000000340)='dummy_udc', 0x9)
pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000500)="dc", 0x1}], 0x1, 0x9, 0x3, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000180)="5c00000013006bec9e3be3726e17aa210725876c2d000000ba090000160af3653c001ac004658b8a000702080005000b00e4002c000000ea2933afd81715daae69b556a505251e618294ff0051f60a84c9f4d4938037e786a6d00003", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4e0c6)
setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0xe803, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0xffffffff}}}}}}, 0xfd78)

3.33394238s ago: executing program 3 (id=27):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x103e, 0x2, 0x457f1c9146f8f874, "464905200000000000007f0000000000001000", 0x41495043})
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x208, r2, 0x0, 0x0, 0x7}])

3.137973308s ago: executing program 0 (id=28):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='qnx4\x00', 0x8410, 0x0)
r2 = gettid()
r3 = syz_open_procfs(r2, &(0x7f0000000100)='smaps\x00')
fchdir(r3)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x5, 0x3, 0x2160}})
sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000004010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e)
r6 = open$dir(&(0x7f0000000240)='./file0\x00', 0x15f301, 0x3)
name_to_handle_at(r6, &(0x7f0000000280)='./dev/sda1\x00', &(0x7f00000002c0)=@nfs={0x90, 0x24, {0x7f, 0x3, 0x1, 0x80, "684f6083f753797a31f0d649b0ca3533df0fbb55e2092236f4d3b2909de2f433fb96a62dc4683b537495c810c4ce98e2cbed08ed4813fcee14ecc4f747607295d5906fb0ea6370777cdd711223f8e37c393b753e6a706c477668643a2a0167057ef10bc45d5c85684cf7bb15f0ebddbe88ccea75cc0830fc3f1aeacb2cd2f874"}}, &(0x7f0000000380), 0x1200)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf00001})
close(r5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd)
r8 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1)
ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000140)={r8, 0x0, 0x100, 0x9, 0xb, 0x1, [0x2, 0x6, 0x3, 0x0, 0x9, 0xa]})
getsockopt$bt_hci(r0, 0x11c, 0x1, 0x0, &(0x7f0000000000))

3.104530952s ago: executing program 3 (id=29):
r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)={0x102000})
write(r0, &(0x7f0000000140)="123a25a4241986531e9a5555a49a3187becdd8c957568b53de18cf898f03a5a44180c5af6ac9c6fabfdc64ec9fc9c1", 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='md0', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf250200090008ff"], 0x110}, 0x1, 0x7}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1c5, 0x0, 0xffffffffffffffff}]})
write(r2, &(0x7f0000000300)='raid1', 0x5)
r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000500)='active', 0x6)

2.984138685s ago: executing program 1 (id=30):
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8946, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x1000008)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000500)={0xa, @win={{0x4, 0x7f, 0x3de, 0x3}, 0x7, 0x7fff, &(0x7f0000000300)={{0x6, 0xf51, 0x5, 0x5}, &(0x7f00000002c0)={{0x10, 0xf, 0x8, 0x2}, &(0x7f0000000180)={{0x7fff, 0x7, 0x80000000, 0xffffffff}, &(0x7f0000000080)={{0x3, 0x7, 0x4, 0x8}}}}}, 0x1000, &(0x7f0000000340), 0x8}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
socket$nl_netfilter(0x10, 0x3, 0xc)
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0090000180c270000300000000000086dd696f449e00140601fe8000000000000000000000000000bbff0200000000000000000000000000014e", @ANYRES32=0x41424344, @ANYBLOB], 0x4e)

2.78192249s ago: executing program 0 (id=31):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
listen(r1, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
r2 = accept(r1, 0x0, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x48050}, 0x20000045)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f00000000c0)={r0})
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bind(0xffffffffffffffff, &(0x7f00000002c0)=@un=@file={0x0, './file0\x00'}, 0x80)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000080)=0xb7, 0x4)
syz_genetlink_get_family_id$smc(&(0x7f0000000480), r0)
recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x197e0000}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x0, 0x0)

2.523637797s ago: executing program 3 (id=32):
syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000400)=ANY=[@ANYBLOB="1201f195020000082505a1a44000010203010902690002010490570904000001020d00000b010001000000000016db3f71eb4798cd24eebecf1bd7b4ab2c2405240005000d240f013a0c0000050008000306241a01010107241400000600eb38b14ede9a607adc4f86590905810308000480040904010000020d00000904010102020d000009058202100099b2728ed13431ba29c02ef4505e26984a4395887c61966c46ea7e2afcf944e48e408b00dff260ebff78c8cc9741d24a761fd3b6b6c73f3e4daadf631618d26a0e4a77a9170000000000000000000000ba8fd86d0d9e1a2535efb6fa89a3f41651e7d655758ab1c8"], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x2, 0x3, 0xff, 0x8, 0x1}, 0x3d, &(0x7f0000000140)={0x5, 0xf, 0x3d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0x2e, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7fff, 0x0, 0x9, [0xff00f0, 0x0, 0xc000, 0x3fcf, 0xff00, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xd, 0x8, 0x6}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1801}}, {0xda, &(0x7f00000002c0)=@string={0xda, 0x3, "51834028b602dfef395f0b0e31905a48b8bc4ba4663e87f43f7ac8d47bd3d95755ed3c7d7445972a1a2b20aea86131953a22c5bf7efef0ed50c7cf9d9c52df5d9f1cdf462c4a0e8f06d5246e7ce1da393f1333875faf6f9b449e3faeb0cc19475c5a840fdd178626d807638d844d5461309e54a97748def85dd2fcc84cf5b1579f1a30092a0368f8e2afd7d2a693fc8bb51235b457c5d87d62e0fe6231d3fa43183f0c989c9bc7fece5b5b36c2a555a20af0e591a48ffe911d193175f14a1ba87c8a12325e9cdc4713b1deda8856a1f1c2ea233482c5da80"}}]})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x8002, 0x2, 0x4}, &(0x7f0000000180)=0x10)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1e3) (async)
mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0)
ioctl$KDGKBLED(r6, 0x4b64, &(0x7f0000000080)) (async)
write$tun(r2, &(0x7f0000000d00)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv6=@dccp_packet={0xd, 0x6, "8b778a", 0x10, 0x21, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {[], {{0x4e21, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, "de3a0f", 0xff, "575392"}}}}}, 0x42) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x201, 0x0)
write(r7, &(0x7f0000000280)='0', 0x1) (async)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000180)})

