last executing test programs:

7.681299205s ago: executing program 0 (id=382):
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000274c0340ab0560000611000000010902120001000d00000904"], 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x3)
r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040084)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000080)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x1})
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket(0x11, 0x3, 0x4000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7ff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
eventfd2(0x80000001, 0x80800)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r6 = socket(0x2, 0x3, 0xff)
shutdown(r6, 0x1)
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
syz_usb_connect(0x0, 0x77c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12011001228d5d4021040805efb4010203010902"], 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0)

6.268880897s ago: executing program 4 (id=390):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
close(r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040c5}, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74)
socket$pptp(0x18, 0x1, 0x2)
openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x2, 0xc040)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYRES64=r0], 0x9)

6.178210028s ago: executing program 4 (id=391):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
fsopen(&(0x7f00000002c0)='sockfs\x00', 0x1)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0xd, 0x200, &(0x7f0000001500)="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"})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

5.480409359s ago: executing program 1 (id=394):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x81)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r3 = socket$caif_stream(0x25, 0x1, 0x1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="94ca"])
write$FUSE_DIRENTPLUS(r1, 0x0, 0x520)
syz_usb_connect(0x2, 0x48, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002ff98b720520c7228ffd0010203010902360001080920030904e80004ff45af0909050702200038060809050b000002060ae609050c100a00280b0209050a02ff030b0904"], &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0})
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x10a, 0x0, &(0x7f0000000700)="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", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x4, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x2, 0x4, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0xfff, 0x0, 0x1000000000, 0xf70c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]})
r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

5.151251813s ago: executing program 3 (id=395):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x86)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x47f, &(0x7f0000000540)=[&(0x7f00000003c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x44}])

4.949009307s ago: executing program 3 (id=396):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x17, 0x1a, 0x19, 0x20, 0xf3d, 0x112, 0x1716, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x31, 0x0, 0x0, 0xb, 0x5b, 0x23}}]}}]}}, 0x0)

4.553104459s ago: executing program 0 (id=399):
r0 = syz_io_uring_setup(0x5bf, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x8006, 0x167}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000640)=ANY=[@ANYBLOB="dc010000160039030008000000000000e0000001000000000000000000000000001c8a000000000000000000ffff000000100000000000000000000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000024bd7000000000000000000000000000000000000000000004000000e4"], 0x1dc}}, 0x0) (async, rerun: 64)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x101000, 0x102, 0x1f}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456}) (rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x2}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @broadcast, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a) (async, rerun: 32)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (rerun: 32)
io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) (async)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)

4.232795185s ago: executing program 4 (id=402):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x41, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000980)="ad56c3c5820fae9d6dcd3292ea54c7ccef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@iv={0x18}], 0x18, 0x20004000}], 0x1, 0x8810)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000000c0)={r10, 0x4, 0x101}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={r10, 0x3c, &(0x7f0000000400)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000080)=0x10)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x9})

4.084365037s ago: executing program 0 (id=403):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000810000d0c28bd7000fcdbffad7700", @ANYRES32, @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x10000}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x40054)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4700, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x0, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x40005, 0x0}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.734248094s ago: executing program 0 (id=406):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x86)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x47f, &(0x7f0000000540)=[&(0x7f00000003c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x44}])

3.588638437s ago: executing program 3 (id=407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0)

3.463218533s ago: executing program 0 (id=408):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r0, 0x5004}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffd6e, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x10000001}, 0x4000000)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(r3, &(0x7f0000000000)="dbe104b35716e67da422221d3286", 0xe, 0x20000814, &(0x7f0000000100)={0x11, 0x7, r4, 0x1, 0x5, 0x6, @local}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="30000000140009052cbd7000fdffffff02180000", @ANYRES32, @ANYBLOB="08000200e000000208000100ac14be2caa850400e00000011aa4ffc4299c7fa05bb4c917eea0360eba6d650500000000000000152b40dbb9648b1935d294eb24752bb4af070c316407618d7709eec3d7dd2a0be31396b9b0120e8b152d92f3948ade257bd18620cbb1dfeeb7dee8c9acf35adb305e00"/127], 0x30}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xd}, {0xfff3, 0x8}, {0xfff2}}}, 0x24}}, 0x20040000)
syz_usb_control_io$printer(r1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
recvfrom(r2, &(0x7f00000000c0)=""/242, 0xf2, 0x10000, 0x0, 0x0)

3.384845322s ago: executing program 3 (id=409):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4a, 0x0, 0x0)
pipe2(&(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
pipe(0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000003c0)={@remote, 0x1d, r3})
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='+\x00\x00\x00\b'], 0x2b)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000300)={@remote, r7}, 0x14)
close_range(r2, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x4, 0x6, 0x50, @empty, @private0, 0x20, 0x20, 0x3}})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000026bbbd664d09200cc05ed480000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r9}, 0x38)
r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000ac0), 0x802, 0x0)
getpid()
statx(r2, &(0x7f00000018c0)='./file0\x00', 0x7000, 0x800, &(0x7f0000001900))
sendmmsg$unix(r1, &(0x7f0000002080)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000001200)="dee07f712cbc8ef053bfbc37f54e5f6f9ed9e711d341ba961b22e75097177c816346e1a7e3227b2bc6aea0420d61773fb60dc4213c6bf12452329482a1e721e7eff9a4d23aad5f98d0f1c3f2fa8870dfa2a7ccd1dcc000df05c45ec3bfeeab06c53f66b3c933b5dfd0d220600bd50794ef522dcbaefe6c0d2b1b2d68b7f0cfdf9386209978be8f68cee7", 0x8a}, {&(0x7f0000000400)="7b51de769e1ade1a539519ba46e25ea9316f616bc1209978d2bee61b6ec964a64a0b1a537a3342c7d6c98b6237a1b7f9777cc64609d160119200ddc247eb053e61ed5393014a5e776407e39583a476b220617e1f3609639b1b1ec7678b5694a49b7009aa3726b399988c766a9b33d547b9d036ac2037f0a94e7f88710528096920", 0x81}, {&(0x7f00000002c0)="32c2b64d6f6d1dbcd018574c26194a42eb81098133008cd025cd8d761a9f038f92e8a91a24c49e9e97f11875dc75afaba1e14b4b97", 0x35}, {&(0x7f00000004c0)="86d9e2b0eab5e4f4cabbf5d0681d244d25877f9362ba200ceee14a9146a611ef5f20678b7b2d7676dbd6e7055802c447e320521b4a8c35135a929ea3eaae16365875a8671742a22f254da4385a7825fbdad9db7ae30e7a1e07c1a2d36a93efccf313ee08d4a1ee296eb67f428620d157d2329d2c3aa924035794b354b5fe5aaa7e301d425d28d5dc2149a6f0c75a4f1f9ba84367044e51841b18a96809e7c51c46829fa9851a11cf9926fad54239513a3ae1c7f20ad16cb5fbad46512b0e8f5312bc25a5a14e00583b0f6200bad97589ca00d9189d6d0391ba8b", 0xda}, {&(0x7f00000005c0)="89fdd02a706c99c3af93158f683fe557d7a63fc992ee6e4a4c9c15aa32bca86ac9178a15674c11a5f9f9d68ddad8c6507e6886fb06a5587d7493c4743ce7b25e5970e3095d7ccdf3d158faf400b48c4bddc233d7afb77e08fc91bc5783ba098183c873e7262eb393894342d77bce0a950f0048cbdb178f89ff319bd3f7875297f34916bfccd463eac3b122ebd99d63d34999b42ab7d3dcb4db662d90217fb2f765f0a378333d7234cf9876302342b1c0c22975d8e7e80d123cbb5bfcbbc1647f302937644529bfb8e3c4f09ffa32fcfe22a20bfea52cd119e685d2f0", 0xdc}, {&(0x7f00000006c0)="932854bf049f8811fd2424e6e93e741c1ab671c6f5cab59d2267950a299c20f500979cbd74cf3f3a06f10104db180348f6c01f8175a1238cfb41cec91ef3035a031f3f31955e368adf54f7d33b5dcb5435e034b3beebae05e1dba51a0e7e832745d8f06eaf0570c522f5aac6862a89561f7b1640fb60a9a3e73e13447cfd82e88cd8ade7016526d21e0c8c23a5009edece1f226064009b0a294235e52423c6663b84e98722ad8b01456df3fc56c8c8f06fbb406f9d3f5f371d0bcf9f03356ae309e538f9d492434e0a2a5142", 0xcc}, {&(0x7f0000000340)="d8b5bcadd4c4ca4f88ff69e2f208cec62d60d7f982eb804f0050b56ce0a9a1f41bdda42c03103f", 0x27}, {&(0x7f0000000880)="3302ccb141cd9d90eeee961fedad01720710f4896f7425ec648027f2a1cbc3ba22277b7b9c922a1b7461eff7120d13c5f844b653cf8ce74f50b63765b837448957761d1c85810d30bcdc6504144ba8a70c1167ef19c8459354597a135c50415b4b09f28181aff762c4344670e3915054e234e129717e3e00ba61ba6f881d0e33268665526b1966df1d4c41b168fa6d527a53a2acbbe2d9bf3317777aefd3701ebb21365561a908a8e5aa37c7b11140042319c2bffce916e5a40be58ec7050975d93268383e7a274adf9f4acc1a0d", 0xce}], 0x8, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4]}}, @rights={{0x34, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r5, r9, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r6, r10]}}], 0xb8, 0x4}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000c80)="82eef42e66477070ce88dfc86e8a4ad213bc4753e5405befea837cee72ecf2beb827ee835141d359bef7b4449be402637ac5deccc740c51e231df063e29d9bbe54f6111141a0e673834e184b3c5c31cf71a334fca21d371faea1357ea164c355635096ae89e4459ba42f7030c16dca99a7adfe9b5b94663a692d1774ee816df028abacac40f8f96264f78aa52f0040daaace8da6626125ecf2c82bdcccd64e799740d5e94f8aaa2aba82e72788ee44a38748c7d3c476645d07b77edf1c2bc2a258b319dfb7f15401ee97bf992421502c", 0xd0}, {&(0x7f0000000d80)="01007331d72ce448dc362977dee54a0d75abc97e6f497acddba5abb79907f3aa1bdf5ff4220e407c1d520c09d9cbdafe6046abd7c0", 0x35}, {&(0x7f0000000dc0)="bcc5714d2b37006c69f030c66929e1c9d78fb9c36587cd944fb8642e4ef9238789e388", 0x23}, {&(0x7f0000000e00)="667cbdec28a9137c706a3972e5e8f4ace3596511b6c2398a8105a08314ec8cdd31b2eea6eb71badf5d8249e2eefaea18324b90661ba8bf1a2ce2bb3dee0c2a0d9ae1e6dfd2abf3f4832da1cbc46304c0d4176f7551df7bcc2b6a8aeef994fd739c83e100613a7ddd7e478576a8a9c32988860f8660cb1c4f93203606563163b728248ab50977d2827c439c4116a70bdcfc783e311da4197abdb6b601b0597f0dbba1092597f585091f67a6e24f83e8e0259c1c", 0xb3}, {&(0x7f0000000ec0)="81da", 0x2}, {&(0x7f0000000f00)="8f10168e7fab3fe94db41d81a00e219fddc7032cbcbf53980f3317ea095bc16db5d86e3bbf194c9607546ff287f01db6154327d3c9a463b4569f116568dd056ff0ad8840b62f564c5c16d9b026478e0d720c05ee47d96bb10c550291eb369abe2cececb2b34ed4ac2f03f90f8de5c428cccde46f7ad1601935175c3f42bf26f0d42dc10ea65f8631d0c20a9342971b55a72facc451fc1d3227b22c6aeba9c7c986ce27ddc99ea0dfaf3b700298bd8e4d2889b8e9f385adc582e7d4becbf5c983e1a7771a665e84282dbd807abd8412c29acaac94b44ed7ae", 0xd8}, {&(0x7f0000001000)="1b01f2ac05090bb04fb9db97d4d397580d479231a4386fa0822bb967e1021efa5a7c93c497a6222a2db66ecbff7e769ef44a060b32aede89adce54958e74f8dfd8038835aa8e216a8a748393180e74901ea2873bde99787ac7eed8f903875b565d8a468a41d76670fb2cffa6642888773d49b0b93c98688c6d8ac4a40115db86232af32234b92aa50ce1f1f54b10007811d26753edca35c6b88db1af1a5707c40c7bb1a1", 0xa4}, {&(0x7f00000010c0)="f91c6fe63a5049fc8185210c96b5aa979348db3baf3f95fe10", 0x19}, {&(0x7f0000001100)="20ffdd295e602bceb90a5bd1c5a9da56e33aaf6ec2d4c12304b2957274fa849e5d12611415951ba57453b0f3a1b41c4e3fac72db92904db1eeeb44d67c9ba79f3f4fb0a6f5ba2f9534b6811aee999f2f9478c96c107124d04a0c25b2122538b21d1f9ecc6c141eaf9b68433d9cd7d8c4183a3f50e553b63d7e52604a92ed886b3c1289df4241d6f3df4a98ebca6254472577c1362c4786edc2c436b28e0bdb583e3d8ff3f7888290e21f9b7ce05f7df1ec6c905b4e5120c91cf7162a0a516caf89494caff60b19caadf2", 0xca}], 0x9}}, {{&(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001340)="eb816c94d509c5397185d1d947b66fc7fa4bfc9867b7cdc1edc2c1d39b91ef5b62e962277b8663", 0x27}, {&(0x7f0000001380)="7731870c556eae374b45d8930be318a53a967fc65f5d62b1df74140f269b20752395cf34b68e8202df48c729df458390667bbfa96a0c33e473423e13d933e939f0d3e2bead4e69bf32", 0x49}, {&(0x7f0000001400)="7e5d6b47b64cc85c69ad85da4367f81a46f14ada0fc5affa4895b5aae2c6ff45a956b65f99cb741e5017fb67cda247f9e2b76b4cb13a65ab0fe1c550729a2dd7dc3574f690ada24f453d07cc54004c2e827186e5231ec1955b8ebfd59e0cfd76ac2f752342ea72e53d96d65df24289938eba8905bfecc89b6db51f545877e23727d55dc560af5821ea960b60b067f722216746cce5604d97790f468d09a8726e8140005f5ecbddcf11c624849286da3f1d3dbc19c26737c31a6799ab9a1c6314eeefa1620d1c339de7db92d92b6e7991beb1effa962fe190c6d86e34183362df45ec53ad27d2b0", 0xe7}, {&(0x7f0000001500)="9bfdb381d16143d862f377a1cc08a6ec9155f009f8e9ab6c7cc4749f1278bdbe531f8953c2d211dcbd96156f57242d2f565f3026a1a88808c60bfd1478456cbc9039493fd9605abfecd2050d1f2411f2cc18b50c4ebad57447b8fe9f26aa818c7c6cefb1e9de7ed1efa38cc564236a34d6a6fce979169b93e2aa", 0x7a}, {&(0x7f0000001580)="e7486eb4f887bb2c9b43184394d2dd53b522da6daf220b7dc8e3730e3f423d3e29e500a3a7c0948a6b1769", 0x2b}, {&(0x7f00000015c0)="3ff9f10db5f860a8d5deb8594eaecdb9a824834a081b21e547e5026179c883f041ea794cf225a2767ef26a9a6b8fdde2de5f4eee24b8055b2365afc3e5faba2cbb0eead14403c326bf6e764d1513bc2f20345fb8b159dbc8ed3c2818b67225876f8920ee36c598951b389f23309b23c71232bc6408d5f47c6c8f5b1c83b6f3f6fcab68e76cf59f6561e7ceb52a82f82d9536b7828fe036d44535c843a97ee9a0cd492ed4eebf70811069b8a6de4f534dc4b78a3145d63f5af4", 0xb9}, {&(0x7f0000000980)="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", 0x13f}, {&(0x7f0000001780)="9757a6bc51f585a86feb72f15371ac9108d1c6f41acd5e76c29ac74952decb956a8322d69f591b924c0ad502f1b7aa44f97f2e1548794ffd274e3f40af9d8cc8cef16b07e8abd4300d3662d698e75b94decc7deb7f6a0d959a36f8479f24dad4c707be5fa0526ada871740c72bccea38902feb6c467ef97305ba7e36da0b9ff40d8aea40176286efc60266755a7e01aa756c6ee9c11848027dd2722361c8f5f53463b38c08d45fcea7b439a508a973f79c5564", 0xb3}], 0x8, &(0x7f0000001a00), 0x0, 0x40000}}, {{&(0x7f0000001a40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001ac0)="7f5ffeeadcc3be48498bea337b75705e9b626cf7a755f5bbe8", 0x19}, {&(0x7f0000001c00)="c4a7b1295e5492629e177dd7c01cd3a6c801d8fdce535b3c45bc91a47376398ebe8abc3a55b0151cf2ad2dd170bff5bcc0f152fac26a9bac8cac60039ea18c99daa149b0466a2d7c7a6431ec746306a6a74f2c86dfe89e1be71fa555276c5d5f3e8810b563f0377192a9d1c8407191e78664cb9558268d17402d17bb42aee6d7d1a921fe18d7e42c20f60ad2461df2ea4b85c93c3f5fb3ad58bf6b2056322b3e33e08de155a4669b72fc98cec251054ab7b49634c925a22bf0eda649c735bcb8e288418281abd40d564105f7557342fbf0404561", 0xd4}], 0x2}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001d00)="c3026f534bbc4773898e42f90a277f82988073982d62ce96c7d151820d0df3c0f1f268bb452c301ba5551470edde869480894fa1bdf5899c77bc2d047de7c36258bd19774b0e9f758153e373e586bebbe443c152718186b155f5be4cb0a1d129857b78404541223a8d103fbef73f62c71f8f3292b283445f5f6fe69068d315d845dd73c6f396d5c7a6e4513b9d8daef0087f6873ae328862e050494dacf88148a7c52a54d1067be35f1226585499273644a54947505cf7edddb81cac360c615a269532", 0xc3}, {&(0x7f0000001e00)="7b550ba19e4690625310432569e5f105c1cb6576f45191e73d4ae9efacede1b3a7207dee71d3f0fc5e648f7af28681eafc266f79507b635da6a0ea6e85a39b5232bbf0619a8e2c3ed20c2b9910d1dae4ab0f69edffa8cd561366f153c362c34785b2b32117ac8d6ba00ae18467266ec0f654db607a2acc1f5de6936a65135f06", 0x80}, {&(0x7f0000001ec0)="4f656e6c06f7a9baea9204f84fddd1844fb867c4c29b9916bb6acff3885e1b1f0d503ce7f76b818e2072ddd5741622e4f236fb938b8112b3baac2c4dfa77894e7f6c3150b0d12a78bb0144e8cb5e1faffd3c2964012c4acc7bfcd6fa0cfc20e9335f05f51ab6c14e8c8ea0bd86869b9a4a4cf1977de2d6d67cd303cbdc6189c784f47074d03ddf46421331ef612b9382d50df04abd9b19f2f28d357fa8a280f8cfc77e9702b2c0f7621b92c9facfa58182653e0b4a263b862227a93ace7efdd315adb8842833885f57fc0d8ac40d", 0xce}, {&(0x7f0000001fc0)="e4c885701874340c19f09674a0db9cae0ba6ea05c9065d872e6eed9262f67e247f5867b32161e17a27e5271ca10075ade4", 0x31}], 0x4, &(0x7f0000002040), 0x0, 0x4000000}}], 0x5, 0x24008010)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)

