last executing test programs:

32.112080902s ago: executing program 0 (id=876):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
truncate(&(0x7f0000000240)='./file0\x00', 0x1)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800})
fcntl$setlease(r0, 0x400, 0x1)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd})
mq_open(&(0x7f0000003b00)='9\x00', 0x80, 0x18b, &(0x7f0000000080)={0x7a1, 0xa, 0x6, 0x100000000})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040304541a0c06"], 0x7)

31.792345525s ago: executing program 0 (id=880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x7, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x2}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x0, 0xa, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prctl$PR_SCHED_CORE(0x4a, 0x1, 0x0, 0x2, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080))

31.562481509s ago: executing program 0 (id=881):
listen(0xffffffffffffffff, 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x54, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x48d1)

30.702999016s ago: executing program 0 (id=884):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xf0)
ppoll(&(0x7f0000000040)=[{r0, 0x40a8}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
syz_usb_connect$uac2(0x0, 0x87, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012cec000000101e0400304000010203010b010201ff20390904000000010120000924010900061500e40c24030500030905060400050904010000010220000904010101010220000905010908000f0007082501013303070009040200000102200009ff20a5d76ca57eb13be9000201010102200009058209200006a606082501020c08fbff00"/145], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})

27.5555094s ago: executing program 0 (id=903):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x8924, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="20360000fcff"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000004c0)={0x0, 0x30, 0x22, "03497350df04a4ebf7b42fe4de4c67ff0f4aac81d5d715178588d4ef2ce1b95c54a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

26.468676133s ago: executing program 1 (id=907):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x241, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

25.933269493s ago: executing program 1 (id=909):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110013e083f10cc04332558fc0102030109022400010509401a0904a807020855fe980905eb020004020205090523ea"], 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x103100, 0x100)
read$FUSE(r3, &(0x7f0000006000)={0x2020}, 0x2020)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="8f6878c3ec000f1d300f01c8b8010000000f01d9b9640900000f32653666f3e12c410f01c3676466430f3880141f0fc71dd00000000f20c035000001000f22c0", 0x40}], 0x1, 0xc, &(0x7f0000000240)=[@cr0={0x0, 0x4}], 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000002c0)={0x8001, 0x20, '\x00', 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000000c0)={{0x0, 0xd5cf7002, 0xe, 0x8, 0xab, 0xc, 0x2, 0x9, 0x8, 0x0, 0x8, 0x6d}, {0x2, 0xeeee0000, 0x4, 0x5, 0x7f, 0x7, 0xa, 0x2e, 0x2, 0x1, 0x4, 0x8}, {0x0, 0x26000, 0xd, 0x3, 0x80, 0x0, 0x9, 0x4, 0x1, 0xb, 0x9, 0x2}, {0x60000, 0x3000, 0x10, 0xd, 0x3, 0x3b, 0xea, 0x8, 0x2, 0xb, 0x6, 0x9}, {0x4000, 0xf000, 0xe, 0x9, 0x8, 0x4, 0x8, 0x81, 0x3, 0x4, 0x4c, 0xd1}, {0x0, 0xddfd1000, 0x3, 0x5, 0x1, 0x1f, 0xb, 0xf, 0x9d, 0x0, 0x0, 0xf7}, {0x7e000, 0xf000, 0x3, 0x4, 0xe, 0x0, 0x0, 0xfc, 0xed, 0x7, 0x7}, {0x60000, 0x8080000, 0x3, 0x40, 0xf, 0x2, 0x9, 0x3, 0x40, 0x5, 0xf8, 0xfe}, {0xeeef0000, 0x26}, {0x50000, 0x800}, 0x2005002c, 0x0, 0x54000, 0x20000, 0xb, 0x0, 0x6000, [0x1, 0x7, 0x9]})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xf, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0xff, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0xf5, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}})

25.107492468s ago: executing program 3 (id=915):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="20360000fcff"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000004c0)={0x0, 0x30, 0x22, "03497350df04a4ebf7b42fe4de4c67ff0f4aac81d5d715178588d4ef2ce1b95c54a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

24.509752334s ago: executing program 0 (id=916):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000027c0)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x9, @empty, 0xa}}, 0x5, 0x9}, &(0x7f00000003c0)=0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @raw_data=[0x6, 0x3901, 0x4, 0x101, 0xb64, 0x0, 0x40, 0x8, 0xbd74, 0x10001, 0x5, 0x2, 0xfffffff7, 0xffff, 0xffffffe1, 0x5, 0x0, 0x4, 0x1, 0x3, 0x4, 0x10, 0x0, 0x9, 0x9f, 0x4, 0x7, 0x4, 0x39, 0x5, 0xffffffc0]})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x26}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x8404}, 0x20004014)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000e80)={&(0x7f0000000140), 0xc, &(0x7f0000000e40)={&(0x7f0000000700)={0x738, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x704, 0x3, 0x0, 0x1, [{0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x14, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "4b22d33f2eaedcb3bfa395f05e81cfd67f7b2e934ec35b132a3193f126d2b59242dd990c7df5006242686667ed42e2e093e5acfea733afd4b5d8ec5aded4aa68e664bcbc4090f8463f824e27861447dbc2ddc0c17c788a2888213b01917b017ba3acea4604d300c4c4ad4d3524c7ce676c07950d0006bd1a31cbf0fe941eec98fcec2cf00d5ca5854b877431e55b56edacb3a02c59c170cb534677dac1f9d19f2c637738b2dc748d08cc29"}]}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xa4}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_NUM={0x8}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xa8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7907f48a0eb2dfac}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x20, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x79, 0x6, 0x1, 0x0, "82327446e42af9de2610198c0a7002da259e30c5f58589c7fbe2333e0de548896a9f002b19d05fae434c66101e17f920d1c6b5c6146623e0fd4a18499d2ef9504f22d7b405e79293fb409a2c23b4a7896723d6be2150cd48c5cfb4a5a73611326570e44a1847a26d9bc223b50df98cdec9000e30df"}, @NFTA_SET_ELEM_USERDATA={0x48, 0x6, 0x1, 0x0, "cc566965043eda7e3dc1604bb078bd2cd3ab8eff9e877cfe42ec496eb3180858587c9f594c5f0368def8d7255ad72c61adbd3cba1eb292263d5a388998f1e8069678e9c0"}, @NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x384, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9ff}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_KEY_END={0x364, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xea, 0x1, "bfddab8809abfc862f3b961d3a078fab21372113708b59fe9e6a7ba8530915ea6e2b597480f8a88b56bd75963af3018fe9aae41c29c4772355d0c7f4bbd6a2ca8552ee658be61a32fb8939b67a0e6aa242288ca712061c83238bb59bcee2f90322d366addbb253a97b6d5645cf5a28ec644ea5bd94ea9b06daca19c02e825f47af86de1726c4a5c6b1d8db8a2e67d25e8909548dd2e2731d94e5a8feaf92953cdf71b166e483acd65f4965974c263e3af7b5394bfb0b64cec44521f9050f88c69b0691eed60c4bad8210b02f857c43db02827b1c92c80e6d5c111d4566f9f1f698b2cd5dadb5"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "29ae434c590c8803307b2d2d551c2cf622cce8375088c10c0c181e0c578c3413d2a76314001a2be9cb5740"}, @NFTA_DATA_VALUE={0x73, 0x1, "771a401bbf7119c97ae2ade44dd932d79be14dad34f629da4219471a1e6040f371f80c8810a8be2043260dbaaf522dc11f193db137aa7617f4d6d5a21ad00dd9c13d69f640840b17751ec51d7ab574d5d0fef9b86949f69158e9f5d7fb6da6075b74d232080c7894f3e5032bfa6500"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xca, 0x1, "dead009a02b2ecaed5667563f6c3d878f57ea9cf08d1afbf282ef16c0b2c7b2917cfbce10dc918b3b19c4832d4abd90f167be70ff05478e0002b0c06fd0f31909a18306c5ddb2cdd7bb889d601f9993053760610b97a013e1af310decef62d334a15b815a53c9323514ed9370e36383c3f5957b03e0877808fb7788c04ae4719e699c2236d04a2c26f6ccb9c7137571812529eba3c9cebe554fcc914c291dbff0e4a075d580944e908a8cf89bb7fdac351891d115af82ed06bdcbcba408bc9a632e7c9c9c840"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x738}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x106}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xd5}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
bind$inet(r7, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000100)={r2, 0x5}, 0x8)
syz_usb_connect(0x5, 0x466, &(0x7f0000000680)=ANY=[@ANYBLOB="120101028ddfb240490b4f06fdd4010203010902540402fa0680070904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4)
sendto$inet(r7, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x4000080, 0x0, 0x0)

24.453391308s ago: executing program 3 (id=917):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4)
sendto$inet(r0, &(0x7f00000000c0)="8689d46205a341", 0xffe3, 0x4000080, 0x0, 0x0)

24.371633897s ago: executing program 3 (id=918):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_OPEN(r1, &(0x7f0000002640)={0x20, 0x0, r2, {0x0, 0x10}}, 0x20)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

24.274098327s ago: executing program 3 (id=920):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000900)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "89daa9c6"}, @main=@item_4={0x3, 0x0, 0x8, "b78afba5"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe, 0x8, 0x1, {0x22, 0xfe3}}}}, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x0, 0x1, 0x61, "51f555e1bec909a84e41ecea6883d638674bbe8e2560b572db5cfcf7e3e1f491d9321e71502781421e230f07f7606e017e0baaa20c093a37d087387263e20f21924c4fa7d48cdf8d0070be3fd6ad3aa11304d2f7e0f3a51a44739f9657479076ea"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0xc6}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000ac0)={0x20, 0x1, 0xf, "be4fc4018e75da6b8568cd94e562c8"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0xd5}})

24.150815565s ago: executing program 1 (id=921):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r2 = dup(r1)
write$cgroup_subtree(r2, &(0x7f0000002280)=ANY=[], 0x32600)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111}}, 0x20)
write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000370200010200000000000000f00f000000000000", @ANYRES32, @ANYBLOB="21b5d799"], 0x20)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00')
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x36, 0xffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

23.790657438s ago: executing program 2 (id=923):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x803, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x80, "5e0e38746b785fd58d4d58d7b36257b4321653ed43a22619e12d0149525da5a0", 0x35323645})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xb, 0x4, 0xa000200000a958, 0x3, 0x3, 0x6a1c000, 0x5e96, 0x800000000000001, 0x5c})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000080)={0xa, 0x6, 0x2, 0x6, 'syz1\x00', 0xce2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23.674538065s ago: executing program 3 (id=924):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x8924, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="20360000fcff"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000004c0)={0x0, 0x30, 0x22, "03497350df04a4ebf7b42fe4de4c67ff0f4aac81d5d715178588d4ef2ce1b95c54a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

23.461791076s ago: executing program 2 (id=925):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="20360000fcff"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000004c0)={0x0, 0x30, 0x22, "03497350df04a4ebf7b42fe4de4c67ff0f4aac81d5d715178588d4ef2ce1b95c54a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23.107170903s ago: executing program 3 (id=926):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00e7052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
socket$pppoe(0x18, 0x1, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x30, r2, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x61cf448f, 0x4b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000359000000590385273febf1afc6cc563d00b1b4d5fc34f4fe1e36e88d9460fa34b8b607ae7f365c3da3b0a9ec1c55286a90db82c21699be3a4e22245b8e5816ede11ea0f9ca34403cb71c6de819b503344f9a06f5a75000000000000000"]}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110013e083f10cc04332558fc0102030109022400010509401a0904a807020855fe980905eb020004020205090523ea"], 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

23.046853161s ago: executing program 1 (id=927):
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x40800, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x10000}, {0x0, 0x0, 0x1}, {0x0, 0x10000, 0x1}, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb})
r1 = socket(0x15, 0x5, 0x0)
connect$inet6(r1, 0x0, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r3, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x1, 0xd, 0xe, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x60, 0xe0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x9, 0x2, {0x7, 0x25, 0x1, 0x4, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x3, 0x2, {0x7, 0x25, 0x1, 0xc, 0x1, 0x9}}}}}}}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x813}}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x65c}, 0x1, 0x0, 0x0, 0x48815}, 0xc8c0)

21.58820729s ago: executing program 1 (id=928):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000400)={{{0xa}}, 0x0, 0x400005, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x101})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(0xffffffffffffffff, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x7)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0xffffffffffffffff})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x78, 0x0, &(0x7f0000000480)=[@acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x0, 0x0, 0x19}, @fda={0x66646185, 0x2, 0x1, 0x3f}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000006c0)={0x0, 0x20, 0x40}}, 0x400}, @clear_death={0x400c630f, 0xfffffffe}, @acquire_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@handle={0x73682a85, 0x110a, 0x2}, @fda={0x66646185, 0x0, 0x8000000000001, 0x37}, @flat=@handle={0x73682a85, 0x98a, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
sendto$l2tp(r3, &(0x7f0000000240)="7d0a89dd8655e06894277bea4d5c480dd1137528cc4565292fbf15762d5dc6928e11a509cdfb0a567684b2c686980407f5955e859ac71ecd649fbd9e266cfb314454878c2d99b57011370b8ff055143da3b8d13947b0b187f16b5bd21a2e37bfa08800acdd9ea92461390af5f98f83e84df64c36b5245682b6b477dca38264f4bbf19ee9625d7a01c2a9d0d8535bed7dfdd53883c26228b806c31edbfb09de423c7de842e2243a3b6b0e44b914635b5093f47d26b8e1ce31", 0xb8, 0x20000801, &(0x7f0000000340)={0x2, 0x0, @private=0xa010101, 0x4}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000140))

21.269341892s ago: executing program 1 (id=929):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b", 0x63}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b", 0x17}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

18.651180215s ago: executing program 2 (id=930):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\xdb\xc9:t\vt,)\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd6\f\xfe\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95\t\x00\x00\x00\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\x02\xe8rP>R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\xed\xceH\x891\x9e\v4Q\xee]\x96W\xb9(<\xd1\xbb\x94\xc8\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xe8\'\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00d\xeex\xb3\xc3J\xc7\x1f\xe33\x14\x16T\x1bb\xc0\x9c\x12\x00'/378)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x7b0f2000)
mq_open(0x0, 0x2, 0x6, &(0x7f00000001c0)={0xd, 0x9, 0xf, 0x3f7f1c8b})
sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080))
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0)

18.502887731s ago: executing program 2 (id=931):
r0 = socket$kcm(0x10, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="a3c5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) (async)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="a3c5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
socket$kcm(0x10, 0x400000002, 0x0) (async)
socket$kcm(0x10, 0x400000002, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00'})
socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macsec0\x00'})
sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x4788, r7}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084)
ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000080)=0x6)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880)

18.405558124s ago: executing program 2 (id=932):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000900)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "89daa9c6"}, @main=@item_4={0x3, 0x0, 0x8, "b78afba5"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe, 0x8, 0x1, {0x22, 0xfe3}}}}, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x0, 0x1, 0x61, "51f555e1bec909a84e41ecea6883d638674bbe8e2560b572db5cfcf7e3e1f491d9321e71502781421e230f07f7606e017e0baaa20c093a37d087387263e20f21924c4fa7d48cdf8d0070be3fd6ad3aa11304d2f7e0f3a51a44739f9657479076ea"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0xc6}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000ac0)={0x20, 0x1, 0xf, "be4fc4018e75da6b8568cd94e562c8"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0xd5}})

15.321252834s ago: executing program 2 (id=933):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="240000000000000001"], 0x28}, 0xc000) (async)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) (async)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched_retired(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newchain={0x24, 0x64, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xfff1, 0x6}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004094)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000180)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x798, 0x200, 0x6, {{0x6, 0x4, 0x2, 0x32, 0x18, 0x64, 0x0, 0xe, 0x4, 0x0, @remote, @empty, {[@generic={0x88, 0x2}]}}}}}) (async)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20102, 0x0)

