last executing test programs:

2.882205119s ago: executing program 2 (id=3):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/usb1/power/autosuspend_delay_ms\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='0\x00', 0x2)

2.838408786s ago: executing program 2 (id=6):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='dir0\x00', 0x1ff)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='dir0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000000c0), 0x1000)

2.811429257s ago: executing program 2 (id=7):
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040470501680100010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_connect(0x5, 0x3e, &(0x7f0000001000)=ANY=[@ANYBLOB="12010003000000404705016801000102030109022c0001010080fa0904000002ffffff000705810200020006300000000007050202000200063000000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2)
r1 = syz_open_dev$video(&(0x7f0000000240), 0x1, 0x2)
r2 = syz_open_dev$video(&(0x7f0000000280), 0x2, 0x2)
r3 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x2)
r4 = syz_open_dev$video(&(0x7f0000000400), 0x4, 0x2)
r5 = syz_open_dev$video(&(0x7f0000000440), 0x5, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000500)={0x980911, 0x100})
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000540)={0x980913, 0x100})
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000500)={0x980911, 0x100})
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000540)={0x980913, 0x100})
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000500)={0x980911, 0x100})
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000540)={0x980913, 0x100})
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000500)={0x980911, 0x100})
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000540)={0x980913, 0x100})
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000500)={0x980911, 0x100})
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000540)={0x980913, 0x100})
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000500)={0x980911, 0x100})
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000540)={0x980913, 0x100})

2.779996204s ago: executing program 0 (id=1):
syz_usb_connect$uac2(0x5, 0x9f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1054, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x15, 0xb2}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x400, 0xa, 0x25, 0x0, 0x7f, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xe6, 0x3, 0x4, 0x6}, @as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

2.544526199s ago: executing program 1 (id=2):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b11300001010203010902200001010080fa0904000002ff0000000705010200020007058102000200"], 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

1.914173749s ago: executing program 3 (id=13):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='4\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1\n', 0x2)
close(r3)
nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000001000)='\x00', 0x1, 0x0)
close(0xffffffffffffffff)

1.687759217s ago: executing program 3 (id=14):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @empty, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0x80}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @empty, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0x80}, {@local, 0x5000, 0x1, 0x1}}, 0x5c)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
write(r1, &(0x7f0000000040)='1\n\x00', 0x2)
syz_emit_ethernet(0x80, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @local, @remote, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x28, 0x6, 0x40, @remote, @local, [], "5000123400000000000000005002100000000000"}}}}}}}, 0x0)

1.665682022s ago: executing program 3 (id=15):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
write(r0, &(0x7f0000000700)="0600000000000000020000000401000000000000000000006c733100"/140, 0x78)

1.606343873s ago: executing program 3 (id=16):
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./config/dlm/cluster/cluster_name\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='testcluster\n\x00', 0xc)

1.605917579s ago: executing program 3 (id=17):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./driver_override\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000000180)='oxu210hp-hcd\x00', 0xd)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bind\x00', 0x42, 0x1ff)
write(r3, &(0x7f0000000200)='hpet\x00', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./driver_override.0\x00', 0x42, 0x1ff)
write(r4, &(0x7f0000000280)='oxu210hp-hcd\x00', 0xd)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bind.0\x00', 0x42, 0x1ff)
write(r5, &(0x7f0000000300)='hpet.0\x00', 0x7)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./driver_override0\x00', 0x42, 0x1ff)
write(r6, &(0x7f0000000380)='oxu210hp-hcd\x00', 0xd)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bind0\x00', 0x42, 0x1ff)
write(r7, &(0x7f0000000400)='hpet0\x00', 0x6)
close(r7)