3.15486988s ago: executing program 3 (id=412):
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000400)=@userptr={0xf, 0x1, 0x4, 0x400, 0x1, {}, {0x4, 0x8, 0x5, 0x5, 0x7, 0xa, "cd3ecbf6"}, 0x6, 0x2, {0x0}, 0x6})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x200)
ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000000c0))
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xa000006, 0xfffffdf7, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, 0x0, 0x0)

2.934032493s ago: executing program 2 (id=413):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc9}}}, 0x6) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffffffffffff, 0x2)
fcntl$setpipe(r1, 0x407, 0x7)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x22c, 0x13, 0x2, 0x70bd2c, 0x25dfdbfd, {0x25, 0xc, 0x2, 0xac, {0x4e24, 0x4e20, [0x8000, 0x80000000, 0x3, 0x4], [0x40, 0x4, 0xf, 0x1], 0x0, [0x4, 0x10]}, 0x2, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "fae6143293e84acef1194ccc6f75cff790d0268f0e324c568748e1ec39ef7391c79986129237c4"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "b71e863b41cd33ac344a1d6357de7b9d1e3678840b819e16b32c6d7be8ed47375c784e7d7aaa5237f291183849cbcfb8c8e9d0a1fb5042f1ac3f9765c9c9583d57f17c25be44133993d62e4fd8a7963bfbf0ddbd70be1a3b631afe89e7194c4226b4fa9d3aba1472dabcc4dd90b34bf654db05"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "60d85de8710f3c8c5857a2cfb48d2c31a1b24354b3ceea3dde5e150a14effc3b53bbc7604ae2e957cea0b64e5cbd279a708be4fb0c2e6a4d0cb5ee81b7f08e255667186c9f2e557a39c3f43c9c93913d907b76e9221983e3a640d362250fb54523b11f5e1d292e3e17e218e2ded60f957b6bcdc52d80dcba2c883c7c8b89619a12a36a75ef50aa0ddcddeb279b5ceb1dcce772df51ae194570036e570be8440bc8afd06d95e82d9ffb67bbb9a4fd3d583c9398a5461adc42b4aafa1b04d05c9387e076760e3b47597e70a29c734a0d1ee85f1c"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "6635369b7efa9aaa0f839e97c22fb410c0c8ce8c1e84e17520de63611e4dd0a372e6a94976ab5ff616cd495d8dd46d5af8c543d32bcac015dd28294113b95b41852ab8a27e02d4fdc82ef4e84fd1660e153cfffe8d53da7de6f536b99d"}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8001}, 0x40)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0xff, 0x5, 0xb9, 0x7fff, 0x5]}, &(0x7f0000000400)=0x78)
sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000440)=0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0, <r3=>0x0})
sched_setattr(r3, &(0x7f0000000500)={0x38, 0x6, 0x10000040, 0xc, 0x1, 0x9, 0x8, 0x5, 0x8, 0x5}, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x10000, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d)
ptrace$ARCH_SHSTK_STATUS(0x1e, r3, &(0x7f0000000580), 0x5005)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {<r6=>r0}}, './file0\x00'})
ioctl$SNDCTL_TMR_START(r5, 0x5402) (async)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x4, 0x10}, 0xc) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', <r8=>0x0, 0x2f, 0x7f, 0x6, 0xa, 0x1e, @private0, @remote, 0x7800, 0x700, 0x64, 0x1}})
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xef, 0x3, 0x4, 0x200a8, r7, 0xb, '\x00', r8, r6, 0x2, 0x5, 0x4, 0x1}, 0x50) (async)
ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000780)=0x5) (async)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f00000007c0)={0x8000000000000000, <r9=>r6, 'id1\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{r7, <r10=>0xffffffffffffffff}, &(0x7f0000001a80), &(0x7f0000001ac0)=r9}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001b40)={&(0x7f0000000840)="3998b9d85b820d9a12199e1b668eb66a2f2dd0cc670726f8e9b7116f48ac3decec92d89e6110a5b6624b72602690c35c15f07b92c0f1aa5c4b402c6ead3cefe60248c0e97562e91c0bbcb78617dbb7df4aa87ec012355f735ce5f7099d79c3a731fef54937c5f6ba9b5eaaa17530ba69c0fc52c9460f1ab81a491006ad9d01ab7c68c7f030287453787cc6116087fcc16df31b9c354246400e6ab3e2d85c327ef7f6afb037059fde138097f34c70b763cfe3a5587c78c781d566ccdb3849d6376a29c7aa80d17d2545ed1e383af7c079b18904999cd01bb93aa82e32233cf1cb080677341575ea3ae80563", &(0x7f0000000940)=""/254, &(0x7f0000000a40)="b6fe1a5a1b3809476e", &(0x7f0000000a80)="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", 0xff, r10, 0x4}, 0x38)
ioctl$UI_DEV_CREATE(r6, 0x5501) (async)
syz_open_dev$vcsa(&(0x7f0000001b80), 0x48, 0x200) (async)
lstat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)) (async)
sendto$inet_nvme_of_msg(r5, &(0x7f0000001c80)={@data_c2h={{0x7, 0x4, 0x18, 0x7, 0xff}, 0x13a, 0x101, 0x4, 0x0, "4f0dedaa"}, @void}, 0x80, 0x0, 0x0, 0x0) (async)
write$binfmt_misc(r6, &(0x7f0000001d00)="0f0bf0c66035bd246e9f677dd1da63859cdd86002076ab6e80ff6b916c684bd2380f62e0c1ade03f7f0a19d6ee22372931694cf24b189d672f3b68a4be086e4e9a0bf4d707f6b5cfbfcaa65165863271dec256efcbaf6fe0f3b3afb4e9fd3c8363bcee92a3d229d9c20257eca0cc25339d784787373b146c22e5eb82a290de0abb33420d19b8c34f", 0x88) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001e00)={0x6, 0xf}) (async)
write$UHID_CREATE2(r9, &(0x7f0000001e40)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x9a, 0x1ff, 0x6, 0x401, 0x300, 0xfff, "ae66e68dcdbe76644577b7c7a2cbf8e601773fd3fd25a40e8fb0be76d058a9247a31accb8f8d8ac315fdcaf3d3fd1fb3f663a545716be038c226bd913ff4e137db3df4269483d704b2a3d279d2dd90a3888bd6aa4976a958f68f31e670db051c68fc07f5dc256a8658c5621c87cee9c0670249979eb74e457d48e70ba18c342e8b869c9ac2ec14369293593eb56540c9265e79ef37145c0f607e"}}, 0x1b2)

2.918539262s ago: executing program 1 (id=414):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

1.936490441s ago: executing program 1 (id=415):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e07000514"], 0xa)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x29, 0x2, 0x0)
timer_create(0x4, &(0x7f0000000040)={0x0, 0x1a, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0)

1.936090271s ago: executing program 2 (id=416):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x8a)

803.324718ms ago: executing program 4 (id=417):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200", @ANYRES32], 0x254}}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x400024fc, &(0x7f00000000c0)={0x0, 0x2471, 0x20000, 0x1, 0xe8}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) (async)
r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) (async)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) (async)
truncate(&(0x7f0000000000)='./bus\x00', 0x1000)
lsetxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), &(0x7f0000000140)=ANY=[@ANYBLOB="49a1"], 0x2, 0x1) (async, rerun: 32)
dup3(r5, r4, 0x80000) (rerun: 32)
finit_module(r5, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000100)=0xfffffff9, 0x0, 0x4) (async, rerun: 32)
r6 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000000)=0x4000000b, 0x4) (async, rerun: 32)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (rerun: 32)
connect$inet6(r6, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f00000003c0)=0x7b) (async)
socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 64)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (rerun: 64)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64)
socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
socket$inet_udplite(0x2, 0x2, 0x88)

606.599114ms ago: executing program 2 (id=418):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x86)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x47f, &(0x7f0000000540)=[&(0x7f00000003c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x44}])

456.608993ms ago: executing program 4 (id=419):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0)

430.309944ms ago: executing program 4 (id=420):
syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b080000"], 0x0)

322.558089ms ago: executing program 1 (id=421):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
semop(0x0, &(0x7f0000000200), 0x53)