9.265494185s ago: executing program 32 (id=916):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000027c0)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x9, @empty, 0xa}}, 0x5, 0x9}, &(0x7f00000003c0)=0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @raw_data=[0x6, 0x3901, 0x4, 0x101, 0xb64, 0x0, 0x40, 0x8, 0xbd74, 0x10001, 0x5, 0x2, 0xfffffff7, 0xffff, 0xffffffe1, 0x5, 0x0, 0x4, 0x1, 0x3, 0x4, 0x10, 0x0, 0x9, 0x9f, 0x4, 0x7, 0x4, 0x39, 0x5, 0xffffffc0]})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x26}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x8404}, 0x20004014)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000e80)={&(0x7f0000000140), 0xc, &(0x7f0000000e40)={&(0x7f0000000700)={0x738, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x704, 0x3, 0x0, 0x1, [{0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x14, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "4b22d33f2eaedcb3bfa395f05e81cfd67f7b2e934ec35b132a3193f126d2b59242dd990c7df5006242686667ed42e2e093e5acfea733afd4b5d8ec5aded4aa68e664bcbc4090f8463f824e27861447dbc2ddc0c17c788a2888213b01917b017ba3acea4604d300c4c4ad4d3524c7ce676c07950d0006bd1a31cbf0fe941eec98fcec2cf00d5ca5854b877431e55b56edacb3a02c59c170cb534677dac1f9d19f2c637738b2dc748d08cc29"}]}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xa4}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_NUM={0x8}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xa8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7907f48a0eb2dfac}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x20, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x79, 0x6, 0x1, 0x0, "82327446e42af9de2610198c0a7002da259e30c5f58589c7fbe2333e0de548896a9f002b19d05fae434c66101e17f920d1c6b5c6146623e0fd4a18499d2ef9504f22d7b405e79293fb409a2c23b4a7896723d6be2150cd48c5cfb4a5a73611326570e44a1847a26d9bc223b50df98cdec9000e30df"}, @NFTA_SET_ELEM_USERDATA={0x48, 0x6, 0x1, 0x0, "cc566965043eda7e3dc1604bb078bd2cd3ab8eff9e877cfe42ec496eb3180858587c9f594c5f0368def8d7255ad72c61adbd3cba1eb292263d5a388998f1e8069678e9c0"}, @NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x384, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9ff}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_KEY_END={0x364, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xea, 0x1, "bfddab8809abfc862f3b961d3a078fab21372113708b59fe9e6a7ba8530915ea6e2b597480f8a88b56bd75963af3018fe9aae41c29c4772355d0c7f4bbd6a2ca8552ee658be61a32fb8939b67a0e6aa242288ca712061c83238bb59bcee2f90322d366addbb253a97b6d5645cf5a28ec644ea5bd94ea9b06daca19c02e825f47af86de1726c4a5c6b1d8db8a2e67d25e8909548dd2e2731d94e5a8feaf92953cdf71b166e483acd65f4965974c263e3af7b5394bfb0b64cec44521f9050f88c69b0691eed60c4bad8210b02f857c43db02827b1c92c80e6d5c111d4566f9f1f698b2cd5dadb5"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "29ae434c590c8803307b2d2d551c2cf622cce8375088c10c0c181e0c578c3413d2a76314001a2be9cb5740"}, @NFTA_DATA_VALUE={0x73, 0x1, "771a401bbf7119c97ae2ade44dd932d79be14dad34f629da4219471a1e6040f371f80c8810a8be2043260dbaaf522dc11f193db137aa7617f4d6d5a21ad00dd9c13d69f640840b17751ec51d7ab574d5d0fef9b86949f69158e9f5d7fb6da6075b74d232080c7894f3e5032bfa6500"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xca, 0x1, "dead009a02b2ecaed5667563f6c3d878f57ea9cf08d1afbf282ef16c0b2c7b2917cfbce10dc918b3b19c4832d4abd90f167be70ff05478e0002b0c06fd0f31909a18306c5ddb2cdd7bb889d601f9993053760610b97a013e1af310decef62d334a15b815a53c9323514ed9370e36383c3f5957b03e0877808fb7788c04ae4719e699c2236d04a2c26f6ccb9c7137571812529eba3c9cebe554fcc914c291dbff0e4a075d580944e908a8cf89bb7fdac351891d115af82ed06bdcbcba408bc9a632e7c9c9c840"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x738}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x106}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xd5}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
bind$inet(r7, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000100)={r2, 0x5}, 0x8)
syz_usb_connect(0x5, 0x466, &(0x7f0000000680)=ANY=[@ANYBLOB="120101028ddfb240490b4f06fdd4010203010902540402fa0680070904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4)
sendto$inet(r7, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x4000080, 0x0, 0x0)

7.099656557s ago: executing program 33 (id=926):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00e7052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
socket$pppoe(0x18, 0x1, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x30, r2, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x61cf448f, 0x4b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000359000000590385273febf1afc6cc563d00b1b4d5fc34f4fe1e36e88d9460fa34b8b607ae7f365c3da3b0a9ec1c55286a90db82c21699be3a4e22245b8e5816ede11ea0f9ca34403cb71c6de819b503344f9a06f5a75000000000000000"]}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110013e083f10cc04332558fc0102030109022400010509401a0904a807020855fe980905eb020004020205090523ea"], 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

6.049248764s ago: executing program 34 (id=929):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b", 0x63}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b", 0x17}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 35 (id=933):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="240000000000000001"], 0x28}, 0xc000) (async)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) (async)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched_retired(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newchain={0x24, 0x64, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xfff1, 0x6}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004094)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000180)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x798, 0x200, 0x6, {{0x6, 0x4, 0x2, 0x32, 0x18, 0x64, 0x0, 0xe, 0x4, 0x0, @remote, @empty, {[@generic={0x88, 0x2}]}}}}}) (async)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20102, 0x0)

kernel console output (not intermixed with test programs):