2.06017362s ago: executing program 1 (id=33):
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8946, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x1000008)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000500)={0xa, @win={{0x4, 0x7f, 0x3de, 0x3}, 0x7, 0x7fff, &(0x7f0000000300)={{0x6, 0xf51, 0x5, 0x5}, &(0x7f00000002c0)={{0x10, 0xf, 0x8, 0x2}, &(0x7f0000000180)={{0x7fff, 0x7, 0x80000000, 0xffffffff}, &(0x7f0000000080)={{0x3, 0x7, 0x4, 0x8}}}}}, 0x1000, &(0x7f0000000340), 0x8}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
readv(r4, &(0x7f0000000480)=[{&(0x7f0000000000)=""/8, 0x8}, {0x0}], 0x2)
ioctl$TUNSETCARRIER(r3, 0x400454e2, 0x0)
r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
write$uinput_user_dev(r5, &(0x7f0000001040)={'syz0\x00', {0xdf, 0x4, 0x761, 0x6}, 0xa, [0x8, 0xf, 0x5, 0x2102, 0x5, 0x1, 0x3, 0x4, 0xdbb, 0x5, 0x3, 0x8001, 0x1, 0x4, 0x0, 0x1, 0xef, 0x1, 0x5896, 0x1, 0x2, 0xdfb7, 0x300000, 0x4, 0x6, 0xff, 0x7fffffff, 0x98, 0x4, 0x28, 0x9c85, 0x4, 0x9, 0x4, 0x6, 0x100, 0x9, 0x8, 0x8, 0x804, 0x1, 0x5, 0x5, 0xfff, 0xffffffff, 0xfffffffe, 0x0, 0x3216, 0x200, 0x1, 0x7, 0x7, 0x0, 0x9, 0xe, 0xffffff81, 0x9, 0x401, 0x6, 0x80000000, 0x2, 0x4, 0x3, 0x7], [0x3, 0x7, 0xc, 0xfffffffe, 0x5, 0x7, 0x4, 0x4, 0x7, 0x5, 0x1, 0x7, 0xfffffffa, 0x8, 0xc3b4, 0xffffffff, 0x6, 0x9, 0x8, 0x10001, 0xa4, 0x8, 0x5, 0x9a, 0x1ff, 0xfe0, 0x8, 0x40, 0xff, 0x1, 0x5, 0x4, 0x7, 0x8, 0xfffffff8, 0xfdf, 0x7, 0x1, 0x8, 0x3, 0x7, 0x7fffffff, 0x1, 0x0, 0xa108, 0x53, 0x34fc, 0x10000, 0x0, 0xfffffff8, 0x5, 0x2bd, 0x2, 0x7fffffff, 0x6, 0x23, 0x1, 0x2ef513a, 0x9, 0x766, 0x7, 0x8, 0xa], [0xffffff86, 0xffffff80, 0xb9, 0x8, 0x800, 0x1, 0x9, 0xeb, 0x97, 0x5, 0xfffffff9, 0x4, 0x10001, 0x0, 0x9, 0x9761, 0x2, 0xffff8000, 0xffffffff, 0x66, 0x7b6, 0x6, 0x40, 0xeb, 0x8, 0x88000000, 0x8, 0x401, 0x9, 0x1, 0x9, 0x7, 0xfffff404, 0x504ff200, 0x1, 0x4, 0x5, 0x5, 0x68c, 0x0, 0x7ff, 0x5, 0xffffff2a, 0x60b1, 0x2, 0xe13, 0x36, 0x5, 0x2, 0x10001, 0x4, 0x80, 0x3, 0x5, 0x7, 0x10000, 0x4df2, 0xfffffffb, 0x8, 0x2, 0x0, 0xfffffff7, 0x9, 0x7f], [0xdd68, 0x2, 0x9, 0x9, 0x4, 0x1, 0x6, 0xe, 0x6, 0x9, 0x4, 0x5, 0x400, 0xc, 0x4, 0x3, 0x5, 0x9, 0xd, 0xeeae, 0x2, 0x5, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2982, 0x3000, 0x6, 0x1e9, 0x2, 0x4, 0xd, 0x0, 0x70, 0x400, 0x80000000, 0x7, 0x5, 0x3, 0x1, 0x6, 0x100, 0x4, 0x1, 0x2, 0xfff, 0x3, 0x2, 0x6561b6f3, 0xfffffffd, 0x1, 0x2565, 0xeb00000, 0xe8c4, 0x4, 0x8, 0x3, 0x7, 0x4, 0xa]}, 0x45c)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, <r6=>0x0})
fcntl$setown(r3, 0x8, r6)
prctl$PR_CAPBSET_READ(0x17, 0x20000000000001d)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
socket$nl_netfilter(0x10, 0x3, 0xc)
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0090000180c200000300000000000086dd696f449e00140601fe8000000000000000000000000000bbff0200000000000000000000000000014e", @ANYRES32=0x41424344, @ANYBLOB], 0x4e)

1.882031095s ago: executing program 2 (id=34):
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x88, @dev={0xac, 0x14, 0x14, 0x28}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0x8000001, 0x1}}, 0x44)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = fanotify_init(0x10, 0x101000)
r5 = creat(&(0x7f0000000140)='./file1\x00', 0x300)
fanotify_mark(r4, 0x7e, 0x1028, r5, 0x0)
ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000580)={0x1e9a, 0x1000, "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"})
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x147902, 0x0)
sendfile(r6, r6, 0x0, 0x2000fb)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f00000015c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x14c, r7, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xe1}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x3ff}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x81}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xfffff800}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x5de}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x2}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008080)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010117, 0x0, 0x7}]})
r8 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
r9 = landlock_create_ruleset(&(0x7f0000000240)={0x1ffb}, 0x30, 0x0)
landlock_restrict_self(r9, 0x0)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x1f, 0x14, 0x16, 0x3}, 0x8, 0x800000, 0x4, 0x0, 0x3ff, 0x0, 0x0})
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$USBDEVFS_REAPURB(r8, 0x4004550d, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=<r10=>0x0)
capset(&(0x7f0000000000)={0x20071026, r10}, 0x0)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x0, 0x60000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x9, 0x1, 0x7f, 0x2000000000000000, 0xb3, 0x95], 0xeeee8000, 0x2829d5})
ioctl$KVM_RUN(r12, 0xae80, 0x0)

1.294686371s ago: executing program 0 (id=35):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, 0x8)
ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
socket$alg(0x26, 0x5, 0x0)
write$tun(r1, &(0x7f00000002c0)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "6f449e", 0x18, 0x6, 0xff, @remote, @mcast2, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x8ed, 0x0, 0x6, {[@nop, @nop]}}}}}}}}}, 0x52)

1.029999631s ago: executing program 2 (id=36):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, 0x8)
ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
socket$alg(0x26, 0x5, 0x0)
write$tun(r1, &(0x7f00000002c0)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "6f449e", 0x18, 0x6, 0xff, @remote, @mcast2, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x8ed, 0x0, 0x6, {[@nop, @nop]}}}}}}}}}, 0x52) (fail_nth: 3)

849.862411ms ago: executing program 0 (id=37):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
timer_create(0x6, &(0x7f0000000440)={0x0, 0x3e}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030052797a32000000008c"], 0x100}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='p:s/ ./file0:0', 0xe)
r2 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e030000090400"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)

422.375649ms ago: executing program 3 (id=38):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x0, 0x0)
ioctl(r0, 0x40946400, &(0x7f0000000100)="6474323831312d7067680000000000002f0000000003")

390.378581ms ago: executing program 2 (id=39):
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200001, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x2, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x8, {0x0, 0x0, 0x0, 0x8, 0x80000, 0x5, {0x0, 0xb, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0xc000, 0x100004e8, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0xafe, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r4=>0x0)
setresuid(r2, r4, 0xee00)

277.897383ms ago: executing program 3 (id=40):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x2, 0xca01, 0x0, 0x0}, {0xd, 0x20fd, 0x0, 0x0}], 0x2})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_disconnect(r0)

