last executing test programs:

28.987476393s ago: executing program 1 (id=287):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGFEATURE(r3, 0x4004480d, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000500)={0x40, 0x16, 0x2, "b20b"}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x20, 0xe, 0x2, "8a02"}, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x10, 0x4, "f46afeba"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="200b04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8)
sendto$inet6(r0, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0xa00}, 0x8)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r5, 0x0, 0x1, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000280)={0x0, 'bridge0\x00', {0x3}, 0xb})

26.384011179s ago: executing program 1 (id=300):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010102}}}}}}, 0x26)

26.312068031s ago: executing program 1 (id=301):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xfffffff, 0x0}, &(0x7f0000000540)="1afb1f000000", 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4)
recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000840))
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x1})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000140)=0xc)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00'})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001980)={0x0, [{0x2, 0x0, 0x80000001, 0x0}, {0x3, 0x10, 0x0, &(0x7f00000000c0)="8b39"}, {0x3, 0x20, 0x0, &(0x7f0000000280)="dc7e48bf"}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x0, 0x0, 0xd023, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x8006, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x200, 0x0}, {0x7, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x2, 0x0, 0xfffffff3, 0x0}, {0x0, 0x0, 0x100, 0x0}, {0x1, 0x0, 0x6, 0x0}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

26.153973583s ago: executing program 1 (id=302):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
socket$packet(0x11, 0x2, 0x300)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x0, 0xe0000000})
pipe2$9p(&(0x7f0000000000), 0x80800)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')

26.138620981s ago: executing program 1 (id=303):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0xc5e)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_conf_req={{0x4, 0x6, 0x4}, {0x3ff, 0xfffb}}, @l2cap_conf_req={{0x4, 0x80, 0x8}, {0x9, 0x5, [@l2cap_conf_mtu={0x1, 0x2, 0x2}]}}]}}, 0x1d)

25.879990461s ago: executing program 1 (id=304):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0xc037, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x7, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x460000c1, 0x4000}]}}, {"2244070000bc0be4bdf9da2470a34ec90000932b52c828de6f79d82439cc00080000000000009248ba27afeb7396efe6b9986063fd95e9391e"}}}}}, 0x7f)
ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000340)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x0, 0x4, {}, {0x2, 0x1, 0x0, 0x1, 0x4, 0x65, 'ZqI='}, 0x7, 0x1, {&(0x7f0000000240)=[{0x60, 0x1, {0x8}, 0x3}, {0x4, 0x4d, {0x71cb}}]}, 0x200, 0x0, r2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040004)

25.671620281s ago: executing program 32 (id=304):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0xc037, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x7, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x460000c1, 0x4000}]}}, {"2244070000bc0be4bdf9da2470a34ec90000932b52c828de6f79d82439cc00080000000000009248ba27afeb7396efe6b9986063fd95e9391e"}}}}}, 0x7f)
ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000340)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x0, 0x4, {}, {0x2, 0x1, 0x0, 0x1, 0x4, 0x65, 'ZqI='}, 0x7, 0x1, {&(0x7f0000000240)=[{0x60, 0x1, {0x8}, 0x3}, {0x4, 0x4d, {0x71cb}}]}, 0x200, 0x0, r2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040004)

5.437605857s ago: executing program 3 (id=412):
capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100))
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r3, 0x1, 0x0, 0x8000, {0x34}}, 0x14}}, 0x0)
r4 = socket$unix(0x1, 0x4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
connect$unix(r4, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x7, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="232b13f6b94d38", 0x0, 0xfffffffc, 0x0, 0x0, 0x0})