1.585229868s ago: executing program 4 (id=19):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsub\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsub/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000190)='1\x00', 0x1)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000250)='tcp\x00', 0x3)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r3, &(0x7f0000000290)='127.0.0.1\x00', 0x9)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f00000002d0)='4420\x00', 0x4)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000310)='ipv4\x00', 0x4)
close(r5)
symlinkat(&(0x7f0000000380)='./config/nvmet/subsystems/testsub\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/testsub\x00')
nanosleep(&(0x7f0000000480)={0x0, 0x5f5e100}, 0x0)
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000500), 0x80, 0x0, 0x0, 0x0)
sendto$inet_nvme_pdu(r6, &(0x7f0000000600)=@cmd={{0x2}, {@common={0x9, 0x0, 0x1, 0x1, [], 0x0, @anon_struct, @cdws_anon={0x82, 0x80000000}}}}, 0x48, 0x0, 0x0, 0x0)

1.582898325s ago: executing program 3 (id=20):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402d1eb7000001010200010902270001010080320904000003ff000000070581030800090705820200020007050302000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mnt/class/net/wwan0/device/qmi/raw_ip\x00', 0x0, 0x0)
read(r1, &(0x7f0000000400), 0x10)

1.52630951s ago: executing program 0 (id=21):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
syz_usb_connect(0x3, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902270001010080320904000003fe030100070581020002000705020200020007058303400001"], 0x0)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1:1.0/usb488_device_capabilities\x00', 0x0, 0x0)
read(r0, &(0x7f0000000600), 0x100)

1.41780498s ago: executing program 4 (id=22):
r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e305030500010000000109021900010100c0010904000001ffffff0007058101000201"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0xc0, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

1.035091433s ago: executing program 1 (id=23):
syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030401600004010203010902270001010080320904000002ffffff000705810240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x6}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb-serial/devices/ttyUSB0/latency_timer\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='10\x00', 0x2)

775.511213ms ago: executing program 4 (id=24):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys_mnt', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys_mnt/bus/usb/drivers/hub', 0x0, 0x0)

710.210403ms ago: executing program 4 (id=25):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="ffffffff00"/24)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/ubi/ubi0/chk_gen\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='1', 0x1)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000500)="00000000010000000000010000000000030007000000000074657374766f6c00"/160)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev_mnt/ubi0_0\x00', 0x2, 0x0)
ioctl(r2, 0x40084f00, &(0x7f0000000780)="1000000000000000")

251.245757ms ago: executing program 2 (id=26):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='0000:00:02.0\x00', 0xd)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000600)='net2280\x00', 0x8)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/drivers/net2280/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000800)='0000:00:02.0\x00', 0xd)
close(r2)

235.100275ms ago: executing program 4 (id=27):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c00031000b84025c4d00399"], 0xf)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e13010000000010aaaaaa10aa001800000005"], 0x17)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x0, 0x1}, 0x10)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0x10)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000400)={0x3, 0x10}, 0x2)

170.220239ms ago: executing program 4 (id=28):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200), 0x100)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6)
read$nci(r0, &(0x7f0000000200), 0x100)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14)
read$nci(r0, &(0x7f0000000200), 0x100)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200), 0x100)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)
read$nci(r0, &(0x7f0000000200), 0x100)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)
read$nci(r0, &(0x7f0000000200), 0x100)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4)
sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)