224.137957ms ago: executing program 0 (id=422):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"/306, @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf25130000004c00078008000200010000000c000400ffffffffffffff7f0c000300960400000000000008000200030000000c0003000a0300000000000008000200080000000c000400ff000000000000000c010680080001000200000004000500fb0003008e1cd85b38a5fea25ab9509c2aa9bbcbcbb34f70366db422cc8f9faf497cff3cd330e44710b655dad96534b652ce420bcf024f098abb71510176ef7cb71e4698c233d32f0722549e56d559ed3cf519be3d0a20866f82bb760684d81dfdb728a8bd390ada893b252857b2232abaca58d4f2b1abe7b34d77eb36b9ad82eae6e78e57abe00da488b58bb2495011af19cc22ad43181ef7d34613a08ca23362bca6165bb66a120f5930ea4d8abdd515b72a8506c80655f4eeedd9d44f0d4799708a4a2659e6c5dcc09b3197db494b716a5ddfa8ce2ccb834ecc0f14878af828a802dde35c15d7c9b33534135903754aafeeeb2f4d072492602540d9165e82007c0002805400038008000200040000000800010002000000080001000004000008000100030000000800010001000080080001000008000008000200090000000800010029000000080001000b00000008000200070000001c00038008000200cead0000080001000500000008000100740900000800010000000000280002802400038008000100050000000800010006000000080001000300000008000200ae0400006c000580140002800800010018000000080004004000000008000100657468000700010069620000080001006574680008000100756470002c0002800800040001000000080001000c000000080002000500000008000300d900f3824e57e220726a56f94ea50ae60000080002000000001807000100696200006800068004000500080006000500000004000500040005000400020004000500040005004200040067636d28616573290000000000000000000000000000000000000000000000001a00000055530efbe9eb3e4058e1052a407fbd452efbd3099a453ce4849400008000068008000100fbffffff4c00040067636d28616573290000000000000000000000000000000000000000000000002400000011bf398803e250147d0df0aeeb31f48a02d83d504021fc756f8a3c7c513a3176a737dc77040002001e00030047bb8ab3aa6f8fe251ed7004989991b880a6082d3d8c443127b000003c9c79edcec79f34672d01520a02a0ab6986133113cceb974331fbccc6b2f63bd9623e9f698dcb85bb3023a7e34a5618a45f94a6d3e139cfa4987af453a95e31437e3e1c7c19edeff6e91def43f65ddb3108a80de5a8efaaf6b9e3ccb2944d8491c68a77a71f9296df4d21a09f5574af06a6fd13790e804f482da2abfaebc5246e8a91128a758b944c599e33b86c1e"], 0x364}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
r4 = dup(r3)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0)
vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2)
ioctl$NBD_SET_SOCK(r7, 0xab00, 0xffffffffffffffff)

221.058561ms ago: executing program 2 (id=423):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040)="571873", &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0xb57, 0xc, 0x4b, 0x9}}, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904", @ANYRES8=r0], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r2, &(0x7f0000000540)={0x14, &(0x7f0000000340)={0x0, 0x11, 0x40, {0x40, 0xf, "ebd0cda141426122de430d571d09972ee69c263b37cd75cb7841d24f946204e64e7af2cf1600e456fca9b5a7fd18f5b7a72ec11582e11d8b7a3295000ab4"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}}, &(0x7f0000000740)={0x34, &(0x7f0000000580)={0x0, 0x15, 0x3b, "be38ee4ef8d3e5686237fc506b8b279d525849454f2c159e4560d1632483707755b5deda09992d390fa57885db0c3d6d345cc7db62b302a328a698"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000680)={0xc0, 0xa1, 0x4, 0xd4}, &(0x7f00000006c0)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000700)={0xc0, 0xa2, 0x2f, "80562c623017da15614ccc0575e77449adde52d3e4191fdc6e9722807d787422f366f80406bb9badb936be40c48f7e"}})

121.14437ms ago: executing program 1 (id=424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES8=r0], 0x20)

118.834664ms ago: executing program 2 (id=425):
io_uring_setup(0x3819, &(0x7f0000000380)={0x0, 0x6c02, 0x0, 0x0, 0x1c5})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000200)={0x2, 0x1, 0x2})
fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x8})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1b, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0)

30.853893ms ago: executing program 3 (id=426):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r0, 0x5004}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffd6e, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x10000001}, 0x4000000)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r4=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(r3, &(0x7f0000000000)="dbe104b35716e67da422221d3286", 0xe, 0x20000814, &(0x7f0000000100)={0x11, 0x7, r4, 0x1, 0x5, 0x6, @local}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="30000000140009052cbd7000fdffffff02180000", @ANYRES32=r6, @ANYBLOB="08000200e000000208000100ac14be2caa850400e00000011aa4ffc4299c7fa05bb4c917eea0360eba6d650500000000000000152b40dbb9648b1935d294eb24752bb4af070c316407618d7709eec3d7dd2a0be31396b9b0120e8b152d92f3948ade257bd18620cbb1dfeeb7dee8c9acf35adb305e00"/127], 0x30}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
recvfrom(r2, &(0x7f00000000c0)=""/242, 0xf2, 0x10000, 0x0, 0x0)

16.688313ms ago: executing program 2 (id=427):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rxrpc_rtt_tx\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
syz_open_dev$tty20(0xc, 0x4, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_buf(r1, 0x0, 0x10, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0xd5, &(0x7f0000000340)={0x0, 0xffffffff, 0x4000, 0x1, 0x400000cb}, &(0x7f0000000080)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x2000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
pipe(&(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})