4.9981656s ago: executing program 3 (id=414):
r0 = socket$alg(0x26, 0x5, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00')
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x442, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000240)={0x9, r0})
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-neon)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0x2d, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r2)
write(r2, &(0x7f0000000580)="573a45a9544271e4fffbbac1678f7bc7cd2dc676519e57a1c402e58ab81c21aa446020e964be7145d2aa504560853714e620c006e4cde7271ee4e12cf9f376b68685f06cce0b701e8a94eb98313a5ad479e2fde84808bd7de612dd7963905e494262504559e8eb2944fc4f6a38ff8a544d6c413da53ebc56570b4bd5cf525f3f1669766a056e5ef59773c34f17a1aba36fb5f596c0eec8c3a72f86098b378f61762f23edfbcac0616f42be8e6a4db2b8f2f4dba28099717759ebc1cb5de8a60fb08512485ea1a09dc79b4b6abd6783461f3e0bb240c1b0de8bc00490dbe96a77633e977a53c4b4d58f24f544260397cf203ff2b6ff327870306f045fbe269c3bd76424ecede123e9dda8c14c2312a7c39eaaa817f43f967f445bc634a2a7187b679453f66b9e0b69ad9eceb1abef5d56c641a0751fc60e01b7e1546eecc1cad23c575120333f25af4b1041127160815075c077caf2f8f900b63a7180e8c3d10f06e348a57c1e5741c212a7cd2cda096f75df6bc0d8557df63e7b76af05bc33a012f8f0feabd938caaea5b5ada1733124f17cbe2e4357b130c600f34d9b272be6e8bda77ff8b9e7a761ad6b650f5b320956e2d5351374993b884338c1310d9a16eb3b9b5ef7b4aca164a414b396f41cc95c4d8327a07ab70cbc67cde842b9aff2ecb4636530f959b8afb20fbd248d5585f7bfdf6ee48a0c03d41ad8dfcb65aad2f376ab7cb60c118361b56b58b94a4428e762f1712a99c516cf7ed618bd21b583afbdd1cd69b6350315a099e358356a50f3497403047988dc84e40be562991520c8c3e3288e8bc09eca38d71131e594e015b5225a7619289d14c88e914c1819d98bbb69cb0c63ddf8fb71fcd810648b9f3dcd5a9a43d4c01b43a89c5fea4d854dd096c9cf7e499a50a18ec0d6353cd11ac1d2ffd4cc930156ae8fd2aea11829b8aae2e88d39b3763bc5b2982488f5fca5c8e6a5ef87b537cdba3e26cff66ea4746ca6282f1eff9dde37d8ae71c1bc62e7822c79419cb30a03adb07ae306f5333233d3b78995ff6f4f8080b7e48aed5c1ea7e24a2354f8bd01e736bc9bf5b3efcbb41badda39a5eb7c4693a8422c7e1e9cc6ce182b1528836b6f2280c9415f59f4adfaaa4f13cb368db21ae994804167d5c2ba6f128e1995c1c4193175cdc3acce8e8ac3c8c7b94e17007a2931e9f969365fba79e25a07fbf10ecf979538ce206b443aa20f3c99030645d615b1a3f4dcb78334d35d0ba3e22154c2a59e8029dff33390c3c5384f3d6eba1259484f47a44c8f710be9968d4b5232f5fcad98000f0e7113f33214f1424c66f0a2440e22689f7821acdb8633b42c75363381e85a040388118b220edff6f9e0610c53aaffdd1a54d86600849cf5db59ae88b32ef55d74df732b241ad57eb9a9625d1c57371a24aef102fbe0462f364f73cd520cb5d444dc4f6143dd3ba01eae539ccbf627bd45ae8a51c04ed2e174bf7e55d950c69409d7622c10e0c1c9e81083d617bd5d29b64131214ac9cad7f3f57f032c4d2f3354892620a00ce8d24573d4d755022248a38d6df8a852d4bc2332d859f59793cc5cac0b3630ee6c8b5da6792851df7df607cd36abcda901b0d2841cefd2d359778b7555013c1440a7f8c2eea5fed3ea79d23ca794c73ec02bc252c6f8bce265686c0f72999a75562c158b09072e922ce024c4936e6a4b3c8e5715f582ef5d28fbf35be2ecb93e632cb09e710f43e674f942d0e2abcef6cefa3aa17cc1f6a1304daeb01da8e54a1fed966a1a84bdf0ff0f1f47df48f7b71c2c2d497b11ff3481f0c407977e3baf5782f4e8e8985548095b9d2b823ee8f814085a5dd423923a9b9c2aebd6b96fc0ecb0184c6def1695b2ae173551a3c9c3ebc577988b67dc0cf0905c8af9bab74a39195773ac648d19aa4edb36d3497498c9e9b97b306fcd09f2eefdbe3a48314d3e5002b6da1b8673b530932ac5374b5872d8fa80274269b13971a4027786bf98e08e62ec6eb06f133a2e3a45e4689056a9016b12f36373c280b8085dff705b818dd82b3c7cf7e1b64b9bc8278955f4a170473ae5229f40fcb398255e67a3ab034e42d42d2aa726e339e07f272e40f75c2184807243108f6dc5672cd393a8e41d343cb54dfbc5113e457cdd1fbc073e7295721f8c67c71dbdff0e81323b115ce8f968931eebbf20219d2069e5b372056e6384f72b1b6a81af4d0ce4aeb6a44cc8ef0de8bc6928cd9217b5f00352d73e0cb5c80ac6d4201e0bf3278e8b6075be9e41a56edaf6a7bf1427153f4d8cf49bfe7a6f69cb41ff7043eeef2a2a981626af39e7970d17fb65f5c7389c880ffb97042eb210810bb46c4d08bf08f557d5180d225ae87e563effc7daefb3d523c2508a70d484e1f09afe9e468fb8606685747828ee753fe94965950b23457656a7c2303eb00a0496718f7482a748d35eb944612cceeeb40d747fbdf2ba655b0a344dadb320c7f01dfc7a7f5bc555d4296b5438031a466e1842e37ae698a4d4675be6a449f78f7b45b7a776a6b28c4fb8567c959fabfd2993955a499d23d214a1a55d9977507e88a0da1c481c907b4bd16db1689b1322693a5f50f6a98fdcc65a859b1bc22aaf657e60c9fedfc5660eab37215df94c33244b92101e1b126f6dd3582ddacb6feee9ebf5dc4004eb1dd6ccc8a4f2806e5852649648799e8b1aac69810f3bb893456c30a9350091f22373417fbb84b547fe7d7122491efb20f55999209904d399f274e6324bf0573679ac90db0c8aa4c84730457db4a9ec22c68baada1d3e61e26aa5aeb653588409e280bf88f501814066e4201ce445a415d20e0baa11b639274e15f67625b82e97bcdde2c9cc2d3c160d35a18c10b5ae950a3a3cb9c1fe396e2c3ad18b046333eff5a344c3dd737c74330b73266ef2126eda16a5adf7eddcda9020c9d3920de1c28239b84da9abdb4b7ea82fc6be56299bb8a98bc9c9d3ec1b866679c9cc155ed662706f3ea2cf587877ab2b8f9f0f7bbce52215eaaab7d019d99aec694f102c9c45ab7f304027435e8dd9a90c1679606ed0d149d1370776789a73bce64695868239d051b649ff49a150ae94fe3b4db681f5764a7f8b714cc00ed39e8f2e3d4689ab55ce58bfdba94174e81ca5477206968405a12cd986fa0d948830b6c1a298174d5ea2d18a5726f8f081a114ab1b902191f17b568c24b391c172998c6aed04ad0b2ae324b8331022a6a454f63e00a7e26de09f32533d01c0f7fdd0a02b564466f670bfb131eaedaead15833721108779654b4b07f31b248779ca7d029af09a5a4238cfe90e24bbca8e9d94489085c8471e8d6e05fa5dcca33b9ba5a946191b7e70e115e001cded33899ea85d44b2ae02abcacc55e3ebc6e7f3bd62d20545c1080c9e78917f4a62cd436c3046b2ed33ffb1e750dccab778c1e62db4c654330adcb9a23efb3ad21b99e1d4d20cdcef2562499455ecd10c2af807ce0f5dfc1b131c90a1ad6cdd85be80e45a65afad494fb6f67faefc328a4a972b60ddf8e54c5d236d51cd451f59f5525ff81f78305f2db2c3b6e0b20c43ea6b65212bd7143d0db494d27036da426bb20f3395e2ab650df906a54b7c288bcd03968dd79fe69536218ffdbbacbdf70549f13d7b854918790bf2a04bddef93cd57535cccd68fa51969f924d44108745c8b6c99e662483f066c684ee3e19f484c0ae08413ba00bf1c852400563b333673d9d9dd28b55ef4af26b9ad9bd6df3b3b196d5b2aadc177a2a3a6ef8daac95f60faf367e3d1c417b49c1eb14b707e5b24f2ee0c40c25394b0b6386934f988a503f66a16f4731c7ecec386456c08ce27eda2ff5a9e9f213ac687d3b8d2f8bc2a84a2a4325dae6c78d8f83ea58b5823ae9e971ad0c3b5bfd9e6946175b0ee2376e8d771d56cf47246ba2ef4b723044d96d18fc61bdf660db6e26783146c29b255e43b1af91f6724cbbf032adf52fca727027a86adc2c31ff1eeb84fd5fd0a58d2cc42ebb2321e11ed2cbb26302a9533b70599d221f33c27e12fc66a9571d534158cbdd9f47078f220c6aa5b747b6065bc061efe0525504f4cec12974c729b14b06af2ae347b51baa8a18965c433aa7835f76ad7a97d530ca35ba597795eccc1cde9e92ff1934bbd48f007eff1f780c5eee7dac470697ec15f72f7d4ed9b59943a26b28f8354d0471cdccf43a76f2e5654493f9210c03a8c37fd3fa59b266ed5bc5a7741a8b8e252cf3d7151a00eb5e48312785f070563f42e80e497b6370aa2857be2034b1776a3f3d8987bb1527aa69b38cf05269bc1277d2273d132b25dd6692fb3649927bb5632192cfbd8013e35dc4eec0929571c8238e74fa4d74b308265a8e6d4eb5d6f0d6fa7e538fdd13095a269f8a2c9ab186a6f109a0df47649ee29096591f199239c5593f27c4a477e181f80f1de05cb85b5ffd45b7dccab56a2d16f155193e8d0b65c46f3b7e2c99b26e2b3017f86d461e7f1c930872171f0a27d7ee8a8532fc66b85af4d46e2564e608f253d45fbc822f1d7b2e92cc33200f521795373abd3b2bec8cbda45b8cf3aa1e0440737a33d559063a101d09ae2a265c92e221cbac61f2e3b5db6ed407205a911d5c8d26b557959f473e361df4ad815447e05df43d8ca7ba9ca9e96e227b666c6786aee440d6b0a54a91101afabda20aa92a3e5f999b73ff641a8b93d3a8184c40b2e0d023849f61cbaece4ced1bd69ba7ef21f67d8c4955b3126f42f306fde21fdc3b797a11c49f403095be8ecf5a67e79dbcd0ebd1e5f249d055131f9c4dfc0b8cf807158a7d97ebd1707e973fad3fd5b9aeafe6cf0507402fe3ad0c8527ea54bf5c3135708c2a51596c9b4ec216df3249fb4b2a5e54f14adf061b1b7a4a7a71750099c8f56a79b4c19e2b7b78b64ec4cfe32b673ba43b7810d5ea72498bdfb3f775999fc22feabda6227b853e3eb0cd3f33bb2f5f7fd31ed07c603445bd85d3406cc990ed2c389e1f42f4b0d33d293fa04ba65b713c24afb63d5585f10c6fd1f427649c29a29eda09f8c313bbcf08c7908ed43155487e723edb971de022e69e924b3a63326ef3c35e643dfac103ddf3b4cd6c6e48a19348d0c8df384b5417b32def924caccf2153fc8dd2b3ad2f55a03010ecf0d440f228c7fbaae629390de4d7e0268d0e59c81986f38038fcf2d0e731d68a82daedaf3aab9f00928a9d622e964c4411bef2938c3a7d686004ab8268c20e1208365776a8b4d949ae482c3d7ecc66960cb105560aebae4d8fba6cdb10ca842a3c02bac3b8ec9642a35d0abe5dd2b04fe3b29ba1712ffd909fdc7692c11910b416ab37f459f9145f0537ac69e0d537a1014dde9c662752937f4e7d95645dd59fb5f7a5872d627d6869a6dc2f7d040008288a8ea74332727075954323f5092ee49fb8062f5c8e6575b6cdd9c3594b0ac2a98a5b828e9f3879b1344cb5d8c05df79c561624cf32226b5e5552113a80eb82c3f3e7e8d17eeebd8cb9afabf801221d2ee4676bdb3d6aa04e2a0986ec4f1451b3a1898b8338e2f6688833d228133779c200fdbdd2a52ad73841494393d811fa1f223ca95df8f87c1c79163551509cc9c05b04a5a5eb8d706f5df6bb6e943b7823ccd597b73e735818f8a003db3b9d5277e2a35f365ffebdd9cda6686818d1a9a4b9aaa695295b3d72409ce067fc72a70ef8b9ebd164dcfa25c7b6cb422d4a462492d5894dc68453111c16eea3ec2051ff663f196b7c426e0dc9c8ff0a74f79e8520715a58bb9df", 0xfe0)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@ba={{}, {0x2}, @device_b, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0xb}, {0x3, 0x5}, "b1f30599a34c5447"}}, 0x1c)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0x98f907, 0x9})