2
[  149.383410][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  149.397982][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.398021][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  149.408920][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.408952][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  149.409256][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.409281][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  149.415705][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.415735][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  149.435379][  T821] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  149.447818][ T6375] ldm_validate_partition_table(): Disk read failed.
[  149.478330][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.478438][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  149.502843][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.502940][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  149.541138][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.541193][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  149.636566][ T6375] Dev loop0: unable to read RDB block 0
[  149.665400][ T5959] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO
[  149.665933][ T5959] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  149.665993][ T5959] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  149.667069][ T5959] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  149.725510][  T821] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  149.725533][  T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.725546][  T821] usb 4-1: Product: syz
[  149.725554][  T821] usb 4-1: Manufacturer: syz
[  149.725563][  T821] usb 4-1: SerialNumber: syz
[  149.764939][ T5959] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  149.765664][ T6375]  loop0: unable to read partition table
[  149.765911][ T6375] loop0: partition table beyond EOD, truncated
[  149.774068][  T821] usb 4-1: config 0 descriptor??
[  149.774838][ T6375] loop_reread_partitions: partition scan of loop0 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  149.787460][  T821] hub 4-1:0.0: bad descriptor, ignoring hub
[  149.787502][  T821] hub 4-1:0.0: probe with driver hub failed with error -5
[  149.848907][ T5959] usb 3-1: USB disconnect, device number 18
[  149.849698][  T821] f81232 4-1:0.0: f81534a converter detected
[  149.971678][ T6383] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  150.142488][  T821] f81534a ttyUSB0: f81232_set_register failed status: -71
[  150.142521][  T821] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[  150.211749][  T821] usb 4-1: USB disconnect, device number 28
[  150.263260][  T821] f81232 4-1:0.0: device disconnected
[  150.440851][ T6386] netlink: 'syz.1.153': attribute type 39 has an invalid length.
[  150.497525][ T6386] veth0_macvtap: left promiscuous mode
[  150.502873][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'.
[  150.737407][ T6394] warning: `syz.2.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  150.936122][ T6401] fuse: fd is not a fuse device
[  150.974412][ T5959] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  151.104396][ T5959] usb 2-1: device descriptor read/64, error -71
[  151.176077][ T5893] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  151.185996][ T5563] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  151.324312][ T5893] usb 3-1: Using ep0 maxpacket: 32
[  151.328105][ T5893] usb 3-1: unable to get BOS descriptor or descriptor too short
[  151.345626][ T5893] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  151.345657][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.345676][ T5893] usb 3-1: Product: 岦굳虫ㅺ㯊呝幗蟥粅蓢复㱔麅┓問ꨞ횝͋謥낡Ҙ笂လ㞪姿౭剺혓轛ᗘ䑟␞훡츝豎崘磦봮冪詂஁辚尡ᠤꮼ侶઼쵯酐揥칦칪䙱媩䓦䴠욹沰ࠟ숧讣醴ⵡ鎑걶寇纹簳뉄評䓅嫡๨閦ꌭ鏗펻ᬢ䃦ࢇ
[  151.345701][ T5893] usb 3-1: Manufacturer: и
[  151.363038][ T5893] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc
[  151.411713][ T5959] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  151.429130][ T5563] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  151.429163][ T5563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.429185][ T5563] usb 4-1: Product: syz
[  151.429200][ T5563] usb 4-1: Manufacturer: syz
[  151.429215][ T5563] usb 4-1: SerialNumber: syz
[  151.554559][ T5959] usb 2-1: device descriptor read/64, error -71
[  151.558914][ T6401] netlink: set zone limit has 4 unknown bytes
[  151.562215][ T5893] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  151.648782][ T5893] usb 3-1: USB disconnect, device number 19
[  151.665670][ T5959] usb usb2-port1: attempt power cycle
[  151.820171][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  151.859401][ T6402] mkiss: ax0: crc mode is auto.
[  152.004375][ T5959] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  152.025444][ T5959] usb 2-1: device descriptor read/8, error -71
[  152.025684][ T5563] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  152.025749][ T5563] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  152.197395][ T6410] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  152.274834][ T5959] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  152.298467][ T5959] usb 2-1: device descriptor read/8, error -71
[  152.410986][ T5959] usb usb2-port1: unable to enumerate USB device
[  152.614355][ T5893] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  152.776162][ T5893] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  152.776199][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.776220][ T5893] usb 3-1: Product: syz
[  152.776234][ T5893] usb 3-1: Manufacturer: syz
[  152.776249][ T5893] usb 3-1: SerialNumber: syz
[  153.236139][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  153.236206][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  153.252152][ T5563] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  153.656396][ T5563] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  153.657160][ T5563] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  153.657230][ T5563] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  153.663143][ T5563] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  153.710853][ T5563] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  153.732237][ T5563] usb 4-1: USB disconnect, device number 29
[  154.184334][ T5563] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  154.334265][ T5563] usb 2-1: Using ep0 maxpacket: 32
[  154.350862][ T5563] usb 2-1: config 3 has an invalid interface number: 249 but max is 0
[  154.350893][ T5563] usb 2-1: config 3 has no interface number 0
[  154.350945][ T5563] usb 2-1: config 3 interface 249 has no altsetting 0
[  154.376576][ T5563] usb 2-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=bf.24
[  154.376609][ T5563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.376632][ T5563] usb 2-1: Product: syz
[  154.376647][ T5563] usb 2-1: Manufacturer: syz
[  154.376663][ T5563] usb 2-1: SerialNumber: syz
[  154.447457][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  154.757185][ T5563] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  154.775068][ T5563] usb 2-1: USB disconnect, device number 25
[  154.920429][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO
[  154.920802][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  154.920834][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  154.921403][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  154.985564][ T5893] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  154.995157][ T5893] usb 3-1: USB disconnect, device number 20
[  155.206551][ T6429] fuse: fd is not a fuse device
[  155.315746][ T5563] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  155.454375][ T5959] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  155.474266][ T5563] usb 4-1: Using ep0 maxpacket: 32
[  155.477550][ T5563] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.477578][ T5563] usb 4-1: config 0 has no interfaces?
[  155.477611][ T5563] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  155.477638][ T5563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.499098][ T5563] usb 4-1: config 0 descriptor??
[  155.644346][ T5959] usb 2-1: Using ep0 maxpacket: 32
[  155.646936][ T5959] usb 2-1: unable to get BOS descriptor or descriptor too short
[  155.653675][ T5959] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  155.653708][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.653730][ T5959] usb 2-1: Product: 岦굳虫ㅺ㯊呝幗蟥粅蓢复㱔麅┓問ꨞ횝͋謥낡Ҙ笂လ㞪姿౭剺혓轛ᗘ䑟␞훡츝豎崘磦봮冪詂஁辚尡ᠤꮼ侶઼쵯酐揥칦칪䙱媩䓦䴠욹沰ࠟ숧讣醴ⵡ鎑걶寇纹簳뉄評䓅嫡๨閦ꌭ鏗펻ᬢ䃦ࢇ
[  155.653756][ T5959] usb 2-1: Manufacturer: и
[  155.713340][ T5959] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc
[  155.864426][ T5893] usb 3-1: new low-speed USB device number 21 using dummy_hcd
[  155.908210][ T6429] netlink: set zone limit has 4 unknown bytes
[  155.910453][ T5959] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  155.971232][ T5959] usb 2-1: USB disconnect, device number 26
[  156.023029][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  156.023067][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  156.023106][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  156.023170][ T5893] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  156.023197][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.143199][ T5893] usb 3-1: config 0 descriptor??
[  156.145571][ T6431] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  156.171608][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.596353][ T6431] Mount JFS Failure: -5
[  156.596370][ T6431] jfs_mount failed w/return code = -5
[  156.656299][ T5893] usbhid 3-1:0.0: can't add hid device: -71
[  156.656448][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  156.699577][ T5893] usb 3-1: USB disconnect, device number 21
[  156.745947][ T5969] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  156.884474][ T5969] usb 2-1: device descriptor read/64, error -71
[  157.124382][ T5969] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  157.254415][ T5969] usb 2-1: device descriptor read/64, error -71
[  157.366241][ T5969] usb usb2-port1: attempt power cycle
[  157.566677][ T6445] syzkaller0: entered promiscuous mode
[  157.566696][ T6445] syzkaller0: entered allmulticast mode
[  157.704402][ T5969] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  157.725572][ T5969] usb 2-1: device descriptor read/8, error -71
[  157.964401][ T5969] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  157.988860][ T5969] usb 2-1: device descriptor read/8, error -71
[  158.088935][ T5959] usb 4-1: USB disconnect, device number 30
[  158.095550][ T5969] usb usb2-port1: unable to enumerate USB device
[  158.318116][ T6457] fuse: fd is not a fuse device
[  158.554389][ T5959] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  158.725165][ T5959] usb 4-1: Using ep0 maxpacket: 32
[  158.730208][ T5959] usb 4-1: unable to get BOS descriptor or descriptor too short
[  158.749833][ T5959] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  158.749864][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.749883][ T5959] usb 4-1: Product: 岦굳虫ㅺ㯊呝幗蟥粅蓢复㱔麅┓問ꨞ횝͋謥낡Ҙ笂လ㞪姿౭剺혓轛ᗘ䑟␞훡츝豎崘磦봮冪詂஁辚尡ᠤꮼ侶઼쵯酐揥칦칪䙱媩䓦䴠욹沰ࠟ숧讣醴ⵡ鎑걶寇纹簳뉄評䓅嫡๨閦ꌭ鏗펻ᬢ䃦ࢇ
[  158.749908][ T5959] usb 4-1: Manufacturer: и
[  158.800864][ T5959] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc
[  158.973696][ T6457] netlink: set zone limit has 4 unknown bytes
[  158.977451][ T5959] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  159.029536][ T5959] usb 4-1: USB disconnect, device number 31
[  159.080105][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  159.945128][ T5563] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  160.104696][ T5563] usb 4-1: Using ep0 maxpacket: 32
[  160.108937][ T5563] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.108963][ T5563] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  160.108998][ T5563] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  160.109020][ T5563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.130076][ T5563] usb 4-1: config 0 descriptor??
[  160.924411][ T6493] fuse: fd is not a fuse device
[  161.007116][ T5146] Bluetooth: Unexpected continuation frame (len 4)
[  161.182614][ T5959] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  161.244415][  T821] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  161.344394][ T5959] usb 2-1: Using ep0 maxpacket: 32
[  161.347586][ T5959] usb 2-1: unable to get BOS descriptor or descriptor too short
[  161.351468][ T5959] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  161.351498][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.351519][ T5959] usb 2-1: Product: ࠓ
[  161.351534][ T5959] usb 2-1: Manufacturer: и
[  161.351550][ T5959] usb 2-1: SerialNumber: syz
[  161.377638][ T5959] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc
[  161.425319][  T821] usb 3-1: Using ep0 maxpacket: 32
[  161.435165][  T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  161.435201][  T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  161.463888][  T821] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  161.463920][  T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.463940][  T821] usb 3-1: Product: syz
[  161.463955][  T821] usb 3-1: Manufacturer: syz
[  161.463969][  T821] usb 3-1: SerialNumber: syz
[  161.508362][  T821] usb 3-1: config 0 descriptor??
[  161.560147][  T821] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  161.570065][ T6499] netlink: 'syz.0.196': attribute type 4 has an invalid length.
[  161.610574][ T6493] netlink: set zone limit has 4 unknown bytes
[  161.659190][ T5959] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  161.714489][   T90] usb 3-1: Failed to submit usb control message: -71
[  161.714533][   T90] usb 3-1: unable to send the bmi data to the device: -71
[  161.714552][   T90] usb 3-1: unable to get target info from device
[  161.714568][   T90] usb 3-1: could not get target info (-71)
[  161.714839][   T90] usb 3-1: could not probe fw (-71)
[  161.747564][ T5563] usb 3-1: USB disconnect, device number 22
[  161.801813][ T5959] usb 2-1: USB disconnect, device number 31
[  162.544405][ T5871] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  162.697043][ T5871] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  162.697087][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.702620][ T5871] usb 3-1: config 0 descriptor??
[  162.746542][ T6516] program syz.1.200 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  162.797013][   T38] audit: type=1326 audit(2000000051.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.200" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc562d9cdd9 code=0x0
[  162.827113][ T5969] usb 4-1: USB disconnect, device number 32
[  163.570422][ T6526] overlayfs: failed to resolve './cgroup': -2
[  163.726350][ T6530] fuse: fd is not a fuse device
[  163.728914][ T6530] netlink: set zone limit has 4 unknown bytes
[  163.969842][ T5871] usb 3-1: Cannot set autoneg
[  163.970165][ T5871] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  163.995696][ T5871] usb 3-1: USB disconnect, device number 23
[  164.331108][ T6539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'.
[  164.824307][   T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  164.966166][ T6561] overlayfs: failed to resolve './cgroup': -2
[  164.986283][   T10] usb 2-1: Using ep0 maxpacket: 32
[  165.000029][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.000056][   T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  165.000091][   T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  165.000114][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.025620][   T10] usb 2-1: config 0 descriptor??
[  165.143113][ T6567] netlink: 156 bytes leftover after parsing attributes in process `syz.2.215'.
[  165.450714][ T6572] fuse: fd is not a fuse device
[  165.862799][ T6582] fuse: fd is not a fuse device
[  166.821702][ T6589] fuse: fd is not a fuse device
[  166.910532][ T6591] overlayfs: failed to resolve './cgroup': -2
[  167.023695][ T6593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.095840][ T5146] Bluetooth: hci3: command tx timeout
[  167.542577][   T10] usb 2-1: USB disconnect, device number 32
[  167.709942][ T6597] netlink: 'syz.3.227': attribute type 4 has an invalid length.
[  168.004290][   T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  168.140472][ T6599] EXT4-fs: Conflicting test_dummy_encryption options
[  168.141955][ T5146] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff
[  168.164676][   T10] usb 2-1: Using ep0 maxpacket: 32
[  168.177614][   T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  168.177642][   T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  168.177701][   T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  168.213685][   T10] usb 2-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice=ea.3f
[  168.213717][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.213737][   T10] usb 2-1: Product: syz
[  168.213747][   T10] usb 2-1: Manufacturer: syz
[  168.213756][   T10] usb 2-1: SerialNumber: syz
[  168.269061][   T10] usb 2-1: BAAD MICROPHONE c_chmask mismatch
[  168.588736][   T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  168.608882][   T10] usb 2-1: selecting invalid altsetting 1
[  168.608908][   T10] snd-usb-caiaq 2-1:1.0: can't set alt interface.
[  168.608924][   T10] usb 2-1: unable to init card! (ret=-5)
[  168.609883][   T10] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  168.631101][   T10] usb 2-1: selecting invalid altsetting 1
[  168.631123][   T10] snd-usb-caiaq 2-1:1.1: can't set alt interface.
[  168.631138][   T10] usb 2-1: unable to init card! (ret=-5)
[  168.635315][   T10] snd-usb-caiaq 2-1:1.1: probe with driver snd-usb-caiaq failed with error -5
[  168.651130][   T10] usb 2-1: USB disconnect, device number 33
[  168.721801][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.535409][ T6631] fuse: fd is not a fuse device
[  169.714557][ T6636] overlayfs: workdir and upperdir must reside under the same mount
[  169.766950][ T6640] netlink: 9 bytes leftover after parsing attributes in process `syz.3.246'.
[  169.784312][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  169.804978][ T6640] gretap0: entered promiscuous mode
[  169.934414][   T10] usb 3-1: Using ep0 maxpacket: 32
[  169.945037][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  169.981161][   T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  169.981196][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.981219][   T10] usb 3-1: Manufacturer: и
[  169.981233][   T10] usb 3-1: SerialNumber: syz
[  170.028349][   T10] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc
[  170.200402][ T6631] netlink: set zone limit has 4 unknown bytes
[  170.202298][   T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  170.287909][   T10] usb 3-1: USB disconnect, device number 24
[  170.295789][ T5959] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  170.347500][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.446655][ T5959] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.446687][ T5959] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  170.447915][ T5959] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  170.447943][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  170.447955][ T5959] usb 2-1: SerialNumber: syz
[  170.681539][ T5959] usb 2-1: 0:2 : does not exist
[  170.833001][ T5959] usb 2-1: USB disconnect, device number 34
[  170.913522][ T6654] fuse: fd is not a fuse device
[  170.944981][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  171.094535][  T821] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  171.244603][  T821] usb 3-1: Using ep0 maxpacket: 8
[  171.250270][  T821] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  171.250304][  T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.250326][  T821] usb 3-1: Product: syz
[  171.250342][  T821] usb 3-1: Manufacturer: syz
[  171.250367][  T821] usb 3-1: SerialNumber: syz
[  171.258034][  T821] usb 3-1: config 0 descriptor??
[  171.303639][  T821] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  171.798951][ T6659] kvm: kvm [6658]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff
[  171.867065][ T6661] kvm: kvm [6658]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x8000000000000
[  171.946252][ T6664] overlayfs: workdir and upperdir must reside under the same mount
[  172.019822][ T6666] trusted_key: syz.2.252 sent an empty control message without MSG_MORE.
[  172.219977][  T821] gspca_sonixj: reg_w1 err -110
[  172.220091][  T821] sonixj 3-1:0.0: probe with driver sonixj failed with error -110
[  172.593752][ T6677] fuse: fd is not a fuse device
[  172.616817][ T6677] netlink: set zone limit has 4 unknown bytes
[  172.631625][ T5969] usb 3-1: USB disconnect, device number 25
[  172.984404][  T821] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  173.114289][  T821] usb 2-1: device descriptor read/64, error -71
[  173.354277][  T821] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  173.495917][  T821] usb 2-1: device descriptor read/64, error -71
[  173.608726][  T821] usb usb2-port1: attempt power cycle
[  173.761414][ T5871] IPVS: starting estimator thread 0...
[  173.854486][ T6704] IPVS: using max 8 ests per chain, 19200 per kthread
[  173.954287][  T821] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  173.980276][  T821] usb 2-1: device descriptor read/8, error -71
[  174.037727][ T6713] fuse: fd is not a fuse device
[  174.224287][  T821] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  174.245459][  T821] usb 2-1: device descriptor read/8, error -71
[  174.295875][ T5871] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  174.354852][  T821] usb usb2-port1: unable to enumerate USB device
[  174.444472][ T5871] usb 3-1: Using ep0 maxpacket: 32
[  174.447481][ T5871] usb 3-1: unable to get BOS descriptor or descriptor too short
[  174.450902][ T5871] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  174.450933][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.450951][ T5871] usb 3-1: Product: syz
[  174.450960][ T5871] usb 3-1: Manufacturer: ࠓ
[  174.450969][ T5871] usb 3-1: SerialNumber: syz
[  174.529256][ T5871] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc
[  174.704732][ T6713] netlink: set zone limit has 4 unknown bytes
[  174.709393][ T5871] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  174.847200][ T5871] usb 3-1: USB disconnect, device number 26
[  174.895858][ T6726] comedi comedi3: comedi_config --init_data is deprecated
[  174.982283][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  175.186388][ T6734] netlink: 'syz.3.277': attribute type 1 has an invalid length.
[  175.186403][ T6734] netlink: 'syz.3.277': attribute type 2 has an invalid length.
[  175.306132][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'.
[  175.828075][ T6745] netlink: 'syz.3.280': attribute type 1 has an invalid length.
[  175.828100][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'.
[  176.012918][ T6751] netlink: 9 bytes leftover after parsing attributes in process `syz.1.282'.
[  176.123441][ T6754] netlink: 5 bytes leftover after parsing attributes in process `syz.1.282'.
[  176.147432][ T6751] gretap0: entered promiscuous mode