0s ago: executing program 1 (id=428):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x12, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"/3793], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
process_madvise(r3, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000000)='b', 0x1}], 0x2, 0x17, 0x0)
fstatfs(r0, &(0x7f0000000080)=""/136)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000ac0)=[{&(0x7f0000000300)="a48e161e2f99661c9f39bfc0609242fdfa81ef2ed4ad4d5489f32d55be16b28d109d12d7190f836de27d686ad355abe91cc02f46f928db2d8a4d8f29f2827a8b181c185c6b83e8be7afab223c840e8f37fb6dc4582a1c6e8"}, {&(0x7f0000000500)="b9589462cbef4c5177f316f4d8c0315b2f61d71502b66855d2c4e0aaf5c170270c625b312c057616ef190448e96408a923a40f428197800307e5d9ea3238b9ffdbeb801cc7c31fd69088f5ad9b39229473a069032796cd50d6e68f51c591924bcfa003102813105976c108d1e29c9ce83c26845379b8a93aca16387c9d43ca566014cb2b2b88a4d154384f87bf1531ee0d0488f88d57305155defd06c1bc537b9b884cb462c4a6ff9ca76c96439326cc6f9029b2694c8bc7a3e34d5300500d3f86ad63248284537b5b91f9f93a37ab8e4cb9814253875731e6961cffc354b784c8c813e95c34"}, {&(0x7f0000000300)}, {&(0x7f0000000040)="a1af053757428ada2ce9d557737cf2d5c939bc99645d72254263a1d9bd21c1312c4f866fd5e96497fe8f13d5653a3448ab0800daac7ed5000000"}, {&(0x7f0000000400)="6ebb74fd1b7ef2df4add9254eb2842a4956e7b38c06e5133c2504841524d1c98450325380e9e6e452f0d5a393f6ebd126e4f066ac0af83041754691ba31e760652f6280dafcaa7998ef63738a76e2ed8b9ae3e510980bb8e840cb95fc9141c9a5b679ea9bd232fadcf1e2e208f12960410f6b0b635e6e565ce"}, {&(0x7f0000000600)="10589c1d9c83d94e71871be410d448cdbcd7ccac9170e86d6eea33a660d7910c5d0b109375a5b33f5dedf5e8033592821da11462df50d47d6254623c5ecc8c6a68809fe5b62b85f86a3b566f6eb336248b68a00ec598883ea5a294909a0d841b2a1acc29640082226650fbd93e84ae6597d7f6660c82ad6dcf23f83286c0e4705130dc47745b49dc33e0dd570b51e96de7cf467c8a4dd9c37f68b39ca14ddc890f0fefbed783d65ccc4c0e55aaac4215546ae12df99760d47f68596d2be865ef9c0a5e0a63e6431c5e9870b55f47b64031a6d4df5b24"}, {&(0x7f0000000940)="a58c18c19b599369d374a5efa9c84399f2e4c437a7b0c8a14aac9c9d634c7794ef5be8adab0aae3c56d6b5dba17ea663d11f08fa41cb2bd937ef6a6e736a699f3718ae2fe0754bdee4ebdd060831f03e5086cf8f9dfe1660d7c4b9cd40bbecbcfa30c03f644a5dad4829b833338824042269932b6cd01563f6d7d0360c0983fe2cf8a9eb0a3b83d8ee2c460e623ff4d4e936bb5d099daece946757f107e4cf7666a10919c431128a195b49e16713a7670a5ba4c1d37966"}, {&(0x7f0000000a00)="33785bf165dbf63494dbd31afc5744031c04cdb314fb3e18b9d4f99066633bf9c5154b00c9319785ca87d6fcc8842a534525d174f8d30e7b8bea75e863523dadc4dfc8217865099e5c900cc68b903620439bd021d687aa84d7f654ef44bbab780a136be289b2eb26a6147fe80316bee3f2a0c39b5b1502348af508e5491dfa684405e10b3f56e7d5375c635d6f49503d416197811a3347d1a7a467181cba0dbda48b45593a71fadf0adc48fcc72b7c7220216be9790feba8"}, {&(0x7f0000000700)="84d96f434d3aaee4e9be0ae98838bfed42e16d00147453105b7b0a1910087e33d7f75aa59abeb6f6cfaede08909792ee16fabade27dcfca54741bd6b4fa53fab474eb39e7b3b9ab6e576fbc946b9714e3ee2e6518a6f5efe535ca13266a34812f8a664f752c9b48c0c59b790cf"}, {&(0x7f0000000800)="15ba812f655dc5986d661a2d71c44f353c939f7b9160c8d23f431bcb41024ccee53a932f85221f28a554584260aaad7979ae5bd7b3aa907494a13f3a462624d2ddff53ab6a4f8deac7aed5c141d05356953d7ff7ebdc890097"}], 0xe)
r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r9 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r10 = fcntl$dupfd(r8, 0x406, r8)
ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f00000007c0)=@urb_type_bulk={0x3, {0xc}, 0x10000, 0x0, &(0x7f0000000b80)="92bf310ef2331da5700fc5a317a777843b2e0d701b344cd196af33da8b4c043b5836f8d017dc3e09a2c5c1f2b86f204930405b6ce23d8daf28137baa6a0040c466d7bbd7a4820496ecd9cd065623", 0x4e, 0x7f, 0x3, 0x2, 0x9, 0x2, &(0x7f0000000d80)="2d6bddc51c7c18bfa3f8f80fdf80ebc2895d42a85b45aa91ba5a6beae25d948f8ba76d170c5d52769ddb42a1719bbceda67c10a0981d8ce65900305a37c88d09895445897161056de3d117525464d9240e88e9cba0484641c25b588052b3d663cb624cd1c4e19ed188f6a3f903076bc4bdc8ffdc25ffbf2a48e367598cdce186dc05f8fc40ac57b067a13b60683fabf4a3a99a8cbed29e2a60d1c72743f03c0437018b982b2653092a4a3018d9a0fddad5701389eea2daf092ccd98b840dfa131a7aa0818c5c3efef32106b637ff971181357559e9c84f3d75e014cde86f2f9d"})
readv(r9, &(0x7f0000000880)=[{&(0x7f0000003400)=""/4103, 0x1007}], 0x1)
r11 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0)
r12 = fsmount(r11, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000140)={0xf010000, 0x0, 0x0, r12, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts.
[   75.357910][ T5790] cgroup: Unknown subsys name 'net'
[   75.598323][ T5790] cgroup: Unknown subsys name 'cpuset'
[   75.654819][ T5790] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   77.193628][ T5790] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   80.864890][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.872929][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.880613][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.886785][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.887563][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.889175][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.889747][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.893457][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.898182][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.901960][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.905087][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.905906][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.907149][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.908389][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.925998][   T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.926927][   T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.946072][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.948847][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.968322][   T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   80.972383][   T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   80.973351][   T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   80.976146][   T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   80.991892][   T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   80.994673][   T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.014057][   T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.665072][   T31] cfg80211: failed to load regulatory.db
[   82.008079][ T5801] chnl_net:caif_netlink_parms(): no params data found
[   82.069158][ T5804] chnl_net:caif_netlink_parms(): no params data found
[   82.099675][ T5807] chnl_net:caif_netlink_parms(): no params data found
[   82.215319][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   82.241706][ T5800] chnl_net:caif_netlink_parms(): no params data found
[   82.840410][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.841558][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.841989][ T5801] bridge_slave_0: entered allmulticast mode
[   82.843524][ T5801] bridge_slave_0: entered promiscuous mode
[   82.926035][   T61] Bluetooth: hci3: command tx timeout
[   82.926224][ T5810] Bluetooth: hci0: command tx timeout
[   83.003965][   T61] Bluetooth: hci1: command tx timeout
[   83.004303][ T5810] Bluetooth: hci4: command tx timeout
[   83.033269][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.033339][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.033455][ T5801] bridge_slave_1: entered allmulticast mode
[   83.036411][ T5801] bridge_slave_1: entered promiscuous mode
[   83.083997][ T5810] Bluetooth: hci2: command tx timeout
[   83.121733][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.121889][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.122004][ T5804] bridge_slave_0: entered allmulticast mode
[   83.125432][ T5804] bridge_slave_0: entered promiscuous mode
[   83.255761][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.255875][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.255991][ T5807] bridge_slave_0: entered allmulticast mode
[   83.257370][ T5807] bridge_slave_0: entered promiscuous mode
[   83.344966][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.345073][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.345195][ T5804] bridge_slave_1: entered allmulticast mode
[   83.346682][ T5804] bridge_slave_1: entered promiscuous mode
[   83.485588][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.485723][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.485897][ T5807] bridge_slave_1: entered allmulticast mode
[   83.487597][ T5807] bridge_slave_1: entered promiscuous mode
[   83.635622][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.635702][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.635811][ T5814] bridge_slave_0: entered allmulticast mode
[   83.637229][ T5814] bridge_slave_0: entered promiscuous mode
[   83.642948][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.714720][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.714859][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.714978][ T5800] bridge_slave_0: entered allmulticast mode
[   83.716392][ T5800] bridge_slave_0: entered promiscuous mode
[   83.815019][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.815212][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.815707][ T5814] bridge_slave_1: entered allmulticast mode
[   83.817281][ T5814] bridge_slave_1: entered promiscuous mode
[   83.820924][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.944854][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.944973][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.945144][ T5800] bridge_slave_1: entered allmulticast mode
[   83.946864][ T5800] bridge_slave_1: entered promiscuous mode
[   83.950339][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.137374][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.216756][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.587058][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.717521][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.719471][ T5801] team0: Port device team_slave_0 added
[   84.797419][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.877109][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.879292][ T5801] team0: Port device team_slave_1 added
[   84.966155][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.967808][ T5804] team0: Port device team_slave_0 added
[   85.005501][   T61] Bluetooth: hci3: command tx timeout
[   85.005592][ T5810] Bluetooth: hci0: command tx timeout
[   85.083944][   T61] Bluetooth: hci1: command tx timeout
[   85.084123][ T5810] Bluetooth: hci4: command tx timeout
[   85.126478][ T5807] team0: Port device team_slave_0 added
[   85.164072][ T5810] Bluetooth: hci2: command tx timeout
[   85.186278][ T5804] team0: Port device team_slave_1 added
[   85.306541][ T5807] team0: Port device team_slave_1 added
[   85.436273][ T5814] team0: Port device team_slave_0 added
[   85.666648][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.666669][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.666682][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.766658][ T5800] team0: Port device team_slave_0 added
[   85.826365][ T5814] team0: Port device team_slave_1 added
[   85.828614][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.828628][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.828641][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.956558][ T5800] team0: Port device team_slave_1 added
[   85.957194][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.957204][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.957216][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.093636][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.093648][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.093661][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.185397][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.185408][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.185422][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.287080][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.287091][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.287105][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.411374][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.411386][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.411399][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.426218][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.426235][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.426258][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.545365][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.545376][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.545390][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.547133][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.547142][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.547155][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.759563][ T5801] hsr_slave_0: entered promiscuous mode
[   86.760619][ T5801] hsr_slave_1: entered promiscuous mode
[   86.961176][ T5804] hsr_slave_0: entered promiscuous mode
[   86.962003][ T5804] hsr_slave_1: entered promiscuous mode
[   86.962653][ T5804] debugfs: 'hsr0' already exists in 'hsr'
[   86.962740][ T5804] Cannot create hsr debugfs directory
[   87.049671][ T5807] hsr_slave_0: entered promiscuous mode
[   87.050466][ T5807] hsr_slave_1: entered promiscuous mode
[   87.051033][ T5807] debugfs: 'hsr0' already exists in 'hsr'
[   87.051050][ T5807] Cannot create hsr debugfs directory
[   87.084035][ T5810] Bluetooth: hci0: command tx timeout
[   87.084053][   T61] Bluetooth: hci3: command tx timeout
[   87.164066][   T61] Bluetooth: hci1: command tx timeout
[   87.164165][ T5810] Bluetooth: hci4: command tx timeout
[   87.244160][ T5810] Bluetooth: hci2: command tx timeout
[   87.380215][ T5814] hsr_slave_0: entered promiscuous mode
[   87.380998][ T5814] hsr_slave_1: entered promiscuous mode
[   87.381553][ T5814] debugfs: 'hsr0' already exists in 'hsr'
[   87.381570][ T5814] Cannot create hsr debugfs directory
[   87.495369][ T5800] hsr_slave_0: entered promiscuous mode
[   87.496473][ T5800] hsr_slave_1: entered promiscuous mode
[   87.497903][ T5800] debugfs: 'hsr0' already exists in 'hsr'
[   87.497924][ T5800] Cannot create hsr debugfs directory
[   89.031842][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.057898][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.097985][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.150848][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.163912][   T61] Bluetooth: hci3: command tx timeout
[   89.163949][ T5810] Bluetooth: hci0: command tx timeout
[   89.243891][   T61] Bluetooth: hci1: command tx timeout
[   89.243930][ T5810] Bluetooth: hci4: command tx timeout
[   89.271939][ T5804] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   89.302648][ T5804] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   89.318947][ T5804] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   89.323862][ T5810] Bluetooth: hci2: command tx timeout
[   89.372688][ T5804] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   89.467161][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.510466][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.542845][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.574693][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.709159][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.752946][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.773227][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.833405][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.897602][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.977139][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.015527][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.049803][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.090858][ T5801] 8021q: adding VLAN 0 to HW filter on device team0
[   90.096359][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.165841][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.167032][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.213033][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.213232][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.260813][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.331718][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.343566][ T5804] 8021q: adding VLAN 0 to HW filter on device team0
[   90.382071][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.382251][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.412775][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.412899][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.442604][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   90.480542][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.481884][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.527080][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.544921][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.545801][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.645328][ T5807] 8021q: adding VLAN 0 to HW filter on device team0
[   90.680641][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.690686][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.690820][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.755921][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.756062][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.829796][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[   90.894737][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.894873][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.947690][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.950884][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.019898][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.310620][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.327179][ T5801] veth0_vlan: entered promiscuous mode
[   91.359293][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.410893][ T5801] veth1_vlan: entered promiscuous mode
[   91.531875][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.588772][ T5814] veth0_vlan: entered promiscuous mode
[   91.606348][ T5801] veth0_macvtap: entered promiscuous mode
[   91.629018][ T5801] veth1_macvtap: entered promiscuous mode
[   91.659099][ T5814] veth1_vlan: entered promiscuous mode
[   91.710900][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.743554][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.790004][ T3545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.794430][ T3545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.798667][ T3545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.798710][ T3545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.808759][ T5807] veth0_vlan: entered promiscuous mode
[   91.821579][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.856819][ T5814] veth0_macvtap: entered promiscuous mode
[   91.862050][ T5807] veth1_vlan: entered promiscuous mode
[   91.896689][ T5814] veth1_macvtap: entered promiscuous mode
[   92.047686][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.118860][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.196470][ T5807] veth0_macvtap: entered promiscuous mode
[   92.197580][   T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.218447][   T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.231368][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.231392][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.243807][   T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.262980][ T5800] veth0_vlan: entered promiscuous mode
[   92.268179][   T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.268947][ T5807] veth1_macvtap: entered promiscuous mode
[   92.291220][ T5804] veth0_vlan: entered promiscuous mode
[   92.389700][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.389721][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.392457][ T5800] veth1_vlan: entered promiscuous mode
[   92.431134][ T5804] veth1_vlan: entered promiscuous mode
[   92.476826][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.513203][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.575541][  T811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.606392][  T811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.611434][  T811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.631778][  T811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.652540][  T811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.652560][  T811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.790679][ T5800] veth0_macvtap: entered promiscuous mode
[   92.841451][ T5804] veth0_macvtap: entered promiscuous mode