4.368630313s ago: executing program 3 (id=418):
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)="6a3873ce130bc99a582b1f3a24c2147bc97092578ee1fc175b2509c494faa9f5baba491455c6c68514efe034", 0x2c}], 0x1, 0xc6bf, 0xff)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="78ab200018002507b9409b14ffff00000204be12020506050e0204094303090007000cd13663d17ecdbde3bc04a1acd46ae78bdb3e908c407160c338ae8bf42a35f3c80100ee57ef3bf84eb045a0c7288d9ed180dbddffdef229873cad89a32ea1fb28d835fc994b51bdb84e93c54da3fb28e3c26c975131120acb8dd4a9f24126b34ad81fee563f8246632575b185ed5b13a733d0d1d53ed720a99f0a17bd3df71d64a595cda315cce19f260fe84585239f3f1e04380838b2", 0xb9, 0x200008d0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0)
r0 = openat$vcsu(0xffffff9c, &(0x7f0000001700), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfffffff4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r3 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "8ba672dad0f6323f", '\a\x00', "ee862ce0", "982a2b89f61f0617"}, 0x28)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="368fa214fff81837f73e92517a09e0f162d00508f1223edcc08bd35ba88983c38680fa32df1397269202e9df01000000610d8d910102ebaf801c0334f6b5d699d8415afb74e79b2a51c77c7d2ee373b67b34dcd5fb0000000000000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf252500000008000300", @ANYRES32=r5, @ANYBLOB="08003500000000000a00060008021100000000001800508005000200050000000900010017100ae5a60000000a00340001010101010100000800260016170000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4004001}, 0x115e312e22cebff7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r3)
setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf250900000008000300", @ANYRES32=r8, @ANYBLOB="0000000000000002"], 0x24}}, 0x84)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x11, &(0x7f00000000c0)=0x8001, 0x4)
lseek(r0, 0x7b, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'pim6reg0\x00', @broadcast})
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)

4.217821105s ago: executing program 0 (id=420):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x10, 0x0, [{@loopback}]}})
r1 = accept4(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000100)=0x80, 0x800)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000)
r2 = getpid()
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000001180)=r2)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000011c0))
ptrace$peeksig(0x4209, r2, &(0x7f0000001200)={0x74, 0x0, 0x8}, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}, {}])
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001640), 0x101000)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000001680), 0x80000000, 0x440)
ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000002800)={0x2, &(0x7f00000016c0)=""/142, &(0x7f00000027c0)=[{0x8000, 0x1000, 0x4, &(0x7f0000001780)=""/4096}, {0x3e14, 0x39, 0x6, &(0x7f0000002780)=""/57}]})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$P9_RSTATFS(r5, &(0x7f0000002880)={0x43, 0x9, 0x1, {0x0, 0x9, 0xbc, 0xb51, 0x3, 0x1, 0x23ca, 0xe843535, 0x81}}, 0x43)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000002d00)={&(0x7f0000002c00)=[0x0, 0x0, <r6=>0x0], &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002c80)=[0x0, 0x0, 0x0, <r7=>0x0], &(0x7f0000002cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x4, 0x5})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000002d40)={&(0x7f0000002900)=[0x0, 0x0], &(0x7f0000002940)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002bc0)=[0x0], 0x8, 0xa, 0x2, 0x0, r7})
quotactl_fd$Q_GETINFO(r5, 0xffffffff80000500, 0x0, &(0x7f0000002dc0))
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000002e00)={0xaa, 0x4})
ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000002e40)={0x3, 0x7f3b, 0x3})
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000002e80)=<r8=>0x0)
write$P9_RGETLOCK(r5, &(0x7f0000002ec0)={0x23, 0x37, 0x1, {0x2, 0x4, 0x1, r8, 0x5, 'sit0\x00'}}, 0x23)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x810, r4, 0xbcd3a000)
truncate(&(0x7f0000002f00)='./file0\x00', 0x2)
ptrace$getsig(0x4202, r8, 0x7fffffffffffffff, &(0x7f0000002f40))
openat$nci(0xffffffffffffff9c, &(0x7f0000002fc0), 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000003000)={0x0, 0x80000, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000003040)={r6, 0x2, 0x5, 0x3, 0x3, [], [0xbfda, 0x9, 0xfffffffe, 0x6], [0x73ba, 0x6, 0x0, 0xff], [0x74d, 0x7, 0xf, 0x6]})
migrate_pages(r8, 0x3, &(0x7f00000030c0)=0x7, &(0x7f0000003100)=0xff)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000003140)={0x28, 0x0, 0x0, @host}, 0x10)

4.150923807s ago: executing program 0 (id=421):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
write$vga_arbiter(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='trylock i'], 0xf)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, 0x0, 0x0)
r1 = socket(0x15, 0x5, 0x0)
connect$l2tp6(r1, &(0x7f0000001100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x20)
getsockname$l2tp6(r1, 0x0, &(0x7f0000000100))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400008085d0c71ff3fe1e54c26701f205bfb0b947acbadfeea107ce30942d09a17a17028c763944cc497aaa0b049cdb78868b82ff7e2618b34b6d62acfcc8c79132c3b3d82806525dcd00af2bb08cd3da3e78770abe446d4f1b9ab5696fdc8fe98fd9a60e41cd78a41fc02992fe038481e0538027057fd4d1bcd027dfe676a80e4e7f6a9f1d9ba16a5b71012bf19ee95cc1f1b6e7863c95cbf22af31ffc16e8ca4e6ca928bc03c44ca317c2a31a1dc0d0fde106c799e1a49c1a65ce", @ANYRES16=r3, @ANYBLOB="010308000000fedbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4040)
r4 = gettid()
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x151702, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04000418"], 0x7)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140))
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="740000000001010400000000000000000700000024000180140001800800c7d69a00a65124930200e00000010c0002800500010000000000240000000000080002007f0000010c00028005000100000000000800074000000001080003400000100e0800034000000002"], 0x74}}, 0x0)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f7475fcffffff00000000000005001800010000000e52eda2db3a7395b04b03c06a0aa85990e28a9a7a63fa4d888065c0594189fa15a7f2d3309b9cb88e4c108d8471a53e787402fce9cc7945d96b16afe6ca53a773b6d8cd83b3b01b76ba758dc0a1d88af8522304e2d22fc6020e471a081535af827443d8eba0cdd3e28f1036e0ad505dd856e5df39faa6a66d93823034ade1d14a3771f2ff86ed0e3a0a56a17cd65b3cce67d2e2de0874503bc31280fb1821"], 0x34}}, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x711a03, 0x0)