4.025446ms ago: executing program 2 (id=41):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001080)=ANY=[@ANYBLOB="120110012dcef620ca160215994b0102030109021b000108d050080904"], 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) (async, rerun: 64)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) (rerun: 64)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) (async)
syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x28000)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0) (async)
r4 = dup2(r1, r1) (async)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) (async)
read$FUSE(r4, &(0x7f0000000a40)={0x2020}, 0x50a) (async, rerun: 32)
write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) (async, rerun: 32)
r5 = socket$kcm(0x10, 0x2, 0x0) (async)
syz_usb_connect(0x2, 0x888, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x37, 0x7a, 0xd9, 0x40, 0x19d2, 0x67, 0x2463, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x876, 0x3, 0x6, 0x2, 0xb0, 0xff, "", [{{0x9, 0x4, 0x7c, 0x2, 0xf, 0xff, 0xff, 0xff, 0xac, [@generic={0x13, 0xe, "4a01ec18ad56a513e20c4da2c2499b56a1"}], [{{0x9, 0x5, 0x1f, 0x10, 0x8, 0xd8, 0x4, 0x2b}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x5, 0x1, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0xa1, 0xe, 0x7}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xf, 0x9, 0x6a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8c, 0x6847}]}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0x0, 0xf4, 0xd}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0xa, 0x7, 0x3}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x0, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x4}, @generic={0x8c, 0xe, "fcfb7fb00e15527848a260882e4d7dae24ba74dcd964f91784127b3f9a756fd572ba08792896c44a072b4c20f608386abd3a0e2aab7ce46fc6011193880363fb4bad08536f054547da7afd604a218b744faf3cd6061fb407eb7672d79e4e19c5ffe7869204863f03c1522c8b47c943c4e1f92d86c3c38316eb159d20fa82c9ef86459d7f27f07b7119f6"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x2, 0xf9, 0x2}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x81, 0x0, 0xc5, [@generic={0x8f, 0x22, "1c212f303fa553aeb1c749e7f800d422dc19dacb43e254990ef9b444065ff8bf270d8ec3612b8d0f416e79a05048b3d1a09243fcc90066c7a69abfaaec0f270e02e77c57bd53ac9a3364954beb886474ef0a05e52766affbb0822b05ae5bb39c9706d917bcd7b1bdcf3fbec94b30296d90c52e78c539bac8ed2940dea976dd57faab16b9a09be8ed881ad3b60b"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0xd, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x81}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x10, 0x0, 0x1, [@generic={0x35, 0x2, "26a2f05f80ff34542bb32ae1ef6f964c89df41279d0225336ad14025bb96b6c0f5f23872f8ae76126b2ddc47b075b200a6e473"}, @generic={0xa8, 0x23, "139ec535a26e1cd22fc78e96c35f399f4a25056578354ad76062d7b707cab8dcc9c38589636d5b2a8a16f3161f266ab6e6e283e567e3eed1ff2478c23be29c36eed6fd31425e04cf288ee522189bd51b25f31d6a7814487305e9814a19038144faa5725d0808c16831e93d4976b66750653084408e42205fc7a78a1304ee458cb50eb7910d877fcfd418429a854d52a01944d109a1217816bb984f71bd18f5a37a266988871d"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x260, 0xb, 0xd, 0x3}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0xb, 0xe, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x3, 0x1, 0x7}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xa, 0x8, 0xd}}]}}, {{0x9, 0x4, 0x6e, 0xf, 0xb, 0x9d, 0xa3, 0xc, 0xbc, [@generic={0x26, 0xe52653ff90862f64, "54be86bcef26a296e696253ed02266fbb59d2690923b2663d9c5bdfdbc1012736bb128e4"}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x6, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x7, 0xbb, 0x91}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x2, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xa}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x2, 0x77, 0xff}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0xbc, 0x0, 0x4, [@generic={0xa8, 0x24, "96fec254ae695d401706e1e3d086b3f9979dca10947e54d7100c4555132c6e0407e4b62a402cdd876c50f239415c1c38935aa3512e894c6186ca31864b693f3df2489371744a22b8f29db57631d9ab17e2a1afea95aff5a39718c2e9355caf0c573965276b3e39de1e3266e3cae59aedae9cb6c6cb8ca8eeacaf5f3b92edad2a7517439f27d2c079401c42f1438cb5876cf40608d5722423eb20dc9ba1b2b2245852959b0d73"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x11, 0x5, 0x4, [@generic={0x5b, 0x1, "3847b1a12123009e03121e38f250476c1dfba7809a495d9c5ec80f90918928d7d72a3ed2fb57ddbb7682ac967669d32d1a53b119b42d49c0e0ad6e1a43e1552f48dbff77336e7910597595432c3f6347dbcb62eabee614fb11"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x2, 0x20, 0xb4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xb1fc}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x28, 0x9, 0x2d, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x3}, @generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x1, 0xc, 0xb}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x7, 0x3}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x0, 0x8, 0x8, [@generic={0xfe, 0x21, "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"}]}}]}}, {{0x9, 0x4, 0x3, 0x9, 0xc, 0x1e, 0x6e, 0xf2, 0x7, [], [{{0x9, 0x5, 0xc, 0xc, 0x20, 0x4, 0xbc, 0x5, [@generic={0xe9, 0x10, "51574b4ea66409ca17cdd441fe18d19bbecf17ed157d54ae6a6a2396c05b26dbab8c1ebb7d539f17b4b22f8a2480b5334bcee9f81913ef582edfab59a56151f62c4dbe45894f0c57de44acbcdaafa3ce40ebfe33163d8e7995d3d54110831cb5f60a4a914524573a06f66de90e780e044866c75ffa06167cd460f9b2d0318e8eb45f391cd96172b8e87843641a86f892accb121a2dc3741f9ab725a2b153be4b74a01ef986ea9ef5acd925ec13b964d83a7f64c5b10721656a7ce4cfc4a384a336222f5e405c13a2a92c304fa423b84b405ffa2d8ba0b31125747be949b4238b41d687dff3802e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0xd2, 0x9}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x2, 0x3, 0xd}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x70}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x7, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x83, 0x6, 0x2, [@generic={0x2c, 0xb, "0dd33351d9a6df09e4243278d70189ff062df6aa389c972a91581cf4108f239458a9b54e7b7ce190861c"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x3d, 0x7f, 0x10, [@generic={0xac, 0x31, "7ff4c7faa4b409cf0f1dea809219a3563615be0a284c362a289a458eff3b11b37a42e8834ca733170ce7be5aa84097eed00f07929bb259f1b8d7dcdf5e529a36491211bdab46e33211e9fc604250b476b87dc633c824cdc67851e5529a15b7f08edfa68216db78659ed0b53ae6c94d144d14f03a42e3bc5a3bcbb21ea02f8beec3c818ba7bb5aa645792141880f710b716469b46a810c767d53897018c54de9a47077d73c80804076ecb"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x5, 0x7, 0xd7, [@generic={0x9e, 0x8, "0a755d7197969d410d2d7cedc25f5522e65e1588985542033f050bfc672e50e66932a68e965588dbaeeed958f47a634687a3bc473d8a036a2b346dfb680b2627c4ba742cc055bc2a357999ce5056bc28f96d37ee6969a849cdd2c675dda35fc9ffbba1e2b1d847e729325c3944f2f5ba7911e58f718f32870bc31039bfae16d8f4d3d9ca4c916329727f67c184616a222f285b849c25a0053cc285bc"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x64, 0x4}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x7, 0x4, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfb, 0x6}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x2, 0xd3, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6d, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x7, 0xa7, 0x7}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x200, 0x1, 0xb1, 0x0, 0x20, 0xd}, 0xc, &(0x7f0000000d00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x9, 0xfcdb}]}, 0x2, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x455}}, {0x7b, &(0x7f0000000d80)=@string={0x7b, 0x3, "c99f815084f88dba7c592f1926d61f0992e8be148268cc61dfa0748efd26ab95e246ac1b349fe2c2fbd0b0950db629141f64dd19f853934d543f35c415ae2ac61667d188adaf2cdd584c9000e68e0189798da41057e07a0400c3fb33f2137130df6501f2bcbb0fa015986f19042b9c948375d720a0f3877b0b"}}]})
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0x8000, 0x4, 0x1, {0x22, 0x790}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x2, 0x13}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0xb}}]}}}]}}]}}, &(0x7f0000002b40)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xf8, 0x3, 0x7f, 0x10}, 0x36, &(0x7f0000000280)={0x5, 0xf, 0x36, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "ec8d05b4b04325ee27bfecd914028934"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xb, 0xb2, 0x4, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x99, 0x0, 0x1, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x2, 0xdc7}]}, 0x2, [{0x56, &(0x7f0000002a80)=@string={0x56, 0x3, "67177b0e6a9573c2ff9173855385efd00599ba092556a4ee825739795931a5870e14754206bac01828eb3ff90ec5e8f294ded334164220163c1a26e48d8e44f510d9e4d34594fbf760112521c8ce4352ac7ab851"}}, {0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x41a}}]}) (async, rerun: 64)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e406dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) (rerun: 64)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "f3f2df39", {0x1, 0x2, 0x42c, 0xfc, 0x2}})