[   92.853389][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.853408][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.869060][ T5800] veth1_macvtap: entered promiscuous mode
[   92.899886][ T5804] veth1_macvtap: entered promiscuous mode
[   93.038257][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.069601][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.069621][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.070836][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.107536][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.138476][ T3545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.147955][ T3545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.148834][ T3545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.148873][ T3545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.181422][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.280382][   T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.293421][   T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.463920][   T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.466299][   T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.467616][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.467633][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.506108][ T5933] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   94.502368][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.502389][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.583758][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   94.593740][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   94.603760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   94.605785][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   94.613724][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   94.623734][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   94.633737][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   94.643731][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   94.653734][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   94.743727][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   96.255358][ T5939] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   96.255566][ T5939] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2'.
[   96.256171][ T5939] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure
[   96.275839][ T5939] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[   96.464554][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.464577][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.626381][ T5939] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   96.633398][ T5939] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   96.765313][ T5939] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   96.795045][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.795065][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.880932][ T5939] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   96.881188][ T5939] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   96.958608][ T5939] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   97.035809][ T5939] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   97.036178][ T5939] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   97.085418][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.085440][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.323105][ T5939] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   97.508663][ T5939] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   97.508748][ T5939] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   97.620273][ T5939] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   97.727023][ T5939] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   97.727150][ T5939] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   97.877769][ T5939] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   98.074016][ T5957] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   98.074016][ T5957] The task syz.4.11 (5957) triggered the difference, watch for misbehavior.
[   98.364659][ T5879] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   98.685029][ T5810] Bluetooth: hci0: command 0x0c1a tx timeout
[   98.829893][ T5879] usb 1-1: Using ep0 maxpacket: 32
[   98.936156][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout
[   99.092746][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout
[   99.254359][ T5879] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   99.254388][ T5879] usb 1-1: config 0 has no interface number 0
[   99.260599][ T5879] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   99.260627][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.260646][ T5879] usb 1-1: Product: syz
[   99.260658][ T5879] usb 1-1: Manufacturer: syz
[   99.260671][ T5879] usb 1-1: SerialNumber: syz
[   99.351151][ T5879] usb 1-1: config 0 descriptor??
[   99.396109][ T5879] smsc95xx v2.0.0
[   99.586464][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout
[  100.338459][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout
[  100.400382][ T5879] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  100.400412][ T5879] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  100.460862][ T5974] input: syz0 as /devices/virtual/input/input6
[  100.774164][ T5810] Bluetooth: hci0: command 0x0c1a tx timeout
[  101.003812][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout
[  101.219330][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout
[  101.239735][ T5879] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  101.241478][ T5879] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32
[  101.659264][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout
[  102.013868][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  102.167315][   T10] usb 2-1: Using ep0 maxpacket: 32
[  102.179572][   T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  102.179589][   T10] usb 2-1: config 0 has no interface number 0
[  102.213128][   T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  102.213158][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.213176][   T10] usb 2-1: Product: syz
[  102.213189][   T10] usb 2-1: Manufacturer: syz
[  102.213201][   T10] usb 2-1: SerialNumber: syz
[  102.273554][   T10] usb 2-1: config 0 descriptor??
[  102.313978][   T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  102.522475][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout
[  102.589154][ T5879] usb 1-1: USB disconnect, device number 2
[  102.843983][ T5810] Bluetooth: hci0: command 0x0c1a tx timeout
[  103.093993][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout
[  103.256743][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout
[  103.333355][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'.
[  103.466343][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'.
[  103.537924][ T5810] Bluetooth: hci0: unexpected event for opcode 0x1405
[  103.651967][ T5993] hsr_slave_0: left promiscuous mode
[  103.678187][ T5993] hsr_slave_1: left promiscuous mode
[  103.741403][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout
[  104.110137][   T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  104.161892][   T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  104.534228][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout
[  105.251077][ T5911] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  105.593800][ T5911] usb 1-1: Using ep0 maxpacket: 16
[  105.597070][ T5911] usb 1-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.597100][ T5911] usb 1-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.597174][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0
[  105.597221][ T5911] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  105.597241][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.738110][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  105.752446][ T5893] usb 2-1: USB disconnect, device number 2
[  105.828619][ T5911] usb 1-1: config 0 descriptor??
[  105.869627][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  105.907446][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  105.908316][ T5893] quatech2 2-1:0.51: device disconnected
[  107.218103][ T5911] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[  107.218146][ T5911] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[  107.218167][ T5911] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x1
[  107.218197][ T5911] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[  107.220456][ T5911] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  107.345868][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.346387][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.594027][ T5810] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  107.594275][ T5810] Bluetooth: hci0: Injecting HCI hardware error event
[  107.597427][ T5810] Bluetooth: hci0: hardware error 0x00
[  108.296325][ T5911] usb 1-1: USB disconnect, device number 3
[  109.651369][ T5810] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  111.261061][ T6044] mmap: syz.4.30 (6044) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  112.873104][   T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  113.654984][   T43] usb 5-1: Using ep0 maxpacket: 8
[  113.657443][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  113.657479][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  113.657500][   T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  113.657521][   T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  113.657557][   T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  113.657576][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.662077][   T43] usb 5-1: config 0 descriptor??
[  113.663563][ T6049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  114.021773][    C0] Bluetooth: hci5: Unexpected continuation: 1 bytes
[  114.022367][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.022428][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.022481][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.025089][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.025163][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.026849][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.026978][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.027108][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.027177][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.027257][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.027324][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.027390][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.027457][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.027525][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.027594][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.027666][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.027733][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.040656][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.040740][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.040809][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.040878][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.040944][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.041013][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.041075][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.041140][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.041207][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.042382][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.042454][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.042520][   T61] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  114.249399][ T5810] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  114.254630][ T5994] usb 5-1: USB disconnect, device number 2
[  114.435686][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  114.583828][    T9] usb 2-1: Using ep0 maxpacket: 16
[  114.588078][    T9] usb 2-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.588110][    T9] usb 2-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.588132][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  114.588162][    T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  114.588184][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.598982][    T9] usb 2-1: config 0 descriptor??
[  115.107309][    T9] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  115.107347][    T9] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  115.107370][    T9] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x1
[  115.107393][    T9] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  115.108324][    T9] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  115.617264][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.617867][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.751300][ T6082] netlink: 'syz.4.42': attribute type 1 has an invalid length.
[  115.751321][ T6082] netlink: 244 bytes leftover after parsing attributes in process `syz.4.42'.
[  115.834376][    T9] usb 2-1: USB disconnect, device number 3
[  116.964153][ T6082] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  116.967341][ T6082] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  116.969060][ T6082] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  116.969352][ T6082] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  118.415145][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout
[  119.097400][ T5911] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  119.130777][   T61] Bluetooth: hci3: command 0x0c1a tx timeout
[  119.130822][   T61] Bluetooth: hci2: command 0x0c1a tx timeout
[  119.130866][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout
[  119.130985][ T6062] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  119.993837][ T5911] usb 4-1: Using ep0 maxpacket: 8
[  119.996283][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  119.996316][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  119.996336][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  119.996358][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  119.996395][ T5911] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  119.996416][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.088482][ T5911] usb 4-1: config 0 descriptor??
[  120.089772][ T6128] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  120.223770][ T6062] usb 2-1: Using ep0 maxpacket: 32
[  120.278641][ T6062] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.278668][ T6062] usb 2-1: config 0 has no interfaces?
[  120.280814][ T6062] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  120.280839][ T6062] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  120.280859][ T6062] usb 2-1: Product: syz
[  120.280881][ T6062] usb 2-1: Manufacturer: syz
[  120.417108][ T6062] usb 2-1: config 0 descriptor??
[  121.289435][ T5911] usb 4-1: USB disconnect, device number 2
[  121.296885][ T5815] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  121.381271][ T6062] usb 2-1: USB disconnect, device number 4
[  121.522169][ T6143] overlayfs: failed to clone upperpath
[  121.618054][ T6145] netlink: 'syz.0.60': attribute type 1 has an invalid length.
[  121.618085][ T6145] netlink: 244 bytes leftover after parsing attributes in process `syz.0.60'.
[  123.380827][ T6145] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  123.538344][ T6145] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  123.538648][ T6145] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  123.538905][ T6145] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  123.724062][ T5815] Bluetooth: hci1: command 0x0c1a tx timeout
[  125.569728][   T61] Bluetooth: hci2: command 0x0c1a tx timeout
[  125.569783][ T5815] Bluetooth: hci4: command 0x0c1a tx timeout
[  125.569821][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout
[  126.599026][ T6185] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in;
[  126.599026][ T6185]    program syz.0.71 not setting count and/or reply_len properly
[  127.001193][ T6194] netlink: 300 bytes leftover after parsing attributes in process `syz.3.74'.
[  127.483802][ T6006] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  127.697122][ T6006] usb 2-1: Using ep0 maxpacket: 8
[  127.699264][ T6006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  127.699295][ T6006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  127.699315][ T6006] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  127.699336][ T6006] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  127.699374][ T6006] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  127.699396][ T6006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.782888][ T6006] usb 2-1: config 0 descriptor??
[  127.789466][ T6192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  129.141060][ T5810] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  129.164559][ T6006] usb 2-1: USB disconnect, device number 5
[  129.204997][ T6207] process 'syz.4.78' launched './file2' with NULL argv: empty string added
[  129.210738][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[  129.213240][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'.
[  129.317587][ T6206] hsr_slave_0: left promiscuous mode
[  129.344557][ T6206] hsr_slave_1: left promiscuous mode
[  130.217727][   T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  130.373891][   T43] usb 1-1: Using ep0 maxpacket: 8
[  130.379975][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  130.380009][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  130.380029][   T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  130.380051][   T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  130.380088][   T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  130.380109][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.452110][   T43] usb 1-1: config 0 descriptor??
[  130.455202][ T6210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  130.679698][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.680200][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.690006][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.690075][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.690138][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.690545][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.690621][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.690688][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.690752][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.690818][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.690881][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.690946][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691014][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691081][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691146][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691209][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691275][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691339][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691408][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691481][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691545][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691609][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691673][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691737][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.691804][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  130.873364][ T6223] Zero length message leads to an empty skb
[  130.883836][   T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  130.893584][ T5922] usb 1-1: USB disconnect, device number 4
[  130.904421][ T5815] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  131.063890][   T43] usb 4-1: Using ep0 maxpacket: 8
[  131.079609][   T43] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  131.079645][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.079664][   T43] usb 4-1: Product: syz
[  131.079677][   T43] usb 4-1: Manufacturer: syz
[  131.079691][   T43] usb 4-1: SerialNumber: syz
[  131.135545][   T43] usb 4-1: config 0 descriptor??
[  131.514250][   T43] msi2500 4-1:0.0: Registered as swradio24
[  131.514272][   T43] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  131.519184][   T43] usb 4-1: USB disconnect, device number 3
[  131.697259][ T6062] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  131.945317][ T6238] netlink: 300 bytes leftover after parsing attributes in process `syz.2.86'.
[  132.465901][ T6062] usb 5-1: Using ep0 maxpacket: 16