[  176.178350][ T6754] 0��{X��: renamed from gretap0
[  176.210451][ T6754] 0��{X��: left promiscuous mode
[  176.210481][ T6754] 0��{X��: entered allmulticast mode
[  176.246862][ T6754] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  176.664903][ T5959] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  176.779195][ T6760] fuse: fd is not a fuse device
[  176.814982][ T5959] usb 2-1: Using ep0 maxpacket: 8
[  176.817209][ T5959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.821038][ T5959] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  176.821071][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  176.821093][ T5959] usb 2-1: Product: syz
[  176.821109][ T5959] usb 2-1: Manufacturer: syz
[  176.821125][ T5959] usb 2-1: SerialNumber: syz
[  176.831418][ T5959] usb 2-1: config 0 descriptor??
[  176.850028][ T5959] imon_raw 2-1:0.0: IR endpoint missing
[  177.014516][   T32] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  177.123411][  T821] usb 2-1: USB disconnect, device number 39
[  177.165046][   T32] usb 3-1: Using ep0 maxpacket: 32
[  177.167721][   T32] usb 3-1: unable to get BOS descriptor or descriptor too short
[  177.187262][   T32] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  177.187284][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.187296][   T32] usb 3-1: Product: syz
[  177.187306][   T32] usb 3-1: Manufacturer: ࠓ
[  177.187314][   T32] usb 3-1: SerialNumber: syz
[  177.230734][   T32] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc
[  177.428340][ T6760] netlink: set zone limit has 4 unknown bytes
[  177.430487][   T32] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  177.516265][   T32] usb 3-1: USB disconnect, device number 27
[  177.587669][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  177.924359][  T821] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  178.084595][  T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.084627][  T821] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  178.084669][  T821] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  178.084693][  T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.137619][  T821] usb 2-1: config 0 descriptor??
[  178.694426][   T10] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  178.846194][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  178.846236][   T10] usb 3-1: config 0 has no interface number 0
[  178.846286][   T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  178.846312][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.849661][   T10] usb 3-1: config 0 descriptor??
[  178.868891][   T10] usb 3-1: selecting invalid altsetting 1
[  178.870910][   T10] dvb_ttusb_budget: ttusb_init_controller: error
[  178.870929][   T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  178.963912][   T10] DVB: Unable to find symbol cx22700_attach()
[  179.000308][   T10] DVB: Unable to find symbol tda10046_attach()
[  179.000321][   T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  179.058166][  T821] usb 3-1: USB disconnect, device number 28
[  180.034355][   T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  180.184211][   T10] usb 3-1: Using ep0 maxpacket: 32
[  180.186486][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  180.186531][   T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  180.186555][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.190296][   T10] usb 3-1: config 0 descriptor??
[  180.695088][   T32] usb 2-1: USB disconnect, device number 40
[  180.770993][ T6792] fuse: fd is not a fuse device
[  181.095462][   T32] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  181.244262][   T32] usb 2-1: Using ep0 maxpacket: 32
[  181.250033][   T32] usb 2-1: unable to get BOS descriptor or descriptor too short
[  181.257963][   T32] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  181.257995][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.258016][   T32] usb 2-1: Product: syz
[  181.258030][   T32] usb 2-1: Manufacturer: ࠓ
[  181.258043][   T32] usb 2-1: SerialNumber: syz
[  181.322863][   T32] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc
[  181.363770][ T6797] netlink: 666 bytes leftover after parsing attributes in process `syz.0.300'.
[  181.493069][   T38] audit: type=1326 audit(2000000069.930:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc98b1cdd9 code=0x0
[  181.512413][ T6792] netlink: set zone limit has 4 unknown bytes
[  181.524919][   T32] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  181.596223][   T32] usb 2-1: USB disconnect, device number 41
[  181.654290][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.774665][   T32] usb 3-1: USB disconnect, device number 29
[  183.150102][ T6823] netlink: 56 bytes leftover after parsing attributes in process `syz.3.309'.
[  183.203082][ T6825] fuse: fd is not a fuse device
[  183.234324][   T32] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  183.364320][   T32] usb 3-1: device descriptor read/64, error -71
[  183.444583][ T5892] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  183.594311][ T5892] usb 2-1: Using ep0 maxpacket: 32
[  183.598840][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short
[  183.605345][   T32] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  183.626954][ T5892] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  183.626985][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.627004][ T5892] usb 2-1: Product: ࠓ
[  183.627013][ T5892] usb 2-1: SerialNumber: syz
[  183.646013][ T5892] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc
[  183.734576][   T32] usb 3-1: device descriptor read/64, error -71
[  183.836576][ T6825] netlink: set zone limit has 4 unknown bytes
[  183.838423][ T5892] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  183.853854][   T32] usb usb3-port1: attempt power cycle
[  183.890026][ T5892] usb 2-1: USB disconnect, device number 42
[  183.956156][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.194359][   T32] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  184.216148][   T32] usb 3-1: device descriptor read/8, error -71
[  184.402972][ T6841] overlayfs: workdir and upperdir must be separate subtrees
[  184.454611][   T32] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  184.461419][   T38] audit: type=1326 audit(2000000072.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc562d9cdd9 code=0x0
[  184.475163][   T32] usb 3-1: device descriptor read/8, error -71
[  184.585220][   T32] usb usb3-port1: unable to enumerate USB device
[  185.664258][   T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  185.814325][   T10] usb 2-1: Using ep0 maxpacket: 32
[  185.816833][   T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  185.816867][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.824350][   T10] usb 2-1: config 0 descriptor??
[  186.058987][ T6860] fuse: fd is not a fuse device
[  186.062518][ T6860] netlink: set zone limit has 4 unknown bytes
[  186.066870][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  186.106229][   T10] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  186.106263][   T10] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  186.291408][ T5959] kernel read not supported for file /vcs (pid: 5959 comm: kworker/0:6)
[  186.748138][ T6865] netlink: 48 bytes leftover after parsing attributes in process `syz.3.328'.
[  187.524380][ T5959] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  187.674450][ T5959] usb 3-1: Using ep0 maxpacket: 16
[  187.676185][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.676207][ T5959] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  187.676233][ T5959] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  187.676248][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.680379][ T5959] usb 3-1: config 0 descriptor??
[  188.109099][ T5959] HID 045e:07da: Invalid code 65791 type 1
[  188.113775][ T5959] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input13
[  188.262489][ T5959] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  188.907308][ T5959] usb 3-1: USB disconnect, device number 34
[  189.114014][ T6888] netlink: 'syz.0.334': attribute type 27 has an invalid length.
[  189.126811][ T6888] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  189.527374][ T6896] fuse: fd is not a fuse device
[  189.784476][ T5959] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  189.945570][ T5959] usb 3-1: Using ep0 maxpacket: 32
[  189.949476][ T5959] usb 3-1: unable to get BOS descriptor or descriptor too short
[  189.981707][ T5959] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  189.982003][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.982028][ T5959] usb 3-1: Product: ࠓ
[  189.982043][ T5959] usb 3-1: SerialNumber: syz
[  190.043660][ T5959] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc
[  190.222754][ T6896] netlink: set zone limit has 4 unknown bytes
[  190.227871][ T5959] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  190.374774][ T5959] usb 3-1: USB disconnect, device number 35
[  190.496125][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  190.539374][ T6914] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.343'.
[  190.666549][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[  190.708685][ T6918] netlink: 188 bytes leftover after parsing attributes in process `syz.0.345'.
[  191.154331][   T32] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  191.304317][   T32] usb 3-1: Using ep0 maxpacket: 32
[  191.307791][   T32] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  191.307825][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.313107][   T32] usb 3-1: config 0 descriptor??
[  191.537251][   T32] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  193.037239][ T6947] fuse: fd is not a fuse device
[  193.040225][ T6947] netlink: set zone limit has 4 unknown bytes
[  194.435422][ T6973] fuse: fd is not a fuse device
[  194.437248][ T6973] netlink: set zone limit has 4 unknown bytes
[  194.548179][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  194.548292][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  196.426319][ T6996] fuse: fd is not a fuse device
[  196.428888][ T6996] netlink: set zone limit has 4 unknown bytes
[  197.093471][ T7006] netlink: 44 bytes leftover after parsing attributes in process `syz.3.383'.
[  197.155223][ T7006] netlink: 32 bytes leftover after parsing attributes in process `syz.3.383'.
[  197.961591][ T7016] fuse: fd is not a fuse device
[  197.963427][ T7016] netlink: set zone limit has 4 unknown bytes
[  200.247283][ T7037] fuse: fd is not a fuse device
[  200.248953][ T7037] netlink: set zone limit has 4 unknown bytes
[  200.828978][ T7041] fuse: fd is not a fuse device
[  201.922589][ T7047] netlink: 156 bytes leftover after parsing attributes in process `syz.3.402'.
[  202.645455][ T7053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.405'.
[  202.682625][ T7055] fuse: fd is not a fuse device
[  205.578600][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'.
[  207.115031][ T7096] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.115054][ T7096] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.164033][ T7096] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.164055][ T7096] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.983958][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'.
[  208.038722][ T7106] fuse: fd is not a fuse device
[  208.999749][   T38] audit: type=1400 audit(2000000097.450:6): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=7122 comm="syz.2.435"
[  209.741965][ T7133] fuse: fd is not a fuse device
[  211.974594][ T7134] Bluetooth: hci2: command 0x0406 tx timeout
[  212.058399][ T7134] Bluetooth: hci1: command 0x0406 tx timeout
[  212.125597][ T5146] Bluetooth: hci0: command 0x0406 tx timeout
[  212.295593][ T7156] fuse: fd is not a fuse device
[  214.111667][ T7177] overlayfs: failed to clone upperpath
[  214.852157][ T7185] fuse: fd is not a fuse device
[  215.460664][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.462'.
[  216.115365][ T7196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.465'.
[  217.251816][ T7206] fuse: fd is not a fuse device
[  218.448826][ T7220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.526421][ T7222] netlink: 'syz.2.475': attribute type 10 has an invalid length.
[  218.526446][ T7222] netlink: 2 bytes leftover after parsing attributes in process `syz.2.475'.
[  218.526968][ T7222] bond0: entered promiscuous mode
[  218.527007][ T7222] bond_slave_0: entered promiscuous mode
[  218.528189][ T7222] bond_slave_1: entered promiscuous mode
[  218.528913][ T7222] bridge0: port 3(bond0) entered blocking state
[  218.529234][ T7222] bridge0: port 3(bond0) entered disabled state
[  218.530150][ T7222] bond0: entered allmulticast mode
[  218.530166][ T7222] bond_slave_0: entered allmulticast mode
[  218.530189][ T7222] bond_slave_1: entered allmulticast mode
[  218.552572][ T7222] bridge0: port 3(bond0) entered blocking state
[  218.553000][ T7222] bridge0: port 3(bond0) entered forwarding state
[  219.047827][ T7230] fuse: fd is not a fuse device
[  220.829610][ T7246] netlink: 'syz.3.487': attribute type 21 has an invalid length.
[  220.829631][ T7246] IPv6: NLM_F_CREATE should be specified when creating new route
[  220.830219][ T7246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  220.830228][ T7246] IPv6: NLM_F_CREATE should be set when creating new route
[  220.830330][ T7246] IPv6: NLM_F_CREATE should be set when creating new route
[  220.830366][ T7246] IPv6: NLM_F_CREATE should be set when creating new route
[  220.906300][ T7249] netlink: 'syz.3.488': attribute type 28 has an invalid length.
[  220.908980][ T7249] netlink: 'syz.3.488': attribute type 4 has an invalid length.
[  221.522256][ T7253] fuse: fd is not a fuse device
[  222.152878][ T7259] overlayfs: overlapping lowerdir path
[  222.317569][ T7264] tmpfs: Bad value for 'nr_inodes'
[  223.030013][ T7274] fuse: fd is not a fuse device
[  224.657067][ T7291] fuse: fd is not a fuse device
[  225.296312][ T7301] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  225.720257][ T5871] kernel read not supported for file /vcs (pid: 5871 comm: kworker/1:3)
[  226.030482][ T7317] ceph: Path missing in source
[  226.863215][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'.
[  227.120481][ T7337] fuse: fd is not a fuse device
[  228.317728][   T38] audit: type=1326 audit(2000000116.780:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.2.532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f733232cdd9 code=0x0
[  229.231452][ T7367] loop4: detected capacity change from 0 to 7
[  229.280221][    C1] blk_print_req_error: 15 callbacks suppressed
[  229.280247][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.280282][    C1] buffer_io_error: 15 callbacks suppressed
[  229.280295][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  229.300276][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.300311][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  229.347527][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.347563][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  229.352926][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.352961][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  229.353295][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.353329][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  229.410614][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.410646][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  229.411863][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.411897][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  229.412083][ T7367] ldm_validate_partition_table(): Disk read failed.
[  229.412806][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.412838][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  229.413097][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.413126][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  229.413292][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.413320][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  229.414008][ T7367] Dev loop4: unable to read RDB block 0
[  229.417414][ T7367]  loop4: unable to read partition table
[  229.417645][ T7367] loop4: partition table beyond EOD, truncated
[  229.417673][ T7367] loop_reread_partitions: partition scan of loop4 (���������C�j̖�P=�	) failed (rc=-5)
[  229.667084][ T7372] delete_channel: no stack
[  229.667757][ T7372] delete_channel: no stack
[  229.853979][ T7374] overlayfs: failed to resolve 'func=FILE_CHECK': -2
[  229.967551][ T7376] binder: Unknown parameter 'uid>00000000000000000000'
[  232.212388][ T7402] fuse: fd is not a fuse device
[  232.807127][ T7408] capability: warning: `syz.3.553' uses 32-bit capabilities (legacy support in use)
[  233.290772][ T7411] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  233.290799][ T7411] overlayfs: failed to set xattr on upper
[  233.290804][ T7411] overlayfs: ...falling back to redirect_dir=nofollow.
[  233.290810][ T7411] overlayfs: ...falling back to uuid=null.
[  233.290849][ T7411] overlayfs: conflicting lowerdir path
[  234.890447][ T7425] fuse: fd is not a fuse device
[  236.929211][ T7442] virt_wifi0 speed is unknown, defaulting to 1000
[  236.929856][ T7442] virt_wifi0 speed is unknown, defaulting to 1000
[  237.019671][ T7442] virt_wifi0 speed is unknown, defaulting to 1000
[  237.044912][ T7442] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  237.044956][ T7442] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  237.044998][ T7442] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  237.045106][ T7444] fuse: fd is not a fuse device
[  237.080526][ T7442] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  237.113112][ T7442] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  237.208803][ T7442] virt_wifi0 speed is unknown, defaulting to 1000
[  237.211237][ T7442] virt_wifi0 speed is unknown, defaulting to 1000
[  237.213395][ T7442] virt_wifi0 speed is unknown, defaulting to 1000
[  237.222370][ T7442] virt_wifi0 speed is unknown, defaulting to 1000
[  238.868761][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.581'.
[  240.136666][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'.
[  240.157849][ T7482] binder: 7481:7482 ioctl c0306201 2000000007c0 returned -14
[  240.540550][   T60] Bluetooth: hci3: unexpected cc 0x0c5b length: 2 > 1
[  240.693402][ T7490] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  241.938476][ T7514] fuse: fd is not a fuse device
[  242.034368][ T7509] syz.2.594 (7509) used greatest stack depth: 17880 bytes left
[  243.413198][ T7564] overlayfs: failed to clone lowerpath
[  243.587618][ T7569] Invalid ELF header magic: != ELF
[  243.605641][ T7569] netlink: 'syz.3.609': attribute type 25 has an invalid length.
[  243.605665][ T7569] netlink: 'syz.3.609': attribute type 1 has an invalid length.
[  243.605806][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.801081][ T7575] fuse: fd is not a fuse device
[  246.226710][ T7663] netlink: 'syz.2.624': attribute type 4 has an invalid length.
[  246.300803][ T7665] netlink: 4432 bytes leftover after parsing attributes in process `syz.2.625'.
[  247.044803][   T60] Bluetooth: hci3: Malformed LE Event: 0x0d
[  247.300994][ T5871] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  247.302582][ T5871] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  247.303109][ T5871] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  247.309336][ T5871] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  247.309370][ T5871] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  247.309396][ T5871] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  247.309423][ T5871] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  247.309458][ T5871] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  247.309485][ T5871] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  247.309510][ T5871] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  247.599296][ T5871] hid-generic 0006:0004:0009.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  248.722855][ T7705] fuse: fd is not a fuse device
[  248.741290][ T7705] overlayfs: failed to clone lowerpath
[  249.706191][   T60] Bluetooth: hci2: unexpected event for opcode 0x2039
[  250.897288][   T32] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  250.897388][   T32] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2
[  250.922208][   T32] usb 3-1: USB disconnect, device number 36
[  250.990824][   T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  250.990912][   T10] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  251.034241][   T10] usb 2-1: USB disconnect, device number 43
[  251.284622][   T32] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  251.438864][   T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.438929][   T32] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  251.438948][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.454255][   T32] usb 3-1: config 0 descriptor??
[  251.506917][   T32] pwc: Askey VC010 type 2 USB webcam detected.
[  251.738031][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.653'.
[  251.902456][   T32] pwc: recv_control_msg error -32 req 02 val 2b00
[  251.903480][   T32] pwc: recv_control_msg error -32 req 02 val 2700
[  251.904777][   T32] pwc: recv_control_msg error -32 req 02 val 2c00
[  251.905812][   T32] pwc: recv_control_msg error -32 req 04 val 1000
[  251.906690][   T32] pwc: recv_control_msg error -32 req 04 val 1300
[  251.908891][   T32] pwc: recv_control_msg error -32 req 04 val 1400
[  251.910035][   T32] pwc: recv_control_msg error -32 req 02 val 2000
[  251.911269][   T32] pwc: recv_control_msg error -32 req 02 val 2100
[  251.912020][   T32] pwc: recv_control_msg error -32 req 04 val 1500
[  251.912705][   T32] pwc: recv_control_msg error -32 req 02 val 2500
[  251.913548][   T32] pwc: recv_control_msg error -32 req 02 val 2400
[  251.914729][   T32] pwc: recv_control_msg error -32 req 02 val 2600
[  252.553600][ T7715] netlink: 'syz.2.642': attribute type 12 has an invalid length.
[  252.584825][ T5871] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  252.754912][ T5871] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  252.755332][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.755359][ T5871] usb 2-1: Product: syz
[  252.755374][ T5871] usb 2-1: Manufacturer: syz
[  252.755388][ T5871] usb 2-1: SerialNumber: syz
[  253.146621][ T7772] ������: renamed from vlan0 (while UP)
[  253.243222][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  253.243278][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  253.863702][   T32] pwc: recv_control_msg error -71 req 02 val 2800
[  253.866949][   T32] pwc: recv_control_msg error -71 req 04 val 1100
[  253.870671][   T32] pwc: recv_control_msg error -71 req 04 val 1200
[  253.990460][   T32] pwc: Registered as video103.
[  254.163276][   T32] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15
[  254.264478][ T7780] 9p: Bad value for 'trans'
[  254.340404][   T32] usb 3-1: USB disconnect, device number 37