0s ago: executing program 1 (id=42):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r2, &(0x7f0000000000)='7', 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0x1d, 0x4)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB=';\n@\x00\x00\x00\x00\x00\v\x00\x00\x00\x00'], 0xd)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0xb90, <r4=>r3, 0x1})
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000080)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000080)={0x26000000, 0x1f000000})
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0x500, 0x870, 0xfffffffffffffff9, 0x3, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x5, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts.
[   84.171466][ T5602] cgroup: Unknown subsys name 'net'
[   84.316610][ T5602] cgroup: Unknown subsys name 'cpuset'
[   84.319963][ T5602] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   85.990119][ T5602] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   88.393237][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.397236][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.399729][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.400732][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.401722][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.519173][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.521426][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.522379][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.539913][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.555081][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.586106][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.587627][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.588077][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.589181][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.590024][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.611063][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.621182][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.624298][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.630192][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.634005][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.265492][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.266233][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.266383][ T5612] bridge_slave_0: entered allmulticast mode
[   90.267849][ T5612] bridge_slave_0: entered promiscuous mode
[   90.322907][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.323062][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.323206][ T5612] bridge_slave_1: entered allmulticast mode
[   90.324546][ T5612] bridge_slave_1: entered promiscuous mode
[   90.328944][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.329367][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.329775][ T5621] bridge_slave_0: entered allmulticast mode
[   90.337373][ T5621] bridge_slave_0: entered promiscuous mode
[   90.399313][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.399406][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.399792][ T5621] bridge_slave_1: entered allmulticast mode
[   90.401359][ T5621] bridge_slave_1: entered promiscuous mode
[   90.465633][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.503424][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.506159][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.532069][ T5613] Bluetooth: hci0: command tx timeout
[   90.538524][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.538693][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.538836][ T5619] bridge_slave_0: entered allmulticast mode
[   90.540265][ T5619] bridge_slave_0: entered promiscuous mode
[   90.554474][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.556971][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.557447][ T5619] bridge_slave_1: entered allmulticast mode
[   90.569532][ T5619] bridge_slave_1: entered promiscuous mode
[   90.602072][ T5613] Bluetooth: hci3: command tx timeout
[   90.602103][ T5624] Bluetooth: hci1: command tx timeout
[   90.607225][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.669293][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.669389][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.669503][ T5617] bridge_slave_0: entered allmulticast mode
[   90.671197][ T5617] bridge_slave_0: entered promiscuous mode
[   90.682924][ T5613] Bluetooth: hci2: command tx timeout
[   90.714738][ T5612] team0: Port device team_slave_0 added
[   90.731142][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.731257][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.731405][ T5617] bridge_slave_1: entered allmulticast mode
[   90.742609][ T5617] bridge_slave_1: entered promiscuous mode
[   90.770878][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.777086][ T5612] team0: Port device team_slave_1 added
[   90.785041][ T5621] team0: Port device team_slave_0 added
[   90.794210][ T5621] team0: Port device team_slave_1 added
[   90.822678][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.843482][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.892519][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.894288][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.894309][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.894328][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.932684][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.932743][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.932830][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.981159][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.981222][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.981298][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.990148][ T5619] team0: Port device team_slave_0 added
[   90.991528][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.991571][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.991641][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.103182][ T5619] team0: Port device team_slave_1 added
[   91.116094][ T5617] team0: Port device team_slave_0 added
[   91.126243][ T5617] team0: Port device team_slave_1 added
[   91.185583][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.185600][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.185623][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.255388][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.255406][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.255430][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.306602][ T5612] hsr_slave_0: entered promiscuous mode
[   91.308105][ T5612] hsr_slave_1: entered promiscuous mode
[   91.309935][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.309949][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.309975][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.358091][ T5621] hsr_slave_0: entered promiscuous mode
[   91.359591][ T5621] hsr_slave_1: entered promiscuous mode
[   91.361745][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[   91.363760][ T5621] Cannot create hsr debugfs directory
[   91.368746][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.368797][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.368864][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.581321][ T5619] hsr_slave_0: entered promiscuous mode
[   91.582739][ T5619] hsr_slave_1: entered promiscuous mode
[   91.584659][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   91.584713][ T5619] Cannot create hsr debugfs directory
[   91.616553][ T5617] hsr_slave_0: entered promiscuous mode
[   91.617371][ T5617] hsr_slave_1: entered promiscuous mode
[   91.617920][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   91.617940][ T5617] Cannot create hsr debugfs directory
[   92.020127][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.033708][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.035268][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.039798][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.074619][   T25] cfg80211: failed to load regulatory.db
[   92.078066][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.086459][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.088451][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.106182][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.187224][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.204864][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.208220][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.227774][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.246008][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.249660][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.276165][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.279684][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.370595][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.384875][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.387333][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.393368][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.407486][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.427615][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.446946][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.450135][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.552956][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.556449][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.577444][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.580614][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.589402][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.606660][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.612866][ T5613] Bluetooth: hci0: command tx timeout