0s ago: executing program 0 (id=29):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts.
[   29.698014][ T4699] cgroup: Unknown subsys name 'net'
[   29.819570][ T4699] cgroup: Unknown subsys name 'cpuset'
[   29.821790][ T4699] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   29.970771][ T4699] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   31.753606][ T4716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   31.755749][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   31.755927][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   31.756121][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   31.757214][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   31.759020][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   31.759215][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   31.759935][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   31.760537][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   31.761041][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   31.761327][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   31.761603][ T4718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   31.763777][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   31.767804][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   31.768065][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   31.769201][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   31.777700][ T4713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   31.777837][ T4713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   31.779029][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   31.779317][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   31.779469][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   31.780133][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   31.780270][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   31.781021][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   31.781202][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   32.181190][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.181530][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.181629][ T4723] bridge_slave_0: entered allmulticast mode
[   32.182112][ T4723] bridge_slave_0: entered promiscuous mode
[   32.189039][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.189088][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.189173][ T4723] bridge_slave_1: entered allmulticast mode
[   32.189838][ T4723] bridge_slave_1: entered promiscuous mode
[   32.233188][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.234752][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.236500][ T4719] bridge_slave_0: entered allmulticast mode
[   32.236972][ T4719] bridge_slave_0: entered promiscuous mode
[   32.239988][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.240084][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.240108][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.240174][ T4714] bridge_slave_0: entered allmulticast mode
[   32.240958][ T4714] bridge_slave_0: entered promiscuous mode
[   32.241882][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.241903][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.241988][ T4714] bridge_slave_1: entered allmulticast mode
[   32.242468][ T4714] bridge_slave_1: entered promiscuous mode
[   32.264432][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.264477][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.264561][ T4719] bridge_slave_1: entered allmulticast mode
[   32.265253][ T4719] bridge_slave_1: entered promiscuous mode
[   32.267362][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.280735][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.281156][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.281230][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.281304][ T4710] bridge_slave_0: entered allmulticast mode
[   32.281768][ T4710] bridge_slave_0: entered promiscuous mode
[   32.282616][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.282638][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.282687][ T4710] bridge_slave_1: entered allmulticast mode
[   32.283140][ T4710] bridge_slave_1: entered promiscuous mode
[   32.294106][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.302380][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.307029][ T4723] team0: Port device team_slave_0 added
[   32.307916][ T4723] team0: Port device team_slave_1 added
[   32.308863][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.321718][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.334423][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.341741][ T4719] team0: Port device team_slave_0 added
[   32.345412][ T4714] team0: Port device team_slave_0 added
[   32.349776][ T4710] team0: Port device team_slave_0 added
[   32.350165][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.350173][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.350185][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.351593][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.351604][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.351620][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.352437][ T4719] team0: Port device team_slave_1 added
[   32.359717][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.359818][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.359874][ T4709] bridge_slave_0: entered allmulticast mode
[   32.360364][ T4709] bridge_slave_0: entered promiscuous mode
[   32.362158][ T4714] team0: Port device team_slave_1 added
[   32.363175][ T4710] team0: Port device team_slave_1 added
[   32.370632][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.370646][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.370657][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.370864][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.370929][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.370996][ T4709] bridge_slave_1: entered allmulticast mode
[   32.371752][ T4709] bridge_slave_1: entered promiscuous mode
[   32.385731][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.385759][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.385770][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.397941][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.397973][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.397986][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.404967][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.405241][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.405249][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.405265][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.405864][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.405870][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.405882][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.415321][ T4723] hsr_slave_0: entered promiscuous mode
