last executing test programs:

6.364327371s ago: executing program 1 (id=262):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/220)
syz_usb_connect$cdc_ncm(0x3, 0xa5, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0x0, 0x0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ecddc07b7bc9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x41, 0x7f, 0xb0b3, 0xb4}, {0x6, 0x24, 0x1a, 0x80, 0x27}, [@country_functional={0xc, 0x24, 0x7, 0xff, 0x2, [0x1, 0xe3, 0x3]}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x2, 0x0, 0x2}, @acm={0x4, 0x24, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x33, 0x1, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x8, 0x23, 0x40, 0x5, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x0, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x1, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x77}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x5, 0xc0}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x3, 0x4, 0x10, 0x20, 0x5}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x1, 0x80, 0x9, 0xb}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x6, 0x8, 0x31, 0xf9}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb0, 0xa, 0x10, 0x40, 0x4}]}, 0x6, [{0x4c, &(0x7f0000000200)=@string={0x4c, 0x3, "4ff6b697bfb4709d4d2d0f49d253e6a269c7956eae05bd16f795baeec5b266c721de67b4a22aa29877caf7749bac7d72f5d19d2bdd1e1ba24b51e91566f7e85f9cbc04a3e25711ef8db2"}}, {0xc0, &(0x7f0000000340)=@string={0xc0, 0x3, "e1e85b636f05749dda84b2927397cee166b44655e547358ce0c878131ea92e8ff0b4061d4848219b12f2c89592c35512b02e98111038b1af164cae900573a9aae14776d25962ee2b75e7d8fb20623dd360e48026c93c726efc8b0c90e72d3598c9525e2582f39f2f48476e6dc120a5220c5b602416218874975e32b6612e06023662ccab27beafa28734cfd5ca55f11eb98d3b92677aadfe588ebdf758fd7520acf07efac39fc1c7c64132255ff6be6c77ee09d079913c5155ab2ce00ce2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3009}}, {0xc9, &(0x7f0000000440)=@string={0xc9, 0x3, "dfa5d44ef66a63a83fa8d487e6732bfa2ea3d7a95c56f43120609f3a4ecbc5192d743f32d8a9ec77d59bf8e41f3d4ab54c17f408ea24e8a91b6c1a5cffcae6d806750c6e09142e804347c925e043ffee8f829dfda1841636bda071e53ac2edbc04087e029c944578394d5890ef0bbd716bbc114d3a5fd65cee802787db7d0fb004662c7121e535afcb4515761f11e9677922d9a96b72f53ca0372390192b7684294b172fc2869a608776c5d2945b1c7ea8e0199ba77e315f12a351c952044eed3257c34543889b"}}, {0x8c, &(0x7f0000000540)=@string={0x8c, 0x3, "f203579fcebccbdbcb443fc44af2d5a37ad07c4ddec3538f130898ae7cabfff44b0d3905a5dce4e995255951203b404ff9d14dd3605a96dfa815c4b5387f6d4e537b2dfae9c5fd0034f53d0a82d63c94647f2d2800daa2e722ffab2d6af33201aa232b5b0a7ca7b802b7e3196a71562a426cad1512eee978df3ade37a0d103d9106f68330615bfdec1ef"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x419}}]})
socket$kcm(0x2a, 0x2, 0x0)
socket(0x10, 0x3, 0x4)
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f00000001c0)=[{0x888, 0x3a00, 0x0, 0x0}], 0x1})

6.190757112s ago: executing program 3 (id=264):
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="281c000005060f8d00000000000000000000000005000100070000000900020073797a3200000000"], 0x28}}, 0x402c040)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)={0x30, r0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0d]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0)

5.993364502s ago: executing program 0 (id=267):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x1000c080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0xf9, 0x7, 0xffffff00, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x1, 0x20, 0x81}})
r5 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x404c840}, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000480)={0x7, 0x2, 0xfffffff7, 0x3, 0xc, "f3abadf078adddd9c6e8b275bf15375a4b28e9"})

5.362740767s ago: executing program 0 (id=271):
syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) (async)
r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_connect$uac1(0x4, 0xd0, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1026, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x7, 0x20, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x8, "7d14"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x9, 0x6, 0x6, 0x60}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x0, 0x8, 0x5, 0x40}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x48, 0x55, '-g)', "a1"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x7, 0x3, "3b6041dce0cc8b80cc"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x1, 0x4788da56657634fe}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa8, 0xc, 0xfe, {0x7, 0x25, 0x1, 0xc, 0x5, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa, 0xe, 0x2, 0x4, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x200, 0x6, 0xe, 0x81}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9, 0x1, 0x9, 0x4, "b4c7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd0, 0x7, 0x8, {0x7, 0x25, 0x1, 0x8, 0x3, 0x7f}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x3, 0x5, 0x8, 0x10, 0x81}, 0x112, &(0x7f0000000180)={0x5, 0xf, 0x112, 0x5, [@generic={0xe1, 0x10, 0x4, "122ecf5ca8baea1028f4f8f603c3fffadde79f13b2385b9615baa7465f07de37ffd2b48f75cdc157ea9f51a45e05ab8c189a9f0ab70c7fd2b245e16877993754b5cdff379f719aa29ed76fa7e514cb495915df696986bee9dd7f208da863d6e2a092c0a699854f21ab205677e5989d24932eab71b43e54eb599091202ee92a54af6b2ca6913abaac9a54776bbf7eecf2a3218f1127835faa1e671e7ac38d5101f863f030062da9c4a64b1e479f6fb151af4c42c7530782569e8c87600339f3677274b118c6aa4deb7af362d2a771f4716bb93b0b8305376d1c7864ee26cf"}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "f058b2c5440a62fdab1173401b10fe8d"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x9, 0x9, 0x5, 0xb3a7, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x2, 0x7d, 0x4}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x421}}, {0x1e, &(0x7f0000000300)=@string={0x1e, 0x3, "d79e5c7e58cb72912ba99e45eefd85809dacd3c0bcfe07799593e942"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4c0a}}]})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x0, 0xe}, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x140, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.323916444s ago: executing program 2 (id=272):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x200000000000000, 0x0, 0x0, 0x0)

5.043638275s ago: executing program 1 (id=273):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
open(0x0, 0x2a0001, 0xd2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$key(r8, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0)

4.260662977s ago: executing program 2 (id=274):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}], 0x1, 0x4008004)

4.2603624s ago: executing program 2 (id=275):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
open(0x0, 0x2a0001, 0xd2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

3.968493115s ago: executing program 0 (id=276):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x2)
r7 = accept4$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800)
fchdir(r7)
fchdir(r6)
r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x80049370, 0x0)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000200)=<r9=>0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r10 = dup(r1)
capset(&(0x7f00000002c0)={0x19971634, r9}, &(0x7f0000000300)={0xfffff25d, 0x3, 0xfffffbff, 0x40, 0xff, 0x78cf})
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000f80180c2000002527bcee565f486dd646c0154001406"], 0x4e)

3.819328118s ago: executing program 1 (id=277):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x2, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x8001, <r3=>r0, 'id1\x00'})
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0xac, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x73, 0x7, 0x1, 0x0, "c75d411470836219f5a749e094da6f2e07bd9546a67add89a034fd0ece050e817dc36ff4e74fbf712ccc2747dd30bce090918cff9434661698c893487f5609f7fb0ea45ee6ec648b1a05aa99d210d3d815140aadba0e10ca71205b7fc3a82f6b593d88efb9e982ba17e767591170ae"}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x14a8, 0xb, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_EXPRESSIONS={0x145c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x13fc, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x13ec, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x1d0, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "5c77abcdd39da62361589884f9bdad038f6f9925c32974db3ed5caadac96429023c06353c42cf167c86245a04220819a04119bd0fc408d90a7ef00e3c03a4be7432b5c0d79e12a7f719afd7281e7ec26ed2a007f9fd07dd890a8436fc193d5718ac5e708cf9ea4c07cdd98363cb58d954446951ce5a8051d0749548a94594c08da980436d0519bb9b3dafad31e269aac83a2f1714e5fb6d3413837f7a872e1eae5"}, @NFTA_DATA_VALUE={0x5d, 0x1, "ba83d9af7787b9aa773e1bae6f195279ad6bdd3fb633f1a43cdd56f547e88d80d2f46daebf764ca8dedca87ad9ecdef75975eddffd9a780bec19acffb16aa5529947a3273f2786b601f533d293c126a194f0ca30af249a2d38"}, @NFTA_DATA_VALUE={0xc1, 0x1, "d53831a3ca6763c0cd555329fface2775c60b7c3d224573c50b87b1cb1cef6907ea782f8eb229c00d5e0d42f2182df18b8e577939c527f8fd49de6278d54fb15eeed7eb553b4c80df13ba4a837b2962663afc7a0b3bb7393bb076b8229a1374856c60f2f777eb51377e12c0de560a07b751cbe76c08fb332fde435e60467067eb3730f537f1566f9d2f9e5d5d3eda4924f95fa6bce7cf3b26ae4b703608c1676dd8a4e263852bdea1ba4f424a57c2dbea4438610fc76864639e363ae3c"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_RANGE_TO_DATA={0x10, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x11e8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x81, 0x1, "7226bfa60240f83e17d6048a605b3140cf494f6fbe610ccf87feaf66281bdf656374ad4a828fb4791733689240844470729473ac1eed428f154cb957242f225255baaa15b2e58d4e9eb3147dcf8108738af3cff17d0fa098aaf79dd722ca9a38b281a1a7d97f520dc88470c45571fa25eed189b78015f50813961c6783"}, @NFTA_DATA_VALUE={0xc9, 0x1, "4f19d0c9f0a16f92c25eb31aa27269c7576ea724c6b4dad891699e81cd20d03b9943891d5e00395c704dcc8089cd848db78f6167b1c89daa934af7d89d2b1d899ecd5bfa72b5b3dfe1275e1469c75806999c6ce33880d66da2247c247456e20f10009938e36bda76687e7ab99a5bedc55b70f7c0417f41e624dbfb5997bb45cc7c720aec40bab7e38f76f70148f611b01231dfe5278db2ebfd8eb5058bc2f740725ae5d42ad0a800f479979c9b16d68608e66440c9e4e1714898392680591534637a31a2db"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "51caf168228cb35c792c7d64d68982bab71be3f8b8883c2131256feb99d7c9b1d3ef1fb1d798ce530904fafadb7c350d9b79b6bb611a69599230f11e4c8cf5951735fd0846f22fd3d6eb016ee575a9f6a1be4e97bc79749688740c9a24b0dadff90fb485f6fba2d66bd3d357d4439335ba05d1f2718b7ecb50b333debb2465d903cfd7d2d65a9ef28f4084222e77eb570701cc12d34034e9e2a298c785c93fdb6068685825522673567e6c166d1bcd468cb0f5735767f9ac8946f1febb1f8475fc7f13e2579f80158fecdabfb70c43852be80a97c6d52e7f0f88c1b543229500eb22edf3bc7b65a07dc297d82ae8d66eb1ef1a0fd0ce3c5f775d4ac9e6d2a6dff4ba1b84356e6906982450af7bbd0664a1953a64fc9539d14abcbc92b08fe0a7ead96d39b3639dee07bf740e9ead549832db63aaa5a68a4c62a99da5f1785357d736b2683d03c242d8e53dbaa2bd504a06115aecd9cfa9b0e8cbf4150502dc2d4aff8e165382c98e665265ae0ab673389313b127efbd52117d8f998731acd4fcd43bd2f1c3ad24c2556d1134171795b3a58458a55663122d53f7f14cbfd90a364edf9ff72f5cde0244dc154e7a64ab673a75d230b12becc3df39b7eceddbbef1c2b0254b556777f946c12a5dd8318803f0b61a6ed01cfbf10c502d5a019e311e808580c5dd9351a18afcc87b6c26b10cf8ed6ae4056c8d968063e9248b16e56423b67adc07114196454b871b71e6c71f779056315bbb764f6ad8ed3591ec059f9ec716947a31f8b303ec975fe6e9b5d5176c6f29f851a16748c713585aac0412727362e27646bbdac7a491c1e5a8512e0df8f77388c10b3219712d922ec6d9a114f87a7c798c2c22dd6630ca9e88bc93482ef8479e90a4fbb3d53dff85d3684627b2c589c0be105c16788a750466ba70758af7340c2d06b7f2468c5ec00cacace8a38c9e978536e9195565d7c269d0acf59c775b71a4f3677751773afe5544a476eefac82b54025797b3908b2f801078f793a397d7d432c7ad7a9fe5813d0b8bd3c788f0c86e0f8b3191735cd1edf538204d985305127c344422c44e45ac021175614590372ce0e314ec7a5740585c7215182ad14401bdcadc3649423bf65cc49f8a73add1dcd0063c4598a441d4713087a85fdd69a9b0083bc4a2db817ceaa0f705602ca55df11e29df9f3e40301ab6018c8332b1b2a53338126d77938b8846e9287c2ce1f1c7a3576a20a84f342b7a374f5d7611b25e76df99f8e15a7f2fa76db667abab3c7eabba28e4dcadda6c9b228a5c6a2f4a0a7206b31e7cee57bd91a628f33437ce70de9d2f002e1b1156b3be428f666e40351fb50d6a6bd99e961aab83b3cbdd3b325abadc0081f0728ed7b72816ea867e657fe7303ac138047ce5b4ca846744fb968734bfaeb7fc17f1b10f2b6dde53da9c628223dd3236db234418bf44c7b0e414c1105a703fb2f0133c874791f6bb23efc01cccd96732ff4a1e223a648039bbfa048c06932174c3fa4c7ab9f943cacdcddd57699f9a4372f3f2b6086e3c70ba4a3b0504400e023288e38e62e9659832f3718113042b5525943e6c7c698a43f348ea7ebf2edf5d5bab00d63f5ad7e85741327c449fb29454d4c9414ee3d7a80a65626377f9dfcb0f544713dde05ffd4ca3c672cd803e89b1ecde0e846dd3b1eb25d216977403253f86cb8a9e9b7bf64301894fcac12ff5f4b36bac38bf08f39a631285e5d709f39632df49a4ca525b8236e630f7db855559b8b5897db1d6a896da7bf871a53e28f274f26fabfe91944ab388cec01d6fc3a9c3da549cca04638ac4b6b8e7fa9f9c068718e18f1bb66ba44c8c1288946f94f7948a2a8210bd4abd7b8673ad5708e7437741b2c6d13b556b83a87e2cec155f7f4fcd1402a9c1b2d958ff6ecac6708738aa133f4e5c744fedef8f5eca5285bb0444fe45d4f221917916085efc6a4483b197aa56974ead8b01be2521c80269d6b91f4a8b4aed2cb3b85d7d7715e9e08705855c72a12b4c815913a12605527a5bb6af4c4c740985bcee6acda6120cc16ea467ee6a91b61f85561e5de4840e088eae8570f307ca7c6dbde758f470721163216feaba0aafd0ba521142ac7ec63188223da095b050758eda2df10e14d48860c1f4db40e6e8e121b309e12f16ed9396e6841b1a63e03660042951b8cfef38801a5d821de402394499a979c32253d43e3221339c945af9f19efe0668120985e122ce4cb3416c963cb03d62b7ad6e900d64282c0c362e1537ebf3b8672ce3e82c51305ff981e0fd9c4f3cda224cfcfc4caa7dc3d284160d5864aeffe9cf090575cf40cc46d6caae44813933d438639d43ced0bae4bb17876986054a2cb4e9762dd1069a04848db7f98196b4e717af2c537af83b64e1dd9c07cb9418a5661454ade4993eae36d9a2b8b060ece0aa3d61e603e2d46ad41cfa12ce419c1c12636c6439ae5caf4edeb2d4aeef649d9323076538ebb0389de257db20b474b9a65d9240dd6a517e75104dc132a1a0bf8f525d3a4c9f025faeb999cc46852078a41a13d31db10fb9b6ded679618e791b7afee52d33850abadcecf5d3a8ac2f5e9a2c466a71116ad866e6b67b28842efe44985fde9ad858ca6518142c162b36d45dec9783815698d80bc8c260eb74c178849ba792f02b85fbc48644876005f4c21dec9803d4c35e52ee3b82b1a5f0c1887d3e9efc0a5a6b4e5694156bbf08ace02c404be0bb108381b6f66cf3ec2e837718ca49f67d9e1a9cae4640905280047eae883665fe8e378ac1552d89f65bf2e2f8ebcf59f2e2de12a0576b1cceb8bfe84befc1137ead386bb981a8fbd0f363641e7c3a2584843aa69d7a926b322c67798674aa0dea945e5164ea63b0eec1da790b20b848f029b6c588fbcd3c2c0047b2cb50c001a13a0a9416cd3ff0eaa369a487ada9c1598da41684334b9461b983e98e8b62079c1e40146aada747e4ea59ad25cbb469a811a71b28dc7590a8199342d2cdf820d275193fb24639c736f75a4dc2f1837d089d71fbb84128c7893c2d9068bd1cc2ef724969fefdcadd31dac81716f12acb24085ff3ade72c20afab59d3920320c1cb560dacbaedd0c6a922c05a4fbd4eaf09e71cbaafcc2e58e6a495af5a00f69b27dc989c7cabe290cd2da3507baad4e1e2c161bba0ceae9137f645c1ecfe619e99be28b5dd4e9ced55028df74ce8338fe33991f48340ea2e001b1f174e95aa0b2c1e88be3454731401e6147e28b3c8250526f93f2f01f22f440767418d60ce9de12ed7ec9f2ab37d9c18e0f2f02c37c4e476a5deb110df0d3187c07c08f311e270b53df3f53608fa84c557170d95f19af24d57ddf6c188c8fc58a3ff0ab70c92d3fa8f1d2b759ea73148d82394300745bfd5d5c7f84b137f4d5670ff67d5c5a02e175728da8fbb89560258a78e4eea5048f92d2556f4d0728a603963435c5c9cdd8ee0c6d9646255a4dda99d6cf1e1bb99232072c4cf1ae7f1e0f61d47e640cf05a2c02782722c19cda71d1a4b0293e6c6acd85c22c0334395c1f0c03c14ada9a541144ff6227f5381f87ec3008afa6bf8040c7e49f2ba5cf502e3b93897c9ef9f67ba48ebf034d65d839237e2988b27aa47ba360475e5c5940565c2065f18c6b33cb0ba955d8ae88a37ea5f2d5cb9c17fc04078440a4681365c012ce1b23fb6711de15e5f590cb00194ecdff842199566aa5cda6d87a13a27eb3edd8bb7a2dc2f519fbcc859727789d6d2af20c300fcbc8abf1718f8b1caa779fba3735532a97fc96aec94383bfd23b6faf7ac10961e2ed32ddb5b26241c43d9ece633f155876e880e97d2fe3cb55de30d5f2ff8c605ad84aa09a24ff40a6e381f7c6a6511b431b362d3b9fe9750de4c2db80fca63486d779e7869aa39b655fa3885d768c583591016d75aed9e641e5ed906b267dfd2b10434c23623422effdacc10c6214cc5c206b1c76c1ab8647eb65c32768646d3d7bc21691419481a7bf333ed38d833b30442e437e1e705b2f33856e16ddb40fa8814f8508843eec2dfd0f9d65d8efb537fa7751dc6e0f89c84c3534d14154123ef0311659f4a880ccb21ac3b75a24e45b4ef69912ee09ca3213c6a679054dca7022890cfbdba88b77ff0175f10ee60e12b94765f42cb754ee3886beccfab19161f25a71bfc74466d85e43303eabdf307d46bc622116321a8e29af0f97c248b48d5c66604595bc6380e00e218173b8b99ff3da2d57f41f62652475bb4ad72abd089077a5b1ecc7de4a64f4b958dd46a9160c49f7808253390b9ada2c7d4c2b90d7c86356ccc2b6028c457c21d620f03bc6192cb0e269879e70ba9783902a7dce6e9e37976978601aa4474d4a419b7564b7597e4a3db413216c1980d7ff0ccbffa5fdd9f06f7152b9b74e3f993f51b85e53b9d64ef72089770bb5e93fa6158faf4588c26bf10813dee9e677d8ce4de04e18aaa4bfc55d321e5905e598ed300caf88c6e256e0614a631a986ff70c6a81b90e4b3e3252c48a313ef695044bccaafe0a26b0cbb69894dacabe4b44d9e0e628b33018307740824470272c42c4604535ab1314533aab39d489320787cb11e01ba9974822e5eccd34f0fe0b002db17384723bf55bbce310b9ea04eebcf0adf1b2a9af4f30e935acaa19ba146f8a624f399658da0fa9e2c42776aa694d5b8294927958a1e086a08e0be0bd2b6f1162814b1410b9b6e5d1ba2e81f2b26e39f135b0e994bb632742ed6e0f7722de36e7c00c3c213104d4d15f78810fa1ee4e8b54f180a76b4faf4957949fa4ee9abfad4ed37ea705f9a13b536964b886f591bae1ebcfb0a5392d9c9e5bba4fb9af4122ab1db9dab1360159eed9cd8c44b926706b3cf3b70a507560bc79a69ff676c4c06a3a3a5dd046c691a0a82e3e840add3b81d2f881889d39b6226d16ffe31c962e032518f44662351fc15f069aead39cf944908491bc274144657be85fd8708d18ec604e32a443fe8e6835240273fc0f13cf863db9a1e9886447fee270b3abb7a23f53b50420ff082d9c75086cfa431b6992bc8042bb0b25ebfd424115ba010fa44721feefb8f78643141efbeeeeacd2ca1c213efe4e11aaf5442f52f7ae0d3564ae4e51513a7d5fff2137c2f4307bbb8d90e6188628b187380a5b136b2c1f2a6a1c2cc9f40e2812555be3ea1bc6b4cbafe914ec9b57e86328c9c4240c3c17101f89407a07480ea18db742a30789fb3ac68762672814eefa148b4af35e5443b5e270013acdb779d1c81a63b7d62925d87d2ecdf4009cc7774008bc6e176e2a205cdac76bbafd89a54d950c439ec8a16a767c2bcfbdb40bcf673e2a54ec23d8039998cd6776f89c889bb770045846e4db1ec1eabb7c64f70878bfa72bb906bfc8aa11c9bcfe7558721d4f02ad3db59d9c9dcaf293cd34a84f8a721c9c24afbea3509f4ddf94a5e5a65fc0868458ad8512ffcff0b94702aed44378150cf6ff0c6e465e8e6d2449faf4bbaf2e2431a49eab272757ed908223a2fc993ae1e763baddfac7273ee285c2a45b5f81057ca88791cf0c95856bd484d890613c91157ad8174ceafd35a6523dba2d574bb6e66a760845c062d5356a7f419efbb6b9c5e5c0e30ac2c393a82cf9b0498d0c5a953ca2cf0ad400b8961d56c3396cba089660e8d317509d64fa0a3e02cab97d64e50d0fe50248aa8800e41b2643a94f4c0d3e19d4159425f670f3b565be40fbb6a9a54a587ed68c8471d76dfd35055e000adf0bb54558fc388bc32b88b920edd5bfc3e3fb4a8d0a4b359bbf1ea47a55f2905a4bcb9fc2e3e6da3f7"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x21}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0xd59a0feadafedb8a}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1a3}]}, @NFT_MSG_NEWTABLE={0x120, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xcd, 0x6, "58ef543e9e440c611f8b538bf30fca3a0cdf4cb41b4c237bb82a19ae5fee0e64b4e54db6efbd640b5689ad8184472e18bd0012d41b4495ffa0b8a98549379ece3b4651e30bba831f7898abd678fefae3f67cf548579fa1bdd2ea990b6ef14b36c1dc6479adddfb3be86ec1fdf940b7f3811f93434a0a7fbd9aa4287dd47ae5ff1bc541a8c2093f0b1db4e356eacc8d22c70fbf7f38ec6f20e71b2462355c717adb8a61e951f8c15ab2fcdef8f0e0f814bba1d100e46261970bd09d94b96c02d5bbe5c40a7627973b96"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1708}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x70bd28, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r4, 0xff, 0x1, 0x0, 0x57)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000200))
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000008d0b5c3e0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)