[  254.503577][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  254.937664][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  254.938075][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  254.938109][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  254.938729][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  254.956995][ T5871] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  254.972144][ T5871] usb 2-1: USB disconnect, device number 44
[  255.204296][   T32] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  255.354337][   T32] usb 3-1: Using ep0 maxpacket: 32
[  255.356651][   T32] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  255.356683][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.363321][   T32] usb 3-1: config 0 descriptor??
[  255.610798][   T32] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  255.648782][   T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  255.651115][   T32] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  255.651172][   T32] usb 3-1: media controller created
[  255.691875][   T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  255.843605][ T7792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'.
[  255.857330][ T7792] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  255.953755][   T32] az6027: usb out operation failed. (-71)
[  255.959554][   T32] az6027: usb out operation failed. (-71)
[  255.959581][   T32] stb0899_attach: Driver disabled by Kconfig
[  255.962712][   T32] az6027: no front-end attached
[  255.962712][   T32] 
[  255.963164][   T32] az6027: usb out operation failed. (-71)
[  255.963179][   T32] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  255.981364][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  255.981479][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  255.986236][   T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16
[  256.067776][   T32] dvb-usb: schedule remote query interval to 400 msecs.
[  256.067804][   T32] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  256.081789][   T32] usb 3-1: USB disconnect, device number 38
[  256.352311][ T7798] fuse: fd is not a fuse device
[  256.457122][   T32] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  256.547297][ T7802] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size.
[  257.969220][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'.
[  258.054716][ T5871] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  258.214452][ T5871] usb 3-1: Using ep0 maxpacket: 32
[  258.217769][ T5871] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  258.217804][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.226286][ T5871] usb 3-1: config 0 descriptor??
[  258.294877][ T5835] Bluetooth: hci4: command 0x1003 tx timeout
[  258.294900][   T60] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  258.449026][ T5871] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  258.492744][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  258.493930][ T5871] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  258.493994][ T5871] usb 3-1: media controller created
[  258.512418][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  258.740608][ T5871] az6027: usb out operation failed. (-71)
[  258.742977][ T5871] az6027: usb out operation failed. (-71)
[  258.742998][ T5871] stb0899_attach: Driver disabled by Kconfig
[  258.743008][ T5871] az6027: no front-end attached
[  258.743008][ T5871] 
[  258.743513][ T5871] az6027: usb out operation failed. (-71)
[  258.743529][ T5871] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  258.750786][ T5871] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17
[  258.760304][ T5871] dvb-usb: schedule remote query interval to 400 msecs.
[  258.760327][ T5871] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  258.800160][ T5871] usb 3-1: USB disconnect, device number 39
[  259.000998][ T5871] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  259.014890][   T10] usb 2-1: new low-speed USB device number 45 using dummy_hcd
[  259.207783][   T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  259.207816][   T10] usb 2-1: config 0 has no interface number 0
[  259.207864][   T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  259.207889][   T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  259.207916][   T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  259.208021][   T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  259.208051][   T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  259.208081][   T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  259.208130][   T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  259.208165][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.319538][   T10] usb 2-1: config 0 descriptor??
[  259.323045][ T7833] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  259.323157][ T7833] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  259.362205][   T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  259.484344][ T5871] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  259.560825][   T32] usb 2-1: USB disconnect, device number 45
[  259.578093][   T32] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  259.615437][ T5871] usb 3-1: device descriptor read/64, error -71
[  259.854353][ T5871] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  259.984380][ T5871] usb 3-1: device descriptor read/64, error -71
[  260.096266][ T5871] usb usb3-port1: attempt power cycle
[  260.438477][ T5871] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  260.457690][ T5871] usb 3-1: device descriptor read/8, error -71
[  260.496016][   T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  260.551667][ T7861] overlayfs: failed to clone upperpath
[  260.666736][   T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  260.666771][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.670051][   T10] usb 2-1: config 0 descriptor??
[  260.694775][ T5871] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  260.715545][ T5871] usb 3-1: device descriptor read/8, error -71
[  260.825916][ T5871] usb usb3-port1: unable to enumerate USB device
[  261.603997][   T10] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f
[  261.604030][   T10] hackrf 2-1:0.0: Could not detect board
[  261.605638][   T10] hackrf 2-1:0.0: probe with driver hackrf failed with error -71
[  261.645300][   T10] usb 2-1: USB disconnect, device number 46
[  261.694719][ T7867] Bluetooth: MGMT ver 1.23
[  262.274266][   T32] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  262.426179][   T32] usb 2-1: Using ep0 maxpacket: 32
[  262.429796][   T32] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  262.429827][   T32] usb 2-1: config 0 has no interface number 0
[  262.429880][   T32] usb 2-1: config 0 interface 184 has no altsetting 0
[  262.439954][   T32] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  262.439985][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.440005][   T32] usb 2-1: Product: syz
[  262.440019][   T32] usb 2-1: Manufacturer: syz
[  262.440034][   T32] usb 2-1: SerialNumber: syz
[  262.455236][   T32] usb 2-1: config 0 descriptor??
[  262.645375][ T5871] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  262.666499][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.667123][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.733931][   T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  262.733956][   T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  262.735151][   T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  262.735178][   T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  262.735197][   T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  262.735215][   T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  262.735530][   T32] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  262.751621][   T32] usb 2-1: USB disconnect, device number 47
[  262.817050][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.817087][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.817124][ T5871] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  262.817139][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.854877][ T5871] usb 3-1: config 0 descriptor??
[  263.054212][ T7898] netlink: 196 bytes leftover after parsing attributes in process `syz.0.707'.
[  263.288011][    C1] raw-gadget.1 gadget.2: ignoring, device is not running
[  263.294981][    C1] raw-gadget.1 gadget.2: ignoring, device is not running
[  263.295445][    C1] raw-gadget.1 gadget.2: ignoring, device is not running
[  263.295632][ T5871] usbhid 3-1:0.0: can't add hid device: -32
[  263.295768][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  263.363010][ T5871] usb 3-1: USB disconnect, device number 44
[  263.382251][ T7902] kAFS: No cell specified
[  264.270042][   T60] Bluetooth: hci2: Malformed LE Event: 0x1b
[  264.484350][ T7924] kAFS: No cell specified
[  264.594245][ T5892] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  264.744419][ T5892] usb 2-1: Using ep0 maxpacket: 32
[  264.747150][ T5892] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  264.747184][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.757463][ T5892] usb 2-1: config 0 descriptor??
[  264.963528][ T5892] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  264.991907][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  264.995646][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  264.995703][ T5892] usb 2-1: media controller created
[  265.020237][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  265.169330][ T5892] az6027: usb out operation failed. (-71)
[  265.170546][ T5892] az6027: usb out operation failed. (-71)
[  265.170563][ T5892] stb0899_attach: Driver disabled by Kconfig
[  265.170574][ T5892] az6027: no front-end attached
[  265.170574][ T5892] 
[  265.170997][ T5892] az6027: usb out operation failed. (-71)
[  265.171014][ T5892] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  265.183563][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18
[  265.193324][ T5892] dvb-usb: schedule remote query interval to 400 msecs.
[  265.193360][ T5892] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  265.227759][ T5892] usb 2-1: USB disconnect, device number 48
[  265.495416][ T5892] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  266.055132][   T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  266.214919][   T10] usb 2-1: device descriptor read/64, error -71
[  266.464704][   T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  266.594336][   T10] usb 2-1: device descriptor read/64, error -71
[  266.704664][   T10] usb usb2-port1: attempt power cycle
[  266.960900][ T7948] kAFS: No cell specified
[  267.074387][   T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  267.097474][   T10] usb 2-1: device descriptor read/8, error -71
[  267.354360][ T5959] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  267.356847][   T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  267.378772][   T10] usb 2-1: device descriptor read/8, error -71
[  267.440782][ T7955] netlink: 'syz.3.729': attribute type 5 has an invalid length.
[  267.440798][ T7955] netlink: 'syz.3.729': attribute type 9 has an invalid length.
[  267.497192][   T10] usb usb2-port1: unable to enumerate USB device
[  267.514213][ T5959] usb 3-1: Using ep0 maxpacket: 32
[  267.518665][ T5959] usb 3-1: unable to get BOS descriptor or descriptor too short
[  267.533111][ T5959] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 17, changing to 8
[  267.537192][ T5959] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[  267.537220][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.537240][ T5959] usb 3-1: Product: syz
[  267.537253][ T5959] usb 3-1: Manufacturer: syz
[  267.537266][ T5959] usb 3-1: SerialNumber: syz
[  267.767712][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.768580][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.769920][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.770556][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.812748][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.813437][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.835778][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.836929][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.839920][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.841906][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.239553][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.732'.
[  268.989478][ T7975] kAFS: No cell specified
[  269.135055][ T5959] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  269.135129][ T5959] usb 3-1: MIDIStreaming interface descriptor not found
[  269.135148][ T5959] usb 3-1: too many endpoints
[  269.363403][ T5959] usb 3-1: USB disconnect, device number 45
[  269.728419][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'.
[  269.777569][ T5871] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  269.870580][ T7993] comedi comedi3: mpc624: I/O base address not correctly aligned
[  269.914406][ T5871] usb 2-1: device descriptor read/64, error -71
[  270.105928][ T8002] kAFS: No cell specified
[  270.251143][ T5871] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  270.424264][ T5871] usb 2-1: device descriptor read/64, error -71
[  270.536098][ T5871] usb usb2-port1: attempt power cycle
[  270.874451][ T5871] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  270.896402][ T5871] usb 2-1: device descriptor read/8, error -71
[  271.134335][ T5871] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  271.147462][ T8017] bridge0: entered allmulticast mode
[  271.157767][ T5871] usb 2-1: device descriptor read/8, error -71
[  271.264627][ T5871] usb usb2-port1: unable to enumerate USB device
[  271.274374][ T5892] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  271.439157][ T5892] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  271.439192][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.439212][ T5892] usb 3-1: Product: syz
[  271.439222][ T5892] usb 3-1: Manufacturer: syz
[  271.439231][ T5892] usb 3-1: SerialNumber: syz
[  271.447533][ T5892] usb 3-1: config 0 descriptor??
[  271.489992][ T5892] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  271.896350][ T5892] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19
[  272.114470][ T5896] usb 3-1: USB disconnect, device number 46
[  272.562028][ T8026] kAFS: No cell specified
[  272.604971][ T5896] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  272.764250][ T5896] usb 3-1: Using ep0 maxpacket: 32
[  272.767640][ T5896] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  272.767672][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.773703][ T5896] usb 3-1: config 0 descriptor??
[  272.944399][   T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  272.981093][ T5896] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  272.991891][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  272.993036][ T5896] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  272.993098][ T5896] usb 3-1: media controller created
[  273.029249][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  273.126683][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.126774][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.126801][   T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  273.126816][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.140060][   T10] usb 2-1: config 0 descriptor??
[  273.224208][ T5896] az6027: usb out operation failed. (-71)
[  273.224677][ T5896] az6027: usb out operation failed. (-71)
[  273.224694][ T5896] stb0899_attach: Driver disabled by Kconfig
[  273.224705][ T5896] az6027: no front-end attached
[  273.224705][ T5896] 
[  273.225140][ T5896] az6027: usb out operation failed. (-71)
[  273.225155][ T5896] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  273.276183][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20
[  273.322568][ T5896] dvb-usb: schedule remote query interval to 400 msecs.
[  273.322596][ T5896] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  273.360712][ T5896] usb 3-1: USB disconnect, device number 47
[  273.601985][ T5896] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  273.788777][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  273.788920][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  273.815192][   T10] usb 2-1: USB disconnect, device number 57
[  274.013093][ T8044] overlayfs: failed to resolve './file2': -2
[  274.572792][ T8059] kAFS: No cell specified
[  274.614305][ T5871] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  274.650993][ T8061] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.766'.
[  274.780095][ T5871] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  274.780130][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.780153][ T5871] usb 2-1: Product: syz
[  274.780168][ T5871] usb 2-1: Manufacturer: syz
[  274.780184][ T5871] usb 2-1: SerialNumber: syz
[  275.208344][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  275.208390][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  275.301013][ T8078] netlink: 100 bytes leftover after parsing attributes in process `syz.3.772'.
[  275.374321][ T5563] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  275.524224][ T5563] usb 3-1: Using ep0 maxpacket: 32
[  275.526788][ T5563] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  275.526820][ T5563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.532392][ T5563] usb 3-1: config 0 descriptor??
[  275.752776][ T5563] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  275.771910][ T5563] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  275.773135][ T5563] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  275.773194][ T5563] usb 3-1: media controller created
[  275.801512][ T5563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  275.955637][ T5563] az6027: usb out operation failed. (-71)
[  275.956847][ T5563] az6027: usb out operation failed. (-71)
[  275.956863][ T5563] stb0899_attach: Driver disabled by Kconfig
[  275.956873][ T5563] az6027: no front-end attached
[  275.956873][ T5563] 
[  275.958356][ T5563] az6027: usb out operation failed. (-71)
[  275.958371][ T5563] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  275.989427][ T5563] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21
[  276.022309][ T5563] dvb-usb: schedule remote query interval to 400 msecs.
[  276.022334][ T5563] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  276.040257][ T5563] usb 3-1: USB disconnect, device number 48
[  276.182624][ T5563] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  276.430461][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  276.523965][ T8082] kAFS: No cell specified
[  276.835894][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  276.836939][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  276.837000][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  276.889261][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  276.926798][ T5871] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  276.958092][ T5871] usb 2-1: USB disconnect, device number 58
[  277.509042][ T8106] FAULT_INJECTION: forcing a failure.
[  277.509042][ T8106] name failslab, interval 1, probability 0, space 0, times 0
[  277.509084][ T8106] CPU: 0 UID: 0 PID: 8106 Comm: syz.1.781 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  277.509109][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  277.509122][ T8106] Call Trace:
[  277.509131][ T8106]  <TASK>
[  277.509141][ T8106]  dump_stack_lvl+0xe8/0x150
[  277.509172][ T8106]  should_fail_ex+0x46b/0x600
[  277.509212][ T8106]  should_failslab+0xa8/0x100
[  277.509247][ T8106]  kmem_cache_alloc_lru_noprof+0x8b/0x680
[  277.509279][ T8106]  ? __d_alloc+0x37/0x6f0
[  277.509314][ T8106]  __d_alloc+0x37/0x6f0
[  277.509348][ T8106]  ? __pfx_stack_trace_save+0x10/0x10
[  277.509378][ T8106]  d_alloc_parallel+0xe6/0x1610
[  277.509415][ T8106]  ? save_trace+0x2c4/0x390
[  277.509448][ T8106]  ? lockdep_unlock+0x5d/0xd0
[  277.509477][ T8106]  ? lockdep_unlock+0x5d/0xd0
[  277.509501][ T8106]  ? __lock_acquire+0x146e/0x2cf0
[  277.509534][ T8106]  ? __pfx_d_alloc_parallel+0x10/0x10
[  277.509572][ T8106]  ? __rt_spin_lock_init+0x3e/0x50
[  277.509598][ T8106]  ? __init_waitqueue_head+0xae/0x160
[  277.509630][ T8106]  __lookup_slow+0x152/0x440
[  277.509663][ T8106]  ? __pfx___lookup_slow+0x10/0x10
[  277.509706][ T8106]  ? down_read+0x156/0x200
[  277.509738][ T8106]  ? __pfx_down_read+0x10/0x10
[  277.509772][ T8106]  ? lookup_fast+0x1a3/0x5b0
[  277.509806][ T8106]  lookup_slow+0x53/0x70
[  277.509835][ T8106]  path_lookupat+0x3f5/0x8c0
[  277.509880][ T8106]  filename_lookup+0x256/0x5d0
[  277.509913][ T8106]  ? __pfx_filename_lookup+0x10/0x10
[  277.509975][ T8106]  ? strncpy_from_user+0x150/0x2b0
[  277.510010][ T8106]  ? do_getname+0x151/0x250
[  277.510037][ T8106]  do_fchownat+0xfa/0x250
[  277.510064][ T8106]  ? __pfx_do_fchownat+0x10/0x10
[  277.510087][ T8106]  ? __pfx_ksys_write+0x10/0x10
[  277.510124][ T8106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.510150][ T8106]  __x64_sys_lchown+0x85/0xa0
[  277.510176][ T8106]  do_syscall_64+0x15f/0xf80
[  277.510204][ T8106]  ? trace_irq_disable+0x3b/0x140
[  277.510230][ T8106]  ? clear_bhb_loop+0x40/0x90
[  277.510258][ T8106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.510280][ T8106] RIP: 0033:0x7fc562d9cdd9
[  277.510302][ T8106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.510322][ T8106] RSP: 002b:00007fc560fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[  277.510346][ T8106] RAX: ffffffffffffffda RBX: 00007fc563015fa0 RCX: 00007fc562d9cdd9
[  277.510363][ T8106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  277.510378][ T8106] RBP: 00007fc560fee090 R08: 0000000000000000 R09: 0000000000000000
[  277.510391][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.510405][ T8106] R13: 00007fc563016038 R14: 00007fc563015fa0 R15: 00007ffc97de7188
[  277.510440][ T8106]  </TASK>
[  277.851357][ T8109] kAFS: No cell specified
[  278.234233][ T5871] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  278.384373][ T5871] usb 3-1: Using ep0 maxpacket: 16
[  278.388205][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  278.390624][ T5871] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  278.390654][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.390676][ T5871] usb 3-1: Product: syz
[  278.390692][ T5871] usb 3-1: Manufacturer: syz
[  278.390706][ T5871] usb 3-1: SerialNumber: syz
[  278.442434][ T5871] usb 3-1: config 0 descriptor??
[  278.668339][ T5563] usb 3-1: USB disconnect, device number 49
[  279.250201][ T8126] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  279.549402][ T8134] afs: Unknown parameter 'dy'
[  279.925179][ T5563] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  280.101259][ T5563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.101306][ T5563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.101348][ T5563] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  280.101380][ T5563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.112060][ T5563] usb 2-1: config 0 descriptor??
[  280.565447][ T5563] hid_parser_main: 7 callbacks suppressed
[  280.565475][ T5563] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  280.565507][ T5563] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  280.565533][ T5563] cp2112 0003:10C4:EA90.0005: item fetching failed at offset 6/7