3.726092733s ago: executing program 3 (id=422):
syz_io_uring_setup(0x6b64, &(0x7f0000000140)={0x0, 0x663, 0x8000, 0x1, 0x17}, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x40, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x0)

3.610200371s ago: executing program 3 (id=423):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r1 = socket$kcm(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)

3.504619875s ago: executing program 0 (id=425):
r0 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x8, @remote, 0x3}, 0x1c)
socket(0x1e, 0x2, 0x40002)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x6f, 0x1, 0x3, 0x1, 0x2, 0x1c, {0x9, 0x21, 0x401, 0x3, 0x1, {0x22, 0xcbb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf7, 0x3, 0x3}}}}}]}}]}}, 0x0)

2.960229248s ago: executing program 3 (id=426):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/134, 0x86}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000500)=""/175, 0xaf}], 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r2 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r3, 0x0)
read(r3, &(0x7f0000000180)=""/207, 0xcf)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x2d1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000005200011904000000000000001c"], 0x28}}, 0x0)
ioctl$FIBMAP(r7, 0x1, &(0x7f00000006c0))
ioctl$SIOCX25SENDCALLACCPT(r6, 0x40806685)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r8, 0x5420, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x6}]})
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @broadcast}}}, {{@in=@dev}}}, &(0x7f0000000240)=0xe8)

2.811754771s ago: executing program 4 (id=428):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0)
sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
ppoll(&(0x7f0000000000)=[{r5}], 0x1, 0x0, 0x0, 0x0)
close(r2)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
io_setup(0x20fe, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={[{@none}]})
syz_usb_connect(0x2, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x310, 0x1b, 0xf9, 0x17, 0x10, 0xd46, 0x2011, 0xe88a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x4, 0xd0, 0x3, [{{0x9, 0x4, 0x6a, 0xa, 0x2, 0x4d, 0x78, 0x27, 0x62, [], [{{0x9, 0x5, 0xd, 0x3, 0x200, 0xa, 0x9, 0x2}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0xd, 0x6, 0x6}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES8=r7, @ANYRES16=r9, @ANYBLOB="010012bd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

2.044319158s ago: executing program 0 (id=431):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x1, 0x7fff}, 0x7ff})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2a381)
write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@int=0x2, 0x4)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x1, 0x7fff}, 0x7ff}) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2a381) (async)
write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@int=0x2, 0x4) (async)

1.250592647s ago: executing program 4 (id=432):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f0000000580)={'bond0\x00', 0x10004})
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0xffff0018)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x80)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x2e)

1.248358265s ago: executing program 0 (id=433):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)=ANY=[@ANYBLOB='\b\x00\\\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000c000000180001801400020067656e6576653100000000000000000018000380080002000600000004000100080004003423d5d2"], 0x44}}, 0x4004)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000002300), 0xc0800)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000100)={'bond0\x00'})
openat$dsp1(0xffffffffffffff9c, &(0x7f0000002340), 0x101040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000002380), 0x200f42, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_clone3(&(0x7f00000026c0)={0x22808000, &(0x7f0000002400), &(0x7f0000002440), &(0x7f0000002480), {0xb}, &(0x7f00000024c0)=""/167, 0xa7, &(0x7f00000003c0)=""/212, &(0x7f0000002680), 0xf}, 0x58)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r6])
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r11 = syz_open_pts(r10, 0x141601)
fcntl$setstatus(r11, 0x4, 0x102800)
write(r11, &(0x7f0000000000)="d5", 0xfffffedf)
write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r7, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x9, 0x0, 0x0, 0x80, 0x80000001}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009312000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8950000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x24, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r6, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x2, {0xc, 0x101, 0x0, {0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0xc000, 0x0, r8, r9, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000200))

1.174823119s ago: executing program 4 (id=434):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'L+', 0x8000}, 0x16, 0x0)

1.136235572s ago: executing program 4 (id=435):
r0 = fsopen(&(0x7f0000000000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @p_u32=0x0}})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4, "7526aeb5a32c7b9ca1fa07550500000000000000e04200"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0xf, "0219b2ba6812aa90f9ef8d370d2c48e5a7d601c142f562222aee83d86c8e585a"})
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x29)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x0)
fcntl$notify(r3, 0x402, 0x21)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x48980, 0xc3) (async)
open$dir(&(0x7f0000000100)='./file0\x00', 0x48980, 0xc3)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) (async)
r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r6, 0x2000009)
setresuid(0x0, 0xee00, 0x0) (async)
setresuid(0x0, 0xee00, 0x0)
sendfile(r5, r6, 0x0, 0x7ffff000)

1.037897081s ago: executing program 4 (id=436):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0xbd7e3000)
clock_gettime(0x0, &(0x7f0000000340)={<r0=>0x0, <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
timerfd_settime(r2, 0x2, &(0x7f0000000240), &(0x7f0000000580))
futex(0x0, 0x100, 0x2, &(0x7f00000017c0)={r0, r1+10000000}, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed40102030109022400010000000009040002"], 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
r7 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r8})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x713, 0x0, 0xfffffffd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x4, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x44000)
r10 = socket(0xa, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x4000084)
ioctl(r10, 0x8916, &(0x7f0000000000))
ioctl(r10, 0x8936, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01080004000000fbbb000b000000080003801e8626c726bcd1df53524d0897cef7bf880c13a7a43f550300000000000000bd7e9213bbb8372fef97a42217c111cfd7fc831ebe818f66acd969c24c5ee950dbbaf0e40dcb58d6ce4d3a4b7f9c232686ca0d5676f646a6c30000000000", @ANYRES32=r11, @ANYBLOB="28005080140001004abee33957edf8aaae14574df400000005000200020000000800030009ac0f00"], 0x44}}, 0x0)
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x2040, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x5f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0xb0, {{0x9, 0x24, 0x6, 0x0, 0x0, '\x00rH['}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x1ffe0, 0x6, 0x5bd, 0x3}, [@obex={0x5, 0x24, 0x15, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0xf61aab228b65297c, 0x4, 0x3, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x3, 0xd9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0xdb, 0xa7}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x40, 0x0, 0x0, 0x40, 0xd}, 0x10d, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x412}}]})
write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x9)
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)

786.557588ms ago: executing program 0 (id=437):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
write$vga_arbiter(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='trylock i'], 0xf)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, 0x0, 0x0)
r1 = socket(0x15, 0x5, 0x0)
connect$l2tp6(r1, &(0x7f0000001100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x20)
getsockname$l2tp6(r1, 0x0, &(0x7f0000000100))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400008085d0c71ff3fe1e54c26701f205bfb0b947acbadfeea107ce30942d09a17a17028c763944cc497aaa0b049cdb78868b82ff7e2618b34b6d62acfcc8c79132c3b3d82806525dcd00af2bb08cd3da3e78770abe446d4f1b9ab5696fdc8fe98fd9a60e41cd78a41fc02992fe038481e0538027057fd4d1bcd027dfe676a80e4e7f6a9f1d9ba16a5b71012bf19ee95cc1f1b6e7863c95cbf22af31ffc16e8ca4e6ca928bc03c44ca317c2a31a1dc0d0fde106c799e1a49c1a65ce", @ANYRES16=r3, @ANYBLOB="010308000000fedbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4040)
r4 = gettid()
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x151702, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04000418"], 0x7)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140))
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="740000000001010400000000000000000700000024000180140001800800c7d69a00a65124930200e00000010c0002800500010000000000240000000000080002007f0000010c00028005000100000000000800074000000001080003400000100e0800034000000002"], 0x74}}, 0x0)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f7475fcffffff00000000000005001800010000000e52eda2db3a7395b04b03c06a0aa85990e28a9a7a63fa4d888065c0594189fa15a7f2d3309b9cb88e4c108d8471a53e787402fce9cc7945d96b16afe6ca53a773b6d8cd83b3b01b76ba758dc0a1d88af8522304e2d22fc6020e471a081535af827443d8eba0cdd3e28f1036e0ad505dd856e5df39faa6a66d93823034ade1d14a3771f2ff86ed0e3a0a56a17cd65b3cce67d2e2de0874503bc31280fb1821"], 0x34}}, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x711a03, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)