[  132.468171][ T6062] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.468195][ T6062] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.472677][ T6062] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.472704][ T6062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.472724][ T6062] usb 5-1: Product: syz
[  132.472737][ T6062] usb 5-1: Manufacturer: syz
[  132.472751][ T6062] usb 5-1: SerialNumber: syz
[  132.862144][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  132.863113][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  134.253967][ T6062] usb 5-1: 0:2 : does not exist
[  134.266822][ T6062] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  134.282806][ T6062] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5)
[  134.302241][ T6062] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[  134.318440][ T6062] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[  134.903454][ T6062] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[  134.909082][ T6062] usb 5-1: USB disconnect, device number 3
[  135.767579][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  136.237679][ T6280] netlink: 300 bytes leftover after parsing attributes in process `syz.2.99'.
[  136.922571][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  137.186254][ T6285] FAULT_INJECTION: forcing a failure.
[  137.186254][ T6285] name failslab, interval 1, probability 0, space 0, times 1
[  137.186302][ T6285] CPU: 1 UID: 0 PID: 6285 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  137.186322][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  137.186339][ T6285] Call Trace:
[  137.186349][ T6285]  <TASK>
[  137.186356][ T6285]  dump_stack_lvl+0xe8/0x150
[  137.186393][ T6285]  should_fail_ex+0x46c/0x600
[  137.186422][ T6285]  should_failslab+0xa8/0x100
[  137.186441][ T6285]  __kvmalloc_node_noprof+0x181/0x940
[  137.186469][ T6285]  ? listxattr+0x51/0x2a0
[  137.186499][ T6285]  listxattr+0x51/0x2a0
[  137.186524][ T6285]  __x64_sys_flistxattr+0x136/0x1b0
[  137.186550][ T6285]  do_syscall_64+0xec/0xf80
[  137.186569][ T6285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.186586][ T6285]  ? trace_irq_disable+0x37/0x100
[  137.186605][ T6285]  ? clear_bhb_loop+0x60/0xb0
[  137.186627][ T6285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.186645][ T6285] RIP: 0033:0x7f2dc6a8f749
[  137.186666][ T6285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.186690][ T6285] RSP: 002b:00007f2dc4cee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4
[  137.186713][ T6285] RAX: ffffffffffffffda RBX: 00007f2dc6ce5fa0 RCX: 00007f2dc6a8f749
[  137.186727][ T6285] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003
[  137.186739][ T6285] RBP: 00007f2dc4cee090 R08: 0000000000000000 R09: 0000000000000000
[  137.186750][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.186761][ T6285] R13: 00007f2dc6ce6038 R14: 00007f2dc6ce5fa0 R15: 00007fff173ba1c8
[  137.186791][ T6285]  </TASK>
[  137.214092][ T5879] usb 1-1: Using ep0 maxpacket: 8
[  137.219643][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  137.219675][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  137.219704][ T5879] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  137.219725][ T5879] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  137.219759][ T5879] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  137.219780][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.238426][ T5879] usb 1-1: config 0 descriptor??
[  137.241079][ T6277] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  137.374826][   T37] audit: type=1326 audit(1767597760.299:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6281 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e8cbf749 code=0x7ffc0000
[  137.374877][   T37] audit: type=1326 audit(1767597760.299:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6281 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e8cbf749 code=0x7ffc0000
[  137.512257][   T37] audit: type=1326 audit(1767597760.439:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6281 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0e8cbf749 code=0x7ffc0000
[  137.512306][   T37] audit: type=1326 audit(1767597760.439:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6281 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e8cbf749 code=0x7ffc0000
[  137.512344][   T37] audit: type=1326 audit(1767597760.439:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6281 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e8cbf749 code=0x7ffc0000
[  137.541598][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.553846][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.578869][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.579717][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.579839][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.580711][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.580838][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.580954][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.584868][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.584999][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.585115][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.585181][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.585593][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.585725][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.585792][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.587600][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.587736][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.587805][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.587914][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.587978][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.588113][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.588224][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.588292][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.588401][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.592320][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  137.597478][   T37] audit: type=1326 audit(1767597760.489:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6281 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0e8cbf34b code=0x7ffc0000
[  137.646081][   T37] audit: type=1326 audit(1767597760.569:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6281 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0e8cbf34b code=0x7ffc0000
[  137.652111][   T37] audit: type=1326 audit(1767597760.579:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6281 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0e8cbf34b code=0x7ffc0000
[  137.909631][   T37] audit: type=1326 audit(1767597760.579:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6281 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0e8cbf34b code=0x7ffc0000
[  137.909680][   T37] audit: type=1326 audit(1767597760.839:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6281 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0e8cbf34b code=0x7ffc0000
[  137.923750][ T5926] usb 1-1: USB disconnect, device number 5
[  137.928904][ T5815] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  139.351693][ T6310] input: syz0 as /devices/virtual/input/input7
[  139.354177][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  139.382786][ T6315] capability: warning: `syz.4.112' uses 32-bit capabilities (legacy support in use)
[  139.399298][ T6315] program syz.4.112 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  139.400341][ T6312] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  139.401729][ T6312] netlink: 'syz.2.111': attribute type 12 has an invalid length.
[  139.401745][ T6312] netlink: 'syz.2.111': attribute type 29 has an invalid length.
[  139.401756][ T6312] netlink: 148 bytes leftover after parsing attributes in process `syz.2.111'.
[  139.401784][ T6312] netlink: 'syz.2.111': attribute type 1 has an invalid length.
[  139.401796][ T6312] netlink: 43 bytes leftover after parsing attributes in process `syz.2.111'.
[  139.515717][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.515747][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.515783][    T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  139.515804][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.523372][    T9] usb 4-1: config 0 descriptor??
[  139.643968][ T6062] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  139.813836][ T6062] usb 5-1: Using ep0 maxpacket: 32
[  139.817277][ T6062] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  139.817303][ T6062] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  139.817323][ T6062] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  139.817342][ T6062] usb 5-1: config 1 has no interface number 0
[  139.817723][ T6062] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  139.817750][ T6062] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  139.817791][ T6062] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  139.817813][ T6062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.976270][ T6320] netlink: 300 bytes leftover after parsing attributes in process `syz.1.113'.
[  140.898802][    T9] arvo 0003:1E7D:30D4.0003: item fetching failed at offset 5/7
[  140.899553][    T9] arvo 0003:1E7D:30D4.0003: parse failed
[  140.899621][    T9] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -22
[  140.935740][ T6062] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  141.054411][ T6062] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  141.500070][ T6062] usb 5-1: USB disconnect, device number 4
[  141.502763][ T6062] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  141.583809][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  141.896280][ T6062] usb 4-1: USB disconnect, device number 4
[  142.674156][    T9] usb 1-1: Using ep0 maxpacket: 8
[  142.709634][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  142.709669][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  142.709689][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  142.709711][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  142.709748][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  142.709770][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.715755][    T9] usb 1-1: config 0 descriptor??
[  142.725098][ T6327] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  143.166670][ T5810] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  143.193459][ T5995] usb 1-1: USB disconnect, device number 6
[  143.273775][ T5922] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  143.425410][ T5922] usb 2-1: Using ep0 maxpacket: 8
[  143.585155][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  143.585198][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  143.585218][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  143.585241][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  143.585278][ T5922] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  143.585300][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.683520][ T5922] usb 2-1: config 0 descriptor??
[  143.691539][ T6343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  143.944716][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.947556][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.964852][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.967743][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.969912][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.969993][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.972014][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.972151][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.972276][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.972347][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.982248][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.982396][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.982522][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.982594][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.982715][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.982835][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.982906][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.990289][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.990434][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.991966][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.992113][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.992187][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.992315][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.992439][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  143.992508][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  144.163826][ T5828] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  144.188242][ T6062] usb 2-1: USB disconnect, device number 6
[  144.192203][ T5815] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  144.344589][ T5828] usb 4-1: Using ep0 maxpacket: 8
[  144.347261][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.347313][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  144.347339][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  144.347359][ T5828] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  144.347379][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.347418][ T5828] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  144.347439][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.366714][ T5828] usb 4-1: config 0 descriptor??
[  144.602471][ T5828] usb 4-1: USB disconnect, device number 5
[  144.935621][ T6351] input: syz0 as /devices/virtual/input/input8
[  146.363187][ T5828] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  146.639958][ T5828] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  146.639986][ T5828] usb 1-1: config 0 has no interface number 0
[  146.640017][ T5828] usb 1-1: config 0 interface 122 has no altsetting 0
[  146.665496][ T5828] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  146.665523][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.665541][ T5828] usb 1-1: Product: syz
[  146.665553][ T5828] usb 1-1: Manufacturer: syz
[  146.665566][ T5828] usb 1-1: SerialNumber: syz
[  146.708350][ T5828] usb 1-1: config 0 descriptor??
[  147.056581][ T6377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.132'.
[  147.126819][ T5805] usb 1-1: USB disconnect, device number 7
[  147.147654][ T5805] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  148.045579][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  148.155763][ T6384] fuse: Bad value for 'fd'
[  148.193812][    T9] usb 5-1: Using ep0 maxpacket: 8
[  148.195998][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  148.196028][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  148.196048][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  148.196069][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  148.196104][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  148.196124][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.290649][    T9] usb 5-1: config 0 descriptor??
[  148.299768][ T6376] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  148.779177][ T5815] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  148.788012][ T5828] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  148.803485][    T9] usb 5-1: USB disconnect, device number 5
[  148.981597][ T5828] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  148.981624][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.072964][ T5828] usb 4-1: config 0 descriptor??
[  149.133554][ T6400] FAULT_INJECTION: forcing a failure.
[  149.133554][ T6400] name failslab, interval 1, probability 0, space 0, times 0
[  149.133820][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.1.141 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  149.133847][ T6400] Tainted: [L]=SOFTLOCKUP
[  149.133854][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  149.133865][ T6400] Call Trace:
[  149.133873][ T6400]  <TASK>
[  149.133881][ T6400]  dump_stack_lvl+0xe8/0x150
[  149.133911][ T6400]  should_fail_ex+0x46c/0x600
[  149.133939][ T6400]  ? __alloc_skb+0x1dc/0x3a0
[  149.133959][ T6400]  should_failslab+0xa8/0x100
[  149.133978][ T6400]  ? __alloc_skb+0x1dc/0x3a0
[  149.133995][ T6400]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  149.134021][ T6400]  ? lockdep_hardirqs_on+0x7b/0x110
[  149.134041][ T6400]  ? __alloc_skb+0x198/0x3a0
[  149.134062][ T6400]  __alloc_skb+0x1dc/0x3a0
[  149.134085][ T6400]  netlink_sendmsg+0x5c6/0xb30
[  149.134130][ T6400]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.134161][ T6400]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  149.134185][ T6400]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.134209][ T6400]  __sock_sendmsg+0x21c/0x270
[  149.134246][ T6400]  ____sys_sendmsg+0x508/0x810
[  149.134274][ T6400]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.134305][ T6400]  ? import_iovec+0x74/0xa0
[  149.134327][ T6400]  ___sys_sendmsg+0x21f/0x2a0
[  149.134352][ T6400]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.134407][ T6400]  ? __fget_files+0x2a/0x420
[  149.134426][ T6400]  ? __fget_files+0x3a6/0x420
[  149.134454][ T6400]  __x64_sys_sendmsg+0x1a1/0x260
[  149.134478][ T6400]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  149.134509][ T6400]  ? __pfx_ksys_write+0x10/0x10
[  149.134545][ T6400]  do_syscall_64+0xec/0xf80
[  149.134563][ T6400]  ? rcu_is_watching+0x15/0xb0
[  149.134578][ T6400]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.134596][ T6400]  ? clear_bhb_loop+0x60/0xb0
[  149.134618][ T6400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.134636][ T6400] RIP: 0033:0x7f2dc6a8f749
[  149.134653][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.134669][ T6400] RSP: 002b:00007f2dc4c0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.134689][ T6400] RAX: ffffffffffffffda RBX: 00007f2dc6ce6090 RCX: 00007f2dc6a8f749
[  149.134703][ T6400] RDX: 0000000024008002 RSI: 0000200000000000 RDI: 000000000000000d
[  149.134715][ T6400] RBP: 00007f2dc4c0c090 R08: 0000000000000000 R09: 0000000000000000
[  149.134726][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.134737][ T6400] R13: 00007f2dc6ce6128 R14: 00007f2dc6ce6090 R15: 00007fff173ba1c8
[  149.134767][ T6400]  </TASK>
[  149.899432][ T6389] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  150.055907][ T6405] overlayfs: failed to clone upperpath
[  150.059444][ T6406] bond0: Unable to set down delay as MII monitoring is disabled
[  150.152055][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.152590][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.181069][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'.
[  150.243363][ T6389] batadv0: entered promiscuous mode
[  150.243907][ T6389] macvtap1: entered promiscuous mode
[  150.244133][ T6389] macvtap1: entered allmulticast mode
[  150.244146][ T6389] batadv0: entered allmulticast mode
[  150.263632][ T6389] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  150.427944][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.428805][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.969245][ T5828] usb 4-1: string descriptor 0 read error: -71
[  152.021460][ T5828] usb-storage 4-1:0.0: USB Mass Storage device detected
[  152.107985][ T5828] usb-storage 4-1:0.0: Quirks match for vid 05ab pid 0060: 2
[  152.230089][ T5828] usb 4-1: USB disconnect, device number 6
[  152.566239][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  152.633826][ T5828] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  152.713861][    T9] usb 1-1: Using ep0 maxpacket: 8
[  152.716231][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.716284][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  152.716310][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  152.716330][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.716367][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  152.716388][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.724983][    T9] usb 1-1: config 0 descriptor??
[  152.793799][ T5828] usb 2-1: Using ep0 maxpacket: 32
[  152.804396][ T5828] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  152.804423][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.855515][ T5828] usb 2-1: config 0 descriptor??
[  152.972354][ T5922] usb 1-1: USB disconnect, device number 8
[  153.064549][ T5828] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  153.133637][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  153.147440][ T5828] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  153.147548][ T5828] usb 2-1: media controller created
[  153.262805][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  153.336157][ T5828] az6027: usb out operation failed. (-71)
[  153.336618][ T5828] az6027: usb out operation failed. (-71)
