last executing test programs:

44.393729349s ago: executing program 4 (id=372):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004047}, 0x0)

44.367395339s ago: executing program 4 (id=373):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0)

44.32872111s ago: executing program 4 (id=374):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4000000, &(0x7f0000000440)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3ff}, 0x1c)
close_range(r1, 0xffffffffffffffff, 0x10000000000000)

43.462543253s ago: executing program 4 (id=378):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f00000001c0)={0x7fff, 0x9c6, 0x3, 0xfffffffffffffffa, 0x2, 0x5})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000100)={&(0x7f0000000200)={{@hyper, 0xa6}, {@local, 0x9}, 0x400, "a412ee4a99275b66fc2818ddd1de2b1ef7d1ba70a33e5af16bab03cc6ba807f7573cd85b68198b65db91e885b63258dff9499e19513572c6b9f9a1adc0da0c2c81fa4e7875c9346fb9aa6f20d999cb3734b4e0550fbc134465e19bade83bc24ae06c98256e5e504ba2ac53fe16c6491c83c40bdd5f2d6d81229292e7e8888b0851d58c19f4fd65bf30cd3378b030566034c8e6bb9669f2c050b0f9d184bb0a44e55265063b2444c8e91b4ab2cc2787df8691830c27349dbc057595a90263e4772996006abe6919a9ea5b110af9a8730ad69f32574071348aabde62627a92c5384d3296dfa1c4962caa10925a7762e08db05841fdcc2e26544fb35b6146ede1b2078055faf9442774bdf1758d358063d945ae89736ed37c178a783f16a22d164e651fbb217d83514ce047825a30952e46dab7c8f4798db3832b111e16020223af99d09f93819ea35c6f73090d64c6b014189220123703a1c2e3ea1ad8e2069f9b4fc39a906761f8cb1446df3b6e73e24d6ff8f3a7cd050b68d4636cd537c903b66ed0b39af5943cbe76967f65f91d33d8b42b0be3d1ac156b4f4ae631a8195ecddeeb81ebacb05b858c61f28f135fe6d06c8df27486d434b55241ab37a540256a8fc5b0eb8f246d6354e5fcfda64f069112226af62af090da6fb5deca1bca7f43d61d6ae37773be91fe2d7642a4af84abbe15984493889e047e8a93f0d2a62cb180271e7e7035a752214e21ee8b99b84d5ca18a4e4bb6be76632806468675310b3507d5a9c17cce767ab46be65218e34c87e928b19e63d788e6b3c7f7fc6962809530d1e5e344201ea5996c449f1e5dc66be113786e094c077e565b4c390e74552707dcb93a92699eeafcc7ecb70e25966c09333ecfc152647717124ae3766b3a8948545cc0596ae7f9bde823078fa8fcff0dea04d0685bf6b81744403f054ab4d203a481ac061cce16be6bc0ca74519281bf4090a8bff5c166280fdbcbd5aac63c05b361d2d71fd662a640c2feee5da82e9ba31018fca590f6e6cce485325758669e3c5ef48fafc1a8a22d8efb712ab30cbdd8004d6a330e42f8fffbfeaff46afe231cd369d8508720c83c60175a86b242043345b20ef2adc7b6f823517010e2e35d0b49b76460a9d27432ffeefa7f08ab685e151af5077a55dd17e5781750317e1dc9ca75348f8298790e3f5adcf712d8d72d9d1309996fd201fbb23280d16547c1db0dbd967e0af8f3e491cd9ce8b903b07a4b8cb7a9f4172a126a19cd5d8bb6282bb0c2200e33acfa7143df12bd45f2523ccde974dd95f918d4eb252b3f41cc9fa16ba274c4ca6ac125a906f01a6246f215db844ec800b931974dc66a0fa0551c4fa8f2a18b090745637e4eae221abe30ad8166de3ff439ce7c788b01a4cc79e13699a555bb1c27754cc502b90a0c8472820e0b0afaff0b8ed4d6a8593f09"}, 0x418, 0x1ff})
connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f7af3", 0x3, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)

43.327784675s ago: executing program 4 (id=379):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

43.142666868s ago: executing program 4 (id=384):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$watch_queue(r0, &(0x7f0000002740)=""/42, 0x2a)

37.425554244s ago: executing program 2 (id=419):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
io_setup(0x7d, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}])

36.323584591s ago: executing program 2 (id=427):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x51, [0xd4, 0x25, 0xb, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x3ca, 0xa, 0x6, 0xf6f, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x4, 0xffff, 0x300, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x477c2b8a, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0xb1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x7fffffff, 0x9, 0x5, 0x4, 0x0, 0x3a26, 0x1000, 0x57f2, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x5, 0x5, 0xffffffff, 0xfffffffd, 0x557, 0x7, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0xa, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x5, 0xd, 0x5, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x800000, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x10001, 0x8, 0x6, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0x7, 0x0, 0xffffffff, 0x1, 0x9, 0x6, 0xac, 0x0, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4ef, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x9, 0x7, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x7, 0x0, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x7, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0x8, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x800009, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0xfffffffd, 0x80000000, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x6, 0x0, 0x1ff, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0xc, 0x1, 0x4, 0x100009, 0x100, 0x5, 0x3c, 0xfffffffe, 0x1000, 0xfffffffe, 0x4, 0x8002, 0x7, 0xffffffff, 0x5, 0x7, 0xfffffffc, 0x4, 0x86, 0xeff]}, 0x45c)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, 0x0, 0x32)
syz_open_dev$tty1(0xc, 0x4, 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000980)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)
r1 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fb00030000fb"], 0x830200)

36.207278613s ago: executing program 2 (id=429):
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x5)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})

34.674919766s ago: executing program 2 (id=442):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x5c}}, 0x4048010)
write$tun(r0, &(0x7f00000006c0)=ANY=[], 0x7a)

33.850721458s ago: executing program 2 (id=444):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0)

31.135027019s ago: executing program 2 (id=451):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x103, 0x0, 0x1a449, 0x3, 0x40000003, 0x87, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})

28.092478595s ago: executing program 32 (id=384):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$watch_queue(r0, &(0x7f0000002740)=""/42, 0x2a)

15.955691459s ago: executing program 33 (id=451):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x103, 0x0, 0x1a449, 0x3, 0x40000003, 0x87, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})

12.343794754s ago: executing program 1 (id=498):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00'}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f", 0x3c}], 0x1}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf})
syz_io_uring_submit(0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

9.022607974s ago: executing program 1 (id=508):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

8.839947456s ago: executing program 1 (id=509):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
dup3(r2, r1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x6, 0x3f58, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x4}, 0x50)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b708", @ANYBLOB="0000000004000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0)

7.877572481s ago: executing program 1 (id=511):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.386811118s ago: executing program 5 (id=515):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
dup3(r2, r1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x6, 0x3f58, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x4}, 0x50)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b708", @ANYBLOB="0000000004000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0)

6.131622937s ago: executing program 5 (id=517):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000e0800"])

5.731352263s ago: executing program 5 (id=522):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./mnt\x00', 0x2200054, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@acl}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r1, &(0x7f0000000740)="ccf04718", 0x4)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

5.677419984s ago: executing program 0 (id=523):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$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")
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x0, 0x8d)
pipe2$9p(&(0x7f0000000040), 0x80)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0xc400941b, 0x0)
semget(0x1, 0x3, 0x204)
fsync(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='ext4_unlink_exit\x00', r0}, 0x10)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

5.385507048s ago: executing program 3 (id=524):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x20, 0x600)
setpgid(r2, 0x0)
setpgid(0x0, r2)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001)

5.106693113s ago: executing program 3 (id=525):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r3, <r4=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={r4})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.880911466s ago: executing program 3 (id=526):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

4.831993797s ago: executing program 5 (id=527):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r3, 0x0, 0x0, 0xc981)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80)
write(r4, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14)
r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
ioctl$IOC_PR_PREEMPT(r6, 0x80026101, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000})

4.712853159s ago: executing program 3 (id=528):
r0 = socket(0x10, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0)
openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x4, 0x5}, {0x6, 0x7f36}, {0x8, 0x70}, {0x3, 0xf}, {0xa, 0xff}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x5}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$uinput(0xffffff9c, 0x0, 0x802, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x2, 0x4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x4010, 0xffffffffffffffff, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e8000000000005000000f59407a0125d9bca29ed421ca373a0c0f1c95f4b660bf55aa5916dd9ac95478dbb0ae2a64fe7a85090203472eb242b0120bf4f878a4d611db7ef7c80fc593391de47faab5ff2c2fabb6e4f1f2b0bbae2a612c4e7524b69d3ea493fbfd916b93ebf0e98f5f3ba01800000669c46f380691ada2e49fd64837179c518d545df2f3c6ca46d57223bf89aaa63af670b1be7a72e8010d5f4e50ab0a41a67"])
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.741219204s ago: executing program 3 (id=529):
mkdir(0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

3.135903573s ago: executing program 3 (id=530):
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000080)={[{@compress_force}, {@clear_cache}, {@nobarrier}, {@ref_verify}, {@acl}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x5, 0x0, {0x0, @struct, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r2=>0x0}, {0x0, @struct={0x0, 0xda3}, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, @struct, 0x0, 0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x3]}})
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000840)={0x10, 0x0, {0x1, @struct={0x7, 0xffffffff}, r1, 0xf, 0x0, 0x1ff, 0x3, 0x7, 0x4b2, @struct={0x7, 0x3}, 0x6, 0x2, [0x5, 0x3, 0x70cc, 0x4, 0x7f, 0x10]}, {0x0, @usage=0x8, r3, 0xd4a, 0x7f, 0x0, 0x2, 0x6e1, 0x449, @struct={0x45a4, 0xc}, 0x5, 0x0, [0xb6, 0x1, 0x6, 0x0, 0x2, 0x83bd]}, {0x5, @struct={0x59149c7f, 0x2}, r2, 0xc, 0x9, 0x6, 0x1, 0x3, 0x4, @usage=0x2, 0x3, 0x3, [0xf, 0xffffffff987532e6, 0x8, 0x3, 0x30560, 0x1]}, {0x100000000, 0x3ff, 0x6}})

2.850620397s ago: executing program 1 (id=531):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x0, "00000000020000000000002100", "0600", "0500bd2c", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]})
ftruncate(r0, 0x1)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)

2.701718519s ago: executing program 0 (id=532):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

2.507960232s ago: executing program 0 (id=533):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244"], 0x0)

522.562752ms ago: executing program 0 (id=534):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x20, 0x600)
setpgid(r2, 0x0)
setpgid(0x0, r2)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001)

431.378493ms ago: executing program 0 (id=535):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1ffffff, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x6, 0x200], 0x0, 0x8340})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

284.068535ms ago: executing program 5 (id=536):
r0 = io_uring_setup(0x2a2c, &(0x7f0000000000)={0x0, 0x0, 0x2, 0xfffffffc})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002})

150.882688ms ago: executing program 0 (id=537):
r0 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket(0x2b, 0x1, 0x1)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x5)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

137.191658ms ago: executing program 1 (id=538):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

0s ago: executing program 5 (id=539):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000001300))
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)

kernel console output (not intermixed with test programs):