3.560897639s ago: executing program 1 (id=278):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8], [0x0, 0x1]})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000180)=[0x6], &(0x7f0000000240)=[0x68, 0x0, 0x16, 0x7, 0x0], &(0x7f00000002c0)=[0x9, 0x3]})

3.464147525s ago: executing program 0 (id=279):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}})
syz_usb_disconnect(r0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cb", 0xc, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000000140)={0x0, 0x3938700})
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8f, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x4, 0x10, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x8, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5409, 0x1, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x1, 0x80, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x6, 0x9, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x3, 0x9}}}}}}}}]}}, 0x0)

3.462554897s ago: executing program 1 (id=280):
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "9d428f5a3aa013d488019178b44faa1621ed8704721b0ec8a6b195b596ff4ec88fe6f08c8e1422ea70dcdc966fd32247345da0c286e0acb1c2c672808d46c33d", 0x10}, 0x48, 0xfffffffffffffff8)
r1 = request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000340)='.^$\'\x12{@\\\x00', r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000002, 0x0, 0x400}]})
r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485"], 0x0)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$I2C(&(0x7f0000000300), 0x8000000000000001, 0x1)
r11 = dup(r10)
keyctl$invalidate(0x15, r1)
write$UHID_INPUT(r11, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d34101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fe32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439d9921b379a3aca07f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8a96d5308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800ebdf7f2e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0)

3.140380933s ago: executing program 2 (id=281):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/220)
syz_usb_connect$cdc_ncm(0x3, 0xa5, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0x0, 0x0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ecddc07b7bc9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x41, 0x7f, 0xb0b3, 0xb4}, {0x6, 0x24, 0x1a, 0x80, 0x27}, [@country_functional={0xc, 0x24, 0x7, 0xff, 0x2, [0x1, 0xe3, 0x3]}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x2, 0x0, 0x2}, @acm={0x4, 0x24, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x33, 0x1, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x8, 0x23, 0x40, 0x5, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x0, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x1, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x77}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x5, 0xc0}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x3, 0x4, 0x10, 0x20, 0x5}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x1, 0x80, 0x9, 0xb}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x6, 0x8, 0x31, 0xf9}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb0, 0xa, 0x10, 0x40, 0x4}]}, 0x6, [{0x4c, &(0x7f0000000200)=@string={0x4c, 0x3, "4ff6b697bfb4709d4d2d0f49d253e6a269c7956eae05bd16f795baeec5b266c721de67b4a22aa29877caf7749bac7d72f5d19d2bdd1e1ba24b51e91566f7e85f9cbc04a3e25711ef8db2"}}, {0xc0, &(0x7f0000000340)=@string={0xc0, 0x3, "e1e85b636f05749dda84b2927397cee166b44655e547358ce0c878131ea92e8ff0b4061d4848219b12f2c89592c35512b02e98111038b1af164cae900573a9aae14776d25962ee2b75e7d8fb20623dd360e48026c93c726efc8b0c90e72d3598c9525e2582f39f2f48476e6dc120a5220c5b602416218874975e32b6612e06023662ccab27beafa28734cfd5ca55f11eb98d3b92677aadfe588ebdf758fd7520acf07efac39fc1c7c64132255ff6be6c77ee09d079913c5155ab2ce00ce2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3009}}, {0xc9, &(0x7f0000000440)=@string={0xc9, 0x3, "dfa5d44ef66a63a83fa8d487e6732bfa2ea3d7a95c56f43120609f3a4ecbc5192d743f32d8a9ec77d59bf8e41f3d4ab54c17f408ea24e8a91b6c1a5cffcae6d806750c6e09142e804347c925e043ffee8f829dfda1841636bda071e53ac2edbc04087e029c944578394d5890ef0bbd716bbc114d3a5fd65cee802787db7d0fb004662c7121e535afcb4515761f11e9677922d9a96b72f53ca0372390192b7684294b172fc2869a608776c5d2945b1c7ea8e0199ba77e315f12a351c952044eed3257c34543889b"}}, {0x8c, &(0x7f0000000540)=@string={0x8c, 0x3, "f203579fcebccbdbcb443fc44af2d5a37ad07c4ddec3538f130898ae7cabfff44b0d3905a5dce4e995255951203b404ff9d14dd3605a96dfa815c4b5387f6d4e537b2dfae9c5fd0034f53d0a82d63c94647f2d2800daa2e722ffab2d6af33201aa232b5b0a7ca7b802b7e3196a71562a426cad1512eee978df3ade37a0d103d9106f68330615bfdec1ef"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x419}}]})
socket$kcm(0x2a, 0x2, 0x0)
socket(0x10, 0x3, 0x4)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f00000001c0)=[{0x888, 0x3a00, 0x0, 0x0}], 0x1})

3.139969802s ago: executing program 3 (id=282):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x12000, &(0x7f00000006c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_type={'obj_type', 0x3d, '%%)'}}, {@obj_type={'obj_type', 0x3d, 'status\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@euid_gt}, {@pcr={'pcr', 0x3d, 0x12}}]}})
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
lseek(r0, 0x0, 0x1)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x13c}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b", 0x61}, {&(0x7f0000000840)="def015f646c27f13274cd20d6d707e2f6be3a3a4540325436209143b8ace92f28dfdf027c9cdba457301d0450aa6e7650bd347dbf0dcdc5f6b1d131a558a071e36419ed57189b720a6d2786ed2be1a91ad79bc258f6284b98db8c647affe92814cd09d97a01e852caddeb47912a00549ed86327c1b14b6b3b090b4c2a32296a4d9f0b9bbb5840ad7", 0x88}], 0x3)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000a40))
read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020)

1.60795244s ago: executing program 2 (id=283):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0)
r0 = gettid()
timer_create(0x7, &(0x7f0000000100)={0x0, 0x2d, 0x0, @tid=r0}, &(0x7f0000000200))
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f00000000c0)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c)
mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x6, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x1484, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d19388", 0x49}, {&(0x7f0000000000)="e6424fc8d2b95b63038b9f46ae0da25a86ca8a7ba14ec4b8ea31e0c88c3e935ae550947632d64781a83645284b83fcc63a38454ff8b1f7c228a29d1d911a09140ac3e58ce0a034af8cf4f30c9efdfdd4e200c9af4344452681d3713a235f821b5cea80bb263275573fdc8a587297bb57cb581be7aac826c31d2c385e7bdfc06f1d764977b4c74922e8d32ac70ae73c3f54c1a27ad5422a9981f0b1d173197c23edf26275c75a00", 0xa7}], 0x2, 0x0, 0x0, 0x1f000801}, 0x0)

1.376776327s ago: executing program 3 (id=284):
r0 = socket(0x10, 0x3, 0x0)
r1 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8)
fchmod(r1, 0x28)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a124300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0xfffffff7, 0x8, 0x8, 0x1, <r2=>0x0})
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x360, @empty, 0x3}, 0x1c)
syz_open_procfs(r2, &(0x7f0000000180)='attr/sockcreate\x00')

1.316524122s ago: executing program 1 (id=285):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30998a267b0fbb2d}, 0x40400c0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x8000, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x0, 0x30}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0})
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
write$sysctl(r5, &(0x7f0000000080)='1\x00', 0x2)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000180)={{0x8001, 0xe, 0xfb8, 0x9, 0x3}, [{0x6, 0x9, 0x6, 0x5}, {0x100, 0x7fffffffffffffff, 0x2, 0x2}, {0x7fff, 0xa8c, 0x6, 0x8}]})
write$P9_RSTATu(r6, 0x0, 0x232)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