[  280.567153][ T5563] cp2112 0003:10C4:EA90.0005: parse failed
[  280.567320][ T5563] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -22
[  280.633994][ T8150] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  280.643583][ T8150] netlink: 'syz.2.799': attribute type 1 has an invalid length.
[  280.732019][ T5892] usb 2-1: USB disconnect, device number 59
[  281.118329][ T8159] afs: Unknown parameter 'dy'
[  281.671270][ T8174] mmap: syz.1.810 (8174) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  281.864278][ T5563] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  282.014411][ T5563] usb 3-1: Using ep0 maxpacket: 32
[  282.020339][ T5563] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  282.020368][ T5563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.026123][ T5563] usb 3-1: config 0 descriptor??
[  282.266029][ T5563] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  282.269324][ T5563] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  282.270936][ T5563] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  282.270994][ T5563] usb 3-1: media controller created
[  282.304879][ T5563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  282.471572][ T5563] az6027: usb out operation failed. (-71)
[  282.478964][ T5563] az6027: usb out operation failed. (-71)
[  282.478988][ T5563] stb0899_attach: Driver disabled by Kconfig
[  282.479000][ T5563] az6027: no front-end attached
[  282.479000][ T5563] 
[  282.479425][ T5563] az6027: usb out operation failed. (-71)
[  282.479439][ T5563] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  282.496732][ T5563] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22
[  282.499701][ T5563] dvb-usb: schedule remote query interval to 400 msecs.
[  282.499723][ T5563] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  282.507223][ T5563] usb 3-1: USB disconnect, device number 50
[  282.551538][ T8180] afs: Unknown parameter 'dy'
[  282.752866][ T5563] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  282.954259][ T5892] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  283.042707][ T8187] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  283.106372][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.106413][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.106454][ T5892] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  283.106479][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.157159][ T5892] usb 2-1: config 0 descriptor??
[  283.404321][  T821] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  283.572735][  T821] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  283.588816][  T821] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  283.588851][  T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.588873][  T821] usb 3-1: Product: syz
[  283.588889][  T821] usb 3-1: Manufacturer: syz
[  283.588905][  T821] usb 3-1: SerialNumber: syz
[  283.635013][ T5892] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  283.635054][ T5892] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  283.635079][ T5892] cp2112 0003:10C4:EA90.0006: item fetching failed at offset 6/7
[  283.641339][  T821] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  283.694754][ T5892] cp2112 0003:10C4:EA90.0006: parse failed
[  283.694894][ T5892] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -22
[  283.789404][ T5563] usb 2-1: USB disconnect, device number 60
[  283.874367][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.875046][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.878494][ T8200] overlayfs: failed to resolve './file1': -2
[  284.154828][ T8201] netlink: 'syz.2.816': attribute type 5 has an invalid length.
[  284.459788][  T821] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  284.720554][ T8217] comedi comedi3: 8255: I/O base address not correctly aligned
[  285.213290][ T8224] FAULT_INJECTION: forcing a failure.
[  285.213290][ T8224] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  285.213332][ T8224] CPU: 1 UID: 0 PID: 8224 Comm: syz.1.827 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  285.213357][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  285.213370][ T8224] Call Trace:
[  285.213378][ T8224]  <TASK>
[  285.213387][ T8224]  dump_stack_lvl+0xe8/0x150
[  285.213419][ T8224]  should_fail_ex+0x46b/0x600
[  285.213457][ T8224]  prepare_alloc_pages+0x22a/0x6b0
[  285.213500][ T8224]  __alloc_frozen_pages_noprof+0x12f/0x380
[  285.213540][ T8224]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  285.213580][ T8224]  ? __pfx_policy_nodemask+0x10/0x10
[  285.213617][ T8224]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  285.213652][ T8224]  alloc_pages_mpol+0xd1/0x380
[  285.213689][ T8224]  alloc_pages_noprof+0xd2/0x2f0
[  285.213725][ T8224]  pte_alloc_one+0x22/0x380
[  285.213755][ T8224]  __pte_alloc+0x25/0x1a0
[  285.213782][ T8224]  walk_pgd_range+0xe54/0x1ce0
[  285.213831][ T8224]  ? __pfx_guard_install_set_pte+0x10/0x10
[  285.213853][ T8224]  ? __pfx_guard_install_set_pte+0x10/0x10
[  285.213872][ T8224]  ? __pfx_guard_install_set_pte+0x10/0x10
[  285.213894][ T8224]  ? __pfx_guard_install_set_pte+0x10/0x10
[  285.213928][ T8224]  ? __pfx_walk_pgd_range+0x10/0x10
[  285.213953][ T8224]  ? preempt_count_add+0x91/0x190
[  285.213977][ T8224]  ? __free_frozen_pages+0x8d1/0x10f0
[  285.214024][ T8224]  __walk_page_range+0x14c/0x710
[  285.214051][ T8224]  ? __virt_addr_valid+0x13c/0x390
[  285.214083][ T8224]  ? ___free_pages+0x9a/0x1b0
[  285.214125][ T8224]  walk_page_range_vma_unsafe+0x309/0x410
[  285.214157][ T8224]  ? __pfx_zap_vma_range+0x10/0x10
[  285.214185][ T8224]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  285.214233][ T8224]  madvise_vma_behavior+0x37d7/0x41f0
[  285.214267][ T8224]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  285.214301][ T8224]  ? __lock_acquire+0x6b5/0x2cf0
[  285.214337][ T8224]  ? __lock_acquire+0x6b5/0x2cf0
[  285.214371][ T8224]  ? tomoyo_check_open_permission+0x1d3/0x470
[  285.214415][ T8224]  ? __pfx_guard_install_pud_entry+0x10/0x10
[  285.214438][ T8224]  ? __pfx_guard_install_pmd_entry+0x10/0x10
[  285.214459][ T8224]  ? __pfx_guard_install_pte_entry+0x10/0x10
[  285.214485][ T8224]  ? __pfx_guard_install_set_pte+0x10/0x10
[  285.214509][ T8224]  ? __lock_acquire+0x6b5/0x2cf0
[  285.214559][ T8224]  ? __lock_acquire+0x6b5/0x2cf0
[  285.214595][ T8224]  ? lock_vma_under_rcu+0x1d1/0x500
[  285.214648][ T8224]  ? reacquire_held_locks+0x104/0x190
[  285.214681][ T8224]  ? lock_vma_under_rcu+0x1d1/0x500
[  285.214723][ T8224]  ? lock_vma_under_rcu+0x116/0x500
[  285.214758][ T8224]  ? lock_vma_under_rcu+0x116/0x500
[  285.214790][ T8224]  ? lock_vma_under_rcu+0x45a/0x500
[  285.214841][ T8224]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  285.214906][ T8224]  madvise_walk_vmas+0x907/0xae0
[  285.214951][ T8224]  ? __lock_acquire+0x6b5/0x2cf0
[  285.214978][ T8224]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  285.215016][ T8224]  ? blk_start_plug+0x6e/0x1b0
[  285.215047][ T8224]  madvise_do_behavior+0x386/0x540
[  285.215088][ T8224]  ? __pfx_madvise_do_behavior+0x10/0x10
[  285.215151][ T8224]  do_madvise+0x1b3/0x270
[  285.215193][ T8224]  ? __pfx_do_madvise+0x10/0x10
[  285.215237][ T8224]  ? __pfx_ksys_write+0x10/0x10
[  285.215274][ T8224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.215298][ T8224]  __x64_sys_madvise+0xa6/0xc0
[  285.215332][ T8224]  do_syscall_64+0x15f/0xf80
[  285.215360][ T8224]  ? trace_irq_disable+0x3b/0x140
[  285.215386][ T8224]  ? clear_bhb_loop+0x40/0x90
[  285.215413][ T8224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.215435][ T8224] RIP: 0033:0x7fc562d9cdd9
[  285.215456][ T8224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.215474][ T8224] RSP: 002b:00007fc560fcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  285.215500][ T8224] RAX: ffffffffffffffda RBX: 00007fc563016090 RCX: 00007fc562d9cdd9
[  285.215516][ T8224] RDX: 0000000000000066 RSI: 0000000000600722 RDI: 0000200000000000
[  285.215530][ T8224] RBP: 00007fc560fcd090 R08: 0000000000000000 R09: 0000000000000000
[  285.215545][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.215557][ T8224] R13: 00007fc563016128 R14: 00007fc563016090 R15: 00007ffc97de7188
[  285.215591][ T8224]  </TASK>
[  285.804413][   T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  285.968439][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  285.968476][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.968498][   T10] usb 2-1: Product: syz
[  285.968513][   T10] usb 2-1: Manufacturer: syz
[  285.968529][   T10] usb 2-1: SerialNumber: syz
[  286.231109][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  286.231177][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  286.231200][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  286.248418][ T5563] usb 3-1: USB disconnect, device number 51
[  286.310921][   T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  286.386306][ T8239] netlink: 128 bytes leftover after parsing attributes in process `syz.0.832'.
[  286.947833][ T5871] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  287.114268][ T5871] usb 3-1: Using ep0 maxpacket: 32
[  287.116914][ T5871] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  287.116947][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.123184][ T5871] usb 3-1: config 0 descriptor??
[  287.189072][ T8256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.838'.
[  287.333513][ T5871] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  287.361474][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  287.363102][ T5871] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  287.363175][ T5871] usb 3-1: media controller created
[  287.413971][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  287.542875][ T5871] az6027: usb out operation failed. (-71)
[  287.543320][ T5871] az6027: usb out operation failed. (-71)
[  287.543336][ T5871] stb0899_attach: Driver disabled by Kconfig
[  287.543346][ T5871] az6027: no front-end attached
[  287.543346][ T5871] 
[  287.543755][ T5871] az6027: usb out operation failed. (-71)
[  287.543770][ T5871] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  287.602628][ T5871] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23
[  287.621679][ T5871] dvb-usb: schedule remote query interval to 400 msecs.
[  287.621726][ T5871] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  287.642449][ T5871] usb 3-1: USB disconnect, device number 52
[  287.797610][ T5871] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  288.278299][ T5892] IPVS: starting estimator thread 0...
[  288.364400][ T8274] IPVS: using max 8 ests per chain, 19200 per kthread
[  288.619152][ T5871] usb 2-1: USB disconnect, device number 61
[  289.245543][   T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  289.406841][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.406881][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.406921][   T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  289.406946][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.456978][   T10] usb 2-1: config 0 descriptor??
[  289.882609][   T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  289.885717][   T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  289.885752][   T10] cp2112 0003:10C4:EA90.0007: item fetching failed at offset 6/7
[  289.886665][   T10] cp2112 0003:10C4:EA90.0007: parse failed
[  289.886813][   T10] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -22
[  289.945379][ T5892] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  290.084349][   T10] usb 2-1: USB disconnect, device number 62
[  290.095217][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  290.106365][ T5892] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  290.106398][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.167509][ T5892] usb 3-1: config 0 descriptor??
[  290.377059][ T5892] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  290.471662][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  290.472873][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  290.472937][ T5892] usb 3-1: media controller created
[  290.490727][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  290.680660][ T8303] FAULT_INJECTION: forcing a failure.
[  290.680660][ T8303] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  290.680705][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.1.855 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  290.680736][ T8303] Tainted: [L]=SOFTLOCKUP
[  290.680744][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  290.680758][ T8303] Call Trace:
[  290.680766][ T8303]  <TASK>
[  290.680776][ T8303]  dump_stack_lvl+0xe8/0x150
[  290.680808][ T8303]  should_fail_ex+0x46b/0x600
[  290.680856][ T8303]  _copy_from_iter+0x1d3/0x1670
[  290.680897][ T8303]  ? trace_kmem_cache_alloc+0x29/0xe0
[  290.680928][ T8303]  ? __alloc_skb+0x27d/0x7d0
[  290.680958][ T8303]  ? __pfx__copy_from_iter+0x10/0x10
[  290.680989][ T8303]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  290.681020][ T8303]  ? __alloc_skb+0x27d/0x7d0
[  290.681054][ T8303]  ? netlink_sendmsg+0x650/0xb40
[  290.681084][ T8303]  ? skb_put+0x11b/0x210
[  290.681117][ T8303]  netlink_sendmsg+0x6c0/0xb40
[  290.681158][ T8303]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.681192][ T8303]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  290.681232][ T8303]  ? ktime_get+0x45/0x220
[  290.681257][ T8303]  ? aa_sock_msg_perm+0x122/0x200
[  290.681290][ T8303]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.681321][ T8303]  sock_sendmsg_nosec+0x112/0x150
[  290.681350][ T8303]  ____sys_sendmsg+0x55c/0x870
[  290.681395][ T8303]  ? __pfx_____sys_sendmsg+0x10/0x10
[  290.681438][ T8303]  ? import_iovec+0x73/0xa0
[  290.681464][ T8303]  ___sys_sendmsg+0x2a5/0x360
[  290.681496][ T8303]  ? __lock_acquire+0x6b5/0x2cf0
[  290.681529][ T8303]  ? __pfx____sys_sendmsg+0x10/0x10
[  290.681599][ T8303]  ? __fget_files+0x2a/0x420
[  290.681625][ T8303]  ? __fget_files+0x3a6/0x420
[  290.681680][ T8303]  __x64_sys_sendmsg+0x1c3/0x2a0
[  290.681716][ T8303]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  290.681759][ T8303]  ? rcu_is_watching+0x15/0xb0
[  290.681802][ T8303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.681835][ T8303]  do_syscall_64+0x15f/0xf80
[  290.681865][ T8303]  ? trace_irq_disable+0x3b/0x140
[  290.681891][ T8303]  ? clear_bhb_loop+0x40/0x90
[  290.681919][ T8303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.681942][ T8303] RIP: 0033:0x7fc562d9cdd9
[  290.681964][ T8303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.681989][ T8303] RSP: 002b:00007fc560fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  290.682015][ T8303] RAX: ffffffffffffffda RBX: 00007fc563015fa0 RCX: 00007fc562d9cdd9
[  290.682031][ T8303] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000005
[  290.682046][ T8303] RBP: 00007fc560fee090 R08: 0000000000000000 R09: 0000000000000000
[  290.682059][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.682072][ T8303] R13: 00007fc563016038 R14: 00007fc563015fa0 R15: 00007ffc97de7188
[  290.682106][ T8303]  </TASK>
[  290.739917][ T5892] az6027: usb out operation failed. (-71)
[  290.740940][ T5892] az6027: usb out operation failed. (-71)
[  290.740956][ T5892] stb0899_attach: Driver disabled by Kconfig
[  290.741074][ T5892] az6027: no front-end attached
[  290.741074][ T5892] 
[  290.742125][ T5892] az6027: usb out operation failed. (-71)
[  290.742142][ T5892] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  290.845720][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24
[  291.076825][ T5892] dvb-usb: schedule remote query interval to 400 msecs.
[  291.076851][ T5892] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  291.108248][ T5892] usb 3-1: USB disconnect, device number 53
[  291.347034][  T821] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  291.540849][  T821] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  291.540886][  T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.541003][  T821] usb 2-1: Product: syz
[  291.541022][  T821] usb 2-1: Manufacturer: syz
[  291.541039][  T821] usb 2-1: SerialNumber: syz
[  291.586499][  T821] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  291.893433][ T5892] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  291.953013][ T8321] fuse: Unknown parameter ''
[  292.234882][ T5871] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  292.660272][ T8331] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  292.662549][ T8331] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  292.662695][ T8331] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  293.006509][ T8331] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  293.006660][ T8331] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  293.080627][ T8331] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  293.080859][ T8331] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  293.352555][ T8331] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  293.479976][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.481532][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.500230][ T5871] usb 2-1: Service connection timeout for: 256
[  293.500257][ T5871] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  293.692592][ T5871] ath9k_htc: Failed to initialize the device
[  293.697494][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.717098][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.752304][ T8311] binder: 8310:8311 ioctl 40285881 200000000200 returned -22
[  293.870824][ T5871] usb 2-1: ath9k_htc: USB layer deinitialized
[  294.033989][ T5892] usb 2-1: USB disconnect, device number 63
[  294.082700][ T8347] FAULT_INJECTION: forcing a failure.
[  294.082700][ T8347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.082742][ T8347] CPU: 0 UID: 0 PID: 8347 Comm: syz.2.868 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  294.082782][ T8347] Tainted: [L]=SOFTLOCKUP
[  294.082790][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  294.082804][ T8347] Call Trace:
[  294.082813][ T8347]  <TASK>
[  294.082822][ T8347]  dump_stack_lvl+0xe8/0x150
[  294.082854][ T8347]  should_fail_ex+0x46b/0x600
[  294.082892][ T8347]  _copy_to_user+0x31/0xb0
[  294.082917][ T8347]  simple_read_from_buffer+0xe1/0x170
[  294.082948][ T8347]  proc_fail_nth_read+0x1be/0x230
[  294.082979][ T8347]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  294.083009][ T8347]  ? rw_verify_area+0x2ac/0x4e0
[  294.083036][ T8347]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  294.083064][ T8347]  vfs_read+0x212/0xa80
[  294.083109][ T8347]  ? __pfx_vfs_read+0x10/0x10
[  294.083141][ T8347]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  294.083170][ T8347]  ? lockdep_hardirqs_on+0x7a/0x110
[  294.083199][ T8347]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  294.083228][ T8347]  ? mutex_lock_nested+0x152/0x1d0
[  294.083251][ T8347]  ? fdget_pos+0x252/0x320
[  294.083287][ T8347]  ksys_read+0x156/0x270
[  294.083320][ T8347]  ? __pfx_ksys_read+0x10/0x10
[  294.083350][ T8347]  ? __pfx_ppp_ioctl+0x10/0x10
[  294.083383][ T8347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.083406][ T8347]  do_syscall_64+0x15f/0xf80
[  294.083433][ T8347]  ? trace_irq_disable+0x3b/0x140
[  294.083458][ T8347]  ? clear_bhb_loop+0x40/0x90
[  294.083485][ T8347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.083507][ T8347] RIP: 0033:0x7f73322ed60e
[  294.083528][ T8347] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  294.083547][ T8347] RSP: 002b:00007f733057dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  294.083571][ T8347] RAX: ffffffffffffffda RBX: 00007f733057e6c0 RCX: 00007f73322ed60e
[  294.083588][ T8347] RDX: 000000000000000f RSI: 00007f733057e0a0 RDI: 0000000000000005
[  294.083602][ T8347] RBP: 00007f733057e090 R08: 0000000000000000 R09: 0000000000000000
[  294.083616][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.083629][ T8347] R13: 00007f73325a6038 R14: 00007f73325a5fa0 R15: 00007ffe8d3b7ca8
[  294.083662][ T8347]  </TASK>
[  294.566088][ T8358] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  294.694474][   T60] Bluetooth: hci1: command 0x0406 tx timeout
[  294.694526][   T60] Bluetooth: hci0: command 0x0406 tx timeout
[  295.014399][   T60] Bluetooth: hci2: command 0x0406 tx timeout
[  295.095940][   T60] Bluetooth: hci3: command 0x0c1a tx timeout
[  295.171462][ T8358] FAULT_INJECTION: forcing a failure.
[  295.171462][ T8358] name failslab, interval 1, probability 0, space 0, times 0
[  295.171492][ T8358] CPU: 1 UID: 0 PID: 8358 Comm: syz.1.871 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  295.171511][ T8358] Tainted: [L]=SOFTLOCKUP
[  295.171516][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  295.171523][ T8358] Call Trace:
[  295.171529][ T8358]  <TASK>
[  295.171535][ T8358]  dump_stack_lvl+0xe8/0x150
[  295.171556][ T8358]  should_fail_ex+0x46b/0x600
[  295.171578][ T8358]  should_failslab+0xa8/0x100
[  295.171598][ T8358]  __kmalloc_cache_noprof+0x84/0x690
[  295.171617][ T8358]  ? do_raw_spin_lock+0x12b/0x2f0
[  295.171630][ T8358]  ? kobject_uevent_env+0x28f/0x9e0
[  295.171645][ T8358]  kobject_uevent_env+0x28f/0x9e0
[  295.171663][ T8358]  __kobject_del+0xd2/0x330
[  295.171681][ T8358]  ? kobject_put+0x234/0x560
[  295.171700][ T8358]  kobject_put+0x240/0x560
[  295.171719][ T8358]  ? software_node_notify_remove+0x19e/0x1d0
[  295.171742][ T8358]  device_del+0x543/0x900
[  295.171759][ T8358]  ? __pfx_device_del+0x10/0x10
[  295.171776][ T8358]  device_unregister+0x21/0xf0
[  295.171789][ T8358]  iommufd_fops_release+0x18c/0x3b0
[  295.171806][ T8358]  ? __pfx_iommufd_fops_release+0x10/0x10
[  295.171822][ T8358]  ? evm_file_release+0x10a/0x1e0
[  295.171844][ T8358]  ? __pfx_iommufd_fops_release+0x10/0x10
[  295.171859][ T8358]  __fput+0x461/0xa70
[  295.171879][ T8358]  task_work_run+0x1d9/0x270
[  295.171899][ T8358]  ? __pfx_task_work_run+0x10/0x10
[  295.171920][ T8358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.171934][ T8358]  exit_to_user_mode_loop+0xed/0x480
[  295.171950][ T8358]  ? rcu_is_watching+0x15/0xb0
[  295.171968][ T8358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.171982][ T8358]  do_syscall_64+0x33e/0xf80
[  295.171999][ T8358]  ? trace_irq_disable+0x3b/0x140
[  295.172016][ T8358]  ? clear_bhb_loop+0x40/0x90
[  295.172031][ T8358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.172044][ T8358] RIP: 0033:0x7fc562d9cdd9
[  295.172057][ T8358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.172068][ T8358] RSP: 002b:00007fc560fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[  295.172083][ T8358] RAX: 0000000000000003 RBX: 00007fc563015fa0 RCX: 00007fc562d9cdd9
[  295.172092][ T8358] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  295.172099][ T8358] RBP: 00007fc560fee090 R08: 0000000000000000 R09: 0000000000000000
[  295.172107][ T8358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.172114][ T8358] R13: 00007fc563016038 R14: 00007fc563015fa0 R15: 00007ffc97de7188
[  295.172132][ T8358]  </TASK>