[   92.626427][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.629469][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.655500][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.683822][ T5624] Bluetooth: hci3: command tx timeout
[   92.684426][ T5613] Bluetooth: hci1: command tx timeout
[   92.739217][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   92.746276][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.761978][ T5613] Bluetooth: hci2: command tx timeout
[   92.802356][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.802538][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.831320][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.831395][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.850196][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   92.881026][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.881102][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.919089][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.919182][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.998620][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.018441][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.091254][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   93.105322][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   93.137228][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.137326][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.175450][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.176322][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.178854][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.178970][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.219970][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.220062][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.041729][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.096535][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.201422][ T5612] veth0_vlan: entered promiscuous mode
[   94.241078][ T5612] veth1_vlan: entered promiscuous mode
[   94.319111][ T5621] veth0_vlan: entered promiscuous mode
[   94.384737][ T5621] veth1_vlan: entered promiscuous mode
[   94.413964][ T5612] veth0_macvtap: entered promiscuous mode
[   94.450284][ T5612] veth1_macvtap: entered promiscuous mode
[   94.481351][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.504879][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.530818][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.568340][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.586881][ T5621] veth0_macvtap: entered promiscuous mode
[   94.615462][ T5621] veth1_macvtap: entered promiscuous mode
[   94.665506][ T5617] veth0_vlan: entered promiscuous mode
[   94.683034][ T5613] Bluetooth: hci0: command tx timeout
[   94.703853][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.722755][ T5619] veth0_vlan: entered promiscuous mode
[   94.731235][ T5617] veth1_vlan: entered promiscuous mode
[   94.762669][ T5613] Bluetooth: hci1: command tx timeout
[   94.762704][ T5613] Bluetooth: hci3: command tx timeout
[   94.764424][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.821341][ T5619] veth1_vlan: entered promiscuous mode
[   94.822330][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.822354][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.842414][ T5624] Bluetooth: hci2: command tx timeout
[   94.874942][   T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.921122][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.921146][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.956697][ T5619] veth0_macvtap: entered promiscuous mode
[   94.974314][   T82] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.974370][   T82] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.974409][   T82] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.974446][   T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.974484][   T82] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.974522][   T82] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.974560][   T82] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.053097][ T5619] veth1_macvtap: entered promiscuous mode
[   95.121578][ T5617] veth0_macvtap: entered promiscuous mode
[   95.129236][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.185940][ T5617] veth1_macvtap: entered promiscuous mode
[   95.189771][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.189795][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.216839][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.299294][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.359998][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.420890][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.420916][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.458982][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.563951][ T1282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.564005][ T1282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.564045][ T1282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.665423][   T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.669863][   T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.695269][ T5767] FAULT_INJECTION: forcing a failure.
[   95.695269][ T5767] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   95.695325][ T5767] CPU: 1 UID: 0 PID: 5767 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) 
[   95.695351][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   95.695372][ T5767] Call Trace:
[   95.695385][ T5767]  <TASK>
[   95.695395][ T5767]  dump_stack_lvl+0xe8/0x150
[   95.695439][ T5767]  should_fail_ex+0x3eb/0x540
[   95.695469][ T5767]  strncpy_from_user+0x36/0x2c0
[   95.695499][ T5767]  do_getname+0x77/0x250
[   95.695528][ T5767]  __se_sys_mkdirat+0x24/0x150
[   95.695553][ T5767]  do_syscall_64+0x166/0x520
[   95.695577][ T5767]  ? trace_irq_disable+0x3b/0x140
[   95.695611][ T5767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.695634][ T5767]  ? clear_bhb_loop+0x70/0xc0
[   95.695661][ T5767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.695685][ T5767] RIP: 0033:0x7faa2499e159
[   95.695714][ T5767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.695732][ T5767] RSP: 002b:00007faa258e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   95.695760][ T5767] RAX: ffffffffffffffda RBX: 00007faa24c25fa0 RCX: 00007faa2499e159
[   95.695777][ T5767] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[   95.695793][ T5767] RBP: 00007faa24a3506b R08: 0000000000000000 R09: 0000000000000000
[   95.695808][ T5767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.695819][ T5767] R13: 00007faa24c26038 R14: 00007faa24c25fa0 R15: 00007ffda2ed0ce8
[   95.695853][ T5767]  </TASK>
[   95.700001][ T5767] 9p: Bad value for 'source'
[   95.777563][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   95.816771][   T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.816931][   T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.905093][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.905112][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.963734][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.963756][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.011324][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.011344][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.035152][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.063290][ T5692] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   96.067159][   T10] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[   96.091580][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.091656][   T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   96.091683][   T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 9024, setting to 1024
[   96.091725][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.150356][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.150380][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.179892][   T10] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor
[   96.214621][ T5692] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[   96.216764][ T5692] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   96.216813][ T5692] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[   96.235683][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.235782][ T5692] usb 3-1: Product: syz
[   96.235832][ T5692] usb 3-1: Manufacturer: syz
[   96.235882][ T5692] usb 3-1: SerialNumber: syz
[   96.361460][   T10] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4)
[   96.388486][ T5769] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   96.627423][ T5764] capability: warning: `syz.0.5' uses 32-bit capabilities (legacy support in use)
[   96.631230][ T5692] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   96.641735][ T5692] usb 3-1: unit 4 not found!
[   96.665795][ T5764] : Can't lookup blockdev
[   96.752930][ T5775] input: syz0 as /devices/virtual/input/input5
[   96.772021][ T5624] Bluetooth: hci0: command tx timeout
[   96.807476][ T5692] usb 3-1: USB disconnect, device number 2
[   96.842230][ T5624] Bluetooth: hci3: command tx timeout
[   96.842267][ T5624] Bluetooth: hci1: command tx timeout
[   96.842531][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   96.924634][ T5613] Bluetooth: hci2: command tx timeout
[   97.003265][   T10] usb 2-1: Using ep0 maxpacket: 32