comes ready
[   73.648723][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.660220][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.669419][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.678172][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.687772][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.754039][ T4188] device veth0_macvtap entered promiscuous mode
[   73.786841][ T4261] Bluetooth: hci1: command 0x040f tx timeout
[   73.793027][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.802662][ T4261] Bluetooth: hci2: command 0x040f tx timeout
[   73.809142][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.809388][ T4261] Bluetooth: hci4: command 0x040f tx timeout
[   73.822124][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.824067][ T4261] Bluetooth: hci0: command 0x040f tx timeout
[   73.832341][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.845477][ T4261] Bluetooth: hci3: command 0x040f tx timeout
[   73.854470][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.863393][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.878331][ T4188] device veth1_macvtap entered promiscuous mode
[   73.903184][ T4192] device veth0_vlan entered promiscuous mode
[   73.916407][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.924562][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.934099][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.951239][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.962821][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.975158][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.987351][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.997532][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.008266][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.019997][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.050831][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.060812][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.091349][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.097916][ T4192] device veth1_vlan entered promiscuous mode
[   74.107433][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.107558][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.125693][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.136527][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.137676][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.154264][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.165115][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.176065][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.186753][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.198448][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.218337][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.228537][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.237631][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.246825][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.269230][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.279113][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.288790][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.298024][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.345904][ T3108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.353892][ T3108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.363165][ T3086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.373501][ T3086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.392450][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.401442][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.409747][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.420610][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.433968][ T4192] device veth0_macvtap entered promiscuous mode
[   74.483926][ T4192] device veth1_macvtap entered promiscuous mode
[   74.547028][ T3086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.548164][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.555003][ T3086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.589568][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.596066][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.610692][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.623187][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.633982][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.644101][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.654873][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.669539][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.680432][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.692110][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.713271][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.723132][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.750970][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.774969][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.783588][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.794911][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.813732][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.841419][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.856013][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.867743][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.878010][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.888976][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.900054][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.911370][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.938175][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.964577][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.978676][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.998283][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.010074][ T3086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.019226][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.031172][ T3086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.039280][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.053196][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.074259][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.200506][ T3086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.250877][ T3086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.375840][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   75.385127][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   75.395209][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   75.404161][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   75.478472][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   76.029274][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[   76.195329][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!!
[   76.645420][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   76.651539][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[   76.657825][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[   76.663905][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[   76.726479][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.811938][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.837125][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.902926][ T4311] Cannot find add_set index 1 as target
[   77.084322][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.116508][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!!
[   77.129325][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   77.139322][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   77.148398][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   77.188938][ T4318] Zero length message leads to an empty skb
[   77.253490][ T4318] ODEBUG: Out of memory. ODEBUG disabled
[   77.935441][ T4318] syz.1.6 (4318): drop_caches: 2
[   78.165254][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.173878][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.291404][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.426453][ T4321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   79.000197][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   79.018786][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[   79.036667][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[   79.050844][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   79.065304][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   79.078509][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[   79.094203][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[   82.314750][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   82.337043][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[   82.359119][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[   82.376523][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   82.393130][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   82.408826][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[   82.426230][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[   82.436664][ T4326] syz.4.5 (4326) used greatest stack depth: 20256 bytes left
[   85.223617][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   85.233677][ T4358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12'.
[   85.636269][ T4366] kAFS: No cell specified
[   86.661155][ T1324] cfg80211: failed to load regulatory.db
[   88.258892][ T4373] sched: RT throttling activated
[   93.895345][   T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.305601][   T13] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   94.625377][   T13] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   94.675738][   T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   94.687720][   T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   94.699947][   T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   94.825606][   T13] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   95.618531][   T13] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   95.689459][   T13] usb 4-1: Product: syz
[   96.134044][   T13] usb 4-1: Manufacturer: syz
[   96.359173][   T13] cdc_wdm 4-1:1.0: skipping garbage
[   96.364592][   T13] cdc_wdm 4-1:1.0: skipping garbage
[   96.808160][ T4442] nfs: Unknown parameter 'ntext'
[   96.858727][   T13] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[   96.913883][   T13] cdc_wdm 4-1:1.0: Unknown control protocol
[   97.026552][ T4450] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   97.217816][ T4452] block device autoloading is deprecated and will be removed.
[   98.402885][   T13] usb 4-1: USB disconnect, device number 2
[   98.558071][ T4457] raw_sendmsg: syz.1.38 forgot to set AF_INET. Fix it!
[   98.764253][ T4456] block device autoloading is deprecated and will be removed.
[  102.246665][ T4298] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  102.485301][ T4298] usb 4-1: Using ep0 maxpacket: 32
[  102.596041][ T4514] mmap: syz.4.48 (4514) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  102.605521][ T4298] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  102.635312][ T4298] usb 4-1: config 0 has no interface number 0
[  102.641468][ T4298] usb 4-1: config 0 interface 184 has no altsetting 0
[  102.825505][ T4298] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  102.844978][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.888703][ T4298] usb 4-1: Product: syz
[  102.911091][ T4298] usb 4-1: Manufacturer: syz
[  102.933692][ T4298] usb 4-1: SerialNumber: syz
[  102.976226][ T4298] usb 4-1: config 0 descriptor??
[  103.019308][ T4298] smsc75xx v1.0.0
[  105.857660][ T4298] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  105.884341][ T4298] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  105.966269][ T4547] binder: 4544:4547 ioctl c0306201 0 returned -14
[  107.085461][ T4298] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  108.989424][ T4298] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  109.085711][ T4298] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  109.129222][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  109.142930][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  109.151350][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  109.159726][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  109.167935][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  109.183178][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  109.191568][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  109.282229][ T4298] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  109.403655][ T4298] smsc75xx: probe of 4-1:0.184 failed with error -71
[  109.623029][ T4298] usb 4-1: USB disconnect, device number 3
[  111.177142][ T4565] syz.2.59 uses obsolete (PF_INET,SOCK_PACKET)
[  111.311598][ T4567] overlayfs: failed to decode file handle (len=6, type=196859, flags=0, err=-22)
[  111.795383][ T4298] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  112.555546][    T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  113.630624][   T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  113.641033][ T4237] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  113.905477][   T21] usb 3-1: Using ep0 maxpacket: 16
[  113.910743][ T4237] usb 2-1: Using ep0 maxpacket: 16
[  113.965413][   T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  114.055496][   T21] usb 3-1: config 8 has an invalid interface number: 39 but max is 0
[  114.063620][   T21] usb 3-1: config 8 has no interface number 0
[  114.069887][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.080889][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.085290][    T7] usb 5-1: device descriptor read/64, error -71
[  114.091684][   T21] usb 3-1: config 8 interface 39 altsetting 1 has an invalid endpoint with address 0xDF, skipping
[  114.097268][ T4298] usb 4-1: device descriptor read/64, error -71
[  114.107733][ T4237] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  114.123060][   T21] usb 3-1: config 8 interface 39 has no altsetting 0
[  114.129892][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.141374][ T4237] usb 2-1: config 0 descriptor??
[  114.285431][   T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[  114.295274][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.303302][   T21] usb 3-1: Product: syz
[  114.307518][   T21] usb 3-1: Manufacturer: syz
[  114.312123][   T21] usb 3-1: SerialNumber: syz
[  114.385601][    T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  114.393519][ T4298] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  114.401271][   T13] usb 1-1: config 0 has an invalid interface number: 84 but max is 0
[  114.409632][   T13] usb 1-1: config 0 has an invalid interface number: 66 but max is 0
[  114.417891][   T13] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  114.427130][   T13] usb 1-1: config 0 has no interface number 0
[  114.433235][   T13] usb 1-1: config 0 has no interface number 1
[  114.439417][   T13] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64
[  114.450981][   T13] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  114.463975][   T13] usb 1-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[  114.475092][   T13] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32
[  114.485253][   T13] usb 1-1: config 0 interface 66 altsetting 153 has an invalid endpoint with address 0x12, skipping
[  114.496489][   T13] usb 1-1: config 0 interface 66 altsetting 153 has an invalid endpoint with address 0xE6, skipping
[  114.507368][   T13] usb 1-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[  114.520711][   T13] usb 1-1: config 0 interface 66 has no altsetting 0
[  114.597257][   T21] ipheth 3-1:8.39: Unable to find endpoints
[  114.608597][   T21] usb 3-1: USB disconnect, device number 2
[  114.630505][ T4237] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0
[  114.638918][ T4237] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0
[  114.646498][ T4237] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0
[  114.653690][ T4237] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0
[  114.665452][    T7] usb 5-1: Using ep0 maxpacket: 32
[  114.670727][ T4298] usb 4-1: Using ep0 maxpacket: 16
[  114.680134][ T4237] konepure 0003:1E7D:2DB4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0
[  114.729278][   T13] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  114.738638][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.752267][   T13] usb 1-1: Product: syz
[  114.757251][   T13] usb 1-1: Manufacturer: syz
[  114.761887][   T13] usb 1-1: SerialNumber: syz
[  114.785075][   T13] usb 1-1: config 0 descriptor??
[  114.825700][    T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  114.858619][ T4251] usb 2-1: USB disconnect, device number 2
[  115.025552][ T4298] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  115.034975][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.043149][    T7] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  115.052547][    T7] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  115.053348][ T4603] udc-core: couldn't find an available UDC or it's busy
[  115.060846][ T4298] usb 4-1: Product: syz
[  115.060867][ T4298] usb 4-1: Manufacturer: syz