[  153.336633][ T5828] stb0899_attach: Driver disabled by Kconfig
[  153.336642][ T5828] az6027: no front-end attached
[  153.336642][ T5828] 
[  153.342907][ T5828] az6027: usb out operation failed. (-71)
[  153.342925][ T5828] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  153.431274][ T5828] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[  153.465801][ T5828] dvb-usb: schedule remote query interval to 400 msecs.
[  153.465826][ T5828] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  153.468943][ T5828] usb 2-1: USB disconnect, device number 7
[  154.008615][ T5828] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  154.503827][ T5828] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  154.580955][ T6459] binder: BINDER_SET_CONTEXT_MGR already set
[  154.580966][ T6459] binder: 6458:6459 ioctl 4018620d 200000000040 returned -16
[  154.673805][ T5828] usb 5-1: Using ep0 maxpacket: 16
[  154.690853][ T5828] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[  154.690879][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  154.690897][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  154.690915][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  154.690938][ T5828] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  154.690955][ T5828] usb 5-1: config 0 has no interface number 0
[  154.691001][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  154.691026][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  154.691046][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  154.691067][ T5828] usb 5-1: config 0 interface 125 has no altsetting 1
[  154.763906][ T5922] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  154.788444][ T5828] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  154.788460][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.788470][ T5828] usb 5-1: Product: syz
[  154.788477][ T5828] usb 5-1: Manufacturer: syz
[  154.788484][ T5828] usb 5-1: SerialNumber: syz
[  154.792200][ T5828] usb 5-1: config 0 descriptor??
[  154.923887][ T5922] usb 2-1: Using ep0 maxpacket: 16
[  154.926414][ T5922] usb 2-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.926449][ T5922] usb 2-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.926472][ T5922] usb 2-1: config 0 interface 0 has no altsetting 0
[  154.926503][ T5922] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  154.926519][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.966003][ T5922] usb 2-1: config 0 descriptor??
[  155.038984][ T5828] usb 5-1: USB disconnect, device number 6
[  155.068049][ T5872] udevd[5872]: setting owner of /dev/bus/usb/005/006 to uid=0, gid=0 failed: No such file or directory
[  155.469053][ T5922] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  155.469089][ T5922] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  155.469113][ T5922] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x1
[  155.469137][ T5922] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  155.472142][ T5922] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  155.660966][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.661447][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.729168][ T5922] usb 2-1: USB disconnect, device number 8
[  155.820604][ T6477] netlink: 19 bytes leftover after parsing attributes in process `syz.0.165'.
[  156.083949][ T6062] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  156.214707][ T6062] usb 1-1: device descriptor read/64, error -71
[  156.372393][ T6490] netlink: 'syz.4.169': attribute type 12 has an invalid length.
[  156.483823][ T6062] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  156.616904][ T6062] usb 1-1: device descriptor read/64, error -71
[  156.726087][ T6062] usb usb1-port1: attempt power cycle
[  157.853791][ T6062] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  157.895012][ T6062] usb 1-1: device descriptor read/8, error -71
[  158.710621][ T6062] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  159.002145][ T6062] usb 1-1: device descriptor read/8, error -71
[  159.118772][ T6062] usb usb1-port1: unable to enumerate USB device
[  160.127495][ T6524] syz.4.181(6524): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  160.646106][ T5892] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  160.926799][ T5892] usb 2-1: Using ep0 maxpacket: 32
[  160.940739][ T6006] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  161.069044][ T5892] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  161.069079][ T5892] usb 2-1: config 0 has no interface number 0
[  161.110177][ T5892] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  161.110206][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.110225][ T5892] usb 2-1: Product: syz
[  161.110238][ T5892] usb 2-1: Manufacturer: syz
[  161.110251][ T5892] usb 2-1: SerialNumber: syz
[  161.162966][ T5892] usb 2-1: config 0 descriptor??
[  161.188308][ T5892] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  161.204926][ T6006] usb 5-1: Using ep0 maxpacket: 32
[  161.220466][ T6006] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  161.220496][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.321069][ T6006] usb 5-1: config 0 descriptor??
[  161.410035][ T6006] gspca_main: nw80x-2.14.0 probing 055f:d001
[  161.468147][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'.
[  162.485373][ T6006] gspca_nw80x: reg_w err -110
[  162.486412][ T6006] nw80x 5-1:0.0: probe with driver nw80x failed with error -110
[  162.512563][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.513088][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.934382][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'.
[  162.934650][ T6552] openvswitch: netlink: Invalid VLAN frame
[  164.025527][ T5922] usb 5-1: USB disconnect, device number 7
[  164.118542][ T5892] usb 2-1: qt2_attach - failed to power on unit: -71
[  164.118705][ T5892] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  164.220679][ T5892] usb 2-1: USB disconnect, device number 9
[  164.591227][ T6581] netlink: 'syz.1.196': attribute type 21 has an invalid length.
[  164.602274][ T6581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.196'.
[  166.113991][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.203'.
[  166.114030][ T6596] netlink: 'syz.1.203': attribute type 7 has an invalid length.
[  166.114043][ T6596] netlink: 'syz.1.203': attribute type 8 has an invalid length.
[  166.114055][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'.
[  167.124273][ T6598] netlink: 9 bytes leftover after parsing attributes in process `syz.1.203'.
[  168.544817][ T6613] FAULT_INJECTION: forcing a failure.
[  168.544817][ T6613] name failslab, interval 1, probability 0, space 0, times 0
[  168.544853][ T6613] CPU: 0 UID: 0 PID: 6613 Comm: syz.4.208 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  168.544880][ T6613] Tainted: [L]=SOFTLOCKUP
[  168.544887][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  168.544899][ T6613] Call Trace:
[  168.544906][ T6613]  <TASK>
[  168.544914][ T6613]  dump_stack_lvl+0xe8/0x150
[  168.544944][ T6613]  should_fail_ex+0x46c/0x600
[  168.544974][ T6613]  should_failslab+0xa8/0x100
[  168.545000][ T6613]  __kmalloc_noprof+0xe0/0x7e0
[  168.545025][ T6613]  ? kfree+0x4d/0x900
[  168.545045][ T6613]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  168.545070][ T6613]  tomoyo_realpath_from_path+0xe3/0x5d0
[  168.545090][ T6613]  ? tomoyo_domain+0xd9/0x130
[  168.545114][ T6613]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  168.545139][ T6613]  tomoyo_path_number_perm+0x1e8/0x5a0
[  168.545166][ T6613]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  168.545189][ T6613]  ? __lock_acquire+0x6b6/0x2cf0
[  168.545215][ T6613]  ? do_raw_spin_lock+0x121/0x290
[  168.545267][ T6613]  ? __fget_files+0x2a/0x420
[  168.545290][ T6613]  ? __fget_files+0x2a/0x420
[  168.545307][ T6613]  ? __fget_files+0x3a6/0x420
[  168.545329][ T6613]  ? __fget_files+0x2a/0x420
[  168.545352][ T6613]  security_file_ioctl+0xcb/0x2d0
[  168.545379][ T6613]  __se_sys_ioctl+0x47/0x170
[  168.545405][ T6613]  do_syscall_64+0xec/0xf80
[  168.545424][ T6613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.545442][ T6613]  ? trace_irq_disable+0x37/0x100
[  168.545461][ T6613]  ? clear_bhb_loop+0x60/0xb0
[  168.545483][ T6613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.545501][ T6613] RIP: 0033:0x7fb0e8cbf749
[  168.545522][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.545537][ T6613] RSP: 002b:00007fb0e6f05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.545557][ T6613] RAX: ffffffffffffffda RBX: 00007fb0e8f16090 RCX: 00007fb0e8cbf749
[  168.545572][ T6613] RDX: 0000200000000040 RSI: 000000004040534e RDI: 0000000000000003
[  168.545584][ T6613] RBP: 00007fb0e6f05090 R08: 0000000000000000 R09: 0000000000000000
[  168.545596][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.545607][ T6613] R13: 00007fb0e8f16128 R14: 00007fb0e8f16090 R15: 00007fff6284e7b8
[  168.545639][ T6613]  </TASK>
[  168.545739][ T6613] ERROR: Out of memory at tomoyo_realpath_from_path.
[  170.459668][ T6627] netlink: 'syz.0.210': attribute type 1 has an invalid length.
[  170.459682][ T6627] netlink: 244 bytes leftover after parsing attributes in process `syz.0.210'.
[  170.694078][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'.
[  171.125543][ T6627] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  171.126593][ T6627] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  171.126815][ T6627] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  171.131889][ T6627] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  171.688815][ T6647] loop2: detected capacity change from 0 to 7
[  171.907055][ T6647] Dev loop2: unable to read RDB block 7
[  171.907096][ T6647]  loop2: AHDI p2 p3
[  171.907123][ T6647] loop2: partition table partially beyond EOD, truncated
[  171.908186][ T6647] loop2: p3 start 335544320 is beyond EOD, truncated
[  172.009604][   T37] kauditd_printk_skb: 30 callbacks suppressed
[  172.009620][   T37] audit: type=1326 audit(1767597794.939:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6649 comm="syz.0.220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd276b0f749 code=0x0
[  172.112830][ T6658] blktrace: Concurrent blktraces are not allowed on loop4
[  172.686518][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout
[  172.745407][ T6664] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[  172.843022][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'.
[  173.164024][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout
[  173.164064][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout
[  173.164090][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout
[  173.165446][ T6016] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  173.367295][ T6016] usb 4-1: Using ep0 maxpacket: 8
[  173.666881][ T6016] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  173.666908][ T6016] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  173.785384][ T6681] netlink: 300 bytes leftover after parsing attributes in process `syz.0.230'.
[  174.631384][ T6016] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  174.631403][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.631413][ T6016] usb 4-1: Product: щ
[  174.631420][ T6016] usb 4-1: Manufacturer: ы
[  174.631427][ T6016] usb 4-1: SerialNumber: 巛૤最
[  175.131511][ T6686] overlayfs: failed to clone upperpath
[  178.409841][ T6016] cdc_ncm 4-1:1.0: bind() failure
[  178.445724][ T6016] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  178.445768][ T6016] cdc_ncm 4-1:1.1: bind() failure
[  178.507533][ T6016] usb 4-1: USB disconnect, device number 7
[  178.823928][ T5130] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  178.986355][ T6715] blktrace: Concurrent blktraces are not allowed on loop4
[  179.005312][ T5130] usb 5-1: Using ep0 maxpacket: 16
[  179.012046][ T5130] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  179.012074][ T5130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.012092][ T5130] usb 5-1: Product: syz
[  179.012103][ T5130] usb 5-1: Manufacturer: syz
[  179.012111][ T5130] usb 5-1: SerialNumber: syz
[  179.053118][ T5130] usb 5-1: config 0 descriptor??
[  179.155125][ T6717] netlink: 300 bytes leftover after parsing attributes in process `syz.3.241'.
[  179.667240][ T5130] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  179.669336][ T5130] usb 5-1: Detected FT-X
[  180.042171][ T5130] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  180.150540][ T6723] netlink: 'syz.3.242': attribute type 1 has an invalid length.
[  180.150561][ T6723] netlink: 244 bytes leftover after parsing attributes in process `syz.3.242'.
[  180.839292][ T6723] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  180.850278][ T6723] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  180.860614][ T6723] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  180.870447][ T6723] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  180.987415][ T5130] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  181.012566][ T5130] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  181.024346][ T5130] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  181.051973][ T5130] usb 5-1: USB disconnect, device number 8
[  181.112941][ T5130] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  181.124616][ T5130] ftdi_sio 5-1:0.0: device disconnected
[  181.530759][ T6739] overlayfs: failed to clone upperpath
[  181.598902][ T6740] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  181.983972][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  182.138515][    T9] usb 4-1: Using ep0 maxpacket: 16
[  182.140487][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.140537][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  182.140561][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  182.140580][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[  182.140591][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  182.142878][    T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  182.142901][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.142911][    T9] usb 4-1: Product: syz
[  182.142918][    T9] usb 4-1: Manufacturer: syz
[  182.142926][    T9] usb 4-1: SerialNumber: syz
[  182.263873][    T9] usb 4-1: config 0 descriptor??
[  182.267368][    T9] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  182.443816][ T5815] Bluetooth: hci1: command 0x0c1a tx timeout
[  182.575563][    T9] usb 4-1: USB disconnect, device number 8
[  182.813394][ T6761] netlink: 300 bytes leftover after parsing attributes in process `syz.0.252'.
[  182.852123][ T5815] Bluetooth: hci2: command 0x0c1a tx timeout
[  182.926299][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout
[  182.926674][ T5815] Bluetooth: hci4: command 0x0c1a tx timeout
[  183.513813][ T5893] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  183.713875][ T5893] usb 2-1: Using ep0 maxpacket: 32
[  183.717996][ T5893] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  183.718021][ T5893] usb 2-1: config 0 has no interface number 0
[  183.720775][ T5893] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  183.720801][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.720819][ T5893] usb 2-1: Product: syz
[  183.720832][ T5893] usb 2-1: Manufacturer: syz
[  183.720846][ T5893] usb 2-1: SerialNumber: syz
[  183.726309][ T5893] usb 2-1: config 0 descriptor??
[  183.791442][ T5893] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  183.969286][ T6772] 9p: Bad value for 'wfdno'
[  183.995507][ T5893] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  184.048649][ T5893] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  184.133804][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[  184.379240][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  184.419159][ T5893] usb 2-1: USB disconnect, device number 10
[  184.654020][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  184.751919][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  184.752823][ T5893] quatech2 2-1:0.51: device disconnected
[  184.897380][ T5879] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  185.043760][ T5879] usb 4-1: Using ep0 maxpacket: 16
[  185.046237][ T5879] usb 4-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.046269][ T5879] usb 4-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.046291][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0
[  185.046329][ T5879] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  185.046351][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.272324][ T5879] usb 4-1: config 0 descriptor??
[  185.872448][ T5879] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  185.872484][ T5879] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  185.872510][ T5879] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x1
[  185.872596][ T5879] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  185.873510][ T5879] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  186.085001][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.085298][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.121025][ T5995] usb 4-1: USB disconnect, device number 9
[  188.183784][ T5815] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  189.299925][ T6821] block nbd3: shutting down sockets
[  189.325927][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'.
[  189.325962][ T6825] netlink: 'syz.2.274': attribute type 7 has an invalid length.
[  189.325974][ T6825] netlink: 'syz.2.274': attribute type 8 has an invalid length.
[  189.325984][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'.
[  189.813822][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  190.074518][    T9] usb 2-1: device descriptor read/64, error -71
[  191.123940][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  191.255738][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  191.255802][    T9] usb 2-1: device descriptor read/64, error -71
[  191.364339][    T9] usb usb2-port1: attempt power cycle
[  191.413878][ T5879] usb 5-1: Using ep0 maxpacket: 16
[  191.420548][ T5879] usb 5-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.420580][ T5879] usb 5-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.420599][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0
[  191.420628][ T5879] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  191.420651][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.432233][ T5879] usb 5-1: config 0 descriptor??
[  191.753953][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  191.769159][ T5815] Bluetooth: hci4: unexpected event for opcode 0x1405
[  191.779169][    T9] usb 2-1: device descriptor read/8, error -71
[  191.916091][ T5879] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  191.916126][ T5879] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  191.916151][ T5879] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x1
[  191.916176][ T5879] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  191.917081][ T5879] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  192.023815][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  192.290001][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.292909][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.316883][ T5879] usb 5-1: USB disconnect, device number 9
[  192.925680][    T9] usb 2-1: device descriptor read/8, error -71
[  193.151336][    T9] usb usb2-port1: unable to enumerate USB device
[  194.362693][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  194.362765][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  195.614127][ T6891] netlink: 'syz.0.294': attribute type 1 has an invalid length.
[  195.614147][ T6891] netlink: 244 bytes leftover after parsing attributes in process `syz.0.294'.
[  195.795471][ T6891] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  195.795621][ T6891] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  195.795779][ T6891] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  195.796961][ T6891] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  195.848879][ T6902] 9p: Bad value for 'rfdno'
[  196.968376][ T5995] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  197.135915][ T5995] usb 5-1: Using ep0 maxpacket: 32
[  197.138015][ T5995] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  197.138038][ T5995] usb 5-1: config 0 has no interface number 0
[  197.143408][ T5995] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  197.143434][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.143452][ T5995] usb 5-1: Product: syz
[  197.143465][ T5995] usb 5-1: Manufacturer: syz
[  197.143479][ T5995] usb 5-1: SerialNumber: syz
[  197.287272][ T5995] usb 5-1: config 0 descriptor??