[   97.004063][   T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   97.005221][   T10] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[   97.005269][   T10] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[   97.005296][   T10] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   97.005320][   T10] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   97.008818][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.008844][   T10] usb 2-1: Product: syz
[   97.008859][   T10] usb 2-1: Manufacturer: syz
[   97.008874][   T10] usb 2-1: SerialNumber: syz
[   97.059792][ T5699] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   97.111083][   T10] imon:imon_find_endpoints: no valid input (IR) endpoint found
[   97.111159][   T10] imon 2-1:155.0: unable to initialize intf0, err -19
[   97.111171][   T10] imon:imon_probe: failed to initialize context!
[   97.111180][   T10] imon 2-1:155.0: unable to register, err -19
[   97.213494][ T5699] usb 4-1: Using ep0 maxpacket: 8
[   97.216735][ T5699] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   97.231322][ T5699] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   97.231357][ T5699] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   97.231383][ T5699] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   97.231407][ T5699] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   97.231450][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.295454][ T5777] syzkaller1: entered promiscuous mode
[   97.295478][ T5777] syzkaller1: entered allmulticast mode
[   97.318225][  T987] usb 1-1: USB disconnect, device number 2
[   97.440572][ T5779] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   97.519828][ T5699] usb 4-1: GET_CAPABILITIES returned 0
[   97.519883][ T5699] usbtmc 4-1:16.0: can't read capabilities
[   97.647562][ T5719] usb 2-1: USB disconnect, device number 2
[   97.952921][ T5770] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   98.102052][ T5770] usb 3-1: Using ep0 maxpacket: 32
[   98.102904][ T5770] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   98.103846][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.103869][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.103903][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.106490][ T5770] usb 3-1: config 0 descriptor??
[   98.165375][ T5770] hub 3-1:0.0: USB hub found
[   98.312879][ T5770] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   98.356078][ T5719] usb 4-1: USB disconnect, device number 2
[   98.543178][ T5796] FAULT_INJECTION: forcing a failure.
[   98.543178][ T5796] name failslab, interval 1, probability 0, space 0, times 1
[   98.543204][ T5796] CPU: 1 UID: 0 PID: 5796 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) 
[   98.543222][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   98.543231][ T5796] Call Trace:
[   98.543237][ T5796]  <TASK>
[   98.543244][ T5796]  dump_stack_lvl+0xe8/0x150
[   98.543271][ T5796]  should_fail_ex+0x3eb/0x540
[   98.543303][ T5796]  should_failslab+0xa8/0x100
[   98.543320][ T5796]  ? security_inode_alloc+0x39/0x310
[   98.543341][ T5796]  kmem_cache_alloc_noprof+0x9c/0x600
[   98.543366][ T5796]  ? __pfx_make_kgid+0x10/0x10
[   98.543386][ T5796]  ? security_inode_alloc+0x39/0x310
[   98.543410][ T5796]  security_inode_alloc+0x39/0x310
[   98.543431][ T5796]  inode_init_always_gfp+0x97e/0xd30
[   98.543455][ T5796]  alloc_inode+0x82/0x1b0
[   98.543475][ T5796]  create_pipe_files+0x51/0x7a0
[   98.543494][ T5796]  __do_pipe_flags+0x46/0x1f0
[   98.543511][ T5796]  do_pipe2+0xaa/0x190
[   98.543529][ T5796]  ? __pfx_do_pipe2+0x10/0x10
[   98.543545][ T5796]  ? __pfx___se_sys_futex+0x10/0x10
[   98.543572][ T5796]  __x64_sys_pipe2+0x5a/0x70
[   98.543587][ T5796]  do_syscall_64+0x166/0x520
[   98.543604][ T5796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.543620][ T5796]  ? clear_bhb_loop+0x70/0xc0
[   98.543640][ T5796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.543656][ T5796] RIP: 0033:0x7fa3f8f9e159
[   98.543671][ T5796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.543685][ T5796] RSP: 002b:00007fa3f9e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[   98.543702][ T5796] RAX: ffffffffffffffda RBX: 00007fa3f9225fa0 RCX: 00007fa3f8f9e159
[   98.543714][ T5796] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000
[   98.543723][ T5796] RBP: 00007fa3f903506b R08: 0000000000000000 R09: 0000000000000000
[   98.543733][ T5796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.543742][ T5796] R13: 00007fa3f9226038 R14: 00007fa3f9225fa0 R15: 00007ffd0749b308
[   98.543765][ T5796]  </TASK>
[   98.767353][ T5770] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0
[   98.799042][ T5770] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0
[   98.944729][ T5785] netlink: 'syz.2.9': attribute type 28 has an invalid length.
[   98.944756][ T5785] netlink: 'syz.2.9': attribute type 3 has an invalid length.
[   98.944805][ T5785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9'.
[  100.042446][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout
[  100.044355][ T5791] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  100.244524][ T5770] usb 3-1: reset high-speed USB device number 3 using dummy_hcd
[  100.940642][ T5791] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  100.954975][ T5791] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  100.958719][ T5791] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  100.958834][ T5791] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  100.967689][ T5791] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  100.988220][ T5791] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  100.988357][ T5791] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  100.991565][ T5791] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  101.016404][ T5791] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  101.016763][ T5791] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  101.019488][ T5791] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  101.282049][   T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  101.306285][ T5811] process 'syz.2.16' launched './file0' with NULL argv: empty string added
[  101.431983][   T30] usb 4-1: Using ep0 maxpacket: 32
[  101.436131][   T30] usb 4-1: unable to get BOS descriptor or descriptor too short
[  101.436187][   T30] usb 4-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40
[  101.439588][   T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.545619][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.545653][   T30] usb 4-1: Product: syz
[  101.545671][   T30] usb 4-1: Manufacturer: syz
[  101.576605][   T30] usb 4-1: can't set config #1, error -71
[  101.578627][   T30] usb 4-1: USB disconnect, device number 3
[  101.605098][ T5765] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  101.764192][ T5765] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  101.765832][ T5765] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  101.765851][ T5765] usb 1-1: config 1 has no interface number 0
[  101.767825][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.767843][ T5765] usb 1-1: Product: syz
[  101.767853][ T5765] usb 1-1: Manufacturer: syz
[  101.767864][ T5765] usb 1-1: SerialNumber: syz
[  101.772071][ T5692] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  101.808084][ T5765] usb 1-1: cannot find UAC_HEADER
[  101.870917][ T5765] snd-usb-audio 1-1:1.3: probe with driver snd-usb-audio failed with error -22
[  101.898724][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.954235][ T5770] usb 3-1: device descriptor read/64, error -71
[  101.972054][ T5692] usb 2-1: device descriptor read/64, error -71
[  102.012209][   T30] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  102.122338][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout
[  102.163691][   T30] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  102.166940][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.166969][   T30] usb 4-1: Product: syz
[  102.166996][   T30] usb 4-1: Manufacturer: syz
[  102.167007][   T30] usb 4-1: SerialNumber: syz
[  102.170236][   T30] usb 4-1: config 0 descriptor??
[  102.193481][   T30] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  102.196554][ T5770] usb 3-1: reset high-speed USB device number 3 using dummy_hcd
[  102.210504][ T5770] usb 3-1: device reset changed ep0 maxpacket size!
[  102.215031][ T5692] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  102.244441][ T5719] usb 3-1: USB disconnect, device number 3
[  102.342070][ T5692] usb 2-1: device descriptor read/64, error -71
[  102.366881][ T5825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.370015][ T5825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.391258][   T30] sonixb 4-1:0.0: Error reading register 00: -71
[  102.398551][ T5719] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  102.413474][   T30] usb 4-1: USB disconnect, device number 4
[  102.453669][ T5692] usb usb2-port1: attempt power cycle
[  102.480858][ T5827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'.
[  102.481037][ T5827] openvswitch: netlink: Flow actions attr not present in new flow.
[  102.552205][ T5719] usb 3-1: Using ep0 maxpacket: 16
[  102.553334][ T5719] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  102.554645][ T5719] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  102.556751][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.556776][ T5719] usb 3-1: Product: syz
[  102.556790][ T5719] usb 3-1: Manufacturer: syz
[  102.556805][ T5719] usb 3-1: SerialNumber: syz
[  102.560840][ T5719] r8152-cfgselector 3-1: Unknown version 0x0000
[  102.560864][ T5719] r8152-cfgselector 3-1: config 0 descriptor??
[  102.784910][ T5719] r8152-cfgselector 3-1: Unknown version 0x0000