[  115.060883][ T4298] usb 4-1: SerialNumber: syz
[  115.061789][    T7] usb 5-1: Product: syz
[  115.075640][ T4603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  115.078835][ T4298] usb 4-1: config 0 descriptor??
[  115.106485][    T7] usb 5-1: Manufacturer: syz
[  115.111489][    T7] usb 5-1: SerialNumber: syz
[  115.120530][    T7] usb 5-1: config 0 descriptor??
[  115.129984][   T13] usb 1-1: USB disconnect, device number 2
[  115.155616][ T4597] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  115.164513][ T4298] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  115.176042][    T7] hub 5-1:0.0: bad descriptor, ignoring hub
[  115.182110][    T7] hub: probe of 5-1:0.0 failed with error -5
[  115.495475][   T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  115.696815][ T4237] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  115.745440][   T21] usb 3-1: Using ep0 maxpacket: 32
[  115.845537][ T4597] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[  115.905326][ T4251] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  115.955466][ T4237] usb 2-1: Using ep0 maxpacket: 32
[  116.056727][   T21] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  116.066896][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.074915][   T21] usb 3-1: Product: syz
[  116.079423][ T4237] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  116.087606][   T21] usb 3-1: Manufacturer: syz
[  116.092239][   T21] usb 3-1: SerialNumber: syz
[  116.097102][ T4237] usb 2-1: config 0 has no interface number 0
[  116.103220][ T4237] usb 2-1: config 0 interface 89 has no altsetting 0
[  116.113132][   T21] usb 3-1: config 0 descriptor??
[  116.145280][ T4251] usb 1-1: Using ep0 maxpacket: 32
[  116.168148][   T21] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  116.246825][ T4620] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[  116.265392][ T4251] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  116.265716][ T4237] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  116.273519][ T4251] usb 1-1: config 0 has no interface number 0
[  116.273565][ T4251] usb 1-1: config 0 interface 12 has no altsetting 0
[  116.295577][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.303580][ T4237] usb 2-1: Product: syz
[  116.307873][ T4237] usb 2-1: Manufacturer: syz
[  116.312488][ T4237] usb 2-1: SerialNumber: syz
[  116.325699][ T4237] usb 2-1: config 0 descriptor??
[  116.377788][ T4237] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  116.387569][ T4237] em28xx 2-1:0.89: Video interface 89 found: bulk
[  116.425417][ T4251] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  116.434604][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.443081][ T4251] usb 1-1: Product: syz
[  116.447413][ T4251] usb 1-1: Manufacturer: syz
[  116.452039][ T4251] usb 1-1: SerialNumber: syz
[  116.458729][ T4251] usb 1-1: config 0 descriptor??
[  116.468337][ T4298] usb 4-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0
[  116.482962][ T1108] usb 5-1: USB disconnect, device number 3
[  116.889910][ T4308] usb 4-1: USB disconnect, device number 5
[  116.898711][ T4308] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0
[  116.910741][ T4308] ssu100 4-1:0.0: device disconnected
[  117.025398][ T4237] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  117.375545][ T4251] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71
[  117.385232][ T4251] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  117.392627][ T4251] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  117.406795][ T4251] f81534: probe of 1-1:0.12 failed with error -71
[  117.422052][ T4251] usb 1-1: USB disconnect, device number 3
[  118.865632][ T4237] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  118.874375][ T4237] em28xx 2-1:0.89: board has no eeprom
[  118.995350][ T4237] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  119.013668][ T4237] em28xx 2-1:0.89: analog set to bulk mode.
[  119.024970][ T1108] em28xx 2-1:0.89: Registering V4L2 extension
[  119.025435][ T4251] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  119.039725][ T4237] usb 2-1: USB disconnect, device number 3
[  119.063018][ T4237] em28xx 2-1:0.89: Disconnecting em28xx
[  119.075448][ T4308] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  119.105396][ T1108] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  119.112742][ T1108] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  119.120771][ T1108] em28xx 2-1:0.89: No AC97 audio processor
[  119.134252][ T1108] usb 2-1: Decoder not found
[  119.139402][ T1108] em28xx 2-1:0.89: failed to create media graph
[  119.145919][ T1108] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  119.309898][ T1108] em28xx 2-1:0.89: Registering snapshot button...
[  119.320548][ T1108] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input5
[  119.335520][ T4251] usb 1-1: Using ep0 maxpacket: 16
[  119.335745][ T1108] em28xx 2-1:0.89: Remote control support is not available for this card.
[  119.349779][ T4237] em28xx 2-1:0.89: Closing input extension
[  119.356758][ T4237] em28xx 2-1:0.89: Deregistering snapshot button
[  119.438943][ T4308] usb 4-1: Using ep0 maxpacket: 32
[  119.565591][ T4308] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  119.759884][ T4237] em28xx 2-1:0.89: Freeing device
[  119.866011][ T4308] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  119.988688][ T4308] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  120.005634][ T4308] usb 4-1: Product: syz
[  120.079474][ T4251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.093282][ T4251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.094444][ T4308] usb 4-1: Manufacturer: syz
[  120.108435][ T4308] usb 4-1: SerialNumber: syz
[  120.128011][ T4308] usb 4-1: config 0 descriptor??
[  120.145527][ T4654] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  120.155500][ T4251] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  120.165957][ T4308] hub 4-1:0.0: bad descriptor, ignoring hub
[  120.171920][ T4308] hub: probe of 4-1:0.0 failed with error -5
[  120.175023][ T4251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.215046][ T4251] usb 1-1: config 0 descriptor??
[  120.265469][   T21] gspca_stk1135: reg_w 0x352 err -71
[  120.271858][   T21] gspca_stk1135: serial bus timeout: status=0x00
[  120.298080][   T21] gspca_stk1135: Sensor write failed
[  120.470946][   T21] gspca_stk1135: serial bus timeout: status=0x00
[  120.477924][   T21] gspca_stk1135: Sensor write failed
[  120.483629][   T21] gspca_stk1135: serial bus timeout: status=0x00
[  120.486528][   T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  120.490182][   T21] gspca_stk1135: Sensor read failed
[  120.503245][   T21] gspca_stk1135: serial bus timeout: status=0x00
[  120.509701][   T21] gspca_stk1135: Sensor read failed
[  120.514918][   T21] gspca_stk1135: Detected sensor type unknown (0x0)
[  120.521628][   T21] gspca_stk1135: serial bus timeout: status=0x00
[  120.528076][   T21] gspca_stk1135: Sensor read failed
[  120.533325][   T21] gspca_stk1135: serial bus timeout: status=0x00
[  120.548322][   T21] gspca_stk1135: Sensor read failed
[  120.553812][   T21] gspca_stk1135: serial bus timeout: status=0x00
[  120.628097][   T21] gspca_stk1135: Sensor write failed
[  120.670301][   T21] gspca_stk1135: serial bus timeout: status=0x00
[  120.725025][   T21] gspca_stk1135: Sensor write failed
[  120.760101][   T21] stk1135: probe of 3-1:0.0 failed with error -71
[  120.827060][   T21] usb 3-1: USB disconnect, device number 3
[  121.253857][ T4251] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0
[  121.264296][ T4251] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0
[  121.271537][ T4251] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0
[  121.278769][ T4251] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0
[  121.316082][ T4251] konepure 0003:1E7D:2DB4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0
[  121.471231][   T13] usb 5-1: Using ep0 maxpacket: 32
[  121.593606][   T21] usb 1-1: USB disconnect, device number 4
[  121.611507][   T13] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  121.621771][   T13] usb 5-1: config 0 has no interface number 0
[  121.634712][   T13] usb 5-1: config 0 interface 89 has no altsetting 0
[  121.865423][ T4654] usb 4-1: reset high-speed USB device number 6 using dummy_hcd
[  121.935562][   T13] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  121.978318][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.025566][   T13] usb 5-1: Product: syz
[  122.049836][   T13] usb 5-1: Manufacturer: syz
[  122.076789][   T13] usb 5-1: SerialNumber: syz
[  122.151218][   T13] usb 5-1: config 0 descriptor??
[  122.289255][   T13] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  122.299224][ T4688] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  122.400972][   T13] em28xx 5-1:0.89: Video interface 89 found: bulk
[  122.543094][ T4251] usb 4-1: USB disconnect, device number 6
[  123.569907][   T13] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  124.132129][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  124.166209][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  124.189879][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  124.221017][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  124.253101][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  124.292309][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  124.329397][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  124.807598][ T4763] binder: 4762:4763 ioctl c0306201 0 returned -14
[  124.917522][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  124.955383][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  124.999763][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  125.022532][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  125.046214][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  125.070453][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  125.112443][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  125.265344][   T13] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  125.295295][   T13] em28xx 5-1:0.89: board has no eeprom
[  125.425328][   T13] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  125.425394][   T13] em28xx 5-1:0.89: analog set to bulk mode.
[  125.447749][   T13] usb 5-1: USB disconnect, device number 4
[  125.556240][   T13] em28xx 5-1:0.89: Disconnecting em28xx
[  125.688775][ T4244] em28xx 5-1:0.89: Registering V4L2 extension
[  127.164627][ T4800] binder: 4799:4800 ioctl c0306201 0 returned -14
[  127.191966][ T4244] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  127.214357][ T4244] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  127.262436][ T4244] em28xx 5-1:0.89: No AC97 audio processor
[  127.317778][ T4244] usb 5-1: Decoder not found
[  127.336636][ T4244] em28xx 5-1:0.89: failed to create media graph
[  127.378004][ T4244] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  127.412151][ T4244] em28xx 5-1:0.89: Registering snapshot button...
[  127.538837][ T4816] overlayfs: failed to decode file handle (len=6, type=196859, flags=0, err=-22)
[  128.973290][ T4244] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input6
[  129.158184][ T4818] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12)
[  129.165147][ T4818] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  129.185821][ T4244] em28xx 5-1:0.89: Remote control support is not available for this card.
[  129.310753][   T13] em28xx 5-1:0.89: Closing input extension
[  129.318570][   T13] em28xx 5-1:0.89: Deregistering snapshot button
[  129.377050][ T4814] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  129.383625][ T4814] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  129.420105][ T4818] vhci_hcd vhci_hcd.0: Device attached
[  129.447819][ T4814] vhci_hcd vhci_hcd.0: Device attached
[  129.492026][   T13] em28xx 5-1:0.89: Freeing device
[  129.566497][ T4819] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15)
[  129.573222][ T4819] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  129.587778][ T4814] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  129.594439][ T4814] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  129.679966][ T4826] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14)
[  129.685404][ T4308] usb 39-2: new low-speed USB device number 2 using vhci_hcd
[  129.686608][ T4826] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  129.728629][ T4830] vhci_hcd: connection closed
[  129.730389][ T4820] vhci_hcd: connection reset by peer
[  129.762199][ T4821] vhci_hcd: connection closed
[  129.768188][ T4831] vhci_hcd: connection closed
[  129.773680][ T4814] vhci_hcd vhci_hcd.0: Device attached
[  129.792926][ T4829] vhci_hcd: connection closed
[  129.794491][ T4826] vhci_hcd vhci_hcd.0: Device attached
[  129.896376][ T4819] vhci_hcd vhci_hcd.0: Device attached
[  129.903958][ T4453] vhci_hcd: stop threads
[  129.908943][ T4453] vhci_hcd: release socket
[  130.104916][ T4453] vhci_hcd: disconnect device
[  130.712311][ T4453] vhci_hcd: stop threads
[  130.735233][ T4453] vhci_hcd: release socket
[  130.760127][ T4453] vhci_hcd: disconnect device
[  130.807681][ T4453] vhci_hcd: stop threads
[  130.817816][ T4453] vhci_hcd: release socket
[  130.843644][ T4453] vhci_hcd: disconnect device
[  130.870633][ T4453] vhci_hcd: stop threads
[  130.897963][ T4453] vhci_hcd: release socket
[  130.918385][ T4453] vhci_hcd: disconnect device
[  130.931513][ T4453] vhci_hcd: stop threads
[  130.947822][ T4453] vhci_hcd: release socket
[  131.039041][ T4453] vhci_hcd: disconnect device
[  132.100866][ T4857] binder: 4856:4857 ioctl c0306201 0 returned -14
[  133.304981][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  133.316889][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.362945][ T4870] overlayfs: failed to decode file handle (len=6, type=196859, flags=0, err=-22)
[  133.751337][ T4880] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  133.757920][ T4880] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  133.769952][ T4880] vhci_hcd vhci_hcd.0: Device attached
[  133.852022][ T4890] binder: 4881:4890 ioctl c0306201 0 returned -14
[  133.894146][ T4880] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11)
[  133.900807][ T4880] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  133.985477][ T1108] vhci_hcd: vhci_device speed not set
[  134.011294][ T4892] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14)
[  134.017953][ T4892] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  134.055934][ T1108] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  134.179375][ T4880] vhci_hcd vhci_hcd.0: Device attached
[  134.432711][ T4892] vhci_hcd vhci_hcd.0: Device attached
[  134.713118][ T4898] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13)
[  134.719752][ T4898] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  134.729568][ T4898] vhci_hcd vhci_hcd.0: Device attached
[  134.975284][ T4308] vhci_hcd: vhci_device speed not set
[  135.723136][ T4906] vhci_hcd: connection closed
[  135.723180][ T4893] vhci_hcd: connection closed
[  135.724600][ T4335] vhci_hcd: stop threads
[  135.776841][ T4889] vhci_hcd: connection closed
[  135.777561][ T4883] vhci_hcd: connection reset by peer
[  135.793217][ T4914] binder: 4908:4914 ioctl c0306201 0 returned -14
[  135.900722][ T4335] vhci_hcd: release socket
[  135.977431][ T4335] vhci_hcd: disconnect device
[  136.285269][ T4335] vhci_hcd: stop threads
[  136.935353][ T4335] vhci_hcd: release socket
[  137.155535][   T13] usb usb40-port1: Cannot enable. Maybe the USB cable is bad?
[  137.379328][ T4335] vhci_hcd: disconnect device
[  137.393054][ T4335] vhci_hcd: stop threads
[  137.440197][ T4335] vhci_hcd: release socket
[  137.485361][ T4335] vhci_hcd: disconnect device
[  137.505332][ T4335] vhci_hcd: stop threads
[  137.530753][ T4335] vhci_hcd: release socket
[  137.548978][ T4335] vhci_hcd: disconnect device
[  137.595653][   T13] usb usb40-port1: Cannot enable. Maybe the USB cable is bad?
[  137.607593][   T13] usb usb40-port1: attempt power cycle
[  137.993156][ T4945] binder: 4941:4945 ioctl c0306201 0 returned -14
[  138.697314][   T13] usb usb40-port1: Cannot enable. Maybe the USB cable is bad?
[  139.255498][   T13] usb usb40-port1: Cannot enable. Maybe the USB cable is bad?
[  139.276769][   T13] usb usb40-port1: unable to enumerate USB device
[  139.345420][ T1108] vhci_hcd: vhci_device speed not set
[  139.572125][ T4962] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  139.578708][ T4962] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  139.605394][ T4966] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12)
[  139.612116][ T4966] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  139.687902][ T4962] vhci_hcd vhci_hcd.0: Device attached
[  139.810233][ T4969] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11)
[  139.816896][ T4969] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  139.845533][ T4962] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(17)