786.22194ms ago: executing program 2 (id=438):
r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x68, {0x2, 0x4e24, @loopback}, 'syzkaller0\x00'})
read$FUSE(r1, &(0x7f0000000f00)={0x2020, 0x0, <r3=>0x0, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_STATX(r1, &(0x7f0000002f40)={0x130, 0x0, r3, {0xffffffffffffffff, 0x80000333, 0x0, '\x00', {0x10, 0x800, 0x5, 0x7fff, 0x0, r4, 0x4000, '\x00', 0x3, 0x200000009, 0x9, 0x101, {0xffffffffffff8009, 0x5}, {0x8, 0x4}, {0x1, 0x9}, {0xa, 0x6}, 0x9, 0xdc44, 0xbcf, 0x1}}}, 0x130)
ftruncate(r0, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x2010, r0, 0xffffe000)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e21, @private=0xa010101}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
lseek(r0, 0x0, 0x4)

678.135309ms ago: executing program 2 (id=439):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x37, 0x800000000004, @thr={&(0x7f00000001c0)="0edcac55652b6ed7167ee066a97d2d690cce09e1d75bc8c914099d52d1333265ade756c88d3e425a7d91d6e0a68eb50ee0b0f636c5f91d2645328cb45fb0ad5f35085e691967aa4dfae8517bcca0e6d597706ce50fe7065f38b0101dcb243c81b497908ab1a21e821d650016a77b3f6e6fc5ec633371", &(0x7f0000000240)="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"}}, &(0x7f0000bbdffc))
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x40, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r2, 0xc0506107, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

676.434883ms ago: executing program 2 (id=440):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000340)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x200, 0x14, 0x400, 0x70bd2b, 0x25dfdbfe, {0x6, 0xf8}, [@INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "810948ff01f514ec8d00bab74daa18c6b7c6791bd416f6d4fcde2ed4d74a23b6b4d6fe418c75eee675a382fdde1a6d662e3e1d8fe0d51be9b9cfb4a3a9895a1efe46c1a7bf9466e425e849ec3dafee6eb8844d6a81d641829d162c146a8766fbaa4becf3420bf54188fcc995a5853da8e8b641bf05cd342f387329433740e82c2d6d7b12fce2cd525245de3d27848a83f0c2aa7b76f0fc7f68dcce366747c7fab4a2f4fe64ac416c17c59171106e99e0894604e55f78bd3c9a"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "7d7f16da6538bcb76e8666a6e94c11d2476e191e11ab9ce846b0e0e68657887446c33068a7634d61cd9ca2de20"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "8316c9b946ce5d1e0f7fd5b5ef8942afa3ec3b29105dfc0c258c6c5e1e698056be5897c305869d27248a574fa370647b2c7ab28a9f44f76d8e4fc17c853f26d9e605e0d7f40cb481c8e51c626121465ec4d97fff3b27782a7ba1999f76728df1286c9dd5b9ef2b504bdf9c8217c5b719384f2efa015fbaf612ab1e513ffb007c7233c070f02f0e9f1de2ae86fec307f5160e46761ebb8162ea08a54205733fafd0fd4ea89533005fa656de9d4578b491ce1ceb2ef392d047035fa083ef2c0bad4518eb926017be18ecc770e2a4fe1bfd59e17e054bfc509dc3dd736b6beca06d6b13ae5a595374d56cf7d1b30ecd4c442b86"}]}, 0x200}, 0x1, 0x0, 0x0, 0x91}, 0x8800) (async)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x70bd25, 0x25dfdbfd, {0x0, 0x8, 0x0, 0xfc, {0x0, 0x7ffd}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x880)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x12, 0x300, 0x70bd2b, 0x25dfdbfe, {0x21, 0x2, 0x5, 0x1, {0x4e21, 0x4e20, [0x10001, 0x8, 0x1, 0x200], [0x3, 0x1, 0x9, 0x8], 0x0, [0x1000, 0xffff]}, 0x5, 0x7fff}}, 0x4c}, 0x1, 0x0, 0x0, 0x20040898}, 0x80) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x101002, 0x0) (async)
r1 = socket(0x2, 0x3, 0x4) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, &(0x7f0000001680))
getsockopt(r1, 0xff, 0x100000000000001, 0x0, 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x1042, &(0x7f0000000180)='&.{\x00\xa2\xf9\"\xd0xK\xeeun\xc2\xb6\x96v\x9bb\xf5\x15yK\x98=\x89\xfe\xb5\xd0LX\x19\xc7\x91\xbbh\x1b)Y\xfad>\xa7o\xb8\x05\xe7\x98<\x8c\x93\x91\x91n\xb0\x84)\xd5\xa3\x80\xdb\x8fm\xd9\x9fv.<\xe2\xce\x0e\xa0\xba\xcf.\x94\xf5\x90c \x9f(\x8f\xc9\x80)b\xc9\x91<\xee8\xd1\xb0\xa1\xfa:Q\x04L\xb7\xe96\x97\a\xdd\xc3\xc0\xf2A\xe8\xcd\x02\xa9\x98\xfe8xe\xcc3\xd2\x8eq\xab\xec\xf5\xf5\xed\xb9\xf1\x89\xa7[\xd8;\xe5\rX1vo1\xf5b\xdd\xf6\x84E[m\xc4\x93dSe{\x18\xb5\x11\x1a\xa4I`\x17u\x97\x9f\x97\xc1\xf6\xf3\x8a\xc6\x9e\x0f\xcb\x01\x183\xd0H\xc2\b\xc2\x05\xdc.D/\xc7\xd3\x9d\x8a\xf06\xf2\xee\x12\xe1\x17\x1f\x00\x00\x00\x00c\x96\xb0Dg\xd7Ha\xb3\x02\xc3x+\x1e7Y\xfb~') (async)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x5, 0x4000000) (async)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x3000)=nil)