[  102.785413][ T5719] r8152-cfgselector 3-1: No union descriptors
[  102.804638][ T5692] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  102.822692][ T5692] usb 2-1: device descriptor read/8, error -71
[  103.000531][ T5765] r8152-cfgselector 3-1: USB disconnect, device number 4
[  103.009686][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout
[  103.009740][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout
[  103.060272][ T5834] syzkaller1: entered promiscuous mode
[  103.060298][ T5834] syzkaller1: entered allmulticast mode
[  103.082779][ T5692] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  103.092007][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout
[  103.106208][ T5692] usb 2-1: device descriptor read/8, error -71
[  103.212364][ T5692] usb usb2-port1: unable to enumerate USB device
[  103.327466][ T5839] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET)
[  104.206076][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout
[  104.273889][ T5692] usb 1-1: USB disconnect, device number 3
[  104.295353][ T5765] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  104.431535][ T5858] ./dev/sda1: Can't open blockdev
[  104.457964][ T5765] usb 3-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00
[  104.470089][ T5765] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.470241][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.748031][ T5844] UDC core: g1: couldn't find an available UDC or it's busy
[  104.750769][ T5861] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  104.809175][ T5765] mxuport 3-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  104.811227][ T5765] mxuport 3-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  104.811321][ T5765] mxuport 3-1:1.0: probe with driver mxuport failed with error -71
[  104.863323][ T5765] usb 3-1: USB disconnect, device number 5
[  105.083017][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout
[  105.083058][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout
[  105.162365][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout
[  105.204124][ T5866] syzkaller1: entered promiscuous mode
[  105.204149][ T5866] syzkaller1: entered allmulticast mode
[  105.354300][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  105.522692][   T10] usb 4-1: Using ep0 maxpacket: 32
[  105.532007][   T10] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  105.549154][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.549217][   T10] usb 4-1: Product: syz
[  105.549235][   T10] usb 4-1: Manufacturer: syz
[  105.549251][   T10] usb 4-1: SerialNumber: syz
[  105.561253][   T10] usb 4-1: config 0 descriptor??
[  105.598761][   T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  105.599117][   T10] dvb-usb: bulk message failed: -22 (4/0)
[  105.599137][   T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  105.599265][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  105.599280][   T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  105.710904][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  105.718666][   T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  105.742314][   T10] usb 4-1: media controller created
[  105.795688][ T5874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.796164][ T5874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.862600][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  105.950131][   T10] usb 4-1: selecting invalid altsetting 3
[  105.950155][   T10] ttusb2: set interface to alts=3 failed
[  106.059947][ T5899] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  106.059979][ T5899] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  106.077168][ T5899] capability: warning: `syz.2.34' uses deprecated v2 capabilities in a way that may be insecure
[  106.113496][   T10] DVB: Unable to find symbol tda10086_attach()
[  106.113516][   T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  106.115906][   T10] dvb-usb: bulk message failed: -22 (4/0)
[  106.115930][   T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  106.116063][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  106.116079][   T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  106.116150][   T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  106.430565][ T5905] syzkaller1: entered promiscuous mode
[  106.430591][ T5905] syzkaller1: entered allmulticast mode
[  106.456171][   T10] usb 4-1: USB disconnect, device number 5
[  106.577002][ T5889] syzkaller1: entered promiscuous mode
[  106.577028][ T5889] syzkaller1: entered allmulticast mode
[  106.634705][   T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  106.698077][ T5913] syzkaller1: entered promiscuous mode
[  106.698101][ T5913] syzkaller1: entered allmulticast mode
[  106.722854][ T5913] FAULT_INJECTION: forcing a failure.
[  106.722854][ T5913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.722886][ T5913] CPU: 0 UID: 0 PID: 5913 Comm: syz.2.36 Not tainted syzkaller #0 PREEMPT(full) 
[  106.722918][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  106.722932][ T5913] Call Trace:
[  106.722940][ T5913]  <TASK>
[  106.722949][ T5913]  dump_stack_lvl+0xe8/0x150
[  106.722985][ T5913]  should_fail_ex+0x3eb/0x540
[  106.723017][ T5913]  _copy_from_iter+0x1d3/0x1660
[  106.723056][ T5913]  ? __alloc_skb+0x27a/0x7a0
[  106.723075][ T5913]  ? rcu_is_watching+0x16/0xb0
[  106.723094][ T5913]  ? __alloc_skb+0x27a/0x7a0
[  106.723116][ T5913]  ? kmem_cache_alloc_node_noprof+0x3b9/0x600
[  106.723146][ T5913]  ? __pfx__copy_from_iter+0x10/0x10
[  106.723167][ T5913]  ? __alloc_skb+0x27a/0x7a0
[  106.723184][ T5913]  ? __alloc_skb+0x27a/0x7a0
[  106.723219][ T5913]  skb_copy_datagram_from_iter+0xe6/0x720
[  106.723248][ T5913]  ? __local_bh_enable_ip+0xd6/0x140
[  106.723268][ T5913]  ? iov_iter_single_seg_count+0xc9/0x2f0
[  106.723294][ T5913]  tun_get_user+0xc7f/0x44d0
[  106.723339][ T5913]  ? aa_file_perm+0x4ed/0x15f0
[  106.723363][ T5913]  ? __pfx_tun_get_user+0x10/0x10
[  106.723396][ T5913]  ? __lock_acquire+0x747/0x2de0
[  106.723432][ T5913]  ? kstrtoull+0x137/0x1d0
[  106.723475][ T5913]  ? ref_tracker_alloc+0x341/0x4b0
[  106.723499][ T5913]  ? lock_acquire+0x115/0x350
[  106.723525][ T5913]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  106.723549][ T5913]  ? lock_acquire+0x115/0x350
[  106.723577][ T5913]  ? tun_get+0x1c/0x2f0
[  106.723607][ T5913]  ? tun_get+0x1c/0x2f0
[  106.723634][ T5913]  ? tun_get+0x1c/0x2f0
[  106.723667][ T5913]  tun_chr_write_iter+0x113/0x200
[  106.723698][ T5913]  vfs_write+0x612/0xba0
[  106.723735][ T5913]  ? __pfx_vfs_write+0x10/0x10
[  106.723774][ T5913]  ? __fget_files+0x2a/0x420
[  106.723808][ T5913]  ksys_write+0x150/0x270
[  106.723839][ T5913]  ? __pfx_ksys_write+0x10/0x10
[  106.723878][ T5913]  do_syscall_64+0x166/0x520
[  106.723896][ T5913]  ? trace_irq_disable+0x3b/0x140
[  106.723928][ T5913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.723951][ T5913]  ? clear_bhb_loop+0x70/0xc0
[  106.723976][ T5913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.723996][ T5913] RIP: 0033:0x7faa2499e159
[  106.724015][ T5913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.724031][ T5913] RSP: 002b:00007faa258e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  106.724064][ T5913] RAX: ffffffffffffffda RBX: 00007faa24c25fa0 RCX: 00007faa2499e159
[  106.724081][ T5913] RDX: 0000000000000052 RSI: 00002000000002c0 RDI: 0000000000000004
[  106.724095][ T5913] RBP: 00007faa258e4090 R08: 0000000000000000 R09: 0000000000000000
[  106.724109][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.724144][ T5913] R13: 00007faa24c26038 R14: 00007faa24c25fa0 R15: 00007ffda2ed0ce8
[  106.724180][ T5913]  </TASK>
[  107.162278][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout
[  107.162320][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout
[  107.242866][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout
[  107.300767][ T5924] XFS (nullb0): Invalid superblock magic number
[  107.392670][ T5719] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  107.554553][ T5719] usb 1-1: not running at top speed; connect to a high speed hub
[  107.554592][ T5719] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  107.558739][ T5719] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.558803][ T5719] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  107.558932][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.650288][ T5719] gspca_main: spca501-2.14.0 probing 0000:0000
[  107.662012][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  107.759356][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.775994][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.796405][ T5946] netlink: 'syz.2.41': attribute type 15 has an invalid length.
[  107.796430][ T5946] netlink: 'syz.2.41': attribute type 7 has an invalid length.
[  107.796776][ T5946] netlink: 'syz.2.41': attribute type 15 has an invalid length.
[  107.796792][ T5946] netlink: 'syz.2.41': attribute type 7 has an invalid length.
[  107.797059][ T5946] netlink: 'syz.2.41': attribute type 15 has an invalid length.
[  107.797075][ T5946] netlink: 'syz.2.41': attribute type 7 has an invalid length.
[  107.797337][ T5946] netlink: 'syz.2.41': attribute type 15 has an invalid length.
[  107.797352][ T5946] netlink: 'syz.2.41': attribute type 7 has an invalid length.
[  107.797594][ T5946] netlink: 'syz.2.41': attribute type 15 has an invalid length.
[  107.797609][ T5946] netlink: 'syz.2.41': attribute type 7 has an invalid length.
[  107.882549][   T10] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  107.887150][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.887178][   T10] usb 4-1: Product: syz