1.11990826s ago: executing program 3 (id=286):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x2, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x8001, <r3=>r0, 'id1\x00'})
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0xac, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x73, 0x7, 0x1, 0x0, "c75d411470836219f5a749e094da6f2e07bd9546a67add89a034fd0ece050e817dc36ff4e74fbf712ccc2747dd30bce090918cff9434661698c893487f5609f7fb0ea45ee6ec648b1a05aa99d210d3d815140aadba0e10ca71205b7fc3a82f6b593d88efb9e982ba17e767591170ae"}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x14a8, 0xb, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_EXPRESSIONS={0x145c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x13fc, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x13ec, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x1d0, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "5c77abcdd39da62361589884f9bdad038f6f9925c32974db3ed5caadac96429023c06353c42cf167c86245a04220819a04119bd0fc408d90a7ef00e3c03a4be7432b5c0d79e12a7f719afd7281e7ec26ed2a007f9fd07dd890a8436fc193d5718ac5e708cf9ea4c07cdd98363cb58d954446951ce5a8051d0749548a94594c08da980436d0519bb9b3dafad31e269aac83a2f1714e5fb6d3413837f7a872e1eae5"}, @NFTA_DATA_VALUE={0x5d, 0x1, "ba83d9af7787b9aa773e1bae6f195279ad6bdd3fb633f1a43cdd56f547e88d80d2f46daebf764ca8dedca87ad9ecdef75975eddffd9a780bec19acffb16aa5529947a3273f2786b601f533d293c126a194f0ca30af249a2d38"}, @NFTA_DATA_VALUE={0xc1, 0x1, "d53831a3ca6763c0cd555329fface2775c60b7c3d224573c50b87b1cb1cef6907ea782f8eb229c00d5e0d42f2182df18b8e577939c527f8fd49de6278d54fb15eeed7eb553b4c80df13ba4a837b2962663afc7a0b3bb7393bb076b8229a1374856c60f2f777eb51377e12c0de560a07b751cbe76c08fb332fde435e60467067eb3730f537f1566f9d2f9e5d5d3eda4924f95fa6bce7cf3b26ae4b703608c1676dd8a4e263852bdea1ba4f424a57c2dbea4438610fc76864639e363ae3c"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_RANGE_TO_DATA={0x10, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x11e8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x81, 0x1, "7226bfa60240f83e17d6048a605b3140cf494f6fbe610ccf87feaf66281bdf656374ad4a828fb4791733689240844470729473ac1eed428f154cb957242f225255baaa15b2e58d4e9eb3147dcf8108738af3cff17d0fa098aaf79dd722ca9a38b281a1a7d97f520dc88470c45571fa25eed189b78015f50813961c6783"}, @NFTA_DATA_VALUE={0xc9, 0x1, "4f19d0c9f0a16f92c25eb31aa27269c7576ea724c6b4dad891699e81cd20d03b9943891d5e00395c704dcc8089cd848db78f6167b1c89daa934af7d89d2b1d899ecd5bfa72b5b3dfe1275e1469c75806999c6ce33880d66da2247c247456e20f10009938e36bda76687e7ab99a5bedc55b70f7c0417f41e624dbfb5997bb45cc7c720aec40bab7e38f76f70148f611b01231dfe5278db2ebfd8eb5058bc2f740725ae5d42ad0a800f479979c9b16d68608e66440c9e4e1714898392680591534637a31a2db"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x21}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0xd59a0feadafedb8a}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1a3}]}, @NFT_MSG_NEWTABLE={0x120, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xcd, 0x6, "58ef543e9e440c611f8b538bf30fca3a0cdf4cb41b4c237bb82a19ae5fee0e64b4e54db6efbd640b5689ad8184472e18bd0012d41b4495ffa0b8a98549379ece3b4651e30bba831f7898abd678fefae3f67cf548579fa1bdd2ea990b6ef14b36c1dc6479adddfb3be86ec1fdf940b7f3811f93434a0a7fbd9aa4287dd47ae5ff1bc541a8c2093f0b1db4e356eacc8d22c70fbf7f38ec6f20e71b2462355c717adb8a61e951f8c15ab2fcdef8f0e0f814bba1d100e46261970bd09d94b96c02d5bbe5c40a7627973b96"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1708}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x70bd28, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r4, 0xff, 0x1, 0x0, 0x57)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000200))
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000008d0b5c3e0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000100000000320000000000000000000000000000000000000000000000023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000700000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff00000000000000000000000000000000200100000000000000000000000000010000000032"], 0x23c}}, 0x0)

1.022326561s ago: executing program 2 (id=287):
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=<r4=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1462, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4483, 0xf0, 0x3, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x3, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x1000, 0x2, 0x40021a}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)

960.063023ms ago: executing program 0 (id=288):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000100)=@proc={0x1d, 0x0, 0x25dfdbfc, 0x20000000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f00000001c0)=ANY=[], 0x28}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x4c0d1}, 0x40830)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xbda8ee4cc7852c63, 0x204031, 0xffffffffffffffff, 0x42791000)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r1, &(0x7f0000000100)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x9, <r2=>r0, 'id0\x00'})
getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f0000000200)=""/174, 0xae)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

235.323141ms ago: executing program 0 (id=289):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000009c0)={0x0, <r0=>0x0, "8182a18f5d78c21a6101047020145e1bb521f066030678b735cff06f57002d80cf854acaf868b8ef2e94bb2179aa208b3c7bb396280699655dc522a173b7c0d8d862ea0422449641d1a7a6fdd8b42dd686b2b15a7059369ddcf37a32b8d903830c124eea9bc1aa88a6c4e5f9de9b60aebc37d760f35bc8949c25a802034dfd0e88af8899093caf5152385ff345693e48ebeba817744cc9126bee334cf9010348c8c326e5ff274555830eb83f0cbc69eb381853cef11e42dd9ffbb79a6cc60ba16cff168d1b1fa117ba84451dc3fef674782647d800000000000035435a2c25b05d079ddc39714a71654cdba86ba852d6df00", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000019c0)={{r0, 0x7fe0000000000, 0x6, 0xb, 0x6, 0x4, 0x2, 0x101, 0x8, 0xab, 0x100, 0x3, 0x4, 0x2c15, 0x6da}, 0x18, [0x0, 0x0, 0x0]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000980)=0x7e)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xef)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r7})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r7, 0x29, 0x86, 0x0, 0xa, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x8000, 0x5, 0x9}})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r8=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
write$UHID_INPUT(r2, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r10 = dup(r9)
setsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x112, 0x11, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40080)
r11 = socket(0x15, 0x4, 0x80000000)
getsockopt(r11, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
close(r1)