[  139.852182][ T4962] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  139.896670][ T4978] binder: 4974:4978 ioctl c0306201 0 returned -14
[  140.125326][ T1108] vhci_hcd: vhci_device speed not set
[  140.677635][ T4969] vhci_hcd vhci_hcd.0: Device attached
[  140.710602][ T4966] vhci_hcd vhci_hcd.0: Device attached
[  140.716648][ T4962] vhci_hcd vhci_hcd.0: Device attached
[  140.741598][ T4972] vhci_hcd: connection closed
[  140.742335][ T4970] vhci_hcd: connection closed
[  140.745873][ T4967] vhci_hcd: connection closed
[  140.747142][ T4963] vhci_hcd: connection closed
[  140.756501][ T1108] usb 35-1: device descriptor read/64, error -110
[  140.780137][ T4335] vhci_hcd: stop threads
[  140.784472][ T4335] vhci_hcd: release socket
[  140.810050][ T4335] vhci_hcd: disconnect device
[  140.838942][ T4335] vhci_hcd: stop threads
[  140.875889][ T4335] vhci_hcd: release socket
[  140.955240][ T4335] vhci_hcd: disconnect device
[  140.971334][ T4335] vhci_hcd: stop threads
[  140.986221][ T4335] vhci_hcd: release socket
[  140.997702][ T4984] netlink: 168 bytes leftover after parsing attributes in process `syz.0.192'.
[  141.025343][ T4335] vhci_hcd: disconnect device
[  141.035772][ T4335] vhci_hcd: stop threads
[  141.040092][ T4335] vhci_hcd: release socket
[  141.081823][ T4335] vhci_hcd: disconnect device
[  141.205731][ T4261] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  141.224193][ T4994] binder: 4987:4994 ioctl c0306201 0 returned -14
[  141.810687][ T4261] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  141.849577][ T4261] usb usb36-port1: attempt power cycle
[  141.945304][ T1108] vhci_hcd: vhci_device speed not set
[  142.094829][ T5000] netlink: 168 bytes leftover after parsing attributes in process `syz.0.200'.
[  142.592825][ T5019] netlink: 168 bytes leftover after parsing attributes in process `syz.1.208'.
[  142.759967][ T5027] netlink: 168 bytes leftover after parsing attributes in process `syz.2.213'.
[  142.842444][ T5033] binder: 5029:5033 ioctl c0306201 0 returned -14
[  143.245869][ T4261] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  144.203836][ T4261] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  144.214893][ T4261] usb usb36-port1: unable to enumerate USB device
[  144.321957][ T5052] nfs: Unknown parameter 'ntext'
[  144.379866][ T5053] netlink: 168 bytes leftover after parsing attributes in process `syz.4.221'.
[  144.530563][ T5064] netlink: 168 bytes leftover after parsing attributes in process `syz.0.226'.
[  144.715946][ T5074] binder: 5069:5074 ioctl c0306201 0 returned -14
[  145.715707][ T5090] netlink: 168 bytes leftover after parsing attributes in process `syz.1.237'.
[  145.861043][ T5098] netlink: 168 bytes leftover after parsing attributes in process `syz.3.241'.
[  146.625546][ T5117] netlink: 168 bytes leftover after parsing attributes in process `syz.3.249'.
[  146.698652][ T5123] binder: 5115:5123 ioctl c0306201 0 returned -14
[  148.615285][ T4261] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  148.647144][ T5155] netlink: 168 bytes leftover after parsing attributes in process `syz.0.262'.
[  148.737578][ T5160] binder: 5156:5160 ioctl c0306201 0 returned -14
[  148.975335][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.535335][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.545145][ T4261] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  149.554277][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.564857][ T4261] usb 5-1: config 0 descriptor??
[  149.607803][ T5163] Failed to get privilege flags for destination (handle=0x2:0x0)
[  149.885254][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  149.965318][ T4229] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  149.985271][ T4244] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  150.135318][ T1108] usb 4-1: Using ep0 maxpacket: 32
[  150.225397][ T4229] usb 1-1: Using ep0 maxpacket: 16
[  150.257317][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.268625][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.278656][ T1108] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  150.288007][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.298107][ T1108] usb 4-1: config 0 descriptor??
[  150.336244][ T1108] hub 4-1:0.0: USB hub found
[  150.345434][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.356545][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.366525][ T4229] usb 1-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[  150.375771][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.386725][ T4229] usb 1-1: config 0 descriptor??
[  150.405429][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.416520][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.426702][ T4244] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  150.437077][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.447507][ T4244] usb 3-1: config 0 descriptor??
[  150.455341][    T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  150.555348][ T1108] hub 4-1:0.0: 16 ports detected
[  150.575420][ T1108] hub 4-1:0.0: insufficient power available to use all downstream ports
[  150.735467][ T4261] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71
[  150.744994][ T4261] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71
[  150.753296][ T4261] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71
[  150.761626][ T4261] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[  150.769224][ T4261] uclogic: probe of 0003:256C:006D.0003 failed with error -71
[  150.775489][ T1108] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  150.780133][ T4261] usb 5-1: USB disconnect, device number 5
[  150.795096][ T1108] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  150.867941][ T4229] hid-generic 0003:0458:5014.0004: item fetching failed at offset 5/7
[  150.876831][ T4229] hid-generic: probe of 0003:0458:5014.0004 failed with error -22
[  150.915353][ T1108] usbhid 4-1:0.0: can't add hid device: -71
[  150.921392][ T1108] usbhid: probe of 4-1:0.0 failed with error -71
[  150.956044][ T1108] usb 4-1: USB disconnect, device number 7
[  151.005492][    T7] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  151.015843][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.025835][    T7] usb 2-1: Product: syz
[  151.030039][    T7] usb 2-1: Manufacturer: syz
[  151.034931][    T7] usb 2-1: SerialNumber: syz
[  151.043482][    T7] usb 2-1: config 0 descriptor??
[  151.074074][ T4229] usb 1-1: USB disconnect, device number 5
[  151.264414][ T5177] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 4, id = 0
[  151.701677][ T5189] binder: 5187:5189 ioctl c0306201 0 returned -14
[  151.875393][ T4244] uclogic 0003:256C:006D.0005: v1 buttonpad probing failed: -71
[  152.445329][    T7] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  152.474012][ T4244] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[  152.481636][    T7] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  152.492595][ T4244] uclogic: probe of 0003:256C:006D.0005 failed with error -71
[  152.500685][    T7] asix: probe of 2-1:0.0 failed with error -71
[  152.520755][ T4244] usb 3-1: USB disconnect, device number 4
[  152.555244][    T7] usb 2-1: USB disconnect, device number 4
[  152.621183][ T5179] syz.3.273 (5179): drop_caches: 2
[  152.674592][ T5192] netlink: 168 bytes leftover after parsing attributes in process `syz.2.276'.
[  152.968186][ T5203] binder: 5199:5203 ioctl c0306201 0 returned -14
[  154.745256][ T4229] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  156.166258][ T5216] usb usb8: usbfs: process 5216 (syz.4.282) did not claim interface 0 before use
[  156.453608][ T5230] binder: 5228:5230 ioctl c0306201 0 returned -14
[  157.510803][ T5245] binder: 5241:5245 ioctl c0306201 0 returned -14
[  159.632946][ T5270] netlink: 168 bytes leftover after parsing attributes in process `syz.3.300'.
[  159.815465][   T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  159.871582][ T5280] binder: 5274:5280 ioctl c0306201 0 returned -14
[  159.906739][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  160.225411][ T4346] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  160.485416][ T4346] usb 2-1: Using ep0 maxpacket: 32
[  160.605536][ T4346] usb 2-1: config index 0 descriptor too short (expected 6683, got 27)
[  160.613934][ T4346] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  160.668483][ T4346] usb 2-1: config 0 has no interface number 0
[  160.692271][ T4346] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  160.717073][ T4346] usb 2-1: config 0 interface 85 has no altsetting 0
[  160.771417][ T5289] binder: 5287:5289 ioctl c0306201 0 returned -14
[  160.875793][ T4346] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  160.908514][ T4346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.960130][ T4346] usb 2-1: Product: syz
[  160.975424][   T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.982962][ T4346] usb 2-1: Manufacturer: syz
[  160.986472][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.995298][ T1324] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  161.033859][ T4346] usb 2-1: SerialNumber: syz
[  161.114897][ T4346] usb 2-1: config 0 descriptor??
[  161.285315][ T1324] usb 3-1: Using ep0 maxpacket: 8
[  161.415775][ T1324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.456558][ T1324] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  161.513499][   T21] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  161.519082][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.522765][ T1108] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  161.540109][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.550059][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.558193][   T21] usb 1-1: config 0 descriptor??
[  161.567798][ T1108] usb 5-1: config 0 descriptor??
[  161.588633][ T1324] usb 3-1: config 0 descriptor??
[  161.617867][   T21] pwc: Askey VC010 type 2 USB webcam detected.
[  161.626423][ T1108] pwc: Askey VC010 type 2 USB webcam detected.
[  161.649288][ T1324] gspca_main: vc032x-2.14.0 probing 046d:0892
[  161.840720][ T1108] pwc: send_video_command error -71
[  161.846187][   T21] pwc: send_video_command error -71
[  161.851446][   T21] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  161.875628][ T4346] appletouch 2-1:0.85: Geyser mode initialized.
[  161.895544][ T4346] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input7
[  161.953119][ T1108] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  161.960942][   T21] Philips webcam: probe of 1-1:0.0 failed with error -71
[  161.968220][ T1108] Philips webcam: probe of 5-1:0.0 failed with error -71
[  161.985699][   T21] usb 1-1: USB disconnect, device number 6
[  161.992925][ T1108] usb 5-1: USB disconnect, device number 6
[  162.105136][ T4346] usb 2-1: USB disconnect, device number 5
[  162.156885][ T4346] appletouch 2-1:0.85: input: appletouch disconnected
[  162.465445][   T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  162.465488][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  162.895881][   T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.943481][   T21] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  162.965673][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.014573][ T1108] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  163.052572][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.165518][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.250932][   T21] usb 1-1: config 0 descriptor??
[  163.287538][ T1108] usb 5-1: config 0 descriptor??
[  163.339071][ T1108] usb 5-1: can't set config #0, error -71
[  163.347066][   T21] usb 1-1: can't set config #0, error -71
[  163.389098][   T21] usb 1-1: USB disconnect, device number 7
[  163.418501][ T1108] usb 5-1: USB disconnect, device number 7
[  163.455400][ T1324] gspca_vc032x: reg_w err -71
[  163.460266][ T1324] vc032x: probe of 3-1:0.0 failed with error -71
[  163.476555][ T5314] binder: 5311:5314 ioctl c0306201 0 returned -14
[  163.875477][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  164.285033][ T1324] usb 3-1: USB disconnect, device number 5
[  164.295409][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.345265][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.403217][ T5318] netlink: 168 bytes leftover after parsing attributes in process `syz.0.317'.
[  164.415204][ T1108] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  164.434332][ T5321] binder: BINDER_SET_CONTEXT_MGR already set
[  164.441050][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.455588][ T5321] binder: 5320:5321 ioctl 4018620d 200000000040 returned -16
[  164.481139][ T1108] usb 5-1: config 0 descriptor??
[  164.630218][ T5328] Cannot find add_set index 1 as target
[  164.900883][ T5334] syz.2.320 (5334): drop_caches: 2
[  165.705868][ T5336] netlink: 168 bytes leftover after parsing attributes in process `syz.2.323'.
[  165.860548][ T4329] Bluetooth: hci5: Frame reassembly failed (-84)
[  166.243996][ T5344] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  166.250687][ T5344] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  166.259580][ T5344] vhci_hcd vhci_hcd.0: Device attached
[  166.271746][ T5344] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9)
[  166.278292][ T5344] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  166.286100][ T5344] vhci_hcd vhci_hcd.0: Device attached
[  166.293211][ T5344] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11)
[  166.299825][ T5344] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  166.310207][ T4244] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  166.315378][ T5344] vhci_hcd vhci_hcd.0: Device attached
[  166.330594][ T5344] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13)
[  166.337299][ T5344] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  166.345593][ T5344] vhci_hcd vhci_hcd.0: Device attached
[  166.359966][ T5344] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15)
[  166.366593][ T5344] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  166.375215][ T5344] vhci_hcd vhci_hcd.0: Device attached
[  166.388818][ T5347] vhci_hcd: connection closed
[  166.388948][ T5349] vhci_hcd: connection closed
[  166.392360][ T5351] vhci_hcd: connection closed
[  166.393810][ T5345] vhci_hcd: connection closed
[  166.404375][ T4331] vhci_hcd: stop threads
[  166.417683][ T4331] vhci_hcd: release socket
[  166.422296][ T4331] vhci_hcd: disconnect device
[  166.428082][ T5353] vhci_hcd: connection closed
[  166.429016][ T4331] vhci_hcd: stop threads
[  166.438947][ T4331] vhci_hcd: release socket
[  166.443482][ T4331] vhci_hcd: disconnect device
[  166.449415][ T4331] vhci_hcd: stop threads
[  166.453760][ T4331] vhci_hcd: release socket
[  166.458428][ T4331] vhci_hcd: disconnect device
[  166.464152][ T4331] vhci_hcd: stop threads
[  166.468945][ T4308] vhci_hcd: vhci_device speed not set
[  166.474777][ T4331] vhci_hcd: release socket
[  166.479380][ T4331] vhci_hcd: disconnect device
[  166.484353][ T4331] vhci_hcd: stop threads
[  166.488959][ T4331] vhci_hcd: release socket
[  166.493398][ T4331] vhci_hcd: disconnect device
[  166.535311][ T4308] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  166.543652][ T4308] usb 33-1: enqueue for inactive port 0
[  166.555300][ T4244] usb 4-1: Using ep0 maxpacket: 32
[  166.580039][ T1108] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0006/input/input8
[  166.625345][ T4308] vhci_hcd: vhci_device speed not set
[  166.674685][ T1108] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0006/input/input9
[  166.690172][ T1108] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0
[  166.695571][ T4244] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  166.833136][ T4229] usb 5-1: USB disconnect, device number 8
[  166.926768][ T4244] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  166.936240][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  166.945650][ T4244] usb 4-1: Product: syz
[  166.955516][ T4244] usb 4-1: Manufacturer: syz
[  166.960243][ T4244] usb 4-1: SerialNumber: syz
[  166.978586][ T4244] usb 4-1: config 0 descriptor??
[  166.997428][ T5342] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  167.026131][ T4244] hub 4-1:0.0: bad descriptor, ignoring hub
[  167.039466][ T4244] hub: probe of 4-1:0.0 failed with error -5
[  167.069550][ T5357] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  167.078358][ T5360] Cannot find add_set index 1 as target
[  167.236191][ T4244] usb 4-1: USB disconnect, device number 9
[  167.999415][ T4229] Bluetooth: hci5: command 0x1003 tx timeout
[  168.036873][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  168.556522][ T5379] netlink: 168 bytes leftover after parsing attributes in process `syz.4.335'.
[  168.574237][ T5378] tipc: Started in network mode
[  168.588824][ T5378] tipc: Node identity 3c, cluster identity 4711
[  168.595122][ T5378] tipc: Node number set to 60
[  168.698732][ T5386] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  168.705322][ T5386] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  168.714974][ T5386] vhci_hcd vhci_hcd.0: Device attached
[  168.723722][ T5386] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9)