[  107.887193][   T10] usb 4-1: Manufacturer: syz
[  107.887210][   T10] usb 4-1: SerialNumber: syz
[  107.925856][   T10] usb 4-1: config 0 descriptor??
[  107.937503][ T5765] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  107.951208][   T10] hub 4-1:0.0: bad descriptor, ignoring hub
[  107.951240][   T10] hub 4-1:0.0: probe with driver hub failed with error -5
[  108.085436][ T5719] gspca_spca501: reg write: error -71
[  108.085460][ T5719] spca501 1-1:1.0: Reg write failed for 0x02,0xa048,0x00
[  108.085545][ T5719] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  108.113430][ T5760] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  108.121497][ T5765] usb 2-1: Using ep0 maxpacket: 8
[  108.127807][ T5765] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  108.142261][ T5719] usb 1-1: USB disconnect, device number 4
[  108.157705][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.157762][ T5765] usb 2-1: Product: syz
[  108.157778][ T5765] usb 2-1: Manufacturer: syz
[  108.157794][ T5765] usb 2-1: SerialNumber: syz
[  108.170479][   T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  108.209959][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  108.210943][   T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  108.211002][   T10] usb 4-1: media controller created
[  108.222535][ T5765] usb 2-1: config 0 descriptor??
[  108.250784][ T5765] gspca_main: sq930x-2.14.0 probing 2770:930c
[  108.270006][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  108.272045][ T5760] usb 3-1: Using ep0 maxpacket: 16
[  108.288903][ T5760] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40
[  108.291313][ T5760] usb 3-1: config 1 interface 0 has no altsetting 0
[  108.313818][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.313847][ T5760] usb 3-1: Product: syz
[  108.313861][ T5760] usb 3-1: Manufacturer: К
[  108.313904][ T5760] usb 3-1: SerialNumber: syz
[  108.385424][ T5933] ------------[ cut here ]------------
[  108.385441][ T5933] usb 4-1: BOGUS control dir, pipe 80000680 doesn't match bRequestType c0
[  108.385466][ T5933] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.3.40/5933
[  108.412286][ T5933] Modules linked in:
[  108.416245][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: syz.3.40 Not tainted syzkaller #0 PREEMPT(full) 
[  108.426152][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  108.436461][ T5933] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  108.442598][ T5933] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  108.462674][ T5933] RSP: 0018:ffffc900051cf958 EFLAGS: 00010246
[  108.468845][ T5933] RAX: 0000000000000000 RBX: ffff88802c5ae500 RCX: 0000000080000680
[  108.476942][ T5933] RDX: ffff888029cd8f00 RSI: ffffffff8cc6bde0 RDI: ffffffff90a969d0
[  108.486467][ T5933] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  108.495631][ T5933] R10: ffffc900051cfa40 R11: fffff52000a39f54 R12: 1ffff110044d8de4
[  108.503738][ T5933] R13: ffff8880226c6f20 R14: ffff888029cd8f00 R15: 0000000080000680
[  108.511776][ T5933] FS:  00007fd3132036c0(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000
[  108.520949][ T5933] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  108.527673][ T5933] CR2: 00007f7949325fe8 CR3: 0000000035236000 CR4: 00000000003526f0
[  108.535753][ T5933] Call Trace:
[  108.539083][ T5933]  <TASK>
[  108.542131][ T5933]  usb_start_wait_urb+0x13f/0x5b0
[  108.547280][ T5933]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  108.553003][ T5933]  usb_control_msg+0x234/0x3e0
[  108.557847][ T5933]  dib0700_i2c_xfer+0xbb9/0xf80
[  108.562857][ T5933]  __i2c_transfer+0x7bf/0x1fe0
[  108.567704][ T5933]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  108.573654][ T5933]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  108.579547][ T5933]  ? rt_mutex_lock_nested+0x149/0x1c0
[  108.585075][ T5933]  ? i2c_transfer+0xc7/0x2d0
[  108.591117][ T5933]  i2c_transfer+0x1cb/0x2d0
[  108.596739][ T5933]  i2cdev_ioctl_rdwr+0x460/0x740
[  108.601775][ T5933]  i2cdev_ioctl+0x6a5/0x880
[  108.607114][ T5933]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  108.612841][ T5933]  ? __fget_files+0x3a2/0x420
[  108.617584][ T5933]  ? __fget_files+0x2a/0x420
[  108.621217][   T10] DVB: Unable to find symbol dib7000p_attach()
[  108.621260][   T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  108.638436][ T5933]  ? bpf_lsm_file_ioctl+0x9/0x20
[  108.644120][ T5933]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  108.649221][ T5933]  __se_sys_ioctl+0xfc/0x170
[  108.655015][ T5933]  do_syscall_64+0x166/0x520
[  108.659668][ T5933]  ? trace_irq_disable+0x3b/0x140
[  108.665454][ T5933]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.671586][ T5933]  ? clear_bhb_loop+0x70/0xc0
[  108.676392][ T5933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.687752][ T5933] RIP: 0033:0x7fd31239e159
[  108.695816][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.716634][ T5933] RSP: 002b:00007fd313203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  108.725212][ T5933] RAX: ffffffffffffffda RBX: 00007fd312625fa0 RCX: 00007fd31239e159
[  108.733369][ T5933] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004
[  108.741391][ T5933] RBP: 00007fd31243506b R08: 0000000000000000 R09: 0000000000000000
[  108.749466][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.757553][ T5933] R13: 00007fd312626038 R14: 00007fd312625fa0 R15: 00007ffee0ea9f48
[  108.765715][ T5933]  </TASK>
[  108.768799][ T5933] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  108.776297][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: syz.3.40 Not tainted syzkaller #0 PREEMPT(full) 
[  108.785450][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  108.795564][ T5933] Call Trace:
[  108.798879][ T5933]  <TASK>
[  108.801842][ T5933]  vpanic+0x56d/0xa70
[  108.805868][ T5933]  ? __pfx__printk+0x10/0x10
[  108.810492][ T5933]  ? __pfx_vpanic+0x10/0x10
[  108.815029][ T5933]  ? is_bpf_text_address+0x292/0x2b0
[  108.820346][ T5933]  ? is_bpf_text_address+0x26/0x2b0
[  108.825586][ T5933]  panic+0xc5/0xd0
[  108.829355][ T5933]  ? __pfx_panic+0x10/0x10
[  108.833825][ T5933]  __warn+0x315/0x4c0
[  108.837843][ T5933]  ? usb_submit_urb+0x1057/0x18b0
[  108.842900][ T5933]  ? usb_submit_urb+0x1057/0x18b0
[  108.847961][ T5933]  __report_bug+0x276/0x570
[  108.852522][ T5933]  ? usb_submit_urb+0x1057/0x18b0
[  108.857586][ T5933]  ? __pfx___report_bug+0x10/0x10
[  108.862661][ T5933]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  108.868516][ T5933]  ? kasan_save_track+0x4f/0x80
[  108.873407][ T5933]  report_bug_entry+0x19b/0x290
[  108.878301][ T5933]  ? usb_submit_urb+0x1100/0x18b0
[  108.883361][ T5933]  ? usb_submit_urb+0x1105/0x18b0
[  108.888440][ T5933]  handle_bug+0xce/0x200
[  108.892714][ T5933]  exc_invalid_op+0x1a/0x50
[  108.897261][ T5933]  asm_exc_invalid_op+0x1a/0x20
[  108.902145][ T5933] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  108.907812][ T5933] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  108.927447][ T5933] RSP: 0018:ffffc900051cf958 EFLAGS: 00010246
[  108.933546][ T5933] RAX: 0000000000000000 RBX: ffff88802c5ae500 RCX: 0000000080000680
[  108.941545][ T5933] RDX: ffff888029cd8f00 RSI: ffffffff8cc6bde0 RDI: ffffffff90a969d0
[  108.949539][ T5933] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  108.957542][ T5933] R10: ffffc900051cfa40 R11: fffff52000a39f54 R12: 1ffff110044d8de4
[  108.965549][ T5933] R13: ffff8880226c6f20 R14: ffff888029cd8f00 R15: 0000000080000680
[  108.973566][ T5933]  ? usb_submit_urb+0x1091/0x18b0
[  108.978633][ T5933]  usb_start_wait_urb+0x13f/0x5b0
[  108.983698][ T5933]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  108.989303][ T5933]  usb_control_msg+0x234/0x3e0
[  108.994126][ T5933]  dib0700_i2c_xfer+0xbb9/0xf80
[  108.999813][ T5933]  __i2c_transfer+0x7bf/0x1fe0
[  109.004620][ T5933]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  109.010468][ T5933]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  109.016313][ T5933]  ? rt_mutex_lock_nested+0x149/0x1c0
[  109.021713][ T5933]  ? i2c_transfer+0xc7/0x2d0
[  109.026375][ T5933]  i2c_transfer+0x1cb/0x2d0
[  109.030925][ T5933]  i2cdev_ioctl_rdwr+0x460/0x740
[  109.035931][ T5933]  i2cdev_ioctl+0x6a5/0x880
[  109.040483][ T5933]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  109.045542][ T5933]  ? __fget_files+0x3a2/0x420
[  109.050335][ T5933]  ? __fget_files+0x2a/0x420
[  109.054958][ T5933]  ? bpf_lsm_file_ioctl+0x9/0x20
[  109.059956][ T5933]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  109.065022][ T5933]  __se_sys_ioctl+0xfc/0x170
[  109.069656][ T5933]  do_syscall_64+0x166/0x520
[  109.074277][ T5933]  ? trace_irq_disable+0x3b/0x140
[  109.079338][ T5933]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.085437][ T5933]  ? clear_bhb_loop+0x70/0xc0
[  109.090183][ T5933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.096104][ T5933] RIP: 0033:0x7fd31239e159
[  109.100545][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.120176][ T5933] RSP: 002b:00007fd313203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  109.128645][ T5933] RAX: ffffffffffffffda RBX: 00007fd312625fa0 RCX: 00007fd31239e159
[  109.136646][ T5933] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004
[  109.144655][ T5933] RBP: 00007fd31243506b R08: 0000000000000000 R09: 0000000000000000
[  109.152742][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.160755][ T5933] R13: 00007fd312626038 R14: 00007fd312625fa0 R15: 00007ffee0ea9f48
[  109.168772][ T5933]  </TASK>
[  109.172415][ T5933] Kernel Offset: disabled
[  109.176775][ T5933] Rebooting in 86400 seconds..