630.817996ms ago: executing program 2 (id=441):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000314230c2abd7000ffdbdf250900020073797a3100000000080041007369770014003300766972745f77696669300000000000000900020073797a31000000000800410073697700140002"], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = accept4(r1, &(0x7f0000000700)=@rc={0x1f, @none}, &(0x7f0000000300)=0x80, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x3)
r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10)
ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000180)={0x0, 0xfffffffffffffe98})
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x280800, 0xb5c6365e72f6c7eb)
recvmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/3, 0x3}, {&(0x7f0000000580)=""/62, 0x3e}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/68, 0x44}], 0x7}, 0x2002)
r6 = syz_open_dev$video(&(0x7f0000000780), 0x8000000075aeaeb5, 0x0)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000200)={0xa, @win={{0x3, 0xff, 0x9, 0x6}, 0x8, 0x20000, 0x0, 0x80000002, 0x0, 0x9}})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
write$uinput_user_dev(r9, &(0x7f0000000c80)={'syz0\x00', {0x3, 0x2, 0xeb3, 0x6}, 0x2f, [0xdc, 0x7, 0x4000000, 0x2, 0x3, 0x8, 0x18, 0x3, 0x4, 0x1c5, 0x20000000, 0x5, 0x8000, 0xfffffffb, 0xffff, 0x3, 0x7f, 0x8, 0x101, 0x2, 0x3, 0x3ff, 0x4, 0xff, 0x5, 0x7210000, 0xc2a, 0x3, 0x2, 0x8, 0xe9a, 0xe, 0x2, 0x4, 0x7, 0x1, 0x8, 0x4, 0x5, 0x9, 0xf, 0x800, 0x9, 0x54, 0x1, 0xa, 0x80000000, 0xc7ff, 0x1, 0x3, 0x400, 0x9, 0x3, 0x7fffffff, 0x2, 0x3, 0x1000, 0x6, 0x3, 0x1, 0x1, 0x200, 0xe, 0x1], [0x6, 0x9, 0x2, 0x3, 0x2, 0x5, 0x8e63, 0x7, 0x0, 0xfffffffe, 0x578, 0x4, 0x6, 0x2, 0x40, 0x9, 0x8, 0x5f, 0x2, 0xfff, 0xffff19c9, 0x81, 0x3, 0x800, 0x3, 0x0, 0x2, 0x7, 0xf4, 0x9, 0x9e, 0x254, 0x6, 0x1, 0x8001, 0x5, 0x62, 0xe, 0x7fffffff, 0x2a9b, 0x7fffffff, 0x7, 0x0, 0x9, 0x0, 0x502, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x3, 0x2, 0x9, 0x8f6, 0x100, 0x5, 0x5, 0x7, 0x101, 0x8, 0x8, 0x81], [0x5, 0x9, 0x3, 0x10, 0x7fffffff, 0x2, 0x3, 0x4, 0xfffffe01, 0x2, 0x41, 0x5, 0xf, 0xe, 0x9, 0x8a, 0x5, 0x4, 0x7fffffff, 0x9, 0x80000000, 0x7fff, 0x2, 0xaa0, 0x5a, 0x80, 0x4, 0x1, 0x0, 0xffffffff, 0x400, 0x6, 0x1d, 0x80000001, 0x4, 0x4, 0x6, 0xffff, 0xba3a, 0x4, 0x81, 0x1, 0x2, 0x5f0b, 0xa1, 0x4, 0x7, 0x6, 0x1000, 0x6, 0x800, 0x2, 0x0, 0x0, 0x7, 0x8, 0x6, 0x3, 0x3, 0x9, 0x1, 0x73, 0x4180000, 0x8], [0x2, 0xd, 0x9, 0x200, 0x7, 0xdb8, 0x4, 0x9, 0x1000, 0x80000001, 0x6, 0x4, 0xfffffff9, 0x8001, 0x2, 0x4, 0x7, 0xffffff15, 0x0, 0x9, 0x8, 0xfffffffd, 0x0, 0x9, 0x1, 0x7, 0x8, 0x6, 0x0, 0xffff45b4, 0x3, 0x0, 0x6, 0x9, 0x1771e9ce, 0x8, 0x8, 0x9, 0xa, 0x8, 0x71a, 0x7f, 0x8, 0x3, 0xffff8000, 0xffff, 0x8, 0x0, 0x7fff, 0x3, 0x7, 0x7, 0x80000001, 0x5, 0x6, 0x8, 0x80000000, 0x5, 0x9, 0xffff, 0xe574, 0x5a5, 0x9a01, 0x9]}, 0x45c)
r10 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1f, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r10, 0xc0505510, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_xfrm(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES64=r2, @ANYRESHEX=r8, @ANYRES64=r8, @ANYBLOB="00000000000000000000000000000001000004d42b000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001c96000000000000000480001"], 0x1dc}}, 0x0)

572.556929ms ago: executing program 2 (id=442):
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)="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", 0x2ed}, {&(0x7f0000000600)="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", 0x200}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01e7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc567", 0x9e}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a4", 0x11}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b", 0x7}], 0x1}, 0x0)
r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040))
r3 = syz_open_dev$swradio(&(0x7f00000003c0), 0x0, 0x2)
r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
read(r4, &(0x7f0000000180)=""/19, 0x13)
ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0x7fff)
sendto(r0, &(0x7f00000000c0)="29a040e641b4095c04c18eaf3d16886c02a34551eaf46686ead2cc7fd43f13a497d19179f94d013c144475849ec45742ae35729e65c9303475d4ded0a6d54348ff18184aeabe412025ca16a86c1698817838739dc5dae42487578ad610d4ec6900783071e1944fbd0987b727a5bf269b278566bc4b2f54f8927525d7e265107896bcb82a7a9e28c07b3ef9bf98e45cae9e8c6c701f5ee91c0ffccb75ce5009efe0bb62fe74d6f24a9988eeb6986220995b35510e27", 0xb5, 0x8084, 0x0, 0x0)

470.287104ms ago: executing program 4 (id=443):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (rerun: 32)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x100000000000000c, 0x0, 0x0, 0xfffffffc, 0x40, 0x0, 0x40, 0x68c2a8f07c499e24})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000001040)={0x24, 0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "a5c10c69"}]}}, 0x0}, 0x0)

0s ago: executing program 2 (id=445):
socket$xdp(0x2c, 0x3, 0x0) (async)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c) (async)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x18, r2}, 0x10)
ppoll(&(0x7f0000000000)=[{r0, 0x5002}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)={r4, 0x101, 0x12cd}) (async)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)={r4, 0x101, 0x12cd})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064d0, &(0x7f0000000140)={0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001"], 0x34}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60b5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5fb2, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) (async)
r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r9, 0x0, 0x0)
syz_usb_control_io$lan78xx(r9, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x20, 0x1, 0x6, "30e207f50a18"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r9, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x20, 0x1, 0x6, "30e207f50a18"}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='cpuacct'}, {@subsystem='cpuset'}, {@subsystem='memory'}, {@xattr}]})
syz_usb_control_io$hid(r8, &(0x7f0000000200)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB=' \r~'], 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r8, &(0x7f0000000200)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB=' \r~'], 0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