234.756719ms ago: executing program 3 (id=290):
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
r0 = memfd_create(&(0x7f00000007c0)='\x9d#\x18\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\t\x12\b\x01\xd9\x04\x00/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\x02\x00\x00\x00\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xddW\xe6}\xc5\xa4\x8f\x98\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8\xac\x00P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\x01\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0m\xc9\x82<\xa9\xdc\xddRU\t\xe9\xbah\xb6\xb2\xea-{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DL\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xd1\xc3\xe8?.\x8a)*\xdeag\xc6\xf3\xd6\x94\x9dn\x06\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96\xb71~2{@:\x97^\xbfcu9\x8c<^ll\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\xd7\x99\x19pn\xbe\xb8\f#\xe2\x8f\x02\xedk\x10\x1b\x9c\x10\xd5\xab\x95Yn\xe9\x00\xb5\xa29\xd7\xd1\bs\xd0x0\xf2F\xaam\xd8\\\x16\x98\x86\xbe\xbc|h+\t.\x0f\x1b?\xbf5\x9fW\xa7\x02\x14J\x16|TV\x1bW\xd6r\nR\x82\xe0\x88%\xfa\x1f\xae\xcb\xb5g\xd5\x9a\x17\xd2F3A\x03-\xe22\x1b\xb4\xb5\b\x8b\xe79\xbew#2\xbd`', 0x2)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0xfdfd, 0x80})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r1, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x5}}], 0x1, 0x0, 0x0)
write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002040), 0x40080)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, 0x0)
ioctl$FIBMAP(r0, 0x401070c9, &(0x7f0000000080)=0x5)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x9, 0x7, 0xfffffffc}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="520000001600010b5e27333f79becc47634e"], 0x78}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}}, 0x0)
mprotect(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 3 (id=291):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/220)
syz_usb_connect$cdc_ncm(0x3, 0xa5, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0x0, 0x0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ecddc07b7bc9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x41, 0x7f, 0xb0b3, 0xb4}, {0x6, 0x24, 0x1a, 0x80, 0x27}, [@country_functional={0xc, 0x24, 0x7, 0xff, 0x2, [0x1, 0xe3, 0x3]}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x2, 0x0, 0x2}, @acm={0x4, 0x24, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x33, 0x1, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x8, 0x23, 0x40, 0x5, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x0, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x1, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x77}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x5, 0xc0}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x3, 0x4, 0x10, 0x20, 0x5}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x1, 0x80, 0x9, 0xb}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x6, 0x8, 0x31, 0xf9}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb0, 0xa, 0x10, 0x40, 0x4}]}, 0x6, [{0x4c, &(0x7f0000000200)=@string={0x4c, 0x3, "4ff6b697bfb4709d4d2d0f49d253e6a269c7956eae05bd16f795baeec5b266c721de67b4a22aa29877caf7749bac7d72f5d19d2bdd1e1ba24b51e91566f7e85f9cbc04a3e25711ef8db2"}}, {0xc0, &(0x7f0000000340)=@string={0xc0, 0x3, "e1e85b636f05749dda84b2927397cee166b44655e547358ce0c878131ea92e8ff0b4061d4848219b12f2c89592c35512b02e98111038b1af164cae900573a9aae14776d25962ee2b75e7d8fb20623dd360e48026c93c726efc8b0c90e72d3598c9525e2582f39f2f48476e6dc120a5220c5b602416218874975e32b6612e06023662ccab27beafa28734cfd5ca55f11eb98d3b92677aadfe588ebdf758fd7520acf07efac39fc1c7c64132255ff6be6c77ee09d079913c5155ab2ce00ce2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3009}}, {0xc9, &(0x7f0000000440)=@string={0xc9, 0x3, "dfa5d44ef66a63a83fa8d487e6732bfa2ea3d7a95c56f43120609f3a4ecbc5192d743f32d8a9ec77d59bf8e41f3d4ab54c17f408ea24e8a91b6c1a5cffcae6d806750c6e09142e804347c925e043ffee8f829dfda1841636bda071e53ac2edbc04087e029c944578394d5890ef0bbd716bbc114d3a5fd65cee802787db7d0fb004662c7121e535afcb4515761f11e9677922d9a96b72f53ca0372390192b7684294b172fc2869a608776c5d2945b1c7ea8e0199ba77e315f12a351c952044eed3257c34543889b"}}, {0x8c, &(0x7f0000000540)=@string={0x8c, 0x3, "f203579fcebccbdbcb443fc44af2d5a37ad07c4ddec3538f130898ae7cabfff44b0d3905a5dce4e995255951203b404ff9d14dd3605a96dfa815c4b5387f6d4e537b2dfae9c5fd0034f53d0a82d63c94647f2d2800daa2e722ffab2d6af33201aa232b5b0a7ca7b802b7e3196a71562a426cad1512eee978df3ade37a0d103d9106f68330615bfdec1ef"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x419}}]})
socket$kcm(0x2a, 0x2, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f00000001c0)=[{0x888, 0x3a00, 0x0, 0x0}], 0x1})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts.
[   78.215755][ T5581] cgroup: Unknown subsys name 'net'
[   78.464381][ T5581] cgroup: Unknown subsys name 'cpuset'
[   78.538965][ T5581] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.273173][ T5581] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.654200][ T4911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.662003][ T4911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.668374][ T4911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.670492][ T4911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.674429][ T4911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.871678][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.898392][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.932796][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.935349][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.952794][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.973912][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.990009][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.006356][ T5593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.014831][ T5593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.015567][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.018808][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.040091][ T4911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.043120][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.112724][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.135445][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.770370][ T5603] Bluetooth: hci0: command tx timeout
[   85.006931][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.009504][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.009788][ T5592] bridge_slave_0: entered allmulticast mode
[   85.013396][ T5592] bridge_slave_0: entered promiscuous mode
[   85.079124][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.079403][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.079609][ T5592] bridge_slave_1: entered allmulticast mode
[   85.081471][ T5592] bridge_slave_1: entered promiscuous mode
[   85.089918][ T5603] Bluetooth: hci2: command tx timeout
[   85.178318][   T60] Bluetooth: hci1: command tx timeout
[   85.178597][ T5603] Bluetooth: hci3: command tx timeout
[   85.237776][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.283553][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.315743][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.315976][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.316449][ T5597] bridge_slave_0: entered allmulticast mode
[   85.342840][ T5597] bridge_slave_0: entered promiscuous mode
[   85.391750][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.392738][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.392932][ T5597] bridge_slave_1: entered allmulticast mode
[   85.394787][ T5597] bridge_slave_1: entered promiscuous mode
[   85.424526][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.424789][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.425667][ T5600] bridge_slave_0: entered allmulticast mode
[   85.434222][ T5600] bridge_slave_0: entered promiscuous mode
[   85.444284][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.449044][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.449346][ T5596] bridge_slave_0: entered allmulticast mode
[   85.452651][ T5596] bridge_slave_0: entered promiscuous mode
[   85.491283][ T5592] team0: Port device team_slave_0 added
[   85.493410][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.493591][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.493779][ T5600] bridge_slave_1: entered allmulticast mode
[   85.495625][ T5600] bridge_slave_1: entered promiscuous mode
[   85.497408][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.497560][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.497704][ T5596] bridge_slave_1: entered allmulticast mode
[   85.553000][ T5596] bridge_slave_1: entered promiscuous mode
[   85.657130][ T5592] team0: Port device team_slave_1 added
[   85.695634][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.746054][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.771478][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.776523][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.806233][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.806249][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.806264][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.819519][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.826560][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.907114][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.907134][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.907160][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.919854][ T5597] team0: Port device team_slave_0 added
[   85.995535][ T5597] team0: Port device team_slave_1 added
[   85.998876][ T5600] team0: Port device team_slave_0 added
[   86.004244][ T5596] team0: Port device team_slave_0 added
[   86.034397][ T5600] team0: Port device team_slave_1 added
[   86.036890][ T5596] team0: Port device team_slave_1 added
[   86.107915][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.107928][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.107942][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.183317][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.183330][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.183344][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.184861][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.184872][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.184885][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.186644][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.186654][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.186667][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.207919][ T5592] hsr_slave_0: entered promiscuous mode
[   86.211550][ T5592] hsr_slave_1: entered promiscuous mode
[   86.231929][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.231948][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.231983][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.234694][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.234709][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.234732][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.470528][ T5597] hsr_slave_0: entered promiscuous mode
[   86.471894][ T5597] hsr_slave_1: entered promiscuous mode
[   86.473086][ T5597] debugfs: 'hsr0' already exists in 'hsr'
[   86.473193][ T5597] Cannot create hsr debugfs directory
[   86.515348][ T5600] hsr_slave_0: entered promiscuous mode
[   86.516651][ T5600] hsr_slave_1: entered promiscuous mode
[   86.517687][ T5600] debugfs: 'hsr0' already exists in 'hsr'
[   86.517711][ T5600] Cannot create hsr debugfs directory
[   86.537012][ T5596] hsr_slave_0: entered promiscuous mode
[   86.542692][ T5596] hsr_slave_1: entered promiscuous mode
[   86.545366][ T5596] debugfs: 'hsr0' already exists in 'hsr'
[   86.545408][ T5596] Cannot create hsr debugfs directory
[   86.851560][ T5603] Bluetooth: hci0: command tx timeout
[   87.168477][ T5603] Bluetooth: hci2: command tx timeout
[   87.249798][   T60] Bluetooth: hci1: command tx timeout
[   87.250532][ T5603] Bluetooth: hci3: command tx timeout
[   87.516857][   T11] cfg80211: failed to load regulatory.db
[   87.822896][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.864488][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.877485][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.921332][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.934484][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.977056][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.002874][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.036221][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.172967][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.224273][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.237887][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.272487][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.277873][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.316941][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.344808][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.375474][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.542785][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.577650][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.603649][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.643830][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.655581][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.684133][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.712654][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.745482][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.900078][ T5600] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.928552][ T5603] Bluetooth: hci0: command tx timeout
[   88.935092][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.957834][ T5600] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.984186][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.995978][ T5600] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.027903][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.042605][ T5600] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.082860][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.250382][ T5603] Bluetooth: hci2: command tx timeout
[   89.279169][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.328483][   T60] Bluetooth: hci1: command tx timeout
[   89.328593][ T5603] Bluetooth: hci3: command tx timeout
[   89.423044][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[   89.433794][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.486737][  T184] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.487045][  T184] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.552462][  T184] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.552633][  T184] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.608828][ T5597] 8021q: adding VLAN 0 to HW filter on device team0
[   89.691369][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.702550][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.710573][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.761918][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.762019][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.862895][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[   89.892843][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.914841][ T3049] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.915003][ T3049] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.000921][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.001095][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.183427][ T5600] 8021q: adding VLAN 0 to HW filter on device team0
[   90.319761][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.320034][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.415186][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.415351][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.013834][ T5603] Bluetooth: hci0: command tx timeout
[   91.329146][ T5603] Bluetooth: hci2: command tx timeout
[   91.408396][ T5603] Bluetooth: hci3: command tx timeout
[   91.408435][ T5603] Bluetooth: hci1: command tx timeout
[   91.512912][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.647285][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.912706][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.023084][ T5592] veth0_vlan: entered promiscuous mode
[   92.141003][ T5592] veth1_vlan: entered promiscuous mode
[   92.162236][ T5597] veth0_vlan: entered promiscuous mode
[   92.177236][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.251546][ T5597] veth1_vlan: entered promiscuous mode
[   92.361129][ T5596] veth0_vlan: entered promiscuous mode
[   92.423280][ T5592] veth0_macvtap: entered promiscuous mode
[   92.433188][ T5596] veth1_vlan: entered promiscuous mode
[   92.482118][ T5592] veth1_macvtap: entered promiscuous mode
[   92.520276][ T5597] veth0_macvtap: entered promiscuous mode
[   92.547194][ T5600] veth0_vlan: entered promiscuous mode
[   92.564904][ T5597] veth1_macvtap: entered promiscuous mode
[   92.614545][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.615674][ T5600] veth1_vlan: entered promiscuous mode
[   92.679788][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.706860][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.707931][ T5596] veth0_macvtap: entered promiscuous mode
[   92.756825][   T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.769158][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.770316][ T5596] veth1_macvtap: entered promiscuous mode
[   92.791069][   T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.801934][   T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.810333][   T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.836314][   T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.919759][   T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.922012][   T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.939268][   T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.005570][ T5600] veth0_macvtap: entered promiscuous mode
[   93.021784][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.191060][ T5600] veth1_macvtap: entered promiscuous mode
[   93.228893][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.447533][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.591684][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.648485][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.654385][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.693967][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.693985][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.720869][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.810981][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.907905][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.907925][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.946606][ T3029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.964033][ T3029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.092156][ T3029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.111057][ T3029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.130735][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.130757][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.383218][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.383241][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.969273][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.969294][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.112162][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.112184][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.660459][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.660481][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.716737][ T5759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   95.836805][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.836827][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.176753][ T5763] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET)
[   96.444782][ T5766] netlink: 428 bytes leftover after parsing attributes in process `syz.1.8'.
[   96.498991][ T5766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'.
[   97.148963][   T60] Bluetooth: hci3: SCO packet for unknown connection handle 0
[   99.736397][   T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   99.988215][   T11] usb 4-1: Using ep0 maxpacket: 8
[  100.241413][   T11] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  100.241446][   T11] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[  100.241466][   T11] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[  100.241488][   T11] usb 4-1: config 250 has no interface number 0
[  100.241545][   T11] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  100.241571][   T11] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  100.241594][   T11] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  100.241614][   T11] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  100.241635][   T11] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  100.241658][   T11] usb 4-1: config 250 interface 228 has no altsetting 0
[  100.273482][   T11] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  100.273516][   T11] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  100.273536][   T11] usb 4-1: Product: syz
[  100.273549][   T11] usb 4-1: SerialNumber: syz
[  100.715225][   T11] hub 4-1:250.228: bad descriptor, ignoring hub
[  100.715252][   T11] hub 4-1:250.228: probe with driver hub failed with error -5
[  100.815274][   T11] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  100.950118][ T5703] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  101.163632][ T5703] usb 1-1: config 7 has an invalid interface number: 162 but max is 1
[  101.163670][ T5703] usb 1-1: config 7 has an invalid interface number: 39 but max is 1
[  101.163696][ T5703] usb 1-1: config 7 has no interface number 0
[  101.163715][ T5703] usb 1-1: config 7 has no interface number 1
[  101.163779][ T5703] usb 1-1: config 7 interface 162 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  101.163806][ T5703] usb 1-1: config 7 interface 162 altsetting 255 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  101.163829][ T5703] usb 1-1: config 7 interface 162 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[  101.163848][ T5703] usb 1-1: config 7 interface 162 altsetting 255 endpoint 0x7 has invalid maxpacket 959, setting to 64