[  168.730294][ T5386] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  168.750684][ T5386] vhci_hcd vhci_hcd.0: Device attached
[  168.789865][ T5386] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11)
[  168.796540][ T5386] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  168.818429][ T5386] vhci_hcd vhci_hcd.0: Device attached
[  168.830515][ T5396] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14)
[  168.837167][ T5396] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  168.862896][ T5396] vhci_hcd vhci_hcd.0: Device attached
[  168.895454][ T5386] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13)
[  168.902108][ T5386] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  168.930414][ T5386] vhci_hcd vhci_hcd.0: Device attached
[  168.935263][ T4244] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  168.945321][ T1324] vhci_hcd: vhci_device speed not set
[  168.952766][ T5392] vhci_hcd: connection closed
[  168.952990][ T5399] vhci_hcd: connection closed
[  168.953178][ T4334] vhci_hcd: stop threads
[  168.957881][ T5397] vhci_hcd: connection closed
[  168.962500][ T4334] vhci_hcd: release socket
[  168.966807][ T5389] vhci_hcd: connection closed
[  168.967015][ T5387] vhci_hcd: connection closed
[  169.000100][ T4334] vhci_hcd: disconnect device
[  169.011609][ T4334] vhci_hcd: stop threads
[  169.020613][ T4334] vhci_hcd: release socket
[  169.025414][ T1324] usb 39-1: new full-speed USB device number 3 using vhci_hcd
[  169.026660][ T4334] vhci_hcd: disconnect device
[  169.032999][ T5388] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  169.044255][ T4334] vhci_hcd: stop threads
[  169.050202][ T4334] vhci_hcd: release socket
[  169.054657][ T4334] vhci_hcd: disconnect device
[  169.064980][ T4334] vhci_hcd: stop threads
[  169.080226][ T4334] vhci_hcd: release socket
[  169.084832][ T4334] vhci_hcd: disconnect device
[  169.090438][ T4334] vhci_hcd: stop threads
[  169.094721][ T4334] vhci_hcd: release socket
[  169.118881][ T4334] vhci_hcd: disconnect device
[  169.126358][ T5404] Cannot find add_set index 1 as target
[  169.251296][ T4308] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  169.394418][ T5407] syz.0.341 (5407): drop_caches: 2
[  170.071177][ T4244] usb 2-1: Using ep0 maxpacket: 32
[  170.099977][ T4356] Bluetooth: hci5: command 0x1001 tx timeout
[  170.114625][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  170.195277][ T4308] usb 5-1: Using ep0 maxpacket: 8
[  170.215673][ T4244] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  170.229099][ T4244] usb 2-1: config 0 interface 0 has no altsetting 0
[  170.235972][ T4244] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  170.245263][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.262049][ T4244] usb 2-1: config 0 descriptor??
[  170.313258][ T4200] Bluetooth: Wrong link type (-22)
[  170.511940][   T26] audit: type=1326 audit(1752775946.542:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.3.347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb224ee929 code=0x0
[  170.555433][ T4308] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  170.564639][ T4308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.572779][ T4308] usb 5-1: Product: syz
[  170.585205][ T4308] usb 5-1: Manufacturer: syz
[  170.589958][ T4308] usb 5-1: SerialNumber: syz
[  170.611896][ T5426] netlink: 168 bytes leftover after parsing attributes in process `syz.0.348'.
[  170.612585][ T4308] usb 5-1: config 0 descriptor??
[  170.625714][ T4244] usbhid 2-1:0.0: can't add hid device: -71
[  170.633501][ T4244] usbhid: probe of 2-1:0.0 failed with error -71
[  170.657662][ T4244] usb 2-1: USB disconnect, device number 6
[  170.905516][ T4308] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  171.281170][ T5436] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  171.308740][ T5436] kvm: pic: non byte read
[  171.313613][ T5436] kvm: pic: level sensitive irq not supported
[  171.313751][ T5436] kvm: pic: non byte read
[  171.436381][ T5442] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  171.443046][ T5442] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  171.455428][ T5442] vhci_hcd vhci_hcd.0: Device attached
[  171.470283][ T5442] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8)
[  171.476952][ T5442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  171.485442][ T5442] vhci_hcd vhci_hcd.0: Device attached
[  171.492481][ T5442] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10)
[  171.499099][ T5442] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  171.509131][ T5442] vhci_hcd vhci_hcd.0: Device attached
[  171.520516][ T5442] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12)
[  171.527157][ T5442] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  171.536735][ T5442] vhci_hcd vhci_hcd.0: Device attached
[  171.544111][ T5442] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14)
[  171.550726][ T5442] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  171.559936][ T5442] vhci_hcd vhci_hcd.0: Device attached
[  171.567281][ T5453] vhci_hcd: connection closed
[  171.567477][ T5451] vhci_hcd: connection closed
[  171.568688][ T5449] vhci_hcd: connection closed
[  171.572575][ T5447] vhci_hcd: connection closed
[  171.587852][ T4334] vhci_hcd: stop threads
[  171.591984][ T5443] vhci_hcd: connection closed
[  171.592652][ T4334] vhci_hcd: release socket
[  171.608949][ T4334] vhci_hcd: disconnect device
[  171.613978][ T4334] vhci_hcd: stop threads
[  171.618575][ T4334] vhci_hcd: release socket
[  171.623076][ T4334] vhci_hcd: disconnect device
[  171.628342][ T4334] vhci_hcd: stop threads
[  171.633327][ T4334] vhci_hcd: release socket
[  171.638138][ T4334] vhci_hcd: disconnect device
[  171.642995][ T4334] vhci_hcd: stop threads
[  171.647968][ T4334] vhci_hcd: release socket
[  171.652846][ T4334] vhci_hcd: disconnect device
[  171.657983][ T4334] vhci_hcd: stop threads
[  171.662243][ T4334] vhci_hcd: release socket
[  171.668356][ T4356] vhci_hcd: vhci_device speed not set
[  171.674589][ T4334] vhci_hcd: disconnect device
[  171.735236][ T4244] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  171.955297][ T1108] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  172.135442][ T4244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.154577][ T4244] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  172.163845][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.175855][ T4244] usb 4-1: config 0 descriptor??
[  172.191248][ T4237] Bluetooth: hci5: command 0x1009 tx timeout
[  172.222713][ T4244] pwc: Askey VC010 type 2 USB webcam detected.
[  172.225587][ T5462] netlink: 168 bytes leftover after parsing attributes in process `syz.1.359'.
[  172.355907][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.377448][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.387922][ T1108] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  172.397296][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.410936][ T1108] usb 1-1: config 0 descriptor??
[  172.425304][ T4244] pwc: send_video_command error -71
[  172.430796][ T4244] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  172.441911][ T4244] Philips webcam: probe of 4-1:0.0 failed with error -71
[  172.452384][ T4244] usb 4-1: USB disconnect, device number 10
[  172.895488][ T4308] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  172.908639][ T4308] usb 5-1: USB disconnect, device number 9
[  173.015343][ T4244] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  173.253610][ T5469] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  173.395523][ T4244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.407074][ T4244] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  173.417307][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.439076][ T4244] usb 4-1: config 0 descriptor??
[  173.479448][ T4244] pwc: Askey VC010 type 2 USB webcam detected.
[  173.557353][ T1108] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0007/input/input10
[  173.594626][ T4261] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  173.633560][ T4261] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  173.673764][ T1108] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0007/input/input11
[  173.728425][ T1108] uclogic 0003:256C:006D.0007: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[  173.781691][ T1108] usb 1-1: USB disconnect, device number 8
[  173.880481][ T5489] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  173.887056][ T5489] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  173.903839][ T5488] fido_id[5488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  173.905506][ T4244] pwc: recv_control_msg error -32 req 02 val 2b00
[  173.927626][ T5489] vhci_hcd vhci_hcd.0: Device attached
[  173.944489][ T5492] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8)
[  173.951138][ T5492] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  173.965854][ T5492] vhci_hcd vhci_hcd.0: Device attached
[  173.975570][ T4244] pwc: recv_control_msg error -32 req 02 val 2700
[  173.983697][ T5489] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7)
[  173.990254][ T5489] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  173.999359][ T5489] vhci_hcd vhci_hcd.0: Device attached
[  174.010455][ T5489] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11)
[  174.017102][ T5489] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  174.025210][ T4244] pwc: recv_control_msg error -32 req 02 val 2c00
[  174.032611][ T5489] vhci_hcd vhci_hcd.0: Device attached
[  174.045857][ T5489] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13)
[  174.052597][ T5489] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  174.061254][ T5489] vhci_hcd vhci_hcd.0: Device attached
[  174.066973][ T4244] pwc: recv_control_msg error -32 req 04 val 1000
[  174.074797][ T5500] vhci_hcd: connection closed
[  174.075025][ T4329] vhci_hcd: stop threads
[  174.076037][ T5497] vhci_hcd: connection closed
[  174.084057][ T5495] vhci_hcd: connection closed
[  174.086641][ T5493] vhci_hcd: connection closed
[  174.088929][ T5490] vhci_hcd: connection closed
[  174.097773][ T4329] vhci_hcd: release socket
[  174.105944][ T4244] pwc: recv_control_msg error -32 req 04 val 1300
[  174.114814][ T4329] vhci_hcd: disconnect device
[  174.120361][ T4329] vhci_hcd: stop threads
[  174.124658][ T4329] vhci_hcd: release socket
[  174.129730][ T4329] vhci_hcd: disconnect device
[  174.134845][ T4329] vhci_hcd: stop threads
[  174.139629][ T4261] vhci_hcd: vhci_device speed not set
[  174.145428][ T4244] pwc: recv_control_msg error -32 req 04 val 1400
[  174.152389][ T4329] vhci_hcd: release socket
[  174.157781][ T4329] vhci_hcd: disconnect device
[  174.162886][ T4329] vhci_hcd: stop threads
[  174.167741][ T4329] vhci_hcd: release socket
[  174.172246][ T4329] vhci_hcd: disconnect device
[  174.177189][ T1324] vhci_hcd: vhci_device speed not set
[  174.183208][ T4329] vhci_hcd: stop threads
[  174.187859][ T4244] pwc: recv_control_msg error -32 req 02 val 2000
[  174.194915][ T4329] vhci_hcd: release socket
[  174.199795][ T4329] vhci_hcd: disconnect device
[  174.215417][ T4261] usb 35-1: new full-speed USB device number 5 using vhci_hcd
[  174.222954][ T4261] usb 35-1: enqueue for inactive port 0
[  174.236897][ T4244] pwc: recv_control_msg error -32 req 02 val 2100
[  174.275298][ T4244] pwc: recv_control_msg error -32 req 04 val 1500
[  174.305359][ T4261] vhci_hcd: vhci_device speed not set
[  174.320798][ T4244] pwc: recv_control_msg error -32 req 02 val 2500
[  174.365323][ T4244] pwc: recv_control_msg error -32 req 02 val 2400
[  174.405347][ T4244] pwc: recv_control_msg error -32 req 02 val 2600
[  174.445310][ T4244] pwc: recv_control_msg error -32 req 02 val 2900
[  174.560164][ T5513] netlink: 168 bytes leftover after parsing attributes in process `syz.4.373'.
[  174.665330][ T4308] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  174.705729][ T4244] pwc: recv_control_msg error -71 req 04 val 1100
[  174.725535][ T4244] pwc: recv_control_msg error -71 req 04 val 1200
[  174.744678][ T4244] pwc: Registered as video103.
[  174.760904][ T4244] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  174.811487][ T4244] usb 4-1: USB disconnect, device number 11
[  175.235340][ T4308] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  175.244436][ T4308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.265216][ T4308] usb 1-1: Product: syz
[  175.271509][ T4308] usb 1-1: Manufacturer: syz
[  175.285212][ T4308] usb 1-1: SerialNumber: syz
[  175.291692][ T4308] usb 1-1: config 0 descriptor??
[  175.375509][ T1108] Bluetooth: hci4: command 0x0405 tx timeout
[  175.645942][ T1108] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  175.776014][ T4308] airspy 1-1:0.0: Board ID: 00
[  175.780833][ T4308] airspy 1-1:0.0: Firmware version: 
[  175.789604][ T5538] netlink: 168 bytes leftover after parsing attributes in process `syz.1.383'.
[  175.843727][ T5541] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  175.850276][ T5541] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  175.859920][ T5541] vhci_hcd vhci_hcd.0: Device attached
[  175.868129][ T5541] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6)
[  175.874655][ T5541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  175.882623][ T5541] vhci_hcd vhci_hcd.0: Device attached
[  175.889893][ T5541] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8)
[  175.896415][ T5541] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  175.904221][ T5541] vhci_hcd vhci_hcd.0: Device attached
[  175.911647][ T5541] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10)
[  175.918259][ T5541] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  175.926527][ T5541] vhci_hcd vhci_hcd.0: Device attached
[  175.934393][ T5541] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[  175.941134][ T5541] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  175.949327][ T5541] vhci_hcd vhci_hcd.0: Device attached
[  175.956320][ T5542] vhci_hcd: connection closed
[  175.956374][ T5548] vhci_hcd: connection closed
[  175.956552][ T5550] vhci_hcd: connection closed
[  175.961209][ T5546] vhci_hcd: connection closed
[  175.967912][ T5544] vhci_hcd: connection closed
[  175.976424][ T4334] vhci_hcd: stop threads
[  175.985664][ T4334] vhci_hcd: release socket
[  175.990157][ T4334] vhci_hcd: disconnect device
[  175.995580][ T4334] vhci_hcd: stop threads
[  175.999945][ T4334] vhci_hcd: release socket
[  176.004403][ T4334] vhci_hcd: disconnect device
[  176.009519][ T1108] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.010071][ T4334] vhci_hcd: stop threads
[  176.019816][ T1108] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  176.033717][ T4334] vhci_hcd: release socket
[  176.039185][ T4334] vhci_hcd: disconnect device
[  176.044080][ T4334] vhci_hcd: stop threads
[  176.048632][ T4334] vhci_hcd: release socket
[  176.053124][ T4334] vhci_hcd: disconnect device
[  176.058382][ T4334] vhci_hcd: stop threads
[  176.062784][ T4334] vhci_hcd: release socket
[  176.067679][ T4334] vhci_hcd: disconnect device
[  176.095410][ T1108] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  176.104502][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  176.112865][ T1108] usb 4-1: SerialNumber: syz
[  176.326119][ T5553] netlink: 168 bytes leftover after parsing attributes in process `syz.2.386'.
[  176.400580][ T1108] usb 4-1: 0:2 : does not exist
[  176.425941][ T1108] usb 4-1: USB disconnect, device number 12
[  176.671821][ T5505] udevd[5505]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.866762][ T4308] airspy 1-1:0.0: Registered as swradio24
[  176.872660][ T4308] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  176.955342][ T1324] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  177.054675][ T5583] netlink: 168 bytes leftover after parsing attributes in process `syz.3.398'.
[  177.071108][ T4261] usb 1-1: USB disconnect, device number 9
[  177.143673][ T5586] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  177.150438][ T5586] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  177.159677][ T5586] vhci_hcd vhci_hcd.0: Device attached
[  177.179885][ T5586] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5)
[  177.186485][ T5586] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  177.195020][ T5586] vhci_hcd vhci_hcd.0: Device attached
[  177.202631][ T5586] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7)
[  177.209205][ T5586] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  177.218164][ T5586] vhci_hcd vhci_hcd.0: Device attached
[  177.241779][ T5586] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9)
[  177.248373][ T5586] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  177.256796][ T5586] vhci_hcd vhci_hcd.0: Device attached
[  177.266378][ T5586] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  177.272997][ T5586] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  177.281205][ T5586] vhci_hcd vhci_hcd.0: Device attached
[  177.288586][ T5598] vhci_hcd: connection closed
[  177.288648][ T5594] vhci_hcd: connection closed
[  177.289123][ T5587] vhci_hcd: connection closed