[  197.332177][ T5995] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  197.814488][ T5815] Bluetooth: hci1: command 0x0c1a tx timeout
[  198.365956][ T5815] Bluetooth: hci4: command 0x0c1a tx timeout
[  198.365997][ T5815] Bluetooth: hci3: command 0x0c1a tx timeout
[  198.366032][ T5815] Bluetooth: hci2: command 0x0c1a tx timeout
[  198.500911][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[  198.548623][ T5995] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  198.639600][ T5995] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  198.703458][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  198.714469][ T5879] usb 5-1: USB disconnect, device number 10
[  198.741267][ T5879] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  198.760678][ T5879] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  198.761662][ T5879] quatech2 5-1:0.51: device disconnected
[  198.993869][ T5995] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  199.124691][ T5810] Bluetooth: hci1: unexpected event for opcode 0x1405
[  199.167156][ T5995] usb 2-1: Using ep0 maxpacket: 8
[  199.180236][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  199.180267][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  199.180286][ T5995] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  199.180297][ T5995] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  199.180318][ T5995] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  199.180329][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.183322][ T5995] usb 2-1: config 0 descriptor??
[  199.189163][ T6923] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  200.400788][ T5810] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  200.549406][ T5130] usb 2-1: USB disconnect, device number 15
[  200.875546][ T6937] FAULT_INJECTION: forcing a failure.
[  200.875546][ T6937] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  200.875580][ T6937] CPU: 1 UID: 0 PID: 6937 Comm: syz.3.308 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  200.875606][ T6937] Tainted: [L]=SOFTLOCKUP
[  200.875613][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  200.875623][ T6937] Call Trace:
[  200.875630][ T6937]  <TASK>
[  200.875638][ T6937]  dump_stack_lvl+0xe8/0x150
[  200.875666][ T6937]  should_fail_ex+0x46c/0x600
[  200.875695][ T6937]  _copy_to_user+0x31/0xb0
[  200.875716][ T6937]  simple_read_from_buffer+0xe1/0x170
[  200.875739][ T6937]  proc_fail_nth_read+0x1b6/0x220
[  200.875767][ T6937]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  200.875795][ T6937]  ? rw_verify_area+0x2ac/0x4e0
[  200.875817][ T6937]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  200.875843][ T6937]  vfs_read+0x206/0xa30
[  200.875873][ T6937]  ? __pfx_vfs_read+0x10/0x10
[  200.875900][ T6937]  ? __asan_memset+0x22/0x50
[  200.875922][ T6937]  ? __sys_connect+0x346/0x450
[  200.875945][ T6937]  ? __pfx___sys_connect+0x10/0x10
[  200.875970][ T6937]  ksys_read+0x14b/0x260
[  200.875996][ T6937]  ? __pfx_ksys_read+0x10/0x10
[  200.876031][ T6937]  do_syscall_64+0xec/0xf80
[  200.876049][ T6937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.876066][ T6937]  ? trace_irq_disable+0x37/0x100
[  200.876085][ T6937]  ? clear_bhb_loop+0x60/0xb0
[  200.876107][ T6937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.876125][ T6937] RIP: 0033:0x7f3607cbe15c
[  200.876141][ T6937] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  200.876157][ T6937] RSP: 002b:00007f3605f26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  200.876177][ T6937] RAX: ffffffffffffffda RBX: 00007f3607f15fa0 RCX: 00007f3607cbe15c
[  200.876192][ T6937] RDX: 000000000000000f RSI: 00007f3605f260a0 RDI: 0000000000000003
[  200.876203][ T6937] RBP: 00007f3605f26090 R08: 0000000000000000 R09: 0000000000000000
[  200.876213][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.876223][ T6937] R13: 00007f3607f16038 R14: 00007f3607f15fa0 R15: 00007ffd01d7def8
[  200.876261][ T6937]  </TASK>
[  201.305234][ T6845] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  201.453944][ T6845] usb 5-1: Using ep0 maxpacket: 32
[  201.457906][ T6845] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  201.457932][ T6845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.286591][ T6845] usb 5-1: config 0 descriptor??
[  202.520027][ T6845] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  202.532425][ T6845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  202.546285][ T6845] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  202.546348][ T6845] usb 5-1: media controller created
[  202.600645][ T6845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  202.938607][ T6845] az6027: usb out operation failed. (-71)
[  202.942338][ T6845] az6027: usb out operation failed. (-71)
[  202.942354][ T6845] stb0899_attach: Driver disabled by Kconfig
[  202.942363][ T6845] az6027: no front-end attached
[  202.942363][ T6845] 
[  202.943071][ T6845] az6027: usb out operation failed. (-71)
[  202.943085][ T6845] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  202.962936][ T6845] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10
[  202.984978][ T6845] dvb-usb: schedule remote query interval to 400 msecs.
[  202.984997][ T6845] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  203.005149][ T6845] usb 5-1: USB disconnect, device number 11
[  203.163857][ T5810] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  203.164087][ T5810] Bluetooth: hci1: Injecting HCI hardware error event
[  203.166500][ T5815] Bluetooth: hci1: hardware error 0x00
[  203.178536][ T6966] 9p: Bad value for 'wfdno'
[  204.277184][ T6845] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  205.244336][ T5815] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  207.227959][ T7004] 9p: Bad value for 'wfdno'
[  207.236655][ T7003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.333'.
[  207.236688][ T7003] netlink: 'syz.3.333': attribute type 7 has an invalid length.
[  207.236700][ T7003] netlink: 'syz.3.333': attribute type 8 has an invalid length.
[  207.236711][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.333'.
[  209.473835][ T5893] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  209.635492][ T5893] usb 5-1: Using ep0 maxpacket: 32
[  209.650569][ T5893] usb 5-1: config 0 has an invalid interface number: 49 but max is 0
[  209.650594][ T5893] usb 5-1: config 0 has no interface number 0
[  209.653163][ T5893] usb 5-1: New USB device found, idVendor=0f3d, idProduct=0112, bcdDevice=17.16
[  209.653189][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.653206][ T5893] usb 5-1: Product: syz
[  209.653219][ T5893] usb 5-1: Manufacturer: syz
[  209.653232][ T5893] usb 5-1: SerialNumber: syz
[  209.720855][ T5893] usb 5-1: config 0 descriptor??
[  209.731739][ T5893] sierra 5-1:0.49: Sierra USB modem converter detected
[  209.933538][ T5893] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[  209.953923][ T5893] usb 5-1: USB disconnect, device number 12
[  209.963141][ T5893] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  209.988887][ T5893] sierra 5-1:0.49: device disconnected
[  212.911543][ T7047] 9p: Bad value for 'wfdno'
[  213.551035][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.347'.
[  213.551069][ T7063] netlink: 'syz.3.347': attribute type 7 has an invalid length.
[  213.551080][ T7063] netlink: 'syz.3.347': attribute type 8 has an invalid length.
[  213.551090][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'.
[  213.698874][ T7050] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  213.699140][ T7050] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  213.699317][ T7050] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  214.014870][   T43] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  214.175671][   T43] usb 2-1: Using ep0 maxpacket: 16
[  214.193037][   T43] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  214.193174][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.193194][   T43] usb 2-1: Product: syz
[  214.193349][   T43] usb 2-1: Manufacturer: syz
[  214.193406][   T43] usb 2-1: SerialNumber: syz
[  214.422848][   T43] usb 2-1: config 0 descriptor??
[  214.602607][   T43] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  214.996649][   T43] usb 2-1: Detected FT-X
[  215.004741][   T43] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  215.123437][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'.
[  215.123473][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'.
[  215.163799][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout
[  215.235237][   T43] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  215.235746][   T43] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  215.239905][   T43] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  215.248148][   T43] usb 2-1: USB disconnect, device number 16
[  215.268236][   T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  215.269010][   T43] ftdi_sio 2-1:0.0: device disconnected
[  215.295407][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'.
[  215.699086][ T5810] Bluetooth: hci2: unexpected event for opcode 0x204e
[  215.723774][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout
[  215.723802][ T5815] Bluetooth: hci3: command 0x0c1a tx timeout
[  215.974582][ T7100] 9p: Bad value for 'wfdno'
[  215.985392][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'.
[  215.987480][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'.
[  216.683006][ T7115] netlink: 300 bytes leftover after parsing attributes in process `syz.1.368'.
[  218.967991][ T7108] warning: `syz.4.370' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  220.347585][ T7148] 9p: Bad value for 'wfdno'
[  221.237251][ T5815] Bluetooth: hci4: ISO packet for unknown connection handle 0
[  221.703992][ T6845] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  221.744049][ T5815] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  221.975648][ T6845] usb 4-1: Using ep0 maxpacket: 8
[  221.986211][ T6845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.986235][ T6845] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  221.986269][ T6845] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  221.986290][ T6845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.029939][ T6845] usb 4-1: config 0 descriptor??
[  222.246544][ T6845] usb 4-1: USB disconnect, device number 10
[  222.529257][ T7176] overlayfs: failed to clone upperpath
[  223.219429][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'.
[  223.333798][ T6845] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  223.449327][ T7190] syz.0.399 uses obsolete (PF_INET,SOCK_PACKET)
[  223.483846][ T6845] usb 4-1: Using ep0 maxpacket: 32
[  223.486000][ T6845] usb 4-1: config 0 has an invalid interface number: 49 but max is 0
[  223.486024][ T6845] usb 4-1: config 0 has no interface number 0
[  223.490460][ T6845] usb 4-1: New USB device found, idVendor=0f3d, idProduct=0112, bcdDevice=17.16
[  223.490485][ T6845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.490503][ T6845] usb 4-1: Product: syz
[  223.490514][ T6845] usb 4-1: Manufacturer: syz
[  223.490527][ T6845] usb 4-1: SerialNumber: syz
[  223.544915][ T7193] 9p: Bad value for 'wfdno'
[  223.600249][ T6845] usb 4-1: config 0 descriptor??
[  223.613431][ T6845] sierra 4-1:0.49: Sierra USB modem converter detected
[  223.793884][ T5894] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  223.824670][ T6845] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[  223.869320][ T6845] usb 4-1: USB disconnect, device number 11
[  223.892544][ T6845] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  223.893306][ T6845] sierra 4-1:0.49: device disconnected
[  223.946041][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short
[  223.946624][ T5894] usb 2-1: not running at top speed; connect to a high speed hub
[  223.947825][ T5894] usb 2-1: config 8 has an invalid interface number: 232 but max is 0
[  223.947847][ T5894] usb 2-1: config 8 has no interface number 0
[  223.947891][ T5894] usb 2-1: config 8 interface 232 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64
[  223.947918][ T5894] usb 2-1: config 8 interface 232 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  223.955180][ T5894] usb 2-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=d0.ff
[  223.955206][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.955223][ T5894] usb 2-1: Product: syz
[  223.955236][ T5894] usb 2-1: Manufacturer: syz
[  223.955250][ T5894] usb 2-1: SerialNumber: syz
[  223.996146][ T7193] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  224.053920][ T5879] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  224.211791][ T7187] program syz.1.394 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  224.223782][ T5879] usb 5-1: Using ep0 maxpacket: 16
[  224.239255][ T5879] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  224.239282][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.239341][ T5879] usb 5-1: Product: syz
[  224.239349][ T5879] usb 5-1: Manufacturer: syz
[  224.239356][ T5879] usb 5-1: SerialNumber: syz
[  224.261878][ T5879] usb 5-1: config 0 descriptor??
[  224.302336][ T5879] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  224.324789][ T5879] usb 5-1: Detected FT-X
[  224.452917][ T5894] ftdi_sio 2-1:8.232: FTDI USB Serial Device converter detected
[  224.458302][ T5894] ftdi_sio ttyUSB1: unknown device type: 0xd0ff
[  224.515738][ T5879] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  224.519762][ T5894] usb 2-1: USB disconnect, device number 17
[  224.546908][ T5894] ftdi_sio 2-1:8.232: device disconnected
[  224.878299][ T5879] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  224.881088][ T5879] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  224.909413][ T5879] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  224.927448][ T5879] usb 5-1: USB disconnect, device number 13
[  224.945223][ T5879] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  224.946114][ T5879] ftdi_sio 5-1:0.0: device disconnected
[  224.964504][ T7222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.411'.
[  226.939078][ T5815] Bluetooth: hci3: unexpected event for opcode 0x1405
[  227.414054][ T7243] netlink: 300 bytes leftover after parsing attributes in process `syz.4.417'.
[  227.813313][ T7258] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.423'.
[  227.854208][ T7262] 9p: Bad value for 'wfdno'
[  227.854411][ T5893] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  227.905822][ T7265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.425'.
[  227.905862][ T7265] netlink: 'syz.2.425': attribute type 7 has an invalid length.
[  227.905874][ T7265] netlink: 'syz.2.425': attribute type 8 has an invalid length.
[  227.905885][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'.
[  228.023806][ T5893] usb 5-1: Using ep0 maxpacket: 8
[  228.026038][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.026102][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  228.026148][ T5893] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  228.026169][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.031096][ T5893] usb 5-1: config 0 descriptor??
[  228.246003][ T5893] usb 5-1: USB disconnect, device number 14
[  229.054114][ T5893] ==================================================================
[  229.054130][ T5893] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[  229.054161][ T5893] Read of size 8 at addr ffffc9000e32c008 by task kworker/1:6/5893
[  229.054176][ T5893] 
[  229.054192][ T5893] CPU: 1 UID: 0 PID: 5893 Comm: kworker/1:6 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  229.054218][ T5893] Tainted: [L]=SOFTLOCKUP
[  229.054225][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  229.054237][ T5893] Workqueue: usb_hub_wq hub_event
[  229.054261][ T5893] Call Trace:
[  229.054269][ T5893]  <TASK>
[  229.054277][ T5893]  dump_stack_lvl+0xe8/0x150
[  229.054302][ T5893]  print_report+0xca/0x240
[  229.054322][ T5893]  ? __list_add_valid_or_report+0x4e/0x130
[  229.054342][ T5893]  kasan_report+0x118/0x150
[  229.054369][ T5893]  ? __list_add_valid_or_report+0x4e/0x130
[  229.054394][ T5893]  __list_add_valid_or_report+0x4e/0x130
[  229.054417][ T5893]  kcov_remote_stop+0x458/0x690
[  229.054440][ T5893]  hub_event+0x4982/0x4f30
[  229.054466][ T5893]  ? __lock_acquire+0x6b6/0x2cf0
[  229.054497][ T5893]  ? finish_task_switch+0x162/0x940
[  229.054529][ T5893]  ? __pfx_hub_event+0x10/0x10
[  229.054550][ T5893]  ? process_scheduled_works+0x9ef/0x1770
[  229.054574][ T5893]  ? process_scheduled_works+0x9ef/0x1770
[  229.054593][ T5893]  ? process_scheduled_works+0x9ef/0x1770
[  229.054618][ T5893]  process_scheduled_works+0xad1/0x1770
[  229.054650][ T5893]  ? __pfx_process_scheduled_works+0x10/0x10
[  229.054669][ T5893]  ? do_raw_spin_lock+0x121/0x290
[  229.054696][ T5893]  worker_thread+0x8a0/0xda0
[  229.054721][ T5893]  ? __kthread_parkme+0x7b/0x200
[  229.054746][ T5893]  kthread+0x711/0x8a0
[  229.054769][ T5893]  ? __pfx_worker_thread+0x10/0x10
[  229.054789][ T5893]  ? __pfx_kthread+0x10/0x10
[  229.054810][ T5893]  ? rt_spin_unlock+0x150/0x200
[  229.054835][ T5893]  ? rt_spin_unlock+0x161/0x200
[  229.054856][ T5893]  ? __pfx_kthread+0x10/0x10
[  229.054879][ T5893]  ret_from_fork+0x510/0xa50
[  229.054899][ T5893]  ? __pfx_ret_from_fork+0x10/0x10
[  229.054917][ T5893]  ? __switch_to+0xc9e/0x1480
[  229.054949][ T5893]  ? __pfx_kthread+0x10/0x10
[  229.054973][ T5893]  ret_from_fork_asm+0x1a/0x30
[  229.055010][ T5893]  </TASK>
[  229.055017][ T5893] 
[  229.055022][ T5893] The buggy address belongs to a vmalloc virtual mapping
[  229.055038][ T5893] Memory state around the buggy address:
[  229.055048][ T5893]  ffffc9000e32bf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  229.055060][ T5893]  ffffc9000e32bf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  229.055073][ T5893] >ffffc9000e32c000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  229.055081][ T5893]                       ^
[  229.055091][ T5893]  ffffc9000e32c080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  229.055103][ T5893]  ffffc9000e32c100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  229.055112][ T5893] ==================================================================
[  229.055128][ T5893] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  229.055146][ T5893] CPU: 1 UID: 0 PID: 5893 Comm: kworker/1:6 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  229.055171][ T5893] Tainted: [L]=SOFTLOCKUP
[  229.055177][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  229.055189][ T5893] Workqueue: usb_hub_wq hub_event
[  229.055209][ T5893] Call Trace:
[  229.055216][ T5893]  <TASK>
[  229.055223][ T5893]  vpanic+0x1e0/0x670
[  229.055248][ T5893]  panic+0xb9/0xc0
[  229.055270][ T5893]  ? __pfx_panic+0x10/0x10
[  229.055301][ T5893]  ? __list_add_valid_or_report+0x4e/0x130
[  229.055326][ T5893]  ? __list_add_valid_or_report+0x4e/0x130
[  229.055347][ T5893]  check_panic_on_warn+0x89/0xb0
[  229.055374][ T5893]  ? __list_add_valid_or_report+0x4e/0x130
[  229.055395][ T5893]  end_report+0x6f/0x140
[  229.055419][ T5893]  kasan_report+0x129/0x150
[  229.055445][ T5893]  ? __list_add_valid_or_report+0x4e/0x130
[  229.055470][ T5893]  __list_add_valid_or_report+0x4e/0x130
[  229.055492][ T5893]  kcov_remote_stop+0x458/0x690
[  229.055514][ T5893]  hub_event+0x4982/0x4f30
[  229.055540][ T5893]  ? __lock_acquire+0x6b6/0x2cf0
[  229.055571][ T5893]  ? finish_task_switch+0x162/0x940
[  229.055601][ T5893]  ? __pfx_hub_event+0x10/0x10
[  229.055623][ T5893]  ? process_scheduled_works+0x9ef/0x1770
[  229.055646][ T5893]  ? process_scheduled_works+0x9ef/0x1770
[  229.055665][ T5893]  ? process_scheduled_works+0x9ef/0x1770
[  229.055685][ T5893]  process_scheduled_works+0xad1/0x1770
[  229.055717][ T5893]  ? __pfx_process_scheduled_works+0x10/0x10
[  229.055736][ T5893]  ? do_raw_spin_lock+0x121/0x290
[  229.055763][ T5893]  worker_thread+0x8a0/0xda0
[  229.055789][ T5893]  ? __kthread_parkme+0x7b/0x200
[  229.055814][ T5893]  kthread+0x711/0x8a0
[  229.055838][ T5893]  ? __pfx_worker_thread+0x10/0x10
[  229.055858][ T5893]  ? __pfx_kthread+0x10/0x10
[  229.055880][ T5893]  ? rt_spin_unlock+0x150/0x200
[  229.055904][ T5893]  ? rt_spin_unlock+0x161/0x200
[  229.055931][ T5893]  ? __pfx_kthread+0x10/0x10
[  229.055955][ T5893]  ret_from_fork+0x510/0xa50
[  229.055975][ T5893]  ? __pfx_ret_from_fork+0x10/0x10
[  229.055993][ T5893]  ? __switch_to+0xc9e/0x1480
[  229.056019][ T5893]  ? __pfx_kthread+0x10/0x10
[  229.056042][ T5893]  ret_from_fork_asm+0x1a/0x30
[  229.056074][ T5893]  </TASK>
[  229.056432][ T5893] Kernel Offset: disabled