[  101.163873][ T5703] usb 1-1: config 7 interface 162 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  101.163891][ T5703] usb 1-1: config 7 interface 162 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  101.163910][ T5703] usb 1-1: config 7 interface 162 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[  101.163930][ T5703] usb 1-1: config 7 interface 162 altsetting 255 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  101.163952][ T5703] usb 1-1: config 7 interface 162 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  101.163971][ T5703] usb 1-1: config 7 interface 162 altsetting 255 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  101.163992][ T5703] usb 1-1: config 7 interface 162 altsetting 255 has a duplicate endpoint with address 0x3, skipping
[  101.164037][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0xE, skipping
[  101.164057][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0x4, skipping
[  101.164078][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has an endpoint descriptor with address 0x71, changing to 0x1
[  101.164098][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0x1, skipping
[  101.164119][ T5703] usb 1-1: config 7 interface 39 altsetting 110 endpoint 0xF has invalid maxpacket 512, setting to 64
[  101.164140][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0x8, skipping
[  101.164160][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0x1, skipping
[  101.164179][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0x2, skipping
[  101.164199][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0xE, skipping
[  101.164219][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0xC, skipping
[  101.164238][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0xF, skipping
[  101.164256][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has an endpoint descriptor with address 0x34, changing to 0x4
[  101.164276][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0x4, skipping
[  101.164296][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0x2, skipping
[  101.164314][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0x7, skipping
[  101.164333][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has a duplicate endpoint with address 0x6, skipping
[  101.164353][ T5703] usb 1-1: config 7 interface 39 altsetting 110 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  101.164373][ T5703] usb 1-1: config 7 interface 39 altsetting 110 has 17 endpoint descriptors, different from the interface descriptor's value: 15
[  101.164396][ T5703] usb 1-1: config 7 interface 162 has no altsetting 0
[  101.164411][ T5703] usb 1-1: config 7 interface 39 has no altsetting 0
[  101.710868][ T5702] usb 4-1: USB disconnect, device number 2
[  101.755761][ T5703] usb 1-1: New USB device found, idVendor=05cc, idProduct=3362, bcdDevice=6d.15
[  101.755799][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.755822][ T5703] usb 1-1: Product: ╵�
[  101.755839][ T5703] usb 1-1: Manufacturer: 《
[  101.755856][ T5703] usb 1-1: SerialNumber: ã°Š
[  101.860515][ T5824] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  101.898265][ T5603] Bluetooth: hci2: command 0x0406 tx timeout
[  102.124134][ T5828] =======================================================
[  102.124134][ T5828] WARNING: The mand mount option has been deprecated and
[  102.124134][ T5828]          and is ignored by this kernel. Remove the mand
[  102.124134][ T5828]          option from the mount to silence this warning.
[  102.124134][ T5828] =======================================================
[  102.176032][ T5827] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  102.678340][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'.
[  103.030680][ T5830] overlayfs: overlapping lowerdir path
[  103.265173][ T5702] usblp0: removed
[  103.626696][ T5843] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96
[  103.738912][ T5670] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  103.841872][ T5845] sctp: [Deprecated]: syz.0.28 (pid 5845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.841872][ T5845] Use struct sctp_sack_info instead
[  103.972330][ T5703] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
[  104.012310][ T5703] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw
[  104.049251][ T5670] usb 3-1: Using ep0 maxpacket: 8
[  104.076306][ T5670] usb 3-1: unable to get BOS descriptor or descriptor too short
[  104.093072][ T5670] usb 3-1: config 1 interface 0 has no altsetting 0
[  104.179206][ T5670] usb 3-1: string descriptor 0 read error: -22
[  104.179354][ T5670] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40
[  104.179379][ T5670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.223744][   T32] usb 1-1: Direct firmware load for ueagle-atm/adi930.fw failed with error -2
[  104.223770][   T32] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/adi930.fw
[  104.258785][ T5703] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
[  104.258898][ T5703] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw
[  104.365103][ T5703] usb 1-1: USB disconnect, device number 2
[  104.533983][   T37] audit: type=1326 audit(1783579227.490:2): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5849 comm="syz.1.31" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45182fde59 code=0x0
[  104.909055][ T5700] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  105.116734][ T5700] usb 2-1: device descriptor read/64, error -71
[  105.548302][ T5700] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  105.646950][ T5670] kone 0003:1E7D:2CED.0001: unknown main item tag 0x3
[  105.647000][ T5670] kone 0003:1E7D:2CED.0001: unknown main item tag 0x1
[  105.647034][ T5670] kone 0003:1E7D:2CED.0001: unknown main item tag 0x7
[  105.647371][ T5670] kone 0003:1E7D:2CED.0001: unknown main item tag 0x4
[  105.647609][ T5670] kone 0003:1E7D:2CED.0001: reserved main item tag 0xd
[  105.647639][ T5670] kone 0003:1E7D:2CED.0001: unknown main item tag 0x5
[  105.647674][ T5670] kone 0003:1E7D:2CED.0001: invalid report_size 29820
[  105.647690][ T5670] kone 0003:1E7D:2CED.0001: item 0 2 1 7 parsing failed
[  105.666376][ T5670] kone 0003:1E7D:2CED.0001: parse failed
[  105.666456][ T5670] kone 0003:1E7D:2CED.0001: probe with driver kone failed with error -22
[  105.718388][ T5700] usb 2-1: device descriptor read/64, error -71
[  105.842600][ T5700] usb usb2-port1: attempt power cycle
[  105.894623][ T5670] usb 3-1: USB disconnect, device number 2
[  105.940382][ T5699] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  106.132799][   T60] Bluetooth: hci1: command 0x0406 tx timeout
[  106.171152][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.171198][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.171237][ T5699] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  106.171259][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.231014][ T5699] usb 1-1: config 0 descriptor??
[  106.498946][ T5700] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  106.535797][ T5700] usb 2-1: device descriptor read/8, error -71
[  106.813022][ T5700] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  106.844886][ T5700] usb 2-1: device descriptor read/8, error -71
[  106.856233][    C0] raw-gadget.2 gadget.0: ignoring, device is not running
[  106.856529][    C0] raw-gadget.2 gadget.0: ignoring, device is not running
[  106.856625][ T5699] usbhid 1-1:0.0: can't add hid device: -32
[  106.856711][ T5699] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  106.858379][ T5703] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  106.899330][ T5699] usb 1-1: USB disconnect, device number 3
[  106.966340][ T5700] usb usb2-port1: unable to enumerate USB device
[  107.075838][ T5703] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.075870][ T5703] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  107.097673][ T5703] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  107.097694][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.097704][ T5703] usb 3-1: Product: syz
[  107.097712][ T5703] usb 3-1: Manufacturer: syz
[  107.097719][ T5703] usb 3-1: SerialNumber: syz
[  107.129635][ T5670] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  107.147356][ T5703] usb 3-1: config 0 descriptor??
[  107.284619][ T5670] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  107.284652][ T5670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.284662][ T5670] usb 4-1: Product: syz
[  107.284670][ T5670] usb 4-1: Manufacturer: syz
[  107.284682][ T5670] usb 4-1: SerialNumber: syz
[  107.290923][ T5670] usb 4-1: config 0 descriptor??
[  107.360497][ T5670] gspca_main: sq905c-2.14.0 probing 2770:9052
[  107.377991][ T5875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.389293][ T5875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.900228][ T5884] fuse: Bad value for 'rootmode'
[  108.097559][ T5670] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  108.097670][ T5670] sq905c 4-1:0.0: probe with driver sq905c failed with error -71
[  108.175322][ T5670] usb 4-1: USB disconnect, device number 3
[  108.374002][ T5891] Zero length message leads to an empty skb
[  108.488296][ T5679] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  108.645516][ T5679] usb 2-1: not running at top speed; connect to a high speed hub
[  108.660438][ T5679] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 4
[  108.666691][ T5679] usb 2-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40
[  108.666720][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.666739][ T5679] usb 2-1: Product: syz
[  108.666764][ T5679] usb 2-1: Manufacturer: syz
[  108.666778][ T5679] usb 2-1: SerialNumber: syz
[  108.849830][ T5603] Bluetooth: hci2: adv larger than maximum supported
[  108.849851][ T5603] Bluetooth: hci2: Malformed LE Event: 0x0d
[  108.872012][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'.
[  109.129112][ T5679] usb 2-1: BAAD MICROPHONE c_chmask mismatch
[  109.515905][ T5679] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  109.553144][ T5679] usb 2-1: USB disconnect, device number 6
[  109.620763][ T5678] udevd[5678]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  109.693121][ T5699] usb 3-1: USB disconnect, device number 3
[  109.719551][ T5703] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  109.868285][ T5703] usb 4-1: Using ep0 maxpacket: 16
[  109.906556][ T5703] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  109.906598][ T5703] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.912749][ T5703] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  109.912783][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.912803][ T5703] usb 4-1: Product: syz
[  109.912816][ T5703] usb 4-1: Manufacturer: syz
[  109.912831][ T5703] usb 4-1: SerialNumber: syz
[  110.029382][ T5703] usb 4-1: 0:2 : does not exist
[  110.531185][   T49] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  110.570718][ T5703] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  110.648059][ T5703] usb 4-1: USB disconnect, device number 4
[  110.668344][ T5699] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  110.692226][   T49] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  110.692261][   T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.692281][   T49] usb 1-1: Product: syz
[  110.692294][   T49] usb 1-1: Manufacturer: syz
[  110.692307][   T49] usb 1-1: SerialNumber: syz
[  110.849858][ T5699] usb 2-1: Using ep0 maxpacket: 32
[  110.879916][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short
[  110.886455][ T5699] usb 2-1: config 7 has an invalid interface number: 115 but max is 0
[  110.886477][ T5699] usb 2-1: config 7 has no interface number 0
[  110.886525][ T5699] usb 2-1: config 7 interface 115 has no altsetting 0
[  110.977863][ T5699] usb 2-1: New USB device found, idVendor=2040, idProduct=6502, bcdDevice=5f.71
[  110.977898][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.977914][ T5699] usb 2-1: Product: syz
[  110.977927][ T5699] usb 2-1: Manufacturer: syz
[  110.977941][ T5699] usb 2-1: SerialNumber: syz
[  111.000929][   T49] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  111.001004][   T49] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  111.001025][   T49] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  111.020326][ T5678] udevd[5678]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  111.082343][   T49] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  111.098355][ T5670] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  111.268305][ T5670] usb 3-1: Using ep0 maxpacket: 8
[  111.303679][ T5670] usb 3-1: unable to get BOS descriptor or descriptor too short
[  111.303818][ T5670] usb 3-1: too many configurations: 72, using maximum allowed: 8
[  111.306654][ T5670] usb 3-1: unable to read config index 0 descriptor/start: -61
[  111.306692][ T5670] usb 3-1: can't read configurations, error -61
[  111.348705][ T5930] warning: `syz.3.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  111.482461][ T5670] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  111.564359][ T5699] usb 2-1: USB disconnect, device number 7
[  111.649167][ T5670] usb 3-1: Using ep0 maxpacket: 8
[  111.656986][ T5670] usb 3-1: unable to get BOS descriptor or descriptor too short
[  111.657067][ T5670] usb 3-1: too many configurations: 72, using maximum allowed: 8
[  111.677021][ T5670] usb 3-1: unable to read config index 0 descriptor/start: -61
[  111.677060][ T5670] usb 3-1: can't read configurations, error -61
[  111.677376][ T5670] usb usb3-port1: attempt power cycle
[  111.732620][ T5700] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  111.880652][ T5700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.880682][ T5700] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  111.883005][ T5700] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  111.883047][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.883058][ T5700] usb 4-1: Product: syz
[  111.883070][ T5700] usb 4-1: Manufacturer: syz
[  111.883078][ T5700] usb 4-1: SerialNumber: syz
[  111.888268][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[  111.906327][ T5700] usb 4-1: config 0 descriptor??
[  112.029109][ T5670] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  112.049644][ T5670] usb 3-1: Using ep0 maxpacket: 8
[  112.053950][ T5670] usb 3-1: unable to get BOS descriptor or descriptor too short
[  112.054047][ T5670] usb 3-1: too many configurations: 72, using maximum allowed: 8
[  112.057098][ T5670] usb 3-1: unable to read config index 0 descriptor/start: -61
[  112.057123][ T5670] usb 3-1: can't read configurations, error -61
[  112.124071][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.127515][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.190074][ T5670] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  112.192509][ T5940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.59'.
[  112.212974][ T5603] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  112.213204][ T5603] Bluetooth: hci3: Injecting HCI hardware error event
[  112.213841][ T5603] Bluetooth: hci3: hardware error 0x00
[  112.223722][ T5670] usb 3-1: Using ep0 maxpacket: 8
[  112.235121][ T5670] usb 3-1: unable to get BOS descriptor or descriptor too short
[  112.235216][ T5670] usb 3-1: too many configurations: 72, using maximum allowed: 8
[  112.236820][ T5670] usb 3-1: unable to read config index 0 descriptor/start: -61
[  112.236853][ T5670] usb 3-1: can't read configurations, error -61
[  112.238067][ T5670] usb usb3-port1: unable to enumerate USB device
[  112.658350][ T5703] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  112.808453][ T5703] usb 2-1: Using ep0 maxpacket: 16
[  112.810110][ T5703] usb 2-1: too many configurations: 244, using maximum allowed: 8
[  112.812554][ T5703] usb 2-1: unable to read config index 0 descriptor/start: -61
[  112.812592][ T5703] usb 2-1: can't read configurations, error -61
[  112.938295][ T5703] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  113.090282][ T5703] usb 2-1: Using ep0 maxpacket: 16
[  113.091127][ T5703] usb 2-1: too many configurations: 244, using maximum allowed: 8
[  113.092791][ T5703] usb 2-1: unable to read config index 0 descriptor/start: -61
[  113.092828][ T5703] usb 2-1: can't read configurations, error -61
[  113.093183][ T5703] usb usb2-port1: attempt power cycle
[  113.275938][ T5917] usb 1-1: USB disconnect, device number 4
[  113.428332][ T5703] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  113.457431][ T5703] usb 2-1: Using ep0 maxpacket: 16
[  113.459573][ T5703] usb 2-1: too many configurations: 244, using maximum allowed: 8
[  113.470050][ T5703] usb 2-1: unable to read config index 0 descriptor/start: -61
[  113.470091][ T5703] usb 2-1: can't read configurations, error -61
[  113.608377][ T5703] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  113.629067][ T5703] usb 2-1: Using ep0 maxpacket: 16
[  113.631028][ T5703] usb 2-1: too many configurations: 244, using maximum allowed: 8
[  113.633039][ T5703] usb 2-1: unable to read config index 0 descriptor/start: -61
[  113.633078][ T5703] usb 2-1: can't read configurations, error -61
[  113.633453][ T5703] usb usb2-port1: unable to enumerate USB device
[  114.374402][ T5603] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  114.578555][ T5703] usb 4-1: USB disconnect, device number 5
[  115.078643][ T5670] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  115.269957][ T5670] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  115.269983][ T5670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.269993][ T5670] usb 4-1: Product: syz
[  115.270001][ T5670] usb 4-1: Manufacturer: syz
[  115.270009][ T5670] usb 4-1: SerialNumber: syz
[  115.614232][ T5670] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  115.614286][ T5670] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  115.614306][ T5670] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  115.657056][ T5670] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  116.048300][ T5670] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  116.218912][ T5670] usb 1-1: Using ep0 maxpacket: 8
[  116.257392][ T5670] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  116.257417][ T5670] usb 1-1: config 0 interface 0 has no altsetting 0
[  116.257440][ T5670] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  116.257455][ T5670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.325495][    T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  116.368739][ T5670] usb 1-1: config 0 descriptor??
[  116.511665][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.511683][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  116.544742][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  116.545228][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.545253][    T9] usb 2-1: Product: syz
[  116.545341][    T9] usb 2-1: Manufacturer: syz
[  116.545361][    T9] usb 2-1: SerialNumber: syz
[  116.610013][    T9] usb 2-1: config 0 descriptor??
[  116.880677][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.881294][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.930793][ T5670] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0
[  116.930835][ T5670] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0
[  116.930861][ T5670] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0
[  116.930887][ T5670] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0
[  116.930913][ T5670] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0
[  116.930937][ T5670] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0
[  116.930962][ T5670] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0
[  117.085875][ T5703] usb 1-1: USB disconnect, device number 5
[  117.338335][ T5670] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  117.488481][ T5670] usb 3-1: Using ep0 maxpacket: 8
[  117.497126][ T5670] usb 3-1: unable to get BOS descriptor or descriptor too short
[  117.506934][ T5670] usb 3-1: config 12 has an invalid interface number: 12 but max is 0
[  117.506952][ T5670] usb 3-1: config 12 has no interface number 0
[  117.506984][ T5670] usb 3-1: config 12 interface 12 altsetting 9 has an endpoint descriptor with address 0x1F, changing to 0xF
[  117.506999][ T5670] usb 3-1: config 12 interface 12 has no altsetting 0
[  117.545740][ T5670] usb 3-1: New USB device found, idVendor=14aa, idProduct=0002, bcdDevice=63.fc
[  117.545767][ T5670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.545778][ T5670] usb 3-1: Product: syz
[  117.545786][ T5670] usb 3-1: Manufacturer: syz
[  117.545793][ T5670] usb 3-1: SerialNumber: syz
[  117.626552][ T5603] Bluetooth: hci1: unexpected event for opcode 0x1004
[  117.759743][ T6001] fuse: Bad value for 'user_id'
[  117.759763][ T6001] fuse: Bad value for 'user_id'
[  117.779661][ T6001] kAFS: unable to lookup cell 'syze¤@Ës0'
[  117.952984][   T49] usb 4-1: USB disconnect, device number 6
[  118.278610][ T5679] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  118.404240][ T5670] dvb-usb: found a 'AVerMedia AverTV DVBT USB1.1' in warm state.
[  118.404875][ T5670] dvb-usb: bulk message failed: -22 (3/0)
[  118.456798][ T5679] usb 1-1: Using ep0 maxpacket: 8
[  118.464956][ T5679] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  118.465078][ T5679] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.465100][ T5679] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.465120][ T5679] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.465273][ T5679] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.465313][ T5679] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  118.465331][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.743430][ T5670] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  118.744729][ T5670] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVBT USB1.1)
[  118.744830][ T5670] usb 3-1: media controller created
[  118.811474][ T5670] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  118.868023][ T5670] dvb-usb: bulk message failed: -22 (6/0)
[  118.875252][ T5670] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVBT USB1.1'
[  118.897784][ T5670] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[  118.997093][ T5679] usb 1-1: usb_control_msg returned -32
[  118.997146][ T5679] usbtmc 1-1:16.0: can't read capabilities
[  119.140148][ T5699] usb 2-1: USB disconnect, device number 12
[  119.175682][ T5670] dvb-usb: schedule remote query interval to 150 msecs.
[  119.175751][ T5670] dvb-usb: bulk message failed: -22 (3/0)
[  119.194132][ T5670] dvb-usb: AVerMedia AverTV DVBT USB1.1 successfully initialized and connected.
[  119.245184][ T5670] usb 3-1: USB disconnect, device number 8
[  119.423956][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.451458][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.505483][ T6013] befs: (nbd3): No write support. Marking filesystem read-only
[  119.865423][ T6013] befs: (nbd3): unable to read superblock