[   32.415708][ T4723] hsr_slave_1: entered promiscuous mode
[   32.422187][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.428944][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.428974][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.429107][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.443001][ T4709] team0: Port device team_slave_0 added
[   32.443891][ T4709] team0: Port device team_slave_1 added
[   32.449754][ T4719] hsr_slave_0: entered promiscuous mode
[   32.450127][ T4719] hsr_slave_1: entered promiscuous mode
[   32.450375][ T4719] debugfs: 'hsr0' already exists in 'hsr'
[   32.450433][ T4719] Cannot create hsr debugfs directory
[   32.451985][ T4710] hsr_slave_0: entered promiscuous mode
[   32.452301][ T4710] hsr_slave_1: entered promiscuous mode
[   32.452496][ T4710] debugfs: 'hsr0' already exists in 'hsr'
[   32.452512][ T4710] Cannot create hsr debugfs directory
[   32.484913][ T4714] hsr_slave_0: entered promiscuous mode
[   32.486847][ T4714] hsr_slave_1: entered promiscuous mode
[   32.487315][ T4714] debugfs: 'hsr0' already exists in 'hsr'
[   32.487329][ T4714] Cannot create hsr debugfs directory
[   32.492529][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.492800][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.492818][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.493516][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.493523][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.493533][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.556727][ T4709] hsr_slave_0: entered promiscuous mode
[   32.557069][ T4709] hsr_slave_1: entered promiscuous mode
[   32.557277][ T4709] debugfs: 'hsr0' already exists in 'hsr'
[   32.557287][ T4709] Cannot create hsr debugfs directory
[   32.644051][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.648141][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.648778][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.651129][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.655015][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.657772][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.658299][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.660297][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.673830][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.679517][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.680339][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.681893][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.682188][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.684351][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.688094][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.690450][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.698802][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.698861][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.699018][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.699052][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.719125][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.719173][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.719293][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.719322][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.737176][ T4709] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.739698][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.740260][ T4709] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.742100][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.744183][ T4709] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.748019][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.749839][ T4709] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.752102][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.774584][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.782978][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.795336][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.797253][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.799366][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.801119][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.815561][ T4719] 8021q: adding VLAN 0 to HW filter on device team0
[   32.820226][ T4714] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   32.822504][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.830712][ T4710] 8021q: adding VLAN 0 to HW filter on device team0
[   32.834302][ T4714] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   32.836607][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.837119][ T4714] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.839289][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.839605][ T4714] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.841613][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.853756][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.853814][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.854251][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.854277][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.869382][ T4723] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.872184][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.873476][   T15] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.873510][   T15] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.876048][ T4723] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.878510][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.880581][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.880631][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.888327][ T4723] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.890551][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.895506][ T4723] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.898149][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.950638][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.974241][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.989019][ T4709] 8021q: adding VLAN 0 to HW filter on device team0
[   32.991071][   T15] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.991116][   T15] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.998614][ T4714] 8021q: adding VLAN 0 to HW filter on device team0