[  177.293544][ T5592] vhci_hcd: connection closed
[  177.303082][ T5590] vhci_hcd: connection closed
[  177.303766][ T4334] vhci_hcd: stop threads
[  177.317312][ T4334] vhci_hcd: release socket
[  177.321756][ T4334] vhci_hcd: disconnect device
[  177.327110][ T4334] vhci_hcd: stop threads
[  177.331389][ T4334] vhci_hcd: release socket
[  177.336291][ T4334] vhci_hcd: disconnect device
[  177.341488][ T4334] vhci_hcd: stop threads
[  177.346523][ T4334] vhci_hcd: release socket
[  177.351019][ T4334] vhci_hcd: disconnect device
[  177.356512][ T4334] vhci_hcd: stop threads
[  177.360787][ T4334] vhci_hcd: release socket
[  177.365648][ T4308] vhci_hcd: vhci_device speed not set
[  177.366589][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.373467][ T4334] vhci_hcd: disconnect device
[  177.387978][ T4334] vhci_hcd: stop threads
[  177.391069][ T1324] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  177.392259][ T4334] vhci_hcd: release socket
[  177.405915][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.414925][ T4334] vhci_hcd: disconnect device
[  177.420715][ T1324] usb 2-1: config 0 descriptor??
[  177.725457][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  177.734356][ T5608] binder: 5605:5608 ioctl c0306201 0 returned -14
[  177.965443][ T1324] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  177.985605][ T1108] usb 3-1: Using ep0 maxpacket: 16
[  178.105896][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.201602][ T1108] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  178.287252][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.398176][ T1108] usb 3-1: config 0 descriptor??
[  178.507168][ T1324] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input13
[  178.621656][ T1324] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  178.821417][ T5626] netlink: 168 bytes leftover after parsing attributes in process `syz.3.409'.
[  178.917408][ T1108] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  178.924599][ T1108] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  178.936621][ T1108] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  178.943704][ T1108] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  178.953276][ T1108] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  178.955284][ T1324] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  178.964074][ T1108] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  179.118959][ T1108] usb 3-1: USB disconnect, device number 6
[  179.155247][ T4258] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  179.205500][ T1324] usb 1-1: Using ep0 maxpacket: 16
[  179.365422][ T1324] usb 1-1: unable to get BOS descriptor or descriptor too short
[  179.445478][ T1324] usb 1-1: config 1 interface 0 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  179.459233][ T1324] usb 1-1: config 1 interface 0 has no altsetting 0
[  179.565594][ T4258] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.575900][ T4258] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  179.665547][ T4258] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  179.672214][    T7] usb 2-1: USB disconnect, device number 7
[  179.674904][ T4258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  179.699689][ T4258] usb 4-1: SerialNumber: syz
[  179.835416][ T1324] usb 1-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.40
[  179.844602][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.852923][ T1324] usb 1-1: Product: syz
[  179.857256][ T1324] usb 1-1: SerialNumber: syz
[  179.934172][ T5640] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  179.940741][ T5640] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  179.954484][ T5640] vhci_hcd vhci_hcd.0: Device attached
[  179.963885][ T5640] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5)
[  179.970436][ T5640] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  179.979986][ T5640] vhci_hcd vhci_hcd.0: Device attached
[  179.989582][ T5640] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7)
[  179.996146][ T5640] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  180.007472][ T4258] usb 4-1: 0:2 : does not exist
[  180.012519][ T5640] vhci_hcd vhci_hcd.0: Device attached
[  180.021565][ T5640] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9)
[  180.028122][ T5640] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  180.036525][ T5640] vhci_hcd vhci_hcd.0: Device attached
[  180.044925][ T4258] usb 4-1: USB disconnect, device number 13
[  180.051350][ T5640] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[  180.057994][ T5640] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  180.066653][ T5640] vhci_hcd vhci_hcd.0: Device attached
[  180.073393][ T5649] vhci_hcd: connection closed
[  180.073692][ T5647] vhci_hcd: connection closed
[  180.073859][  T144] vhci_hcd: stop threads
[  180.079333][ T5645] vhci_hcd: connection closed
[  180.087857][ T5643] vhci_hcd: connection closed
[  180.093242][ T5641] vhci_hcd: connection closed
[  180.101692][  T144] vhci_hcd: release socket
[  180.111542][  T144] vhci_hcd: disconnect device
[  180.117998][  T144] vhci_hcd: stop threads
[  180.122355][  T144] vhci_hcd: release socket
[  180.127163][  T144] vhci_hcd: disconnect device
[  180.133292][  T144] vhci_hcd: stop threads
[  180.138001][  T144] vhci_hcd: release socket
[  180.142487][  T144] vhci_hcd: disconnect device
[  180.147713][  T144] vhci_hcd: stop threads
[  180.151979][  T144] vhci_hcd: release socket
[  180.155979][ T4346] vhci_hcd: vhci_device speed not set
[  180.161969][  T144] vhci_hcd: disconnect device
[  180.169142][  T144] vhci_hcd: stop threads
[  180.173480][  T144] vhci_hcd: release socket
[  180.178974][  T144] vhci_hcd: disconnect device
[  180.228068][ T4346] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  180.236147][ T4346] usb 37-1: enqueue for inactive port 0
[  180.266026][ T4471] udevd[4471]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.315569][ T4346] vhci_hcd: vhci_device speed not set
[  180.345414][ T1324] usbhid 1-1:1.0: can't add hid device: -71
[  180.351524][ T1324] usbhid: probe of 1-1:1.0 failed with error -71
[  180.360536][ T1324] usb 1-1: USB disconnect, device number 10
[  180.532740][ T5652] overlayfs: failed to decode file handle (len=6, type=196859, flags=0, err=-22)
[  180.660308][ T5655] binder: 5653:5655 ioctl c0306201 0 returned -14
[  181.623995][ T5665] netlink: 168 bytes leftover after parsing attributes in process `syz.1.420'.
[  182.649132][ T5683] overlayfs: failed to decode file handle (len=6, type=196859, flags=0, err=-22)
[  182.788373][ T5690] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  182.794973][ T5690] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  182.805861][ T5690] vhci_hcd vhci_hcd.0: Device attached
[  182.818924][ T5697] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5)
[  182.825496][ T5697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  182.834115][ T5697] vhci_hcd vhci_hcd.0: Device attached
[  182.845729][ T5690] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7)
[  182.852304][ T5690] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  182.860550][ T5690] vhci_hcd vhci_hcd.0: Device attached
[  182.868271][ T5690] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9)
[  182.874833][ T5690] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  182.901936][ T5690] vhci_hcd vhci_hcd.0: Device attached
[  182.907645][ T4261] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  182.940852][ T5697] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[  182.947603][ T5697] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  182.956559][ T5697] vhci_hcd vhci_hcd.0: Device attached
[  182.957873][ T5711] netlink: 168 bytes leftover after parsing attributes in process `syz.0.433'.
[  182.964081][ T5691] vhci_hcd: connection closed
[  182.971274][ T5702] vhci_hcd: connection closed
[  182.971875][ T5698] vhci_hcd: connection closed
[  182.976010][ T5700] vhci_hcd: connection closed
[  182.985489][ T5708] vhci_hcd: connection closed
[  182.995202][  T144] vhci_hcd: stop threads
[  183.005255][ T4308] vhci_hcd: vhci_device speed not set
[  183.028330][  T144] vhci_hcd: release socket
[  183.037023][  T144] vhci_hcd: disconnect device
[  183.052741][  T144] vhci_hcd: stop threads
[  183.065500][  T144] vhci_hcd: release socket
[  183.075563][ T4308] usb 37-1: new full-speed USB device number 3 using vhci_hcd
[  183.079178][  T144] vhci_hcd: disconnect device
[  183.083779][ T5695] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  183.101857][  T144] vhci_hcd: stop threads
[  183.111704][  T144] vhci_hcd: release socket
[  183.124362][  T144] vhci_hcd: disconnect device
[  183.129617][  T144] vhci_hcd: stop threads
[  183.133898][  T144] vhci_hcd: release socket
[  183.145704][  T144] vhci_hcd: disconnect device
[  183.150807][  T144] vhci_hcd: stop threads
[  183.157009][  T144] vhci_hcd: release socket
[  183.161855][  T144] vhci_hcd: disconnect device
[  183.220289][ T4261] usb 2-1: Using ep0 maxpacket: 16
[  183.384983][ T5725] overlayfs: failed to decode file handle (len=6, type=196859, flags=0, err=-22)
[  184.253111][ T5728] Cannot find add_set index 1 as target
[  184.395466][ T4261] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  184.404746][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.412931][ T4261] usb 2-1: Product: syz
[  184.417316][ T4261] usb 2-1: Manufacturer: syz
[  184.421956][ T4261] usb 2-1: SerialNumber: syz
[  184.435638][ T4261] usb 2-1: config 0 descriptor??
[  184.571394][ T5736] syz.3.440 (5736): drop_caches: 2
[  185.108780][ T5743] netlink: 168 bytes leftover after parsing attributes in process `syz.3.445'.
[  185.166480][    T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  185.355262][ T4258] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  185.425243][    T7] usb 1-1: Using ep0 maxpacket: 16
[  185.445233][   T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  185.495646][ T4261] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  185.508228][ T4261] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  185.536022][ T4261] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  185.544406][ T4261] usb 2-1: media controller created
[  185.561550][ T4261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  185.685309][   T21] usb 4-1: Using ep0 maxpacket: 32
[  185.735379][    T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  185.735427][ T4258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.750960][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.756349][ T4258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.764004][    T7] usb 1-1: Product: syz
[  185.764024][    T7] usb 1-1: Manufacturer: syz
[  185.764039][    T7] usb 1-1: SerialNumber: syz
[  185.781623][ T4258] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  185.796739][    T7] usb 1-1: config 0 descriptor??
[  185.801805][ T4258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.813148][ T4258] usb 3-1: config 0 descriptor??
[  185.840616][    T7] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  185.856228][   T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.870256][   T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.880124][   T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  185.889334][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.899602][   T21] usb 4-1: config 0 descriptor??
[  185.947239][   T21] hub 4-1:0.0: USB hub found
[  186.136092][ T4261] zl10353_read_register: readreg error (reg=127, ret==0)
[  186.136258][ T5685] dtv5100: wlen = 0, aborting.
[  186.143246][ T4261] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  186.143277][ T4261] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  186.171205][   T21] hub 4-1:0.0: 2 ports detected
[  186.194411][ T4261] usb 2-1: USB disconnect, device number 8
[  186.218532][ T4261] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  186.265462][    T7] gspca_sn9c2028: read1 error -71
[  186.285426][    T7] gspca_sn9c2028: read1 error -71
[  186.290630][    T7] sn9c2028: probe of 1-1:0.0 failed with error -71
[  186.291599][ T4258] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  186.305909][    T7] usb 1-1: USB disconnect, device number 11
[  186.312413][ T4258] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  186.320198][ T4258] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  186.327820][ T4258] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  186.335359][ T4258] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  186.345994][ T4258] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[  186.505433][ T4258] playstation 0003:054C:0DF2.000B: Invalid byte count transferred, expected 20 got 0
[  186.515310][ T4258] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -22
[  186.524583][ T4258] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense
[  186.537005][ T4258] playstation 0003:054C:0DF2.000B: Failed to create dualsense.
[  186.547534][ T4258] playstation: probe of 0003:054C:0DF2.000B failed with error -22
[  186.711566][ T4258] usb 3-1: USB disconnect, device number 7
[  186.829142][ T5752] binder: 5750:5752 ioctl c0306201 0 returned -14
[  187.165847][   T21] usb 4-1: USB disconnect, device number 14
[  187.502454][ T4356] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  188.338548][ T4308] vhci_hcd: vhci_device speed not set
[  189.446713][ T5770] Cannot find add_set index 1 as target
[  189.726486][ T5781] syz.3.454 (5781): drop_caches: 2
[  190.485379][   T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  190.709367][ T4356] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  190.737486][   T21] usb 2-1: Using ep0 maxpacket: 32
[  190.855425][   T21] usb 2-1: config 0 has an invalid interface number: 23 but max is 0
[  190.869057][    T7] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  190.873888][   T21] usb 2-1: config 0 has no interface number 0
[  190.893129][   T21] usb 2-1: config 0 interface 23 has no altsetting 0
[  190.915854][    T7] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  190.965279][ T4356] usb 1-1: Using ep0 maxpacket: 8
[  191.059733][   T21] usb 2-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad
[  191.083969][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.094361][ T4356] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  191.113304][ T4356] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  191.133414][   T21] usb 2-1: Product: syz
[  191.143544][   T21] usb 2-1: Manufacturer: syz
[  191.152579][ T4356] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  191.172851][   T21] usb 2-1: SerialNumber: syz
[  191.193058][ T4356] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  191.212385][   T21] usb 2-1: config 0 descriptor??
[  191.238047][ T4356] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  191.263252][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.295384][ T4258] Bluetooth: hci3: command 0x0406 tx timeout
[  191.301467][ T4346] Bluetooth: hci0: command 0x0406 tx timeout
[  191.312066][ T4346] Bluetooth: hci1: command 0x0406 tx timeout
[  191.346514][ T4346] Bluetooth: hci2: command 0x0406 tx timeout
[  191.486874][ T3108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.502250][   T21] kaweth 2-1:0.23: Firmware present in device.
[  191.535548][ T4356] usb 1-1: GET_CAPABILITIES returned 0
[  191.550320][ T4356] usbtmc 1-1:16.0: can't read capabilities
[  191.645067][ T3108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.697237][   T21] kaweth 2-1:0.23: Statistics collection: 0
[  191.716044][ T3108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.721403][   T21] kaweth 2-1:0.23: Multicast filter limit: 0
[  191.753862][   T21] kaweth 2-1:0.23: MTU: 0
[  191.758613][   T21] kaweth 2-1:0.23: Read MAC address 00:00:00:00:00:00
[  191.771822][ T4258] usb 1-1: USB disconnect, device number 12
[  191.834490][ T5800] binder: 5798:5800 ioctl c0306201 0 returned -14
[  192.084804][ T3108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.115471][   T21] kaweth 2-1:0.23: Error setting SOFS wait
[  192.137596][   T21] kaweth: probe of 2-1:0.23 failed with error -5
[  192.267353][   T21] usb 2-1: USB disconnect, device number 9
[  192.411605][ T4471] udevd[4471]: setting owner of /dev/bus/usb/002/009 to uid=0, gid=0 failed: No such file or directory
[  192.797114][ T5794] chnl_net:caif_netlink_parms(): no params data found
[  193.375286][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[  193.802809][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.820231][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.857490][ T5794] device bridge_slave_0 entered promiscuous mode
[  193.883990][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.899156][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.914701][ T5794] device bridge_slave_1 entered promiscuous mode
[  194.065576][ T5833] Cannot find add_set index 1 as target
[  194.217306][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.223781][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.259719][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.298073][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.495634][ T4346] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  194.588350][ T4346] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  194.616030][ T5794] team0: Port device team_slave_0 added