[  119.887757][ T5670] dvb-usb: AVerMedia AverTV DVBT USB1.1 successfully deinitialized and disconnected.
[  120.281053][ T6034] syzkaller1: entered promiscuous mode
[  120.281071][ T6034] syzkaller1: entered allmulticast mode
[  120.348294][ T5670] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  120.478356][ T5670] usb 2-1: device descriptor read/64, error -71
[  120.718297][ T5670] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  120.864258][ T5670] usb 2-1: device descriptor read/64, error -71
[  120.968681][ T5670] usb usb2-port1: attempt power cycle
[  120.998928][ T5702] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  121.150562][ T5702] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.150592][ T5702] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  121.153437][ T5702] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  121.153468][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.153489][ T5702] usb 4-1: Product: syz
[  121.153501][ T5702] usb 4-1: Manufacturer: syz
[  121.153513][ T5702] usb 4-1: SerialNumber: syz
[  121.161239][ T5702] usb 4-1: config 0 descriptor??
[  121.318309][ T5670] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  121.349145][ T5670] usb 2-1: device descriptor read/8, error -71
[  121.408238][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.408828][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.588292][ T5670] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  121.613125][ T5670] usb 2-1: device descriptor read/8, error -71
[  121.659680][ T5603] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  121.674120][ T5603] Bluetooth: hci1: Injecting HCI hardware error event
[  121.676073][   T60] Bluetooth: hci1: hardware error 0x00
[  121.728904][ T5670] usb usb2-port1: unable to enumerate USB device
[  122.772341][ T6061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.99'.
[  123.762212][ T5699] usb 4-1: USB disconnect, device number 7
[  124.059696][   T60] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  124.301879][ T5699] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  124.423832][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'.
[  124.423882][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'.
[  124.473258][ T5699] usb 2-1: device descriptor read/64, error -71
[  124.678737][ T5670] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  124.753287][ T5699] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  124.859002][ T5670] usb 4-1: Using ep0 maxpacket: 16
[  124.871165][ T5670] usb 4-1: config 127 has an invalid interface number: 124 but max is 0
[  124.871351][ T5670] usb 4-1: config 127 has no interface number 0
[  124.871388][ T5670] usb 4-1: config 127 interface 124 has no altsetting 0
[  124.875533][ T5670] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  124.875564][ T5670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.875583][ T5670] usb 4-1: Product: syz
[  124.875596][ T5670] usb 4-1: Manufacturer: syz
[  124.875611][ T5670] usb 4-1: SerialNumber: syz
[  124.898232][ T5699] usb 2-1: device descriptor read/64, error -71
[  125.059578][ T5699] usb usb2-port1: attempt power cycle
[  125.292084][ T6017] usbtmc 1-1:16.0: usb_control_msg returned -110
[  125.366851][   T49] usb 1-1: USB disconnect, device number 6
[  125.430355][ T5699] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  125.463446][ T5699] usb 2-1: device descriptor read/8, error -71
[  125.615611][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'.
[  125.631083][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'.
[  125.708477][ T5699] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  125.735384][ T5699] usb 2-1: device descriptor read/8, error -71
[  125.752243][ T5703] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  125.839522][ T5699] usb usb2-port1: unable to enumerate USB device
[  125.928362][ T5703] usb 3-1: Using ep0 maxpacket: 16
[  125.943540][ T5703] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.943564][ T5703] usb 3-1: config 0 interface 0 has no altsetting 0
[  125.943587][ T5703] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  125.943600][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.985189][ T5703] usb 3-1: config 0 descriptor??
[  126.104786][ T5670] usb 4-1: reset high-speed USB device number 8 using dummy_hcd
[  126.208375][   T60] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  126.238581][   T60] Bluetooth: hci0: Injecting HCI hardware error event
[  126.240004][ T5603] Bluetooth: hci0: hardware error 0x00
[  126.410324][ T5670] usb 4-1: device firmware changed
[  126.444403][ T5670] usb 4-1: USB disconnect, device number 8
[  126.617393][ T5703] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0
[  126.617423][ T5703] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0
[  126.617439][ T5703] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0
[  126.617462][ T5703] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0
[  126.617478][ T5703] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0
[  126.648406][ T5670] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  126.697399][ T5703] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  126.740167][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.740745][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.818295][ T5670] usb 4-1: Using ep0 maxpacket: 16
[  126.844699][ T5670] usb 4-1: config 127 has an invalid interface number: 124 but max is 0
[  126.844732][ T5670] usb 4-1: config 127 has no interface number 0
[  126.844764][ T5670] usb 4-1: config 127 interface 124 has no altsetting 0
[  126.923856][    T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  127.275124][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.275158][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  127.304673][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  127.304753][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.304773][    T9] usb 1-1: Product: syz
[  127.304786][    T9] usb 1-1: Manufacturer: syz
[  127.304800][    T9] usb 1-1: SerialNumber: syz
[  127.483180][ T5670] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  127.483218][ T5670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.483237][ T5670] usb 4-1: Product: syz
[  127.541765][ T5703] usb 3-1: USB disconnect, device number 9
[  127.575949][    T9] usb 1-1: config 0 descriptor??
[  127.624940][ T5670] usb 4-1: can't set config #127, error -71
[  127.737132][ T6115] capability: warning: `syz.1.117' uses deprecated v2 capabilities in a way that may be insecure
[  127.782199][ T5670] usb 4-1: USB disconnect, device number 9
[  127.865389][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.865948][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.919333][ T6112] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  128.405423][ T6130] fuse: Bad value for 'fd'
[  128.528448][ T5603] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  129.071722][ T6121] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  129.097248][ T6121] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  129.268790][ T5603] Bluetooth: hci2: unexpected event for opcode 0x1004
[  129.513711][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  129.535236][ T6136] capability: warning: `syz.3.124' uses 32-bit capabilities (legacy support in use)
[  129.683537][    T9] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  129.683560][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.683571][    T9] usb 2-1: Product: syz
[  129.683582][    T9] usb 2-1: Manufacturer: syz
[  129.683589][    T9] usb 2-1: SerialNumber: syz
[  129.692551][    T9] usb 2-1: config 0 descriptor??
[  129.732742][    T9] gspca_main: sq905c-2.14.0 probing 2770:9052
[  129.778368][ T5679] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  129.930663][ T5679] usb 3-1: not running at top speed; connect to a high speed hub
[  129.931831][ T5679] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.931882][ T5679] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  129.934287][ T5679] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40
[  129.934319][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.934341][ T5679] usb 3-1: Product: syz
[  129.934358][ T5679] usb 3-1: Manufacturer: syz
[  129.934375][ T5679] usb 3-1: SerialNumber: syz
[  130.143481][    T9] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[  130.143506][    T9] sq905c 2-1:0.0: Reading version command failed
[  130.143589][    T9] sq905c 2-1:0.0: probe with driver sq905c failed with error -71
[  130.192992][    T9] usb 2-1: USB disconnect, device number 21
[  130.265497][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.266525][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.391869][ T6145] netlink: 763 bytes leftover after parsing attributes in process `syz.3.126'.
[  130.446885][ T5703] usb 1-1: USB disconnect, device number 7
[  130.572257][ T5679] usb 3-1: USB disconnect, device number 10
[  130.657219][ T6149] netlink: 'syz.0.128': attribute type 21 has an invalid length.
[  130.657462][ T6149] netlink: 164 bytes leftover after parsing attributes in process `syz.0.128'.
[  131.573954][ T6145] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  131.803632][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'.
[  131.849132][ T5670] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  131.908314][ T5703] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  131.929750][    T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  132.018341][ T5670] usb 2-1: Using ep0 maxpacket: 16
[  132.021022][ T5670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.021057][ T5670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.021080][ T5670] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  132.021121][ T5670] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  132.021145][ T5670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.025060][ T5670] usb 2-1: config 0 descriptor??
[  132.081152][ T5703] usb 4-1: unable to get BOS descriptor or descriptor too short
[  132.082076][ T5703] usb 4-1: not running at top speed; connect to a high speed hub
[  132.083398][ T5703] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 208, changing to 4
[  132.094365][ T5703] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40
[  132.094396][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.094415][ T5703] usb 4-1: Product: syz
[  132.094428][ T5703] usb 4-1: Manufacturer: syz
[  132.094442][ T5703] usb 4-1: SerialNumber: syz
[  132.183722][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.183753][    T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  132.186598][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  132.186632][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.186652][    T9] usb 3-1: Product: syz
[  132.186665][    T9] usb 3-1: Manufacturer: syz
[  132.186678][    T9] usb 3-1: SerialNumber: syz
[  132.261130][    T9] usb 3-1: config 0 descriptor??
[  132.308346][ T5679] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  132.470087][ T5679] usb 1-1: Using ep0 maxpacket: 16
[  132.492535][ T6162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.493146][ T5679] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  132.493191][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.493211][ T5679] usb 1-1: Product: syz
[  132.493225][ T5679] usb 1-1: Manufacturer: syz
[  132.493239][ T5679] usb 1-1: SerialNumber: syz
[  132.493448][ T6162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.506112][ T5679] usb 1-1: config 0 descriptor??
[  132.576170][ T5679] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  132.628784][ T5670] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0004/input/input7
[  132.699252][ T5603] Bluetooth: hci2: command 0x0406 tx timeout
[  133.227733][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.228404][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.252030][ T5679] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71
[  133.252979][ T5670] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0
[  133.367505][ T5679] usb 1-1: USB disconnect, device number 8
[  133.481722][ T5703] usb 4-1: USB disconnect, device number 10
[  133.528213][ T5678] udevd[5678]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.612561][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  133.624959][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  134.008243][ T5703] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  134.071795][ T5670] usb 2-1: reset high-speed USB device number 22 using dummy_hcd
[  134.204491][ T5703] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  134.204519][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.204529][ T5703] usb 4-1: Product: syz
[  134.204537][ T5703] usb 4-1: Manufacturer: syz
[  134.204545][ T5703] usb 4-1: SerialNumber: syz
[  134.262035][ T5703] usb 4-1: config 0 descriptor??
[  134.282048][ T5703] gspca_main: sq905c-2.14.0 probing 2770:9052
[  134.692711][ T5703] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[  134.692729][ T5703] sq905c 4-1:0.0: Reading version command failed
[  134.692786][ T5703] sq905c 4-1:0.0: probe with driver sq905c failed with error -71
[  134.725699][ T5703] usb 4-1: USB disconnect, device number 11
[  134.754684][ T5700] usb 3-1: USB disconnect, device number 11
[  134.769711][ T5603] Bluetooth: hci2: command 0x0406 tx timeout
[  134.926366][ T6190] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[  134.926391][ T6190] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.144'.
[  134.959551][    T9] usb 2-1: USB disconnect, device number 22
[  135.216495][ T6190] binder: 6189:6190 ioctl c018620c 200000000000 returned -22
[  135.778518][    T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  135.788261][ T5703] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  135.878441][ T5670] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  135.948526][    T9] usb 2-1: Using ep0 maxpacket: 32
[  135.965485][ T5703] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  135.965742][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.967920][    T9] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  135.967948][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.967967][    T9] usb 2-1: Product: syz
[  135.967981][    T9] usb 2-1: Manufacturer: syz
[  135.967995][    T9] usb 2-1: SerialNumber: syz
[  136.023701][ T5679] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  136.046997][ T5703] usb 1-1: config 0 descriptor??
[  136.059661][ T5703] cp210x 1-1:0.0: cp210x converter detected
[  136.061222][ T5670] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  136.061244][ T5670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.061264][ T5670] usb 3-1: Product: syz
[  136.061278][ T5670] usb 3-1: Manufacturer: syz
[  136.061292][ T5670] usb 3-1: SerialNumber: syz
[  136.084646][ T5670] usb 3-1: config 0 descriptor??
[  136.086617][    T9] usb 2-1: config 0 descriptor??
[  136.132702][    T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  136.132803][    T9] dvb-usb: bulk message failed: -22 (4/0)
[  136.132820][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  136.132908][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  136.132922][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  136.158290][ T5679] usb 4-1: device descriptor read/64, error -71
[  136.184266][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  136.185010][    T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  136.185067][    T9] usb 2-1: media controller created
[  136.235988][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  136.274275][ T5703] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71
[  136.274328][ T5703] cp210x 1-1:0.0: querying part number failed
[  136.336121][ T5703] usb 1-1: cp210x converter now attached to ttyUSB0
[  136.360618][ T5703] usb 1-1: USB disconnect, device number 9
[  136.408357][ T5679] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  136.441109][ T5703] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  136.457659][ T5703] cp210x 1-1:0.0: device disconnected
[  136.539649][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.548459][ T5679] usb 4-1: device descriptor read/64, error -71
[  136.583904][ T5670] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  136.615762][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.640878][ T6211] sg_write: data in/out 688192/136 bytes for SCSI command 0x0-- guessing data in;
[  136.640878][ T6211]    program syz.1.146 not setting count and/or reply_len properly
[  136.651056][    T9] usb 2-1: selecting invalid altsetting 3
[  136.651132][    T9] ttusb2: set interface to alts=3 failed
[  136.669390][ T5679] usb usb4-port1: attempt power cycle
[  136.674564][ T6211] dvb-usb: bulk message failed: -22 (7/0)
[  136.674587][ T6211] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  136.674726][ T6211] ttusb2: i2c transfer failed.
[  136.895247][    T9] DVB: Unable to find symbol tda10086_attach()
[  136.895260][    T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  136.902644][    T9] dvb-usb: bulk message failed: -22 (4/0)
[  136.902668][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  136.902787][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  136.902800][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  136.902863][    T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  136.994353][    T9] usb 2-1: USB disconnect, device number 23
[  137.108569][ T5679] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  137.133388][ T5679] usb 4-1: device descriptor read/8, error -71
[  137.369261][ T5679] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  137.383702][    T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  137.389721][ T5679] usb 4-1: device descriptor read/8, error -71
[  137.490404][ T6218] KVM: debugfs: duplicate directory 6218-4
[  137.505785][ T5670] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  137.515860][ T5679] usb usb4-port1: unable to enumerate USB device
[  137.582551][ T5670] usb 3-1: USB disconnect, device number 12
[  138.068919][ T6228] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  138.157422][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'.
[  138.157485][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'.
[  138.408955][ T5702] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  138.456839][   T37] audit: type=1804 audit(1783579261.410:3): pid=6236 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=ToMToU comm="syz.1.161" name="/newroot/33/bus/bus" dev="overlay" ino=199 res=1 errno=0
[  138.578644][ T5702] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  138.578678][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.578696][ T5702] usb 1-1: Product: syz
[  138.578708][ T5702] usb 1-1: Manufacturer: syz
[  138.578716][ T5702] usb 1-1: SerialNumber: syz
[  138.589895][ T5702] usb 1-1: config 0 descriptor??
[  138.669827][ T5702] gspca_main: sq905c-2.14.0 probing 2770:9052
[  138.889089][ T5703] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  139.048262][ T5703] usb 2-1: device descriptor read/64, error -71
[  139.071467][ T5702] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[  139.071489][ T5702] sq905c 1-1:0.0: Reading version command failed
[  139.071568][ T5702] sq905c 1-1:0.0: probe with driver sq905c failed with error -71
[  139.087086][ T5702] usb 1-1: USB disconnect, device number 10
[  139.288357][ T5703] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  139.398342][  T824] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  139.408321][ T5679] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  139.419193][ T5703] usb 2-1: device descriptor read/64, error -71
[  139.532949][ T5703] usb usb2-port1: attempt power cycle
[  139.548496][  T824] usb 4-1: Using ep0 maxpacket: 8
[  139.551532][  T824] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  139.551606][  T824] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  139.551620][  T824] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  139.551632][  T824] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  139.551645][  T824] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.551669][  T824] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  139.551681][  T824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.559224][ T5679] usb 3-1: Using ep0 maxpacket: 32
[  139.662885][ T5679] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  139.662918][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.662936][ T5679] usb 3-1: Product: syz
[  139.662950][ T5679] usb 3-1: Manufacturer: syz
[  139.662962][ T5679] usb 3-1: SerialNumber: syz
[  139.727589][ T5679] usb 3-1: config 0 descriptor??
[  139.799440][  T824] usb 4-1: GET_CAPABILITIES returned 0
[  139.799473][  T824] usbtmc 4-1:16.0: can't read capabilities
[  139.848405][ T5679] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  139.848476][ T5679] dvb-usb: bulk message failed: -22 (4/0)
[  139.848486][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  139.848551][ T5679] dvb-usb: bulk message failed: -22 (5/0)
[  139.848558][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  139.878643][ T5703] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  139.908859][ T5703] usb 2-1: device descriptor read/8, error -71
[  139.947442][ T5679] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  139.948901][ T5679] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  139.948962][ T5679] usb 3-1: media controller created
[  139.993461][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.993943][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.026334][ T6248] sg_write: data in/out 688192/136 bytes for SCSI command 0x0-- guessing data in;
[  140.026334][ T6248]    program syz.2.165 not setting count and/or reply_len properly
[  140.109731][ T6248] dvb-usb: bulk message failed: -22 (7/0)
[  140.109754][ T6248] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  140.109791][ T6248] ttusb2: i2c transfer failed.
[  140.170094][ T5679] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  140.174813][ T5703] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  140.195272][ T5703] usb 2-1: device descriptor read/8, error -71
[  140.215247][ T5679] usb 3-1: selecting invalid altsetting 3
[  140.215261][ T5679] ttusb2: set interface to alts=3 failed
[  140.243522][ T5679] DVB: Unable to find symbol tda10086_attach()
[  140.243536][ T5679] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  140.244155][ T5679] dvb-usb: bulk message failed: -22 (4/0)
[  140.244167][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  140.244232][ T5679] dvb-usb: bulk message failed: -22 (5/0)