[  295.607214][ T8374] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  295.719911][   T60] Bluetooth: hci0: unexpected event 0x03 length: 4 < 11
[  296.074108][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  296.094112][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  296.104110][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  296.114134][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  296.124109][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  296.134115][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  296.144116][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  296.154117][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  296.164106][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  296.174118][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  296.775346][   T60] Bluetooth: hci1: command 0x0406 tx timeout
[  297.036034][ T8397] fuse: Bad value for 'fd'
[  297.094451][   T60] Bluetooth: hci2: command 0x0406 tx timeout
[  297.174560][   T60] Bluetooth: hci3: command 0x0c1a tx timeout
[  297.267844][ T8400] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  298.154292][  T821] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  298.294222][   T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  298.325780][  T821] usb 3-1: not running at top speed; connect to a high speed hub
[  298.327416][  T821] usb 3-1: config 7 has an invalid interface number: 116 but max is 0
[  298.327501][  T821] usb 3-1: config 7 has no interface number 0
[  298.327537][  T821] usb 3-1: config 7 interface 116 has no altsetting 0
[  298.330295][  T821] usb 3-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ca.2d
[  298.330326][  T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.330348][  T821] usb 3-1: Product: syz
[  298.330374][  T821] usb 3-1: Manufacturer: syz
[  298.330388][  T821] usb 3-1: SerialNumber: syz
[  298.479989][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  298.480026][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.480048][   T10] usb 2-1: Product: syz
[  298.480064][   T10] usb 2-1: Manufacturer: syz
[  298.480080][   T10] usb 2-1: SerialNumber: syz
[  298.713060][  T821] usb-storage 3-1:7.116: USB Mass Storage device detected
[  298.943968][  T821] usb 3-1: USB disconnect, device number 54
[  298.990522][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  298.990566][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  299.254229][   T60] Bluetooth: hci3: command 0x0c1a tx timeout
[  299.707545][ T8435] fuse: fd is not a fuse device
[  299.710799][ T8435] netlink: 212 bytes leftover after parsing attributes in process `syz.3.899'.
[  300.212321][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  300.234532][ T5896] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  300.429214][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO
[  300.433455][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  300.433643][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  300.434771][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  300.465430][   T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  300.498769][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.498794][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.498826][ T5896] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  300.498853][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.557019][   T10] usb 2-1: USB disconnect, device number 64
[  300.557161][ T5896] usb 3-1: config 0 descriptor??
[  301.048476][ T8451] FAULT_INJECTION: forcing a failure.
[  301.048476][ T8451] name failslab, interval 1, probability 0, space 0, times 0
[  301.048514][ T8451] CPU: 0 UID: 0 PID: 8451 Comm: syz.1.906 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  301.048538][ T8451] Tainted: [L]=SOFTLOCKUP
[  301.048543][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  301.048551][ T8451] Call Trace:
[  301.048556][ T8451]  <TASK>
[  301.048562][ T8451]  dump_stack_lvl+0xe8/0x150
[  301.048583][ T8451]  should_fail_ex+0x46b/0x600
[  301.048606][ T8451]  should_failslab+0xa8/0x100
[  301.048626][ T8451]  __kmalloc_cache_noprof+0x84/0x690
[  301.048645][ T8451]  ? j1939_session_new+0x97/0x4a0
[  301.048661][ T8451]  ? kmem_cache_alloc_noprof+0x388/0x680
[  301.048680][ T8451]  j1939_session_new+0x97/0x4a0
[  301.048698][ T8451]  j1939_tp_send+0x33b/0x8c0
[  301.048713][ T8451]  ? j1939_sk_sendmsg+0x8d3/0x1350
[  301.048732][ T8451]  j1939_sk_sendmsg+0xb6d/0x1350
[  301.048754][ T8451]  ? j1939_sk_sendmsg+0x51a/0x1350
[  301.048774][ T8451]  ? __pfx_j1939_sk_sendmsg+0x10/0x10
[  301.048798][ T8451]  ? count_memcg_event_mm+0x21/0x260
[  301.048816][ T8451]  ? aa_sock_msg_perm+0x122/0x200
[  301.048836][ T8451]  ? __pfx_j1939_sk_sendmsg+0x10/0x10
[  301.048850][ T8451]  sock_sendmsg_nosec+0x112/0x150
[  301.048867][ T8451]  ____sys_sendmsg+0x55c/0x870
[  301.048891][ T8451]  ? __pfx_____sys_sendmsg+0x10/0x10
[  301.048929][ T8451]  ? import_iovec+0x73/0xa0
[  301.048955][ T8451]  ___sys_sendmsg+0x2a5/0x360
[  301.048998][ T8451]  ? __pfx____sys_sendmsg+0x10/0x10
[  301.049047][ T8451]  ? lockdep_hardirqs_on+0x7a/0x110
[  301.049088][ T8451]  __sys_sendmmsg+0x282/0x4e0
[  301.049111][ T8451]  ? __pfx___sys_sendmmsg+0x10/0x10
[  301.049135][ T8451]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  301.049156][ T8451]  ? ksys_write+0x248/0x270
[  301.049175][ T8451]  ? __pfx_ksys_write+0x10/0x10
[  301.049197][ T8451]  __x64_sys_sendmmsg+0xa0/0xc0
[  301.049216][ T8451]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.049229][ T8451]  do_syscall_64+0x15f/0xf80
[  301.049247][ T8451]  ? clear_bhb_loop+0x40/0x90
[  301.049262][ T8451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.049275][ T8451] RIP: 0033:0x7fc562d9cdd9
[  301.049289][ T8451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.049301][ T8451] RSP: 002b:00007fc560fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  301.049316][ T8451] RAX: ffffffffffffffda RBX: 00007fc563015fa0 RCX: 00007fc562d9cdd9
[  301.049325][ T8451] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000003
[  301.049334][ T8451] RBP: 00007fc560fee090 R08: 0000000000000000 R09: 0000000000000000
[  301.049342][ T8451] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001
[  301.049350][ T8451] R13: 00007fc563016038 R14: 00007fc563015fa0 R15: 00007ffc97de7188
[  301.049374][ T8451]  </TASK>
[  301.183153][ T5896] usbhid 3-1:0.0: can't add hid device: -71
[  301.183310][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  301.386742][ T5896] usb 3-1: USB disconnect, device number 55
[  301.632900][ T8453] syz.1.907 (8453) used greatest stack depth: 17400 bytes left
[  301.723813][ T8460] tmpfs: Unknown parameter 'permit_directio'
[  301.732390][ T8460] overlayfs: failed to clone upperpath
[  301.983727][ T8464] fuse: fd is not a fuse device
[  302.024418][  T821] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  302.174308][  T821] usb 2-1: Using ep0 maxpacket: 16
[  302.177203][  T821] usb 2-1: config 5 has an invalid interface number: 168 but max is 0
[  302.177237][  T821] usb 2-1: config 5 has no interface number 0
[  302.177284][  T821] usb 2-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  302.177313][  T821] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024
[  302.177341][  T821] usb 2-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3
[  302.177360][  T821] usb 2-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[  302.177373][  T821] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0
[  302.177388][  T821] usb 2-1: config 5 interface 168 has no altsetting 0
[  302.180327][  T821] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58
[  302.180361][  T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.180377][  T821] usb 2-1: Product: syz
[  302.180386][  T821] usb 2-1: Manufacturer: syz
[  302.180395][  T821] usb 2-1: SerialNumber: syz
[  302.248914][ T5896] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  302.270558][ T8458] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  302.444583][ T5896] usb 3-1: Using ep0 maxpacket: 32
[  302.449448][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short
[  302.470710][ T5896] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  302.470746][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.470768][ T5896] usb 3-1: Product: ࠓ
[  302.470782][ T5896] usb 3-1: Manufacturer: и
[  302.470994][ T5896] usb 3-1: SerialNumber: syz
[  302.529259][ T5896] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc
[  302.659837][  T821] usb 2-1: NFC: Unable to get FW version
[  302.660689][  T821] pn533_usb 2-1:5.168: probe with driver pn533_usb failed with error -90
[  302.697960][  T821] usb 2-1: USB disconnect, device number 65
[  302.725057][ T8464] netlink: 212 bytes leftover after parsing attributes in process `syz.2.912'.
[  302.737060][ T5896] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  302.807149][ T5896] usb 3-1: USB disconnect, device number 56
[  302.884841][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  304.655245][ T8504] fuse: fd is not a fuse device
[  304.924236][ T5896] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  305.084228][ T5896] usb 2-1: Using ep0 maxpacket: 32
[  305.087798][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short
[  305.093807][ T5896] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  305.093842][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.093863][ T5896] usb 2-1: Product: ࠓ
[  305.093879][ T5896] usb 2-1: Manufacturer: и
[  305.093894][ T5896] usb 2-1: SerialNumber: syz
[  305.186295][ T5896] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc
[  305.364285][ T5871] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  305.372899][ T8504] netlink: 212 bytes leftover after parsing attributes in process `syz.1.927'.
[  305.436257][ T5896] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  305.532032][ T5871] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  305.532066][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.532089][ T5871] usb 3-1: Product: syz
[  305.532104][ T5871] usb 3-1: Manufacturer: syz
[  305.532120][ T5871] usb 3-1: SerialNumber: syz
[  305.562825][ T5896] usb 2-1: USB disconnect, device number 66
[  305.770465][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  306.080084][ T8507] binder: BINDER_SET_CONTEXT_MGR already set
[  306.080102][ T8507] binder: 8506:8507 ioctl 4018620d 200000000040 returned -16
[  306.101927][ T8507] binder: BINDER_SET_CONTEXT_MGR already set
[  306.101944][ T8507] binder: 8506:8507 ioctl 4018620d 2000000001c0 returned -16
[  306.196027][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  306.196097][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  308.180925][    C1] sched: DL replenish lagged too much
[  308.200484][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  308.406817][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO
[  308.407348][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  308.407401][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  308.408328][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  312.368089][ T8522] overlayfs: unescaped trailing colons in lowerdir mount option.
[  317.423501][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  317.423602][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  318.679267][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  318.751656][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  318.753904][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  318.804903][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  318.805775][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  320.762256][   T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  320.811241][   T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  320.834087][   T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  320.835817][   T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  320.851403][   T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  320.935972][ T5835] Bluetooth: hci4: command tx timeout
[  321.868094][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  321.929573][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  321.933476][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  321.979463][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  321.981956][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  323.014178][   T60] Bluetooth: hci4: command tx timeout
[  323.023865][ T5835] Bluetooth: hci5: command tx timeout
[  324.054196][ T5835] Bluetooth: hci6: command tx timeout
[  325.094583][ T5835] Bluetooth: hci5: command tx timeout
[  325.094619][ T5835] Bluetooth: hci4: command tx timeout
[  326.134322][ T5835] Bluetooth: hci6: command tx timeout
[  327.174473][   T60] Bluetooth: hci5: command tx timeout
[  327.175342][ T5835] Bluetooth: hci4: command tx timeout
[  327.856419][   T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  327.909797][   T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  327.927256][   T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  327.960709][   T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  327.962005][   T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  328.214271][ T5835] Bluetooth: hci6: command tx timeout
[  329.254140][ T5835] Bluetooth: hci5: command tx timeout
[  330.054919][ T5835] Bluetooth: hci7: command tx timeout
[  330.294156][ T5835] Bluetooth: hci6: command tx timeout
[  332.135580][ T5835] Bluetooth: hci7: command tx timeout
[  334.214240][ T5835] Bluetooth: hci7: command tx timeout
[  336.294240][ T5835] Bluetooth: hci7: command tx timeout
[  367.281141][ T5197] udevd[5197]: worker [5976] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time
[  378.822517][   T60] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  378.891244][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  378.891358][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  378.932054][   T60] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  378.961611][   T60] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  378.978507][   T60] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  378.979463][   T60] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  380.879491][   T60] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  380.933118][   T60] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  380.942418][   T60] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  380.972511][   T60] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  381.008580][   T60] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  381.095261][   T60] Bluetooth: hci8: command tx timeout
[  381.863291][   T60] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  381.921110][   T60] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  381.941611][   T60] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  381.967134][   T60] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  381.968091][   T60] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  383.094294][ T5835] Bluetooth: hci9: command tx timeout
[  383.174345][ T5835] Bluetooth: hci8: command tx timeout
[  383.439525][ T5871] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  383.453137][ T5871] usb 3-1: USB disconnect, device number 57
[  384.144608][ T5835] Bluetooth: hci10: command tx timeout
[  385.174219][ T5835] Bluetooth: hci9: command tx timeout
[  385.254588][ T5835] Bluetooth: hci8: command tx timeout
[  386.214214][ T5835] Bluetooth: hci10: command tx timeout
[  387.254199][ T5835] Bluetooth: hci9: command tx timeout
[  387.334266][ T5835] Bluetooth: hci8: command tx timeout
[  387.931644][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  388.008667][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  388.038887][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  388.040361][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  388.041319][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  388.294232][   T60] Bluetooth: hci10: command tx timeout
[  389.334166][   T60] Bluetooth: hci9: command tx timeout
[  390.134250][   T60] Bluetooth: hci0: command tx timeout
[  390.374358][ T5835] Bluetooth: hci10: command tx timeout
[  392.214176][   T60] Bluetooth: hci0: command tx timeout
[  394.294156][   T60] Bluetooth: hci0: command tx timeout
[  396.374165][   T60] Bluetooth: hci0: command tx timeout
[  439.660625][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  439.747440][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  439.750149][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  439.752764][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  439.763703][ T5835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  440.331791][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  440.331914][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  441.634891][ T5828] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  441.700837][ T5828] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  441.729896][ T5828] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  441.731162][ T5828] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  441.732011][ T5828] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  441.894143][   T60] Bluetooth: hci11: command tx timeout
[  442.380850][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[  442.629541][ T5828] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  442.689150][ T5828] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  442.691950][ T5828] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  442.741295][ T5828] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  442.754228][ T5828] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  443.894287][   T60] Bluetooth: hci12: command tx timeout
[  443.974133][   T60] Bluetooth: hci11: command tx timeout
[  445.974144][ T5146] Bluetooth: hci12: command tx timeout
[  446.054360][ T5146] Bluetooth: hci11: command tx timeout
[  447.497908][ T5146] Bluetooth: hci5: command 0x0406 tx timeout
[  447.498072][ T5146] Bluetooth: hci6: command 0x0406 tx timeout
[  448.054136][ T7134] Bluetooth: hci12: command tx timeout
[  448.134321][ T7134] Bluetooth: hci11: command tx timeout
[  448.691034][ T5146] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  448.781971][ T5146] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  448.816859][ T5146] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  448.820717][ T5146] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  448.823741][ T5146] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  450.134282][ T5146] Bluetooth: hci12: command tx timeout
[  450.534698][   T39] INFO: task kworker/0:1:10 blocked for more than 143 seconds.
[  450.534730][   T39]       Tainted: G             L      syzkaller #0
[  450.534744][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  450.534754][   T39] task:kworker/0:1     state:D stack:18304 pid:10    tgid:10    ppid:2      task_flags:0x4208060 flags:0x00080000
[  450.534816][   T39] Workqueue: events disconnect_work
[  450.534850][   T39] Call Trace:
[  450.534858][   T39]  <TASK>
[  450.534874][   T39]  __schedule+0x169e/0x54f0
[  450.534938][   T39]  ? __pfx___schedule+0x10/0x10
[  450.534983][   T39]  rt_mutex_schedule+0x76/0xf0
[  450.535018][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  450.535061][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  450.535088][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  450.535114][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  450.535159][   T39]  ? lock_acquire+0x221/0x350
[  450.535194][   T39]  ? disconnect_work+0x19/0x210
[  450.535221][   T39]  mutex_lock_nested+0x168/0x1d0
[  450.535249][   T39]  ? process_one_work+0x8b7/0x1710
[  450.535272][   T39]  disconnect_work+0x19/0x210
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  450.535304][   T39]  ? process_one_work+0x8b7/0x1710
[  450.535325][   T39]  process_one_work+0x9a3/0x1710
[  450.535371][   T39]  ? __pfx_process_one_work+0x10/0x10
[  450.535391][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  450.535434][   T39]  worker_thread+0xba8/0x11e0
[  450.535468][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  450.535500][   T39]  ? __kthread_parkme+0x7a/0x1f0
[  450.535526][   T39]  ? __kthread_parkme+0x19c/0x1f0
[  450.535558][   T39]  kthread+0x388/0x470
[  450.535588][   T39]  ? __pfx_worker_thread+0x10/0x10
[  450.535610][   T39]  ? __pfx_kthread+0x10/0x10
[  450.535649][   T39]  ret_from_fork+0x514/0xb70
[  450.535696][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  450.535721][   T39]  ? __switch_to+0xc79/0x1410
[  450.535756][   T39]  ? __pfx_kthread+0x10/0x10
[  450.535787][   T39]  ret_from_fork_asm+0x1a/0x30
[  450.535832][   T39]  </TASK>
[  450.535842][   T39] INFO: task kworker/u8:0:12 blocked for more than 143 seconds.
[  450.535860][   T39]       Tainted: G             L      syzkaller #0
[  450.535871][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  450.535882][   T39] task:kworker/u8:0    state:D stack:20832 pid:12    tgid:12    ppid:2      task_flags:0x4208060 flags:0x00080000
[  450.535939][   T39] Workqueue: events_unbound linkwatch_event
[  450.535961][   T39] Call Trace:
[  450.535969][   T39]  <TASK>
[  450.535981][   T39]  __schedule+0x169e/0x54f0
[  450.536026][   T39]  ? __pfx_sched_clock_cpu+0x10/0x10
[  450.536074][   T39]  ? __pfx___schedule+0x10/0x10
[  450.536099][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x680
[  450.743377][   T39]  rt_mutex_schedule+0x76/0xf0
[  450.743426][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  450.743466][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x680
[  450.743493][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  450.743520][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  450.743545][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  450.743588][   T39]  ? linkwatch_event+0xe/0x60
[  450.743615][   T39]  ? process_one_work+0x8b7/0x1710
[  450.743646][   T39]  ? linkwatch_event+0xe/0x60
[  450.743664][   T39]  mutex_lock_nested+0x168/0x1d0
[  450.743692][   T39]  ? process_one_work+0x8b7/0x1710
[  450.743714][   T39]  linkwatch_event+0xe/0x60
[  450.743734][   T39]  process_one_work+0x9a3/0x1710
[  450.743779][   T39]  ? __pfx_process_one_work+0x10/0x10
[  450.743801][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  450.743844][   T39]  worker_thread+0xba8/0x11e0
[  450.743896][   T39]  kthread+0x388/0x470
[  450.743927][   T39]  ? __pfx_worker_thread+0x10/0x10
[  450.743948][   T39]  ? __pfx_kthread+0x10/0x10
[  450.769407][   T39]  ret_from_fork+0x514/0xb70
[  450.769449][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  450.769475][   T39]  ? __switch_to+0xc79/0x1410
[  450.769512][   T39]  ? __pfx_kthread+0x10/0x10
[  450.769544][   T39]  ret_from_fork_asm+0x1a/0x30
[  450.769597][   T39]  </TASK>
[  450.769656][   T39] INFO: task kworker/u8:9:1126 blocked for more than 143 seconds.
[  450.769677][   T39]       Tainted: G             L      syzkaller #0
[  450.769690][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  450.769700][   T39] task:kworker/u8:9    state:D stack:20312 pid:1126  tgid:1126  ppid:2      task_flags:0x4208060 flags:0x00080000
[  450.769763][   T39] Workqueue: cfg80211 cfg80211_dfs_channels_update_work