[   33.011813][   T15] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.011860][   T15] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.014865][   T15] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.014903][   T15] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.032931][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.039217][   T15] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.039270][   T15] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.069073][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.090633][ T4723] 8021q: adding VLAN 0 to HW filter on device team0
[   33.098202][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.098262][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.108560][ T3861] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.108626][ T3861] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.173460][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.185886][ T4719] veth0_vlan: entered promiscuous mode
[   33.191701][ T4719] veth1_vlan: entered promiscuous mode
[   33.212899][ T4719] veth0_macvtap: entered promiscuous mode
[   33.215970][ T4719] veth1_macvtap: entered promiscuous mode
[   33.234866][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.243821][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.261525][ T1203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.261661][ T1203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.261720][ T1203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.263462][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.299723][ T3892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.311249][ T4710] veth0_vlan: entered promiscuous mode
[   33.325271][ T4710] veth1_vlan: entered promiscuous mode
[   33.335541][ T4710] veth0_macvtap: entered promiscuous mode
[   33.338182][ T4710] veth1_macvtap: entered promiscuous mode
[   33.359918][ T3892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.359965][ T3892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.369075][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.377043][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.379667][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.382525][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.388481][ T3892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.388526][ T3892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.436135][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.444699][ T3892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.444738][ T3892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.457179][   T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.457393][   T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.457547][   T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.459150][   T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.470764][ T4719] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.481183][ T4723] veth0_vlan: entered promiscuous mode
[   33.481525][ T3892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.481537][ T3892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.494163][ T4714] veth0_vlan: entered promiscuous mode
[   33.499038][ T4714] veth1_vlan: entered promiscuous mode
[   33.510698][ T4723] veth1_vlan: entered promiscuous mode
[   33.548098][ T4723] veth0_macvtap: entered promiscuous mode
[   33.553216][ T4723] veth1_macvtap: entered promiscuous mode
[   33.577955][ T4709] veth0_vlan: entered promiscuous mode
[   33.580324][ T4709] veth1_vlan: entered promiscuous mode
[   33.589891][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.590543][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.597189][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.605298][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.607606][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.607816][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.614011][ T4714] veth0_macvtap: entered promiscuous mode
[   33.626107][ T4714] veth1_macvtap: entered promiscuous mode
[   33.643647][ T4709] veth0_macvtap: entered promiscuous mode
[   33.645886][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.653921][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.655686][ T3861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.656331][ T3861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.660177][ T4709] veth1_macvtap: entered promiscuous mode
[   33.667775][   T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.667826][   T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.667850][   T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.667868][   T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.667884][   T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.667900][   T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.667914][   T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.667929][   T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.675364][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.675378][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.702474][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.702509][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.709813][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.717977][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.730821][   T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.731064][   T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.731091][   T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.731182][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.731189][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.783503][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.783650][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.798485][   T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.804648][ T4904] ubi0: attaching mtd0
[   33.806319][ T4904] ubi0: scanning is finished
[   33.807508][ T4904] ubi0: empty MTD device detected
[   33.815408][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.815448][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.824361][ T4906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.825980][ T4906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.847065][ T4711] Bluetooth: hci0: command tx timeout
[   33.847319][ T4711] Bluetooth: hci4: command tx timeout
[   33.847381][ T4711] Bluetooth: hci2: command tx timeout
[   33.856773][ T4840] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   33.857487][   T50] Bluetooth: hci3: command tx timeout
[   33.857581][   T50] Bluetooth: hci1: command tx timeout