[  140.244239][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  140.244272][ T5679] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  140.252431][ T5679] usb 3-1: USB disconnect, device number 13
[  140.301029][ T5703] usb usb2-port1: unable to enumerate USB device
[  140.383779][ T5679] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  140.418384][  T824] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  140.444512][ T6247] netlink: 'syz.3.166': attribute type 19 has an invalid length.
[  140.548312][  T824] usb 1-1: device descriptor read/64, error -71
[  140.789860][  T824] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  140.918363][  T824] usb 1-1: device descriptor read/64, error -71
[  141.008340][ T5702] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  141.031318][  T824] usb usb1-port1: attempt power cycle
[  141.179277][ T5702] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  141.179311][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.179330][ T5702] usb 3-1: Product: syz
[  141.179344][ T5702] usb 3-1: Manufacturer: syz
[  141.179358][ T5702] usb 3-1: SerialNumber: syz
[  141.227194][ T5702] usb 3-1: config 0 descriptor??
[  141.368279][  T824] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  141.389016][  T824] usb 1-1: device descriptor read/8, error -71
[  141.450026][ T6257] Bluetooth: MGMT ver 1.23
[  141.457163][ T5702] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  141.628358][  T824] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  141.650640][  T824] usb 1-1: device descriptor read/8, error -71
[  141.768385][  T824] usb usb1-port1: unable to enumerate USB device
[  142.185387][ T5704] usb 4-1: USB disconnect, device number 16
[  142.328253][  T824] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  142.481462][  T824] usb 2-1: unable to get BOS descriptor or descriptor too short
[  142.482223][  T824] usb 2-1: not running at top speed; connect to a high speed hub
[  142.483418][  T824] usb 2-1: config 7 has an invalid interface number: 186 but max is 0
[  142.483453][  T824] usb 2-1: config 7 has no interface number 0
[  142.483487][  T824] usb 2-1: config 7 interface 186 has no altsetting 0
[  142.486264][  T824] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=5b.82
[  142.486296][  T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.486315][  T824] usb 2-1: Product: syz
[  142.486328][  T824] usb 2-1: Manufacturer: syz
[  142.486343][  T824] usb 2-1: SerialNumber: syz
[  142.708281][ T5704] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  142.791130][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.792036][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.827692][ T6266] cgroup: Need name or subsystem set
[  142.859199][ T5704] usb 4-1: Using ep0 maxpacket: 16
[  142.867294][ T5704] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 110, changing to 7
[  142.867381][ T5704] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  142.891714][ T5704] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[  142.891744][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.891807][ T5704] usb 4-1: Product: syz
[  142.891821][ T5704] usb 4-1: Manufacturer: syz
[  142.891835][ T5704] usb 4-1: SerialNumber: syz
[  142.991458][  T824] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state.
[  142.991533][  T824] usb 2-1: setting power ON
[  143.003034][  T824] dvb-usb: bulk message failed: -22 (2/0)
[  143.033266][  T824] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  143.089948][  T824] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19)
[  143.090360][  T824] dvb_usb_cxusb 2-1:7.186: probe with driver dvb_usb_cxusb failed with error -22
[  143.105579][  T824] usb 2-1: USB disconnect, device number 28
[  143.201023][ T5702] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  143.255150][ T5702] usb 3-1: USB disconnect, device number 14
[  143.536934][ T6269] input: syz0 as /devices/virtual/input/input8
[  143.719572][ T5703] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  143.903056][ T6276] mmap: syz.1.176 (6276) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  143.953948][ T5703] usb 1-1: not running at top speed; connect to a high speed hub
[  143.973943][ T5703] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 4
[  143.980565][ T5703] usb 1-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40
[  143.980600][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.980620][ T5703] usb 1-1: Product: syz
[  143.980643][ T5703] usb 1-1: Manufacturer: syz
[  143.980656][ T5703] usb 1-1: SerialNumber: syz
[  144.081514][ T5704] usb 4-1: unit 5 not found!
[  144.081560][ T5704] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  144.081632][ T5704] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[  144.514660][ T5704] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  144.525671][ T5703] usb 1-1: BAAD MICROPHONE c_chmask mismatch
[  144.700549][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[  144.760563][ T5704] usb 4-1: USB disconnect, device number 17
[  145.024801][ T5678] udevd[5678]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.351907][ T6297] genirq: Flags mismatch irq 4. 00202000 (pcl818) vs. 00202080 (ttyS0)
[  145.569865][ T5679] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  146.092588][ T5703] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  146.280642][ T5703] usb 1-1: USB disconnect, device number 15
[  146.576634][ T5678] udevd[5678]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.098561][ T5703] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  147.203082][ T5702] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  147.299606][ T5704] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  147.352650][ T5703] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  147.352737][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.391910][ T5702] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  147.391946][ T5702] usb 3-1: config 1 has no interface number 0
[  147.391997][ T5702] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 8
[  147.392020][ T5702] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  147.417920][ T5702] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  147.417962][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.417981][ T5702] usb 3-1: Product: syz
[  147.417994][ T5702] usb 3-1: Manufacturer: syz
[  147.418008][ T5702] usb 3-1: SerialNumber: syz
[  147.447832][ T6329] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  147.449476][ T6329] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  147.480275][ T5704] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  147.480308][ T5704] usb 4-1: config 0 has no interface number 0
[  147.480354][ T5704] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  147.480381][ T5704] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  147.480407][ T5704] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  147.480428][ T5704] usb 4-1: config 0 interface 2 has no altsetting 0
[  147.485791][ T5704] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[  147.485834][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.485853][ T5704] usb 4-1: Product: syz
[  147.485867][ T5704] usb 4-1: Manufacturer: syz
[  147.485881][ T5704] usb 4-1: SerialNumber: syz
[  147.585093][ T5703] usb 1-1: config 0 descriptor??
[  147.603329][ T5704] usb 4-1: config 0 descriptor??
[  147.604357][ T6331] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  147.635418][ T5704] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  147.739786][ T5702] usb 3-1: Expected 3 endpoints, found: 2
[  147.827779][ T5702] usb 3-1: USB disconnect, device number 15
[  148.787683][ T5703] usb 1-1: Cannot set autoneg
[  148.804148][ T5703] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32
[  148.841926][ T5703] usb 1-1: USB disconnect, device number 16
[  148.933133][ T5603] Bluetooth: hci2: command 0x0406 tx timeout
[  148.937863][  T824] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  148.937894][  T824] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  149.323920][ T5704] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -12
[  149.338513][ T5704] usb 4-1: USB disconnect, device number 18
[  149.538483][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.596134][ T6406] FAULT_INJECTION: forcing a failure.
[  150.596134][ T6406] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  150.596198][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.3.200 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  150.596221][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  150.596239][ T6406] Call Trace:
[  150.596247][ T6406]  <TASK>
[  150.596255][ T6406]  dump_stack_lvl+0xe8/0x150
[  150.596289][ T6406]  should_fail_ex+0x467/0x600
[  150.596326][ T6406]  _copy_from_user+0x2d/0xb0
[  150.596350][ T6406]  load_msg+0x1f9/0x3b0
[  150.596378][ T6406]  do_mq_timedsend+0x3c1/0xac0
[  150.596412][ T6406]  ? __pfx_do_mq_timedsend+0x10/0x10
[  150.596443][ T6406]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  150.596480][ T6406]  __x64_sys_mq_timedsend+0x17a/0x220
[  150.596509][ T6406]  ? __pfx___x64_sys_mq_timedsend+0x10/0x10
[  150.596543][ T6406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.596564][ T6406]  do_syscall_64+0x174/0x580
[  150.596584][ T6406]  ? trace_irq_disable+0x3b/0x140
[  150.596603][ T6406]  ? clear_bhb_loop+0x40/0x90
[  150.596627][ T6406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.596646][ T6406] RIP: 0033:0x7fa0cd78de59
[  150.596669][ T6406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.596683][ T6406] RSP: 002b:00007fa0cb9e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2
[  150.596708][ T6406] RAX: ffffffffffffffda RBX: 00007fa0cda15fa0 RCX: 00007fa0cd78de59
[  150.596720][ T6406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  150.596731][ T6406] RBP: 00007fa0cb9e6090 R08: 0000000000000000 R09: 0000000000000000
[  150.596741][ T6406] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[  150.596752][ T6406] R13: 00007fa0cda16038 R14: 00007fa0cda15fa0 R15: 00007ffe16a081b8
[  150.596783][ T6406]  </TASK>
[  150.598899][ T5699] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  150.750837][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short
[  150.752457][ T5699] usb 3-1: config 114 has an invalid interface number: 40 but max is 0
[  150.752486][ T5699] usb 3-1: config 114 has no interface number 0
[  150.752517][ T5699] usb 3-1: too many endpoints for config 114 interface 40 altsetting 239: 49, using maximum allowed: 30
[  150.752554][ T5699] usb 3-1: config 114 interface 40 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 49
[  150.752581][ T5699] usb 3-1: config 114 interface 40 has no altsetting 0
[  150.758059][ T5699] usb 3-1: New USB device found, idVendor=413c, idProduct=81bb, bcdDevice=6e.df
[  150.758197][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.758218][ T5699] usb 3-1: Product: syz
[  150.758232][ T5699] usb 3-1: Manufacturer: syz
[  150.758246][ T5699] usb 3-1: SerialNumber: syz
[  151.148601][ T6411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.167784][ T6411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.253724][ T5699] usb 3-1: USB disconnect, device number 16
[  151.319909][ T6418] FAULT_INJECTION: forcing a failure.
[  151.319909][ T6418] name failslab, interval 1, probability 0, space 0, times 0
[  151.319946][ T6418] CPU: 0 UID: 0 PID: 6418 Comm: syz.0.203 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  151.319968][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  151.319979][ T6418] Call Trace:
[  151.319987][ T6418]  <TASK>
[  151.319994][ T6418]  dump_stack_lvl+0xe8/0x150
[  151.320027][ T6418]  should_fail_ex+0x467/0x600
[  151.320063][ T6418]  should_failslab+0xa8/0x100
[  151.320092][ T6418]  ? do_getname+0x2e/0x250
[  151.320117][ T6418]  kmem_cache_alloc_noprof+0x9e/0x680
[  151.320144][ T6418]  ? do_getname+0x2e/0x250
[  151.320174][ T6418]  do_getname+0x2e/0x250
[  151.320195][ T6418]  ? getname_uflags+0x11/0x30
[  151.320221][ T6418]  __x64_sys_execveat+0xad/0xf0
[  151.320242][ T6418]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.320263][ T6418]  do_syscall_64+0x174/0x580
[  151.320284][ T6418]  ? trace_irq_disable+0x3b/0x140
[  151.320303][ T6418]  ? clear_bhb_loop+0x40/0x90
[  151.320327][ T6418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.320346][ T6418] RIP: 0033:0x7fba83bade59
[  151.320364][ T6418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.320379][ T6418] RSP: 002b:00007fba81e06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  151.320400][ T6418] RAX: ffffffffffffffda RBX: 00007fba83e35fa0 RCX: 00007fba83bade59
[  151.320414][ T6418] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  151.320426][ T6418] RBP: 00007fba81e06090 R08: 0000000000001000 R09: 0000000000000000
[  151.320447][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.320459][ T6418] R13: 00007fba83e36038 R14: 00007fba83e35fa0 R15: 00007ffcb3c627a8
[  151.320488][ T6418]  </TASK>
[  151.880013][ T5699] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  151.973801][ T5679] IPVS: starting estimator thread 0...
[  151.974360][ T6430] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001
[  152.011946][ T5699] usb 1-1: device descriptor read/64, error -71
[  152.059365][ T6436] IPVS: using max 11 ests per chain, 26400 per kthread
[  152.136169][ T6442] netlink: 57 bytes leftover after parsing attributes in process `syz.2.209'.
[  152.163745][ T6442] netlink: 57 bytes leftover after parsing attributes in process `syz.2.209'.
[  152.298534][ T5699] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  152.442013][ T5699] usb 1-1: device descriptor read/64, error -71
[  152.551648][ T5699] usb usb1-port1: attempt power cycle
[  152.888309][ T5699] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  152.919424][ T5699] usb 1-1: device descriptor read/8, error -71
[  153.166130][ T5699] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  153.184016][ T5699] usb 1-1: device descriptor read/8, error -71
[  153.288590][ T5699] usb usb1-port1: unable to enumerate USB device
[  153.618296][ T5699] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  153.724172][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'.
[  153.750884][ T5699] usb 4-1: device descriptor read/64, error -71
[  153.783774][ T6476] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  153.783774][ T6476] The task syz.2.215 (6476) triggered the difference, watch for misbehavior.
[  153.998287][ T5699] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  154.135010][ T5699] usb 4-1: device descriptor read/64, error -71
[  154.243894][ T5699] usb usb4-port1: attempt power cycle
[  154.578713][ T5699] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  154.600562][ T5699] usb 4-1: device descriptor read/8, error -71
[  154.626037][ T6490] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  154.838289][ T5699] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  154.907949][ T5699] usb 4-1: device descriptor read/8, error -71
[  154.938408][ T5679] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  155.010534][ T5699] usb usb4-port1: unable to enumerate USB device
[  155.100580][ T5679] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  155.100643][ T5679] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  155.100667][ T5679] usb 1-1: config 0 interface 0 has no altsetting 0
[  155.103006][ T5679] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  155.103038][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  155.103057][ T5679] usb 1-1: Product: syz
[  155.103071][ T5679] usb 1-1: Manufacturer: syz
[  155.103085][ T5679] usb 1-1: SerialNumber: syz
[  155.128018][ T5679] usb 1-1: config 0 descriptor??
[  155.183943][ T5679] hub 1-1:0.0: bad descriptor, ignoring hub
[  155.183984][ T5679] hub 1-1:0.0: probe with driver hub failed with error -5
[  155.232963][ T5679] usb 1-1: selecting invalid altsetting 0
[  155.411979][ T6489] netlink: 68 bytes leftover after parsing attributes in process `syz.0.219'.
[  155.435209][ T6489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.436855][ T6489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.056026][  T824] usb 1-1: USB disconnect, device number 21
[  157.288289][  T824] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  157.438243][  T824] usb 3-1: Using ep0 maxpacket: 32
[  157.455889][  T824] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  157.455922][  T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.455941][  T824] usb 3-1: Product: syz
[  157.455956][  T824] usb 3-1: Manufacturer: syz
[  157.455969][  T824] usb 3-1: SerialNumber: syz
[  157.545823][  T824] usb 3-1: config 0 descriptor??
[  157.629927][  T824] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  157.633033][  T824] dvb-usb: bulk message failed: -22 (4/0)
[  157.633058][  T824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  157.633179][  T824] dvb-usb: bulk message failed: -22 (5/0)
[  157.633192][  T824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  157.695712][  T824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  157.696423][  T824] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  157.696475][  T824] usb 3-1: media controller created
[  157.764136][  T824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  157.794596][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.795246][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.824648][ T6527] dvb-usb: bulk message failed: -22 (7/0)
[  157.824668][ T6527] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  157.824701][ T6527] ttusb2: i2c transfer failed.
[  157.873787][ T5917] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  157.894922][  T824] usb 3-1: selecting invalid altsetting 3
[  157.894945][  T824] ttusb2: set interface to alts=3 failed
[  157.984318][  T824] DVB: Unable to find symbol tda10086_attach()
[  157.984337][  T824] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  157.985244][  T824] dvb-usb: bulk message failed: -22 (4/0)
[  157.985265][  T824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  157.985365][  T824] dvb-usb: bulk message failed: -22 (5/0)
[  157.985377][  T824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  157.985434][  T824] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  158.083161][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.083193][ T5917] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  158.083245][ T5917] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  158.083266][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.170287][ T5917] usb 2-1: config 0 descriptor??
[  158.171224][  T824] usb 3-1: USB disconnect, device number 17
[  158.190923][ T5917] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  158.190976][ T5917] dvb-usb: bulk message failed: -22 (3/0)
[  158.260088][ T5917] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  158.265344][ T5917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  158.265404][ T5917] usb 2-1: media controller created
[  158.292960][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  158.367062][ T5917] dvb-usb: bulk message failed: -22 (6/0)
[  158.367147][ T5917] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  158.488773][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[  158.529883][  T824] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  158.551776][ T5917] dvb-usb: schedule remote query interval to 150 msecs.
[  158.551802][ T5917] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  158.585175][ T5917] usb 2-1: USB disconnect, device number 30
[  158.764120][ T5917] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  159.106643][ T6571] FAULT_INJECTION: forcing a failure.
[  159.106643][ T6571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.106679][ T6571] CPU: 0 UID: 0 PID: 6571 Comm: syz.3.243 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  159.106701][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  159.106713][ T6571] Call Trace:
[  159.106720][ T6571]  <TASK>
[  159.106729][ T6571]  dump_stack_lvl+0xe8/0x150
[  159.106761][ T6571]  should_fail_ex+0x467/0x600
[  159.106797][ T6571]  _copy_to_user+0x31/0xb0
[  159.106824][ T6571]  simple_read_from_buffer+0xe1/0x170
[  159.106860][ T6571]  proc_fail_nth_read+0x1be/0x230
[  159.106894][ T6571]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  159.106927][ T6571]  ? rw_verify_area+0x250/0x4d0
[  159.106948][ T6571]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  159.106976][ T6571]  vfs_read+0x219/0xa90
[  159.107003][ T6571]  ? __pfx_vfs_read+0x10/0x10
[  159.107024][ T6571]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  159.107045][ T6571]  ? lockdep_hardirqs_on+0x7a/0x110
[  159.107064][ T6571]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  159.107081][ T6571]  ? mutex_lock_nested+0x152/0x1d0
[  159.107105][ T6571]  ? fdget_pos+0x252/0x320
[  159.107140][ T6571]  ksys_read+0x156/0x270
[  159.107160][ T6571]  ? __pfx_ksys_read+0x10/0x10
[  159.107186][ T6571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.107205][ T6571]  do_syscall_64+0x174/0x580
[  159.107224][ T6571]  ? trace_irq_disable+0x3b/0x140
[  159.107242][ T6571]  ? clear_bhb_loop+0x40/0x90
[  159.107265][ T6571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.107281][ T6571] RIP: 0033:0x7fa0cd74e68e
[  159.107297][ T6571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  159.107311][ T6571] RSP: 002b:00007fa0cb9c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  159.107331][ T6571] RAX: ffffffffffffffda RBX: 00007fa0cb9c56c0 RCX: 00007fa0cd74e68e
[  159.107343][ T6571] RDX: 000000000000000f RSI: 00007fa0cb9c50a0 RDI: 0000000000000005
[  159.107354][ T6571] RBP: 00007fa0cb9c5090 R08: 0000000000000000 R09: 0000000000000000
[  159.107365][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.107376][ T6571] R13: 00007fa0cda16128 R14: 00007fa0cda16090 R15: 00007ffe16a081b8
[  159.107405][ T6571]  </TASK>
[  159.305088][ T6575] netlink: 'syz.1.246': attribute type 10 has an invalid length.
[  159.305114][ T6575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.246'.
[  159.830193][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  159.953105][ T6588] netlink: 'syz.3.249': attribute type 1 has an invalid length.
[  159.953128][ T6588] netlink: 224 bytes leftover after parsing attributes in process `syz.3.249'.
[  159.953349][ T6588] block nbd1: not configured, cannot reconfigure
[  159.978342][    T9] usb 2-1: Using ep0 maxpacket: 32
[  160.012016][    T9] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  160.012050][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.012069][    T9] usb 2-1: Product: syz