es in process `syz.2.137'.
[  107.113290][ T5909] usb 4-1: config 127 has 1 interface, different from the descriptor's value: 2
[  107.132633][ T5909] usb 4-1: config 127 has no interface number 0
[  107.139502][ T5909] usb 4-1: config 127 interface 171 has no altsetting 0
[  107.149144][ T5909] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  107.152259][ T6155] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  107.159294][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.179884][ T5951] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  107.189205][ T5909] usb 4-1: Product: syz
[  107.189781][ T6155] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  107.196110][ T5909] usb 4-1: Manufacturer: syz
[  107.208116][ T5909] usb 4-1: SerialNumber: syz
[  107.215165][ T5951] usb 1-1: device descriptor read/8, error -71
[  107.323515][ T5951] usb usb1-port1: unable to enumerate USB device
[  107.433845][ T6409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.443002][ T6409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.462853][ T5909] usb 4-1: USB disconnect, device number 21
[  107.472722][ T6155] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  107.540848][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  107.548806][ T5917] usb 2-1: USB disconnect, device number 19
[  107.558174][ T5917] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  107.573457][ T5917] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  107.586519][ T5917] quatech2 2-1:0.51: device disconnected
[  107.636075][ T6155] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[  107.644326][ T6155] usb 3-1: config 0 has no interface number 0
[  107.650516][ T6155] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  107.661428][ T6155] usb 3-1: config 0 interface 214 has no altsetting 0
[  107.670362][ T6155] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f
[  107.679655][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.688773][ T6155] usb 3-1: Product: syz
[  107.693226][ T6155] usb 3-1: Manufacturer: syz
[  107.697918][ T6155] usb 3-1: SerialNumber: syz
[  107.704401][ T6155] usb 3-1: config 0 descriptor??
[  107.710656][ T6419] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  107.925928][ T6419] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  108.282262][ T5917] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  108.352211][ T5909] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[  108.435077][ T5917] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  108.444289][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.454163][ T5917] usb 4-1: config 0 descriptor??
[  108.515413][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61
[  108.523466][ T5909] usb 2-1: can't read configurations, error -61
[  108.652302][ T5909] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  108.725655][ T5917] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  108.824842][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61
[  108.832498][ T5909] usb 2-1: can't read configurations, error -61
[  108.839141][ T5909] usb usb2-port1: attempt power cycle
[  108.933480][ T5917] [drm:udl_init] *ERROR* Selecting channel failed
[  108.951533][ T5917] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  108.958694][ T5917] [drm] Initialized udl on minor 2
[  108.968426][ T5917] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  108.979687][ T5917] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  108.990461][ T5918] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  108.999182][ T5917] usb 4-1: USB disconnect, device number 22
[  109.006319][ T5918] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  109.021844][   T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  109.054369][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32
[  109.065915][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32
[  109.076936][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random
[  109.181941][ T5909] usb 2-1: new low-speed USB device number 22 using dummy_hcd
[  109.193982][   T10] usb 1-1: config 4 has an invalid interface number: 156 but max is 0
[  109.206542][   T10] usb 1-1: config 4 has no interface number 0
[  109.216575][   T10] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e
[  109.230511][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.231128][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61
[  109.238911][   T10] usb 1-1: Product: syz
[  109.248921][ T5909] usb 2-1: can't read configurations, error -61
[  109.256343][   T10] usb 1-1: Manufacturer: syz
[  109.261240][   T10] usb 1-1: SerialNumber: syz
[  109.275011][   T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state.
[  109.283948][   T10] usb 1-1: setting power ON
[  109.289775][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  109.301200][   T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  109.315848][   T10] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19)
[  109.327400][   T10] dvb_usb_cxusb 1-1:4.156: probe with driver dvb_usb_cxusb failed with error -22
[  109.381721][ T5909] usb 2-1: new low-speed USB device number 23 using dummy_hcd
[  109.405705][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61
[  109.413869][ T5909] usb 2-1: can't read configurations, error -61
[  109.421208][ T5909] usb usb2-port1: unable to enumerate USB device
[  109.469554][ T6426] netlink: 'syz.0.141': attribute type 21 has an invalid length.
[  109.481316][ T6428] netlink: 56 bytes leftover after parsing attributes in process `syz.0.141'.
[  109.490201][ T6426] netlink: 156 bytes leftover after parsing attributes in process `syz.0.141'.
[  109.490243][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'.
[  109.523788][ T6433] warning: `syz.3.142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  109.556381][ T5909] usb 1-1: USB disconnect, device number 22
[  109.629017][ T6436] netlink: 124 bytes leftover after parsing attributes in process `syz.3.142'.
[  109.951467][ T5909] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  109.959566][   T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  110.111297][ T5909] usb 1-1: Using ep0 maxpacket: 8
[  110.118250][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.129585][ T5909] usb 1-1: config 25 has an invalid interface number: 77 but max is 0
[  110.137966][ T5909] usb 1-1: config 25 has no interface number 0
[  110.145388][ T5909] usb 1-1: config 25 interface 77 has no altsetting 0
[  110.153310][   T43] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  110.162711][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.171013][   T43] usb 4-1: Product: syz
[  110.175577][   T43] usb 4-1: Manufacturer: syz
[  110.180248][   T43] usb 4-1: SerialNumber: syz
[  110.185060][ T5909] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=f2.d1
[  110.195803][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.204832][   T43] usb 4-1: config 0 descriptor??
[  110.209979][ T5909] usb 1-1: Product: syz
[  110.214252][ T5909] usb 1-1: Manufacturer: syz
[  110.220016][   T43] usb 4-1: ucan: probing device on interface #0
[  110.226395][   T43] usb 4-1: ucan: invalid EP count (0)
[  110.231842][ T5909] usb 1-1: SerialNumber: syz
[  110.237697][   T43] usb 4-1: ucan: probe failed; try to update the device firmware
[  110.428673][   T10] usb 4-1: USB disconnect, device number 23
[  110.574213][ T6440] overlayfs: missing 'lowerdir'
[  110.580712][ T6440] netlink: 52 bytes leftover after parsing attributes in process `syz.0.144'.
[  110.589795][ T6440] netlink: 52 bytes leftover after parsing attributes in process `syz.0.144'.
[  110.607095][ T5909] gspca_main: sunplus-2.14.0 probing 046d:0960
[  110.614070][ T5909] gspca_sunplus: reg_w_riv err -71
[  110.619310][ T5909] sunplus 1-1:25.77: probe with driver sunplus failed with error -71
[  110.629719][ T5909] usb 1-1: USB disconnect, device number 23
[  110.918134][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32
[  110.929657][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32
[  111.142943][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.164839][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.181703][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  111.217097][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0040: -71
[  111.220728][   T43] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  111.232284][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  111.248918][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  111.260345][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001e: -71
[  111.274635][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x001a: -71
[  111.286494][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x001c: -71
[  111.297867][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001a: -71
[  111.309188][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001c: -71
[  111.322654][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  111.334603][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  111.345905][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  111.357342][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71
[  111.370887][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  111.382334][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  111.393793][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  111.403158][   T43] usb 4-1: config 0 has an invalid interface number: 29 but max is 0
[  111.405827][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  111.414303][   T43] usb 4-1: config 0 has no interface number 0
[  111.424133][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71
[  111.430280][   T43] usb 4-1: config 0 interface 29 has no altsetting 0
[  111.441153][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  111.459070][ T5909] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  111.460342][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  111.480466][   T43] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  111.481751][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  111.500746][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.500769][   T43] usb 4-1: Product: syz
[  111.500782][   T43] usb 4-1: Manufacturer: syz
[  111.500794][   T43] usb 4-1: SerialNumber: syz
[  111.503592][   T43] usb 4-1: config 0 descriptor??
[  111.509938][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  111.543464][ T5918] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  111.553010][ T6155] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  111.575678][ T6155] ax88179_178a 3-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 6a:87:d2:2b:00:d9
[  111.594873][ T6155] usb 3-1: USB disconnect, device number 21
[  111.602757][ T6155] ax88179_178a 3-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter
[  111.620591][ T5909] usb 1-1: Using ep0 maxpacket: 32
[  111.630264][ T5909] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  111.647671][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.659322][ T5909] usb 1-1: config 0 descriptor??
[  111.671903][ T5909] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  111.680605][ T5918] usb 2-1: device descriptor read/64, error -71
[  111.734335][   T43] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v99.11.0 (2 channels)
[  111.920668][ T5918] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  111.935566][   T43] peak_usb 4-1:0.29 can0: sending command failure: -22
[  111.938272][ T6461] netlink: 56 bytes leftover after parsing attributes in process `syz.2.151'.
[  111.942810][   T43] peak_usb 4-1:0.29 can0: sending command failure: -22