[   33.920886][ T4904] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[   33.922569][ T4904] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   33.924023][ T4904] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[   33.925383][ T4904] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[   33.930469][ T4904] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   33.932020][ T4904] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[   33.933757][ T4904] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 641494608
[   33.935759][ T4904] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   33.938593][ T4916] ubi0: background thread "ubi_bgt0d" started, PID 4916
[   34.006529][ T4840] usb 1-1: Using ep0 maxpacket: 32
[   34.009911][ T4840] usb 1-1: unable to get BOS descriptor or descriptor too short
[   34.010015][ T4840] usb 1-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[   34.016160][ T4840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.018203][ T4840] usb 1-1: Product: syz
[   34.019015][ T4840] usb 1-1: Manufacturer: syz
[   34.020014][ T4840] usb 1-1: SerialNumber: syz
[   34.342264][ T4840] usb 1-1: USB disconnect, device number 2
[   34.438699][ T4923] null_blk: nullb1: using native zone append
[   34.475693][ T4923] null_blk: disk nullb1 created
[   34.676496][ T4840] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   34.700304][ T4900] IPVS: starting estimator thread 0...
[   34.719646][ T4931] dlm: no local IP address has been set
[   34.719672][ T4931] dlm: cannot start dlm midcomms -107
[   34.787185][ T4929] IPVS: using max 60 ests per chain, 144000 per kthread
[   34.804346][ T4939] nvmet_tcp: enabling port 1 (127.0.0.1:4420)
[   34.818081][ T4941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.820105][ T4941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.827790][ T4840] usb 1-1: New USB device found, idVendor=0525, idProduct=0104, bcdDevice= 7.02
[   34.828211][ T4840] usb 1-1: Dual-Role OTG device on HNP port
[   34.828412][ T4840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.842599][ T4840] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[   34.863369][ T4944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.863600][ T4944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.925767][ T4948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.927963][ T4948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.352899][ T4953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.354201][ T4953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.629585][ T4958] ubi: mtd0 is already attached to ubi0
[   35.926502][ T4711] Bluetooth: hci1: command tx timeout
[   35.926745][   T50] Bluetooth: hci2: command tx timeout
[   35.926776][   T50] Bluetooth: hci3: command tx timeout
[   35.926808][   T50] Bluetooth: hci4: command tx timeout
[   35.926829][   T50] Bluetooth: hci0: command tx timeout
[   36.150861][ T4718] Bluetooth: hci0: unexpected subevent 0x01 length: 19 > 18
[   36.244061][ T4962] EXT4-fs (nvme0n1p2): shut down requested (2)
[   36.244798][ T4962] Aborting journal on device nvme0n1p2-8.
[   36.430541][ T4968] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000048
[   36.432684][ T4968] Mem abort info:
[   36.433527][ T4968]   ESR = 0x0000000096000006
[   36.434670][ T4968]   EC = 0x25: DABT (current EL), IL = 32 bits
[   
** replaying previous printk message **
[   36.435813][ T4968]   SET = 0, FnV = 0
[   36.435830][ T4968]   EA = 0, S1PTW = 0
[   36.435837][ T4968]   FSC = 0x06: level 2 translation fault
[   36.435845][ T4968] Data abort info:
[   36.435848][ T4968]   ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000
[   36.435854][ T4968]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[   36.435861][ T4968]   GCS = 0, Overlay = 0, DirtyBit = 0
[   36.435867][ T4968] user pgtable: 4k pages, 48-bit VAs, pgdp=000000011d24b000
[   36.435875][ T4968] [0000000000000048] pgd=080000010edba403, p4d=080000010edba403, pud=080000011d2c1403, pmd=0000000000000000
[   36.435973][ T4968] Internal error: Oops: 0000000096000006 [#1]  SMP
[   36.447364][ T4968] Modules linked in:
[   36.448045][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: syz.2.26 Not tainted syzkaller #0 PREEMPT 
[   36.449527][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   36.451314][ T4968] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[   36.452646][ T4968] pc : usb_reinit+0xbf4/0xfa0
[   36.453615][ T4968] lr : usb_reinit+0xb6c/0xfa0
[   36.454522][ T4968] sp : ffff8000972b75a0
[   36.455291][ T4968] x29: ffff8000972b75e0 x28: dfff800000000000 x27: ffff800087354e38
[   36.456798][ T4968] x26: ffff800087354e80 x25: 0000000000000060 x24: 1fffe0001a265983
[   36.458261][ T4968] x23: ffff0000d132cc18 x22: 1fffe0001a26580b x21: 0000000000000011
[   36.459693][ T4968] x20: ffff0000d132c058 x19: ffff0000d132c000 x18: 00000000ffffffff
[   36.461093][ T4968] x17: ffff80008a7d6000 x16: 0000000000000005 x15: ffff80008a35fda0
[   36.462574][ T4968] x14: ffff80008a5d5e28 x13: 0000000000000001 x12: 0000000000000000
[   36.464135][ T4968] x11: 1fffe0001a265978 x10: 0000000000080000 x9 : 000000000000394f
[   36.465712][ T4968] x8 : 0000000000000048 x7 : ffff800080aa1cb8 x6 : 0000000000000000
[   36.467248][ T4968] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000835bf6bc
[   36.468815][ T4968] x2 : 0000000000000000 x1 : ffff0000c4ceba80 x0 : 0000000000000001
[   36.470328][ T4968] Call trace:
[   36.470890][ T4968]  usb_reinit+0xbf4/0xfa0 (P)
[   36.471710][ T4968]  net2280_probe+0x5f4/0xef0
[   36.472525][ T4968]  local_pci_probe+0xc8/0x158
[   36.473307][ T4968]  pci_device_probe+0x460/0x8d4
[   36.474087][ T4968]  really_probe+0x29c/0x800
[   36.474812][ T4968]  __driver_probe_device+0x1e0/0x350
[   36.475680][ T4968]  device_driver_attach+0x58/0xac
[   36.476558][ T4968]  bind_store+0xf4/0x14c
[   36.477298][ T4968]  drv_attr_store+0x80/0xa4
[   36.478107][ T4968]  sysfs_kf_write+0xe0/0x108
[   36.478916][ T4968]  kernfs_fop_write_iter+0x260/0x3b8
[   36.479856][ T4968]  vfs_write+0x51c/0xa0c
[   36.480602][ T4968]  ksys_write+0x12c/0x228
[   36.481358][ T4968]  __arm64_sys_write+0x84/0x98
[   36.482199][ T4968]  invoke_syscall+0x98/0x244
[   36.483000][ T4968]  el0_svc_common+0xec/0x23c
[   36.483813][ T4968]  do_el0_svc+0x4c/0x5c
[   36.484543][ T4968]  el0_svc+0x64/0x260
[   36.485211][ T4968]  el0t_64_sync_handler+0x44/0x104
[   36.486140][ T4968]  el0t_64_sync+0x198/0x19c
[   36.486974][ T4968] Code: 9757676c f94002e8 91012108 d503201f (b9400115) 
[   36.488184][ T4968] ---[ end trace 0000000000000000 ]---
[   36.731836][ T4968] Kernel panic - not syncing: Oops: Fatal exception
[   36.732981][ T4968] SMP: stopping secondary CPUs
[   36.733813][ T4968] Kernel Offset: disabled
[   36.734522][ T4968] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7
[   36.735692][ T4968] Memory Limit: none
[   36.975955][ T4968] Rebooting in 86400 seconds..