[  194.679955][ T5794] team0: Port device team_slave_1 added
[  194.782612][ T3108] IPVS: stopping backup sync thread 5177 ...
[  194.934067][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.965949][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.115220][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.247203][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.295478][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.389291][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.457206][   T21] Bluetooth: hci4: command 0x041b tx timeout
[  195.470331][ T5848] overlayfs: statfs failed on './file0'
[  195.616627][ T5794] device hsr_slave_0 entered promiscuous mode
[  195.644229][ T5794] device hsr_slave_1 entered promiscuous mode
[  195.672517][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.695356][ T5794] Cannot create hsr debugfs directory
[  195.766687][ T3108] device hsr_slave_0 left promiscuous mode
[  195.795524][ T3108] device hsr_slave_1 left promiscuous mode
[  195.813863][ T3108] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.833973][ T3108] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.864769][ T3108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.892849][ T3108] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.913896][ T3108] device bridge_slave_1 left promiscuous mode
[  195.935042][ T3108] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.010347][ T3108] device bridge_slave_0 left promiscuous mode
[  196.040708][ T5857] Cannot find add_set index 1 as target
[  196.164863][   T21] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  196.175530][ T3108] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.289207][ T3108] device veth1_macvtap left promiscuous mode
[  196.314035][ T3108] device veth0_macvtap left promiscuous mode
[  196.329193][ T3108] device veth1_vlan left promiscuous mode
[  196.345947][ T3108] device veth0_vlan left promiscuous mode
[  196.565510][   T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.595553][   T21] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  196.651117][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.708792][   T21] usb 4-1: config 0 descriptor??
[  196.799817][   T21] pwc: Askey VC010 type 2 USB webcam detected.
[  197.015412][   T21] pwc: send_video_command error -71
[  197.020781][   T21] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  197.168090][   T21] Philips webcam: probe of 4-1:0.0 failed with error -71
[  197.190990][   T21] usb 4-1: USB disconnect, device number 15
[  197.389645][ T3108] team0 (unregistering): Port device team_slave_1 removed
[  197.404964][ T3108] team0 (unregistering): Port device team_slave_0 removed
[  197.465865][ T3108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.535255][ T4356] Bluetooth: hci4: command 0x040f tx timeout
[  197.575408][   T21] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  197.723742][ T3108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.891511][ T3108] bond0 (unregistering): Released all slaves
[  198.075352][   T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.092522][   T21] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  198.102411][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.120812][   T21] usb 4-1: config 0 descriptor??
[  198.172920][   T21] pwc: Askey VC010 type 2 USB webcam detected.
[  198.605584][   T21] pwc: recv_control_msg error -32 req 02 val 2b00
[  198.657372][   T21] pwc: recv_control_msg error -32 req 02 val 2700
[  198.715635][   T21] pwc: recv_control_msg error -32 req 02 val 2c00
[  198.755341][   T21] pwc: recv_control_msg error -32 req 04 val 1000
[  198.795297][   T21] pwc: recv_control_msg error -32 req 04 val 1300
[  198.865636][   T21] pwc: recv_control_msg error -32 req 04 val 1400
[  198.925290][   T21] pwc: recv_control_msg error -32 req 02 val 2000
[  198.965637][   T21] pwc: recv_control_msg error -32 req 02 val 2100
[  199.005284][   T21] pwc: recv_control_msg error -32 req 04 val 1500
[  199.045367][   T21] pwc: recv_control_msg error -32 req 02 val 2500
[  199.095381][   T21] pwc: recv_control_msg error -32 req 02 val 2400
[  199.267420][ T5794] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  199.339161][ T5794] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  199.355357][   T21] pwc: recv_control_msg error -32 req 02 val 2900
[  199.395373][   T21] pwc: recv_control_msg error -32 req 02 val 2800
[  199.396856][ T5794] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  199.461884][ T5794] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  199.615324][ T1108] Bluetooth: hci4: command 0x0419 tx timeout
[  199.657428][   T21] pwc: recv_control_msg error -71 req 04 val 1200
[  199.692520][   T21] pwc: Registered as video103.
[  199.735363][   T21] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14
[  199.795476][   T21] usb 4-1: USB disconnect, device number 16
[  199.886727][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.946803][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  199.966360][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  199.986168][ T1108] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  200.003053][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[  200.020455][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  200.041794][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  200.069761][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.076984][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.116498][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  200.129924][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  200.139664][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  200.162383][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.169590][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.236391][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  200.298899][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  200.345832][ T1108] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.358460][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  200.387991][ T1108] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.413893][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  200.435663][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0
[  200.442343][ T1108] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  200.456991][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  200.466061][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  200.481564][ T5794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  200.492490][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.504187][ T1108] usb 1-1: config 0 descriptor??
[  200.516381][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  200.548332][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  200.560817][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  200.596006][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  200.640600][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  200.702049][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  200.742518][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  201.009008][ T1108] hid-led 0003:04D8:F372.000E: unknown main item tag 0x0
[  201.040571][ T1108] hid-led 0003:04D8:F372.000E: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0
[  201.179100][ T1108] hid-led 0003:04D8:F372.000E: Greynut Luxafor initialized
[  201.208449][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  201.227491][ T1108] usb 1-1: USB disconnect, device number 13
[  201.234546][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  201.253400][ T4308] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[  201.276768][ T4230] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[  201.291323][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.305414][ T4230] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[  201.352838][ T4230] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[  201.377531][ T4230] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[  201.419393][ T4230] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[  201.463336][ T4230] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[  201.501240][ T4230] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[  201.520506][ T5932] fido_id[5932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  201.553884][ T4230] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[  201.595684][ T4230] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[  201.636387][ T4230] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[  201.649267][ T5944] binder: BINDER_SET_CONTEXT_MGR already set
[  201.667845][   T21] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[  201.676229][ T5944] binder: 5943:5944 ioctl 4018620d 200000000040 returned -16
[  201.706540][   T21] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[  201.725756][   T21] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[  201.762579][   T21] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[  201.816914][   T21] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[  201.892560][    T7] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  201.906429][   T21] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[  201.932043][    T7] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  201.933710][ T4230] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[  201.962297][ T5950] Cannot find add_set index 1 as target
[  203.904944][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  203.965590][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  204.075105][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  204.126103][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  204.172517][ T5794] device veth0_vlan entered promiscuous mode
[  204.184495][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  204.229450][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  204.306423][ T5794] device veth1_vlan entered promiscuous mode
[  204.471188][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  204.491600][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  204.526225][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  204.557143][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  204.588119][ T5794] device veth0_macvtap entered promiscuous mode
[  204.661275][ T5794] device veth1_macvtap entered promiscuous mode
[  204.761608][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.795984][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.829325][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.877294][ T4346] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  204.882542][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.929144][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.980505][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.042399][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.085957][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.116365][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.138184][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  205.153266][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  205.167321][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  205.180501][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  205.194674][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.219920][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.240403][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.251462][ T4346] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.272274][ T4346] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  205.282398][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.305676][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.334330][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.352123][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.362804][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.382085][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.395606][ T4346] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  205.409250][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  205.425355][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  205.438999][ T4346] usb 2-1: SerialNumber: syz
[  205.444993][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  205.467265][ T5794] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.492325][ T5794] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.501597][ T5794] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.516771][ T5794] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.738625][ T4346] usb 2-1: 0:2 : does not exist
[  205.787896][ T5971] chnl_net:caif_netlink_parms(): no params data found
[  205.813372][ T4346] usb 2-1: USB disconnect, device number 10
[  205.964790][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.013486][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.075334][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.090965][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.110615][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.137109][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.146373][ T5971] device bridge_slave_0 entered promiscuous mode
[  206.154738][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  206.162421][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.173284][ T6011] Cannot find add_set index 1 as target
[  206.335612][ T4356] Bluetooth: hci5: command 0x0409 tx timeout
[  206.346770][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  206.427166][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.439864][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.513488][ T5971] device bridge_slave_1 entered promiscuous mode
[  206.658505][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.676948][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.793293][ T6029] binder: 6023:6029 ioctl c0306201 0 returned -14
[  206.829657][ T5971] team0: Port device team_slave_0 added
[  207.400937][ T5971] team0: Port device team_slave_1 added
[  207.680133][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  207.755340][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  207.834447][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  207.855353][ T4230] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  207.990124][ T4230] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  208.030031][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  208.088033][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  208.124420][ T6043] autofs4:pid:6043:autofs_fill_super: called with bogus options
[  208.128168][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  208.266041][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  208.353186][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.406199][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.599712][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.629934][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.637728][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.755263][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.890353][ T4346] Bluetooth: hci5: command 0x041b tx timeout
[  208.940250][ T6041] fido_id[6041]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  209.098972][ T5971] device hsr_slave_0 entered promiscuous mode
[  209.125003][ T5971] device hsr_slave_1 entered promiscuous mode
[  209.154040][ T5971] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.194371][ T5971] Cannot create hsr debugfs directory
[  209.699683][ T5971] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  209.816385][ T5971] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  209.833707][ T5971] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  209.871043][ T5971] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  210.154143][ T6081] binder: 6078:6081 ioctl c0306201 0 returned -14
[  210.977877][ T1324] Bluetooth: hci5: command 0x040f tx timeout
[  211.017838][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.161914][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  211.206715][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  211.300293][ T6091] autofs4:pid:6091:autofs_fill_super: called with bogus options
[  211.311246][ T5971] 8021q: adding VLAN 0 to HW filter on device team0
[  211.354372][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  211.406247][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  211.445649][ T3108] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.452779][ T3108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.475326][   T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  211.561876][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  211.635820][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'.
[  211.679203][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  211.702333][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  211.715233][   T21] usb 2-1: Using ep0 maxpacket: 8