[  160.012083][    T9] usb 2-1: Manufacturer: syz
[  160.012097][    T9] usb 2-1: SerialNumber: syz
[  160.055996][    T9] usb 2-1: config 0 descriptor??
[  160.072638][    T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  160.072750][    T9] dvb-usb: bulk message failed: -22 (4/0)
[  160.072764][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  160.072881][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  160.072895][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  160.146046][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  160.160631][    T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  160.160690][    T9] usb 2-1: media controller created
[  160.216539][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  160.254035][    T9] usb 2-1: selecting invalid altsetting 3
[  160.254075][    T9] ttusb2: set interface to alts=3 failed
[  160.317444][ T6582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.326456][ T6582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.352272][ T6582] dvb-usb: bulk message failed: -22 (7/0)
[  160.352306][ T6582] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  160.352343][ T6582] ttusb2: i2c transfer failed.
[  160.383780][    T9] DVB: Unable to find symbol tda10086_attach()
[  160.383800][    T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  160.385265][    T9] dvb-usb: bulk message failed: -22 (4/0)
[  160.385292][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  160.385400][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  160.385416][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  160.385477][    T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  160.428211][ T5917] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  160.478529][    T9] usb 2-1: USB disconnect, device number 31
[  160.568595][    T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  161.573157][ T6602] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  161.700510][ T5679] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  161.943931][ T5679] usb 3-1: Using ep0 maxpacket: 16
[  161.989220][ T5679] usb 3-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  161.989309][ T5679] usb 3-1: config 0 interface 0 has no altsetting 0
[  161.989347][ T5679] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  161.989370][ T5679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.030756][ T5679] usb 3-1: config 0 descriptor??
[  162.468672][ T5679] dragonrise 0003:0079:0006.0005: unknown main item tag 0x2
[  162.468718][ T5679] dragonrise 0003:0079:0006.0005: unknown main item tag 0x3
[  162.468789][ T5679] dragonrise 0003:0079:0006.0005: reserved main item tag 0xd
[  162.468814][ T5679] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0
[  162.468839][ T5679] dragonrise 0003:0079:0006.0005: unknown main item tag 0x1
[  162.468866][ T5679] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0
[  162.468889][ T5679] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0
[  162.468916][ T5679] dragonrise 0003:0079:0006.0005: unknown main item tag 0x3
[  162.468952][ T5679] dragonrise 0003:0079:0006.0005: item fetching failed at offset 43/44
[  162.469587][ T5679] dragonrise 0003:0079:0006.0005: parse failed
[  162.469659][ T5679] dragonrise 0003:0079:0006.0005: probe with driver dragonrise failed with error -22
[  162.657780][ T5679] usb 3-1: USB disconnect, device number 18
[  162.964448][ T6632] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  163.148868][ T5679] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  163.311748][ T5679] usb 2-1: Using ep0 maxpacket: 32
[  163.344173][ T5679] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  163.344199][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.344210][ T5679] usb 2-1: Product: syz
[  163.344218][ T5679] usb 2-1: Manufacturer: syz
[  163.344226][ T5679] usb 2-1: SerialNumber: syz
[  163.356913][ T5679] usb 2-1: config 0 descriptor??
[  163.358385][ T5699] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  163.379811][ T5679] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  163.379918][ T5679] dvb-usb: bulk message failed: -22 (4/0)
[  163.379935][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  163.383392][ T5679] dvb-usb: bulk message failed: -22 (5/0)
[  163.383417][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  163.449274][ T5679] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  163.449977][ T5679] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  163.450030][ T5679] usb 2-1: media controller created
[  163.468755][ T5679] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  163.498267][ T5699] usb 4-1: device descriptor read/64, error -71
[  163.502049][ T5679] usb 2-1: selecting invalid altsetting 3
[  163.502072][ T5679] ttusb2: set interface to alts=3 failed
[  163.546369][ T5679] DVB: Unable to find symbol tda10086_attach()
[  163.546383][ T5679] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  163.547635][ T5679] dvb-usb: bulk message failed: -22 (4/0)
[  163.547654][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  163.547726][ T5679] dvb-usb: bulk message failed: -22 (5/0)
[  163.547734][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  163.547768][ T5679] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  163.630999][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.631421][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.667178][ T6631] dvb-usb: bulk message failed: -22 (7/0)
[  163.667200][ T6631] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  163.667231][ T6631] ttusb2: i2c transfer failed.
[  163.763157][   T49] usb 2-1: USB disconnect, device number 32
[  163.798345][ T5699] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  163.954204][   T49] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  163.978270][ T5699] usb 4-1: device descriptor read/64, error -71
[  164.029077][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.029699][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.092237][ T5699] usb usb4-port1: attempt power cycle
[  164.300715][ T6309] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  164.438274][ T5699] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  164.467454][ T5699] usb 4-1: device descriptor read/8, error -71
[  164.488457][ T6309] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.488526][ T6309] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  164.488555][ T6309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.552738][ T6309] usb 1-1: config 0 descriptor??
[  164.576025][ T6309] pwc: Askey VC010 type 2 USB webcam detected.
[  164.718300][ T5699] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  164.751494][ T5699] usb 4-1: device descriptor read/8, error -71
[  164.760651][ T6309] pwc: send_video_command error -71
[  164.760687][ T6309] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  164.760830][ T6309] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  164.803142][ T6309] usb 1-1: USB disconnect, device number 23
[  164.858792][ T5699] usb usb4-port1: unable to enumerate USB device
[  166.059262][ T6309] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  166.148277][ T5917] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  166.258435][ T6309] usb 1-1: Using ep0 maxpacket: 16
[  166.261603][ T6309] usb 1-1: config 127 has an invalid interface number: 124 but max is 0
[  166.261622][ T6309] usb 1-1: config 127 has no interface number 0
[  166.261640][ T6309] usb 1-1: config 127 interface 124 has no altsetting 0
[  166.263450][ T6309] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  166.263468][ T6309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.263478][ T6309] usb 1-1: Product: syz
[  166.263492][ T6309] usb 1-1: Manufacturer: syz
[  166.263501][ T6309] usb 1-1: SerialNumber: syz
[  166.327226][ T5917] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  166.327257][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.327276][ T5917] usb 2-1: config 0 has no interface number 0
[  166.345763][ T5917] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  166.345843][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.345863][ T5917] usb 2-1: Product: syz
[  166.345877][ T5917] usb 2-1: Manufacturer: syz
[  166.345891][ T5917] usb 2-1: SerialNumber: syz
[  166.359590][ T5679] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  166.376239][ T5917] usb 2-1: config 0 descriptor??
[  166.518553][ T5679] usb 3-1: Using ep0 maxpacket: 32
[  166.547636][ T5679] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  166.547724][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.547756][ T5679] usb 3-1: Product: syz
[  166.547768][ T5679] usb 3-1: Manufacturer: syz
[  166.547781][ T5679] usb 3-1: SerialNumber: syz
[  166.569215][ T5679] usb 3-1: config 0 descriptor??
[  166.584062][   T49] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  166.617642][ T5679] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  166.617753][ T5679] dvb-usb: bulk message failed: -22 (4/0)
[  166.617764][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  166.617864][ T5679] dvb-usb: bulk message failed: -22 (5/0)
[  166.617872][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  166.809750][   T49] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  166.809791][   T49] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  166.809831][   T49] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  166.810054][   T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.883450][ T5679] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  166.884313][ T5679] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  166.884421][ T5679] usb 3-1: media controller created
[  166.947328][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.957846][ T6682] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  166.958881][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.967877][ T5917] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  166.968571][ T5917] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82
[  166.986844][ T5917] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  166.986950][ T5917] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  166.987042][ T5917] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  166.999922][ T5679] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  167.007278][ T6680] dvb-usb: bulk message failed: -22 (7/0)
[  167.007298][ T6680] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  167.007335][ T6680] ttusb2: i2c transfer failed.
[  167.009856][   T49] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  167.125748][ T5917] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  167.161284][ T5917] usb 2-1: USB disconnect, device number 33
[  167.169538][ T5679] usb 3-1: selecting invalid altsetting 3
[  167.169558][ T5679] ttusb2: set interface to alts=3 failed
[  167.295840][ T5917] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  167.296679][ T5917] keyspan 2-1:0.133: device disconnected
[  167.328287][ T5679] DVB: Unable to find symbol tda10086_attach()
[  167.328301][ T5679] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  167.329102][ T5679] dvb-usb: bulk message failed: -22 (4/0)
[  167.329116][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  167.329181][ T5679] dvb-usb: bulk message failed: -22 (5/0)
[  167.329188][ T5679] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  167.329222][ T5679] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  167.369662][ T6309] usb 1-1: reset high-speed USB device number 24 using dummy_hcd
[  167.375232][ T5679] usb 3-1: USB disconnect, device number 19
[  167.592664][ T5679] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  167.694969][ T6309] usb 1-1: unable to get BOS descriptor or descriptor too short
[  167.695055][ T6309] usb 1-1: device firmware changed
[  167.801941][ T6688] netlink: 'syz.2.283': attribute type 10 has an invalid length.
[  167.801972][ T6688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.283'.
[  167.837907][   T49] usb 4-1: USB disconnect, device number 27
[  167.905057][ T6309] usb 1-1: USB disconnect, device number 24
[  167.994028][ T6688] team0: Port device geneve1 added
[  168.032368][ T6691] netlink: 'syz.3.284': attribute type 4 has an invalid length.
[  168.032392][ T6691] netlink: 'syz.3.284': attribute type 5 has an invalid length.
[  168.032404][ T6691] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.284'.
[  168.361563][ T5699] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  168.523939][ T5699] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  168.523974][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.523992][ T5699] usb 2-1: Product: syz
[  168.524004][ T5699] usb 2-1: Manufacturer: syz
[  168.524016][ T5699] usb 2-1: SerialNumber: syz
[  168.567399][ T5699] usb 2-1: config 0 descriptor??
[  169.523520][ T5602] ==================================================================
[  169.523520][ T5602] ==================================================================
[  169.523540][ T5602] BUG: KASAN: slab-out-of-bounds in uea_upload_pre_firmware+0x8d/0x640
[  169.523580][ T5602] Read of size 8 at addr ffff8880605ed0b8 by task kworker/1:3/5602
[  169.523594][ T5602] 
[  169.523605][ T5602] CPU: 1 UID: 0 PID: 5602 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  169.523623][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  169.523636][ T5602] Workqueue: events request_firmware_work_func
[  169.523663][ T5602] Call Trace:
[  169.523670][ T5602]  <TASK>
[  169.523678][ T5602]  dump_stack_lvl+0xe8/0x150
[  169.523702][ T5602]  print_address_description+0x55/0x1e0
[  169.523729][ T5602]  ? uea_upload_pre_firmware+0x8d/0x640
[  169.523756][ T5602]  print_report+0x58/0x70
[  169.523777][ T5602]  kasan_report+0x117/0x150
[  169.523801][ T5602]  ? _request_firmware+0x1322/0x1780
[  169.523820][ T5602]  ? uea_upload_pre_firmware+0x8d/0x640
[  169.523847][ T5602]  uea_upload_pre_firmware+0x8d/0x640
[  169.523874][ T5602]  ? __pfx__request_firmware+0x10/0x10
[  169.523892][ T5602]  ? __pfx_uea_upload_pre_firmware+0x10/0x10
[  169.523917][ T5602]  ? lock_acquire+0x115/0x350
[  169.523936][ T5602]  ? __pfx_uea_upload_pre_firmware+0x10/0x10
[  169.523964][ T5602]  request_firmware_work_func+0xf7/0x2d0
[  169.523983][ T5602]  ? rcu_is_watching+0x15/0xb0
[  169.524003][ T5602]  ? process_one_work+0x7fd/0x1480
[  169.524020][ T5602]  process_one_work+0xaaf/0x1480
[  169.524045][ T5602]  ? __pfx_process_one_work+0x10/0x10
[  169.524061][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  169.524089][ T5602]  ? assign_work+0x3cf/0x5d0
[  169.524109][ T5602]  worker_thread+0xb05/0x10d0
[  169.524133][ T5602]  ? __kthread_parkme+0x71/0x1f0
[  169.524159][ T5602]  kthread+0x388/0x470
[  169.524180][ T5602]  ? __pfx_worker_thread+0x10/0x10
[  169.524197][ T5602]  ? __pfx_kthread+0x10/0x10
[  169.524220][ T5602]  ret_from_fork+0x514/0xb70
[  169.524249][ T5602]  ? __pfx_ret_from_fork+0x10/0x10
[  169.524274][ T5602]  ? __switch_to+0xc89/0x1420
[  169.524297][ T5602]  ? __pfx_kthread+0x10/0x10
[  169.524334][ T5602]  ret_from_fork_asm+0x1a/0x30
[  169.524367][ T5602]  </TASK>
[  169.524373][ T5602] 
[  169.524378][ T5602] Allocated by task 5600:
[  169.524388][ T5602]  kasan_save_track+0x3e/0x80
[  169.524413][ T5602]  __kasan_kmalloc+0x93/0xb0
[  169.524437][ T5602]  __kmalloc_noprof+0x415/0x790
[  169.524461][ T5602]  tomoyo_realpath_from_path+0xef/0x640
[  169.524482][ T5602]  tomoyo_path_perm+0x283/0x560
[  169.524508][ T5602]  security_inode_getattr+0x121/0x2d0
[  169.524531][ T5602]  __x64_sys_newfstat+0x133/0x270
[  169.524556][ T5602]  do_syscall_64+0x174/0x580
[  169.524575][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.524593][ T5602] 
[  169.524597][ T5602] Freed by task 5600:
[  169.524605][ T5602]  kasan_save_track+0x3e/0x80
[  169.524624][ T5602]  kasan_save_free_info+0x40/0x50
[  169.524641][ T5602]  __kasan_slab_free+0x5c/0x80
[  169.524661][ T5602]  kfree+0x1c5/0x6c0
[  169.524679][ T5602]  tomoyo_realpath_from_path+0x605/0x640
[  169.524698][ T5602]  tomoyo_path_perm+0x283/0x560
[  169.524716][ T5602]  security_inode_getattr+0x121/0x2d0
[  169.524730][ T5602]  __x64_sys_newfstat+0x133/0x270
[  169.524748][ T5602]  do_syscall_64+0x174/0x580
[  169.524764][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.524779][ T5602] 
[  169.524784][ T5602] The buggy address belongs to the object at ffff8880605ec000
[  169.524784][ T5602]  which belongs to the cache kmalloc-4k of size 4096
[  169.524795][ T5602] The buggy address is located 184 bytes to the right of
[  169.524795][ T5602]  allocated 4096-byte region [ffff8880605ec000, ffff8880605ed000)
[  169.524811][ T5602] 
[  169.524814][ T5602] The buggy address belongs to the physical page:
[  169.524834][ T5602] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x605e8
[  169.524847][ T5602] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  169.524858][ T5602] flags: 0x80000000000040(head|node=0|zone=1)
[  169.524874][ T5602] page_type: f5(slab)
[  169.524888][ T5602] raw: 0080000000000040 ffff88813fe3a140 dead000000000100 dead000000000122
[  169.524899][ T5602] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  169.524911][ T5602] head: 0080000000000040 ffff88813fe3a140 dead000000000100 dead000000000122
[  169.524922][ T5602] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  169.524933][ T5602] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  169.524945][ T5602] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  169.524951][ T5602] page dumped because: kasan: bad access detected
[  169.524964][ T5602] page_owner tracks the page as allocated
[  169.524969][ T5602] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5857, tgid 5857 (udevd), ts 139773851615
[  169.524992][ T5602]  post_alloc_hook+0x1f9/0x250
[  169.525013][ T5602]  get_page_from_freelist+0x264c/0x26c0
[  169.525035][ T5602]  __alloc_frozen_pages_noprof+0x222/0x5b0
[  169.525056][ T5602]  allocate_slab+0x7c/0x5e0
[  169.525071][ T5602]  refill_objects+0x2d8/0x350
[  169.525085][ T5602]  __pcs_replace_empty_main+0x330/0x690
[  169.525098][ T5602]  __kmalloc_noprof+0x543/0x790
[  169.525116][ T5602]  tomoyo_realpath_from_path+0xef/0x640
[  169.525134][ T5602]  tomoyo_path2_perm+0x2c5/0x760
[  169.525158][ T5602]  tomoyo_path_rename+0x14e/0x1b0
[  169.525177][ T5602]  security_path_rename+0x23e/0x410
[  169.525196][ T5602]  filename_renameat2+0x4ba/0x9b0
[  169.525217][ T5602]  __se_sys_rename+0x55/0x2c0
[  169.525238][ T5602]  do_syscall_64+0x174/0x580
[  169.525252][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.525266][ T5602] page last free pid 5678 tgid 5678 ts 138097256106 stack trace:
[  169.525277][ T5602]  __free_frozen_pages+0x10de/0x11c0
[  169.525296][ T5602]  __slab_free+0x252/0x2a0
[  169.525323][ T5602]  qlist_free_all+0x99/0x100
[  169.525340][ T5602]  kasan_quarantine_reduce+0x148/0x160
[  169.525356][ T5602]  __kasan_slab_alloc+0x22/0x80
[  169.525377][ T5602]  __kmalloc_noprof+0x3b1/0x790
[  169.525396][ T5602]  tomoyo_encode+0x2ad/0x570
[  169.525411][ T5602]  tomoyo_path_perm+0x318/0x560
[  169.525432][ T5602]  tomoyo_path_symlink+0xab/0xf0
[  169.525447][ T5602]  security_path_symlink+0x165/0x310
[  169.525465][ T5602]  filename_symlinkat+0x134/0x420
[  169.525484][ T5602]  __se_sys_symlink+0x4d/0x2b0
[  169.525504][ T5602]  do_syscall_64+0x174/0x580
[  169.525520][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.525533][ T5602] 
[  169.525537][ T5602] Memory state around the buggy address:
[  169.525546][ T5602]  ffff8880605ecf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  169.525557][ T5602]  ffff8880605ed000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  169.525565][ T5602] >ffff8880605ed080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  169.525572][ T5602]                                         ^
[  169.525579][ T5602]  ffff8880605ed100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  169.525588][ T5602]  ffff8880605ed180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  169.525621][ T5602] ==================================================================
[  169.536000][ T5602] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  169.536023][ T5602] CPU: 1 UID: 0 PID: 5602 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  169.536046][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  169.536058][ T5602] Workqueue: events request_firmware_work_func
[  169.536092][ T5602] Call Trace:
[  169.536100][ T5602]  <TASK>
[  169.536112][ T5602]  vpanic+0x607/0xb50
[  169.536134][ T5602]  ? __pfx_clockevents_program_event+0x10/0x10
[  169.536164][ T5602]  ? __pfx_vpanic+0x10/0x10
[  169.536188][ T5602]  panic+0xc5/0xd0
[  169.536205][ T5602]  ? __pfx_panic+0x10/0x10
[  169.536223][ T5602]  ? preempt_schedule_thunk+0x16/0x40
[  169.536243][ T5602]  ? uea_upload_pre_firmware+0x8d/0x640
[  169.536273][ T5602]  ? preempt_schedule_thunk+0x16/0x40
[  169.536292][ T5602]  ? uea_upload_pre_firmware+0x8d/0x640
[  169.536328][ T5602]  check_panic_on_warn+0x89/0xb0
[  169.536356][ T5602]  ? uea_upload_pre_firmware+0x8d/0x640
[  169.536384][ T5602]  end_report+0x73/0x170
[  169.536412][ T5602]  ? uea_upload_pre_firmware+0x8d/0x640
[  169.536443][ T5602]  kasan_report+0x128/0x150
[  169.536470][ T5602]  ? _request_firmware+0x1322/0x1780
[  169.536491][ T5602]  ? uea_upload_pre_firmware+0x8d/0x640
[  169.536523][ T5602]  uea_upload_pre_firmware+0x8d/0x640
[  169.536553][ T5602]  ? __pfx__request_firmware+0x10/0x10
[  169.536573][ T5602]  ? __pfx_uea_upload_pre_firmware+0x10/0x10
[  169.536603][ T5602]  ? lock_acquire+0x115/0x350
[  169.536622][ T5602]  ? __pfx_uea_upload_pre_firmware+0x10/0x10
[  169.536651][ T5602]  request_firmware_work_func+0xf7/0x2d0
[  169.536672][ T5602]  ? rcu_is_watching+0x15/0xb0
[  169.536694][ T5602]  ? process_one_work+0x7fd/0x1480
[  169.536713][ T5602]  process_one_work+0xaaf/0x1480
[  169.536741][ T5602]  ? __pfx_process_one_work+0x10/0x10
[  169.536759][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  169.536787][ T5602]  ? assign_work+0x3cf/0x5d0
[  169.536806][ T5602]  worker_thread+0xb05/0x10d0
[  169.536831][ T5602]  ? __kthread_parkme+0x71/0x1f0
[  169.536857][ T5602]  kthread+0x388/0x470
[  169.536880][ T5602]  ? __pfx_worker_thread+0x10/0x10
[  169.536900][ T5602]  ? __pfx_kthread+0x10/0x10
[  169.536924][ T5602]  ret_from_fork+0x514/0xb70
[  169.536952][ T5602]  ? __pfx_ret_from_fork+0x10/0x10
[  169.536976][ T5602]  ? __switch_to+0xc89/0x1420
[  169.536998][ T5602]  ? __pfx_kthread+0x10/0x10
[  169.537022][ T5602]  ret_from_fork_asm+0x1a/0x30
[  169.537055][ T5602]  </TASK>
[  169.537374][ T5602] Kernel Offset: disabled