[  450.769792][   T39] Call Trace:
[  450.769801][   T39]  <TASK>
[  450.769814][   T39]  __schedule+0x169e/0x54f0
[  450.769876][   T39]  ? __pfx___schedule+0x10/0x10
[  450.769921][   T39]  rt_mutex_schedule+0x76/0xf0
[  450.769956][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  450.769999][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  450.770026][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  450.770051][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  450.770073][   T39]  ? __lock_acquire+0x6b5/0x2cf0
[  450.770115][   T39]  ? cfg80211_dfs_channels_update_work+0xd6/0x660
[  450.770147][   T39]  ? cfg80211_dfs_channels_update_work+0xd6/0x660
[  450.913064][   T39]  ? cfg80211_dfs_channels_update_work+0xd6/0x660
[  450.913107][   T39]  mutex_lock_nested+0x168/0x1d0
[  450.913139][   T39]  cfg80211_dfs_channels_update_work+0xd6/0x660
[  450.913173][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  450.913198][   T39]  ? lock_acquire+0x106/0x350
[  450.913228][   T39]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  450.913257][   T39]  ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10
[  450.913301][   T39]  ? process_one_work+0x8b7/0x1710
[  450.913322][   T39]  process_one_work+0x9a3/0x1710
[  450.913369][   T39]  ? __pfx_process_one_work+0x10/0x10
[  450.913390][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  450.913432][   T39]  worker_thread+0xba8/0x11e0
[  450.913467][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  450.913498][   T39]  ? __kthread_parkme+0x7a/0x1f0
[  450.913533][   T39]  ? __kthread_parkme+0x19c/0x1f0
[  450.913565][   T39]  kthread+0x388/0x470
[  450.913595][   T39]  ? __pfx_worker_thread+0x10/0x10
[  450.913617][   T39]  ? __pfx_kthread+0x10/0x10
[  450.913648][   T39]  ret_from_fork+0x514/0xb70
[  450.913677][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  450.913702][   T39]  ? __switch_to+0xc79/0x1410
[  450.913738][   T39]  ? __pfx_kthread+0x10/0x10
[  450.913769][   T39]  ret_from_fork_asm+0x1a/0x30
[  450.913814][   T39]  </TASK>
[  450.913924][   T39] INFO: task syz.1.929:8511 blocked for more than 143 seconds.
[  450.913945][   T39]       Tainted: G             L      syzkaller #0
[  450.913956][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  450.913967][   T39] task:syz.1.929       state:D stack:24632 pid:8511  tgid:8510  ppid:5834   task_flags:0x400140 flags:0x00080002
[  450.944134][   T39] Call Trace:
[  450.944144][   T39]  <TASK>
[  450.944159][   T39]  __schedule+0x169e/0x54f0
[  450.944203][   T39]  ? kernel_text_address+0xa5/0xe0
[  450.944237][   T39]  ? __kernel_text_address+0xd/0x30
[  450.944266][   T39]  ? unwind_get_return_address+0x4d/0x90
[  450.944294][   T39]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  450.944336][   T39]  ? __pfx___schedule+0x10/0x10
[  450.944379][   T39]  rt_mutex_schedule+0x76/0xf0
[  450.944413][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  450.944457][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  450.944485][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  451.044160][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  451.044211][   T39]  ? nl80211_pre_doit+0x5f/0x8d0
[  451.044248][   T39]  ? nl80211_pre_doit+0x5f/0x8d0
[  451.044276][   T39]  mutex_lock_nested+0x168/0x1d0
[  451.044301][   T39]  ? __nla_parse+0x40/0x60
[  451.044329][   T39]  nl80211_pre_doit+0x5f/0x8d0
[  451.044351][   T39]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  451.044386][   T39]  genl_family_rcv_msg_doit+0x1d7/0x330
[  451.044420][   T39]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  451.044475][   T39]  ? bpf_lsm_capable+0x9/0x20
[  451.044503][   T39]  ? security_capable+0x7e/0x2c0
[  451.044542][   T39]  genl_rcv_msg+0x61c/0x7a0
[  451.044573][   T39]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.044594][   T39]  ? ref_tracker_free+0x673/0x820
[  451.044626][   T39]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  451.044646][   T39]  ? __pfx_nl80211_tx_mgmt+0x10/0x10
[  451.044674][   T39]  ? __pfx_nl80211_post_doit+0x10/0x10
[  451.044696][   T39]  ? ____sys_sendmsg+0x55c/0x870
[  451.044726][   T39]  ? ___sys_sendmsg+0x2a5/0x360
[  451.044769][   T39]  netlink_rcv_skb+0x232/0x4b0
[  451.044801][   T39]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.044827][   T39]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  451.044881][   T39]  genl_rcv+0x28/0x40
[  451.044902][   T39]  netlink_unicast+0x780/0x920
[  451.044942][   T39]  netlink_sendmsg+0x813/0xb40
[  451.044984][   T39]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.045017][   T39]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  451.045058][   T39]  ? aa_sock_msg_perm+0x122/0x200
[  451.045091][   T39]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.045120][   T39]  sock_sendmsg_nosec+0x112/0x150
[  451.045149][   T39]  ____sys_sendmsg+0x55c/0x870
[  451.045187][   T39]  ? __pfx_____sys_sendmsg+0x10/0x10
[  451.045230][   T39]  ? import_iovec+0x73/0xa0
[  451.045257][   T39]  ___sys_sendmsg+0x2a5/0x360
[  451.045296][   T39]  ? __lock_acquire+0x6b5/0x2cf0
[  451.045330][   T39]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.045370][   T39]  ? futex_wait+0x2a2/0x390
[  451.045421][   T39]  ? __fget_files+0x2a/0x420
[  451.045448][   T39]  ? __fget_files+0x3a6/0x420
[  451.045486][   T39]  __x64_sys_sendmsg+0x1c3/0x2a0
[  451.045521][   T39]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  451.045563][   T39]  ? rcu_is_watching+0x15/0xb0
[  451.232751][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.232789][   T39]  do_syscall_64+0x15f/0xf80
[  451.232820][   T39]  ? trace_irq_disable+0x3b/0x140
[  451.232847][   T39]  ? clear_bhb_loop+0x40/0x90
[  451.232875][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.232898][   T39] RIP: 0033:0x7fc562d9cdd9
[  451.232918][   T39] RSP: 002b:00007fc560fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  451.232944][   T39] RAX: ffffffffffffffda RBX: 00007fc563015fa0 RCX: 00007fc562d9cdd9
[  451.232962][   T39] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000007
[  451.232976][   T39] RBP: 00007fc562e32d69 R08: 0000000000000000 R09: 0000000000000000
[  451.232991][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.233004][   T39] R13: 00007fc563016038 R14: 00007fc563015fa0 R15: 00007ffc97de7188
[  451.233040][   T39]  </TASK>
[  451.233071][   T39] 
[  451.233071][   T39] Showing all locks held in the system:
[  451.233081][   T39] 3 locks held by kworker/0:1/10:
[  451.233094][   T39]  #0: ffff88813fe47938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.233149][   T39]  #1: ffffc900000f7c40 (cfg80211_disconnect_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.233200][   T39]  #2: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: disconnect_work+0x19/0x210
[  451.233259][   T39] 3 locks held by kworker/u8:0/12:
[  451.233279][   T39]  #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.233331][   T39]  #1: ffffc90000117c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.233381][   T39]  #2: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  451.233432][   T39] 3 locks held by kworker/u8:1/13:
[  451.233444][   T39]  #0: ffff88803317e138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.233494][   T39]  #1: ffffc90000127c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.233546][   T39]  #2: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  451.233599][   T39] 4 locks held by pr/legacy/17:
[  451.233611][   T39]  #0: ffffffff8e3ba460 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250
[  451.233667][   T39]  #1: ffffffff8e2a1d58 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90
[  451.233722][   T39]  #2: ffffffff9a036998 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90
[  451.233779][   T39]  #3: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  451.233833][   T39] 4 locks held by ktimers/1/30:
[  451.233844][   T39]  #0: ffffffff8e25f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  451.233896][   T39]  #1: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  451.233947][   T39]  #2: ffff8880b87285f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7f/0x260
[  451.249915][   T39]  #3: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  451.249973][   T39] 1 lock held by khungtaskd/39:
[  451.249985][   T39]  #0: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  451.360549][   T39] 2 locks held by kworker/u8:2/44:
[  451.360565][   T39]  #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.360620][   T39]  #1: ffffc90000b67c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.360676][   T39] 5 locks held by kworker/u9:0/60:
[  451.360689][   T39]  #0: ffff88803bbab138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.360689][   T39]  #0: ffff88803bbab138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.360739][   T39]  #1: ffffc9000126fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.360791][   T39]  #2: ffff88805f144f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  451.360850][   T39]  #3: ffff88805f1440b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[  451.360904][   T39]  #4: ffffffff8f92fdf8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
[  451.360967][   T39] 3 locks held by kworker/u8:9/1126:
[  451.360980][   T39]  #0: ffff88801bbc8138 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.361031][   T39]  #1: ffffc9000611fc40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.361082][   T39]  #2: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd6/0x660
[  451.361142][   T39] 6 locks held by kworker/u8:13/2413:
[  451.361155][   T39]  #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.361206][   T39]  #1: ffffc90007af7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.361259][   T39]  #2: ffff888037088310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[  451.361328][   T39]  #3: ffff88803d8bc120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[  451.361384][   T39]  #4: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  451.361435][   T39]  #5: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[  451.361503][   T39] 3 locks held by kworker/u8:17/3034:
[  451.361514][   T39]  #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.361564][   T39]  #1: ffffc9000e4b7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.361615][   T39]  #2: ffff88805deb08b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460
[  451.361674][   T39] 3 locks held by kworker/u9:1/5146:
[  451.361687][   T39]  #0: ffff88805fd77138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.361736][   T39]  #1: ffffc9000ece7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.361787][   T39]  #2: ffff88805fcd0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  451.361846][   T39] 2 locks held by kworker/0:3/5563:
[  451.361858][   T39]  #0: ffff88813fe47938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.473776][   T39]  #1: ffffc90004107c40 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.473848][   T39] 2 locks held by getty/5585:
[  451.473861][   T39]  #0: ffff888038c2b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  451.473914][   T39]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[  451.477035][   T39] 4 locks held by syz-executor/5815:
[  451.477050][   T39]  #0: ffff88803a2890b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0
[  451.477113][   T39]  #1: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200
[  451.477171][   T39]  #2: ffff888042b33b98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  451.477235][   T39]  #3: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  451.477299][   T39] 4 locks held by kworker/u9:2/5828:
[  451.477312][   T39]  #0: ffff88805e009138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.477369][   T39]  #1: ffffc90004937c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.477421][   T39]  #2: ffff88803944c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950
[  451.477482][   T39]  #3: ffffffff8f92fdf8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950
[  451.477541][   T39] 6 locks held by kworker/u9:3/5835:
[  451.477553][   T39]  #0: ffff888036642938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.477604][   T39]  #1: ffffc900049e7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.477656][   T39]  #2: ffff888064fd4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  451.477715][   T39]  #3: ffff888064fd40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[  451.477766][   T39]  #4: ffffffff8f92fdf8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
[  451.477818][   T39]  #5: ffff88803cc7e370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570
[  451.477883][   T39] 3 locks held by kworker/0:5/5896:
[  451.477896][   T39]  #0: ffff88813fe47938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.477947][   T39]  #1: ffffc90004d27c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.477997][   T39]  #2: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  451.478056][   T39] 4 locks held by kworker/u9:4/7134:
[  451.478068][   T39]  #0: ffff88806178b138 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.478123][   T39]  #1: ffffc9000dbe7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.478173][   T39]  #2: ffff888036c580b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950
[  451.593601][   T39]  #3: ffffffff8f92fdf8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950
[  451.593683][   T39] 5 locks held by kworker/u9:5/7148:
[  451.593696][   T39]  #0: ffff888035199938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.593749][   T39]  #1: ffffc9000dde7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.593800][   T39]  #2: ffff888066ab4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  451.593857][   T39]  #3: ffff888066ab40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[  451.593909][   T39]  #4: ffffffff8f92fdf8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
[  451.593961][   T39] 1 lock held by syz.0.701/7882:
[  451.594181][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[  451.594243][   T39] 3 locks held by syz.3.926/8505:
[  451.594255][   T39]  #0: ffffffff8f8140c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  451.594315][   T39]  #1: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8d0
[  451.594364][   T39]  #2: ffff88805dae08b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_pre_doit+0x3f0/0x8d0
[  451.594414][   T39] 1 lock held by syz.1.929/8510:
[  451.594425][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[  451.594480][   T39] 2 locks held by syz.1.929/8511:
[  451.594492][   T39]  #0: ffffffff8f8140c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  451.594540][   T39]  #1: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8d0
[  451.594590][   T39] 1 lock held by dhcpcd/8526:
[  451.594601][   T39]  #0: ffff88805e70f578 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250
[  451.594661][   T39] 1 lock held by dhcpcd/8527:
[  451.594672][   T39]  #0: ffff88805e464cf8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250
[  451.594729][   T39] 1 lock held by dhcpcd/8528:
[  451.594742][   T39]  #0: ffff88805e464638 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250
[  451.594798][   T39] 1 lock held by dhcpcd/8529:
[  451.594810][   T39]  #0: ffff88805e466138 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250
[  451.594869][   T39] 1 lock held by syz-executor/8531:
[  451.594880][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.594941][   T39] 1 lock held by dhcpcd/8533:
[  451.594952][   T39]  #0: ffff88805e4f3f78 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250
[  451.595028][   T39] 1 lock held by syz-executor/8535:
[  451.595040][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.595099][   T39] 1 lock held by syz-executor/8538:
[  451.595112][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.595170][   T39] 1 lock held by syz-executor/8541:
[  451.720501][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.720590][   T39] 1 lock held by syz-executor/8544:
[  451.720604][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.720664][   T39] 1 lock held by syz-executor/8547:
[  451.720675][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.720734][   T39] 1 lock held by syz-executor/8550:
[  451.720747][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.720805][   T39] 6 locks held by kworker/u8:3/8552:
[  451.720817][   T39]  #0: ffff888033fc6938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  451.720871][   T39]  #1: ffffc90003fa7c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  451.720924][   T39]  #2: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  451.720976][   T39]  #3: ffff8880b863d850 (&list->lock#5){+.+.}-{3:3}, at: process_backlog+0x885/0xc60
[  451.721038][   T39]  #4: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  451.721091][   T39]  #5: ffff8880b863d600 ((process_queue_bh_lock)){+...}-{3:3}, at: process_backlog+0x8fb/0xc60
[  451.721147][   T39] 1 lock held by syz-executor/8554:
[  451.721160][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.721220][   T39] 1 lock held by syz-executor/8558:
[  451.721232][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.721292][   T39] 1 lock held by syz-executor/8564:
[  451.721304][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.721363][   T39] 1 lock held by syz-executor/8567:
[  451.721374][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.721433][   T39] 1 lock held by syz-executor/8570:
[  451.721445][   T39]  #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  451.721513][   T39] 
[  451.721525][   T39] =============================================
[  451.721525][   T39] 
[  451.721535][   T39] NMI backtrace for cpu 0
[  451.721553][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  451.721584][   T39] Tainted: [L]=SOFTLOCKUP
[  451.721592][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  451.721604][   T39] Call Trace:
[  451.721614][   T39]  <TASK>
[  451.721623][   T39]  dump_stack_lvl+0xe8/0x150
[  451.721650][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  451.721673][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  451.721699][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  451.721725][   T39]  sys_info+0x135/0x170
[  451.721757][   T39]  watchdog+0xfd3/0x1030
[  451.721789][   T39]  ? watchdog+0x1c9/0x1030
[  451.721818][   T39]  kthread+0x388/0x470
[  451.721846][   T39]  ? __pfx_watchdog+0x10/0x10
[  451.721868][   T39]  ? __pfx_kthread+0x10/0x10
[  451.721897][   T39]  ret_from_fork+0x514/0xb70
[  451.721925][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  451.721950][   T39]  ? __switch_to+0xc79/0x1410
[  451.721984][   T39]  ? __pfx_kthread+0x10/0x10
[  451.722013][   T39]  ret_from_fork_asm+0x1a/0x30
[  451.722055][   T39]  </TASK>
[  451.722063][   T39] Sending NMI from CPU 0 to CPUs 1:
[  451.722114][    C1] NMI backtrace for cpu 1
[  451.722132][    C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  451.722155][    C1] Tainted: [L]=SOFTLOCKUP
[  451.722161][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  451.722170][    C1] RIP: 0010:__lock_acquire+0xacb/0x2cf0
[  451.722195][    C1] Code: 00 00 48 09 dd 41 8b 45 20 89 c1 81 e1 00 80 04 00 81 f9 00 00 04 00 0f 85 50 02 00 00 25 ff 1f 00 00 48 0f a3 05 35 52 23 12 <72> 30 83 3d 4c e2 26 18 00 75 27 90 e8 34 df 10 03 85 c0 74 1c 83
[  451.722209][    C1] RSP: 0018:ffffc90000a4f7c0 EFLAGS: 00000003
[  451.722224][    C1] RAX: 000000000000003b RBX: 0000000016e524bc RCX: 0000000000040000
[  451.722236][    C1] RDX: 0000000028e678f0 RSI: 00000000a051d26b RDI: ffff88801e2f9ec0
[  451.722248][    C1] RBP: dd85313316e524bc R08: ffffffff8b4546f7 R09: ffff88802aab2d88
[  451.722260][    C1] R10: dffffc0000000000 R11: fffffbfff1f9ecff R12: ffff88801e2fab80
[  451.722279][    C1] R13: ffff88801e2fab80 R14: ffff88801e2f9ec0 R15: 0000000000000005
[  451.722290][    C1] FS:  0000000000000000(0000) GS:ffff888125b5b000(0000) knlGS:0000000000000000
[  451.722304][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  451.722316][    C1] CR2: 00007f5ea6ca7a60 CR3: 0000000039aee000 CR4: 00000000003526f0
[  451.722332][    C1] Call Trace:
[  451.722338][    C1]  <TASK>
[  451.722348][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  451.722371][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  451.722389][    C1]  ? rt_spin_lock+0x157/0x400
[  451.722404][    C1]  lock_acquire+0x106/0x350
[  451.722424][    C1]  ? rt_spin_lock+0x157/0x400
[  451.722442][    C1]  ? rcu_is_watching+0x15/0xb0
[  451.722467][    C1]  _raw_spin_lock_irqsave+0x40/0x60
[  451.722487][    C1]  ? rt_spin_lock+0x157/0x400
[  451.722502][    C1]  rt_spin_lock+0x157/0x400
[  451.722520][    C1]  ? __pfx_rt_spin_lock+0x10/0x10
[  451.722538][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  451.722559][    C1]  xfrm_timer_handler+0xa3/0x9c0
[  451.722578][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  451.722595][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  451.722616][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  451.722637][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  451.722654][    C1]  __hrtimer_run_queues+0x405/0xb10
[  451.722686][    C1]  hrtimer_run_softirq+0x18f/0x260
[  451.722704][    C1]  handle_softirqs+0x1de/0x6d0
[  451.722724][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  451.722743][    C1]  run_ktimerd+0x69/0x100
[  451.722761][    C1]  smpboot_thread_fn+0x541/0xa50
[  451.722780][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  451.722801][    C1]  kthread+0x388/0x470
[  451.722820][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  451.722838][    C1]  ? __pfx_kthread+0x10/0x10
[  451.722858][    C1]  ret_from_fork+0x514/0xb70
[  451.722876][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  451.722892][    C1]  ? __switch_to+0xc79/0x1410
[  451.722915][    C1]  ? __pfx_kthread+0x10/0x10
[  451.722935][    C1]  ret_from_fork_asm+0x1a/0x30
[  451.722959][    C1]  </TASK>
[  451.954289][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  451.954317][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  451.954348][   T39] Tainted: [L]=SOFTLOCKUP
[  451.954355][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  451.954369][   T39] Call Trace:
[  451.954378][   T39]  <TASK>
[  451.954388][   T39]  vpanic+0x56c/0xa60
[  451.954421][   T39]  ? __pfx___schedule+0x10/0x10
[  451.954451][   T39]  ? __pfx_vpanic+0x10/0x10
[  451.954487][   T39]  panic+0xc5/0xd0
[  451.954514][   T39]  ? __pfx_panic+0x10/0x10
[  451.954541][   T39]  ? preempt_schedule_thunk+0x16/0x30
[  451.954579][   T39]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  451.954606][   T39]  watchdog+0x102c/0x1030
[  451.954639][   T39]  ? watchdog+0x1c9/0x1030
[  451.954669][   T39]  kthread+0x388/0x470
[  451.954703][   T39]  ? __pfx_watchdog+0x10/0x10
[  451.954725][   T39]  ? __pfx_kthread+0x10/0x10
[  451.954755][   T39]  ret_from_fork+0x514/0xb70
[  451.954782][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  451.954806][   T39]  ? __switch_to+0xc79/0x1410
[  451.954840][   T39]  ? __pfx_kthread+0x10/0x10
[  451.954870][   T39]  ret_from_fork_asm+0x1a/0x30
[  451.954912][   T39]  </TASK>
[  451.955332][   T39] Kernel Offset: disabled