[  211.722806][ T6101] binder: 6098:6101 ioctl c0306201 0 returned -14
[  211.816770][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.823992][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.556350][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  212.574818][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  212.584131][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  212.596326][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  212.736081][   T21] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  212.764237][ T5971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  212.785006][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.827984][   T21] usb 2-1: Product: syz
[  212.832205][   T21] usb 2-1: Manufacturer: syz
[  212.837379][ T5971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  212.858048][   T21] usb 2-1: SerialNumber: syz
[  212.883856][   T21] usb 2-1: config 0 descriptor??
[  212.939959][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  212.978965][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  213.016473][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  213.055311][ T4346] Bluetooth: hci5: command 0x0419 tx timeout
[  213.072451][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  213.091871][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  213.112938][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  213.145565][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  213.155527][   T21] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  213.207525][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  213.252227][ T6136] loop5: detected capacity change from 0 to 128
[  213.309502][ T6136] =======================================================
[  213.309502][ T6136] WARNING: The mand mount option has been deprecated and
[  213.309502][ T6136]          and is ignored by this kernel. Remove the mand
[  213.309502][ T6136]          option from the mount to silence this warning.
[  213.309502][ T6136] =======================================================
[  213.409027][ T6125] sctp: failed to load transform for md5: -4
[  213.597121][ T6136] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,acl,,errors=continue. Quota mode: none.
[  213.701267][ T6136] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  213.853967][   T26] audit: type=1800 audit(1752775989.882:3): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.522" name="bus" dev="loop5" ino=12 res=0 errno=0
[  213.876874][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  213.884477][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  213.961795][   T26] audit: type=1804 audit(1752775989.882:4): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.522" name="/newroot/10/mnt/bus" dev="loop5" ino=12 res=1 errno=0
[  213.990198][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.216518][   T21] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  215.275256][   T21] usb 2-1: USB disconnect, device number 11
[  216.245654][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  216.265770][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  216.308524][ T5971] device veth0_vlan entered promiscuous mode
[  216.346360][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  216.359775][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  216.415298][ T5971] device veth1_vlan entered promiscuous mode
[  216.439976][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  216.485745][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  216.526487][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  216.643206][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  216.678491][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  216.742096][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  216.755234][   T21] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  216.777420][ T5971] device veth0_macvtap entered promiscuous mode
[  216.850267][ T5971] device veth1_macvtap entered promiscuous mode
[  216.961042][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.015229][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.085179][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.125172][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.135054][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.135909][   T21] usb 1-1: config index 0 descriptor too short (expected 580, got 68)
[  217.184425][   T21] usb 1-1: config 191 has too many interfaces: 215, using maximum allowed: 32
[  217.205191][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.225230][   T21] usb 1-1: config 191 has an invalid descriptor of length 146, skipping remainder of the config
[  217.255335][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.265218][   T21] usb 1-1: config 191 has 0 interfaces, different from the descriptor's value: 215
[  217.285931][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.346905][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.364967][ T6193] loop3: detected capacity change from 0 to 32768
[  217.381809][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.395512][   T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  217.423197][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  217.424387][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.457599][   T21] usb 1-1: SerialNumber: syz
[  217.494740][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  217.513550][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  217.578027][ T6193] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.530 (6193)
[  217.591872][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  217.616710][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  217.643450][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.695858][ T6193] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  217.716786][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.767923][ T6193] BTRFS info (device loop3): force zlib compression, level 3
[  217.786995][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.794995][   T21] usb 1-1: USB disconnect, device number 14
[  217.817967][ T6193] BTRFS info (device loop3): force clearing of disk cache
[  217.838264][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.925326][ T6193] BTRFS info (device loop3): turning off barriers
[  217.932010][ T6193] BTRFS info (device loop3): doing ref verification
[  218.085529][ T6193] BTRFS info (device loop3): enabling disk space caching
[  218.093138][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.125251][ T6193] BTRFS info (device loop3): disk space caching is enabled
[  218.132532][ T6193] BTRFS info (device loop3): has skinny extents
[  218.145719][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.164953][ T6210] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  218.226433][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.237143][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.247128][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.257892][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.296601][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.303990][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  218.347145][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  218.454651][ T5971] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.555678][ T5971] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.564428][ T5971] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.576709][ T6193] BTRFS info (device loop3): enabling ssd optimizations
[  218.594486][ T6193] BTRFS info (device loop3): clearing free space tree
[  218.642542][ T6193] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  218.674810][ T5971] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.715231][ T6193] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  218.937874][ T6243] 
[  218.940253][ T6243] ======================================================
[  218.947294][ T6243] WARNING: possible circular locking dependency detected
[  218.954347][ T6243] 5.15.188-syzkaller #0 Not tainted
[  218.959557][ T6243] ------------------------------------------------------
[  218.966588][ T6243] syz.0.537/6243 is trying to acquire lock:
[  218.972501][ T6243] ffff888055381450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0
[  218.983971][ T6243] 
[  218.983971][ T6243] but task is already holding lock:
[  218.991389][ T6243] ffff888055380120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530
[  219.000373][ T6243] 
[  219.000373][ T6243] which lock already depends on the new lock.
[  219.000373][ T6243] 
[  219.010871][ T6243] 
[  219.010871][ T6243] the existing dependency chain (in reverse order) is:
[  219.019893][ T6243] 
[  219.019893][ T6243] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[  219.028166][ T6243]        lock_sock_nested+0x44/0x100
[  219.033462][ T6243]        smc_listen_out+0x109/0x3d0
[  219.038660][ T6243]        process_one_work+0x863/0x1000
[  219.044158][ T6243]        worker_thread+0xaa8/0x12a0
[  219.049354][ T6243]        kthread+0x436/0x520
[  219.053939][ T6243]        ret_from_fork+0x1f/0x30
[  219.058878][ T6243] 
[  219.058878][ T6243] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[  219.069149][ T6243]        __lock_acquire+0x2c33/0x7c60
[  219.074527][ T6243]        lock_acquire+0x197/0x3f0
[  219.079570][ T6243]        __flush_work+0xdd/0x1b0
[  219.084620][ T6243]        __cancel_work_timer+0x3ac/0x520
[  219.090253][ T6243]        smc_clcsock_release+0x5c/0xe0
[  219.095721][ T6243]        __smc_release+0x398/0x500
[  219.100831][ T6243]        smc_close_non_accepted+0xd1/0x1f0
[  219.106637][ T6243]        smc_close_active+0x9d3/0xd90
[  219.112012][ T6243]        __smc_release+0x9a/0x500
[  219.117036][ T6243]        smc_release+0x2ca/0x530
[  219.121987][ T6243]        sock_close+0xd5/0x240
[  219.126748][ T6243]        __fput+0x234/0x930
[  219.131335][ T6243]        task_work_run+0x125/0x1a0
[  219.136448][ T6243]        exit_to_user_mode_loop+0x10f/0x130
[  219.142440][ T6243]        exit_to_user_mode_prepare+0xb1/0x140
[  219.148660][ T6243]        syscall_exit_to_user_mode+0x16/0x40
[  219.154644][ T6243]        do_syscall_64+0x58/0xa0
[  219.159586][ T6243]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  219.166001][ T6243] 
[  219.166001][ T6243] other info that might help us debug this:
[  219.166001][ T6243] 
[  219.176226][ T6243]  Possible unsafe locking scenario:
[  219.176226][ T6243] 
[  219.183786][ T6243]        CPU0                    CPU1
[  219.189148][ T6243]        ----                    ----
[  219.194510][ T6243]   lock(sk_lock-AF_SMC/1);
[  219.199044][ T6243]                                lock((work_completion)(&new_smc->smc_listen_work));
[  219.208841][ T6243]                                lock(sk_lock-AF_SMC/1);
[  219.215865][ T6243]   lock((work_completion)(&new_smc->smc_listen_work));
[  219.222881][ T6243] 
[  219.222881][ T6243]  *** DEADLOCK ***
[  219.222881][ T6243] 
[  219.231014][ T6243] 2 locks held by syz.0.537/6243:
[  219.236204][ T6243]  #0: ffff8880746e9a10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  219.246483][ T6243]  #1: ffff888055380120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530
[  219.256597][ T6243] 
[  219.256597][ T6243] stack backtrace:
[  219.262485][ T6243] CPU: 0 PID: 6243 Comm: syz.0.537 Not tainted 5.15.188-syzkaller #0
[  219.270732][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  219.280803][ T6243] Call Trace:
[  219.284087][ T6243]  <TASK>
[  219.287020][ T6243]  dump_stack_lvl+0x168/0x230
[  219.291707][ T6243]  ? load_image+0x3b0/0x3b0
[  219.296210][ T6243]  ? show_regs_print_info+0x20/0x20
[  219.301414][ T6243]  ? print_circular_bug+0x12b/0x1a0
[  219.306611][ T6243]  check_noncircular+0x274/0x310
[  219.311563][ T6243]  ? add_chain_block+0x940/0x940
[  219.316501][ T6243]  ? lockdep_lock+0xdc/0x1e0
[  219.321096][ T6243]  ? rcu_lock_release+0x5/0x20
[  219.325859][ T6243]  ? __kernel_text_address+0x9a/0x100
[  219.331407][ T6243]  ? mark_lock+0x94/0x320
[  219.335742][ T6243]  __lock_acquire+0x2c33/0x7c60
[  219.340598][ T6243]  ? deref_stack_reg+0xd0/0x120
[  219.345463][ T6243]  ? hlock_conflict+0x59/0x1f0
[  219.350247][ T6243]  ? check_path+0x40/0x40
[  219.354767][ T6243]  ? verify_lock_unused+0x140/0x140
[  219.359974][ T6243]  ? mark_lock+0x94/0x320
[  219.364310][ T6243]  ? __lock_acquire+0x13ad/0x7c60
[  219.369338][ T6243]  ? add_chain_block+0x940/0x940
[  219.374287][ T6243]  lock_acquire+0x197/0x3f0
[  219.378798][ T6243]  ? __flush_work+0xc1/0x1b0
[  219.383394][ T6243]  ? read_lock_is_recursive+0x10/0x10
[  219.388772][ T6243]  __flush_work+0xdd/0x1b0
[  219.393193][ T6243]  ? __flush_work+0xc1/0x1b0
[  219.397783][ T6243]  ? flush_work+0x20/0x20
[  219.402111][ T6243]  ? try_to_grab_pending+0xf3/0x7e0
[  219.407314][ T6243]  ? lockdep_hardirqs_off+0x70/0x100
[  219.412658][ T6243]  ? mark_lock+0x94/0x320
[  219.417029][ T6243]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  219.423028][ T6243]  ? lock_chain_count+0x20/0x20
[  219.427886][ T6243]  ? print_unlock_imbalance_bug+0x160/0x160
[  219.433785][ T6243]  ? __cancel_work_timer+0x331/0x520
[  219.439074][ T6243]  __cancel_work_timer+0x3ac/0x520
[  219.444188][ T6243]  ? cancel_work_sync+0x20/0x20
[  219.449040][ T6243]  ? __local_bh_enable_ip+0x12a/0x1b0
[  219.454412][ T6243]  ? lockdep_hardirqs_on+0x94/0x140
[  219.459617][ T6243]  ? __local_bh_enable_ip+0x12a/0x1b0
[  219.465077][ T6243]  ? _local_bh_enable+0xa0/0xa0
[  219.469933][ T6243]  smc_clcsock_release+0x5c/0xe0
[  219.474893][ T6243]  __smc_release+0x398/0x500
[  219.479487][ T6243]  smc_close_non_accepted+0xd1/0x1f0
[  219.484787][ T6243]  smc_close_active+0x9d3/0xd90
[  219.489727][ T6243]  __smc_release+0x9a/0x500
[  219.494231][ T6243]  smc_release+0x2ca/0x530
[  219.498650][ T6243]  sock_close+0xd5/0x240
[  219.502898][ T6243]  ? sock_mmap+0x90/0x90
[  219.507310][ T6243]  __fput+0x234/0x930
[  219.511296][ T6243]  task_work_run+0x125/0x1a0
[  219.515891][ T6243]  exit_to_user_mode_loop+0x10f/0x130
[  219.521266][ T6243]  exit_to_user_mode_prepare+0xb1/0x140
[  219.526819][ T6243]  syscall_exit_to_user_mode+0x16/0x40
[  219.532278][ T6243]  do_syscall_64+0x58/0xa0
[  219.536701][ T6243]  ? clear_bhb_loop+0x30/0x80
[  219.541375][ T6243]  ? clear_bhb_loop+0x30/0x80
[  219.546055][ T6243]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  219.551961][ T6243] RIP: 0033:0x7f9165b3f929
[  219.556391][ T6243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.576089][ T6243] RSP: 002b:00007fff48459ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  219.584507][ T6243] RAX: 0000000000000000 RBX: 00000000000356bc RCX: 00007f9165b3f929
[  219.592476][ T6243] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  219.600447][ T6243] RBP: 00007f9165d68ba0 R08: 0000000000000001 R09: 0000000b4845a1bf
[  219.608420][ T6243] R10: 00007f91659b1000 R11: 0000000000000246 R12: 00007f9165d66fac
[  219.616403][ T6243] R13: 00007f9165d66fa0 R14: ffffffffffffffff R15: 00007fff48459fe0
[  219.624399][ T6243]  </TASK>
[  219.627452][    C0] vkms_vblank_simulate: vblank timer overrun
[  219.640813][ T3108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.661911][ T5971] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht'
[  219.686155][ T3108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.695484][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  219.810663][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.819679][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.838940][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  223.099090][ T4332] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.140151][ T4332] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.198501][ T4332] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.239125][ T4332] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.971386][ T4332] device hsr_slave_0 left promiscuous mode
[  223.980360][ T4332] device hsr_slave_1 left promiscuous mode
[  223.987705][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.997832][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.006002][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.013543][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.024782][ T4332] device bridge_slave_1 left promiscuous mode
[  224.031157][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.041970][ T4332] device bridge_slave_0 left promiscuous mode
[  224.048423][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.063062][ T4332] device veth1_macvtap left promiscuous mode
[  224.069316][ T4332] device veth0_macvtap left promiscuous mode
[  224.079939][ T4332] device veth1_vlan left promiscuous mode
[  224.086129][ T4332] device veth0_vlan left promiscuous mode
[  224.203362][ T4332] team0 (unregistering): Port device team_slave_1 removed
[  224.214183][ T4332] team0 (unregistering): Port device team_slave_0 removed
[  224.224557][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.237286][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.285226][ T4332] bond0 (unregistering): Released all slaves