[  111.959157][   T43] peak_usb 4-1:0.29 can0: sending command failure: -22
[  112.030642][   T43] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22
[  112.062665][ T5918] usb 2-1: device descriptor read/64, error -71
[  112.142033][   T43] usb 4-1: USB disconnect, device number 24
[  112.170732][ T5918] usb usb2-port1: attempt power cycle
[  112.280301][ T5917] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  112.441300][ T5917] usb 3-1: Using ep0 maxpacket: 8
[  112.448048][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  112.460222][ T5917] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  112.469374][ T5917] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  112.477630][ T5917] usb 3-1: Product: syz
[  112.481938][ T5917] usb 3-1: Manufacturer: syz
[  112.486564][ T5917] usb 3-1: SerialNumber: syz
[  112.510162][ T5918] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  112.530724][ T5918] usb 2-1: device descriptor read/8, error -71
[  112.774958][ T5918] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  112.802274][ T5918] usb 2-1: device descriptor read/8, error -71
[  112.815009][ T5917] usb 3-1: palm_os_3_probe - error -110 getting connection information
[  112.826434][ T5917] visor 3-1:1.0: probe with driver visor failed with error -110
[  112.930154][ T5918] usb usb2-port1: unable to enumerate USB device
[  113.050010][ T5951] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  113.212572][ T5951] usb 4-1: Using ep0 maxpacket: 8
[  113.220495][ T5951] usb 4-1: unable to get BOS descriptor or descriptor too short
[  113.229344][ T5951] usb 4-1: config 9 has an invalid interface number: 33 but max is 0
[  113.237528][ T5951] usb 4-1: config 9 has no interface number 0
[  113.243725][ T5951] usb 4-1: config 9 interface 33 has no altsetting 0
[  113.251164][ T5951] usb 4-1: language id specifier not provided by device, defaulting to English
[  113.264370][ T5951] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=c5.a8
[  113.273789][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.282022][ T5951] usb 4-1: Product: syz
[  113.286237][ T5951] usb 4-1: SerialNumber: syz
[  113.494029][ T6452] kAFS: No cell specified
[  113.497910][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.507043][ T5909] gspca_vc032x: reg_r err -71
[  113.507443][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.511859][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.531160][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.535048][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.536572][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.536586][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.547556][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.550685][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.560512][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.566675][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.571767][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.577392][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.586150][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.590235][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.590250][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.590259][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.590267][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.590299][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.590308][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.596485][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.604054][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.621821][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.627969][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.634222][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.636703][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.677612][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.683666][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  113.692974][ T5909] gspca_vc032x: Unknown sensor...
[  113.700500][ T5951] usb 4-1: USB disconnect, device number 25
[  113.707100][ T5909] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  113.739283][ T5909] usb 1-1: USB disconnect, device number 24
[  114.070836][ T6478] netlink: 'syz.0.156': attribute type 21 has an invalid length.
[  114.078614][ T6478] netlink: 128 bytes leftover after parsing attributes in process `syz.0.156'.
[  114.087833][ T6478] netlink: 'syz.0.156': attribute type 4 has an invalid length.
[  114.095517][ T6478] netlink: 'syz.0.156': attribute type 3 has an invalid length.
[  114.103236][ T6478] netlink: 3 bytes leftover after parsing attributes in process `syz.0.156'.
[  114.257389][ T6483] netlink: 'syz.0.159': attribute type 21 has an invalid length.
[  114.267898][ T6483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.159'.
[  114.589059][ T5917] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  114.667445][ T6503] netlink: 'syz.3.166': attribute type 10 has an invalid length.
[  114.678468][ T6503] __nla_validate_parse: 1 callbacks suppressed
[  114.678484][ T6503] netlink: 2 bytes leftover after parsing attributes in process `syz.3.166'.
[  114.693906][ T6503] bond0: entered promiscuous mode
[  114.699933][ T6503] bond_slave_0: entered promiscuous mode
[  114.705923][ T6503] bond_slave_1: entered promiscuous mode
[  114.712152][ T6503] bridge0: port 3(bond0) entered blocking state
[  114.721746][ T6503] bridge0: port 3(bond0) entered disabled state
[  114.728241][ T6503] bond0: entered allmulticast mode
[  114.733684][ T6503] bond_slave_0: entered allmulticast mode
[  114.739696][ T6503] bond_slave_1: entered allmulticast mode
[  114.751257][ T6503] bridge0: port 3(bond0) entered blocking state
[  114.757846][ T6503] bridge0: port 3(bond0) entered forwarding state
[  114.769064][ T5917] usb 2-1: Using ep0 maxpacket: 32
[  114.792284][ T5917] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  114.801695][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.816434][ T5917] usb 2-1: Product: syz
[  114.825736][ T5917] usb 2-1: Manufacturer: syz
[  114.835201][ T5917] usb 2-1: SerialNumber: syz
[  114.859326][ T5917] usb 2-1: config 0 descriptor??
[  114.870903][ T5917] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  114.954077][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'.
[  115.068489][ T5918] usb 3-1: USB disconnect, device number 22
[  115.079766][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.107408][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.388807][   T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  115.473909][ T5918] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  115.538593][   T10] usb 1-1: Using ep0 maxpacket: 16
[  115.546197][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.577468][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.598188][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  115.617103][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  115.636882][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.650674][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.661030][   T10] usb 1-1: config 0 descriptor??
[  115.667864][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  115.687469][ T5918] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  115.696705][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.708289][ T5918] usb 3-1: config 0 descriptor??
[  115.944909][ T5917] gspca_ov534_9: reg_w failed -71
[  116.089468][   T10] HID 045e:07da: Invalid code 65791 type 1
[  116.099187][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input9
[  116.121527][   T10] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  116.144181][ T5918] usbhid 3-1:0.0: can't add hid device: -71
[  116.150388][ T5918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  116.166262][ T5918] usb 3-1: USB disconnect, device number 23
[  116.258944][ T5917] gspca_ov534_9: Unknown sensor 0000
[  116.259008][ T5917] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  116.277093][ T5917] usb 2-1: USB disconnect, device number 28
[  116.292076][ T5951] usb 1-1: USB disconnect, device number 25
[  116.569585][   T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  116.728618][   T10] usb 4-1: Using ep0 maxpacket: 16
[  116.736168][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  116.744270][   T10] usb 4-1: can't read configurations, error -61
[  116.778054][ T5917] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  116.878232][   T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  116.933582][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.943944][ T5917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.960853][ T5917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  116.972711][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.981456][ T5917] usb 2-1: Product: syz
[  116.986094][ T5917] usb 2-1: Manufacturer: syz
[  116.991614][ T5917] usb 2-1: SerialNumber: syz
[  117.028300][   T10] usb 4-1: Using ep0 maxpacket: 16
[  117.037292][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  117.045652][   T10] usb 4-1: can't read configurations, error -61
[  117.052584][   T10] usb usb4-port1: attempt power cycle
[  117.267703][ T5909] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  117.407648][   T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  117.417649][ T5909] usb 1-1: Using ep0 maxpacket: 32
[  117.424551][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.428412][   T10] usb 4-1: Using ep0 maxpacket: 16
[  117.435664][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.451849][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'.
[  117.460973][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  117.462783][ T5909] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  117.469493][   T10] usb 4-1: can't read configurations, error -61
[  117.480628][ T6547] netlink: 'syz.1.182': attribute type 3 has an invalid length.
[  117.492919][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.493600][ T5917] usb 2-1: 0:2 : does not exist
[  117.504168][ T5909] usb 1-1: config 0 descriptor??
[  117.627582][   T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  117.648330][   T10] usb 4-1: Using ep0 maxpacket: 16
[  117.656716][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  117.664900][   T10] usb 4-1: can't read configurations, error -61
[  117.672211][   T10] usb usb4-port1: unable to enumerate USB device
[  117.703499][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.716827][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.726220][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.735282][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.744584][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.753472][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.922616][ T5909] elecom 0003:056E:010D.0004: unknown main item tag 0x7
[  117.930956][ T5951] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  117.942110][ T5909] elecom 0003:056E:010D.0004: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.0-1/input0
[  117.967209][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.983896][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.097594][ T5951] usb 3-1: Using ep0 maxpacket: 16
[  118.106921][ T5951] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  118.116102][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.123738][ T5917] usb 2-1: USB disconnect, device number 29
[  118.132324][ T5951] usb 3-1: Product: syz
[  118.137319][ T5951] usb 3-1: Manufacturer: syz
[  118.147254][ T5951] usb 3-1: SerialNumber: syz
[  118.175512][ T5951] usb 3-1: config 0 descriptor??
[  118.198065][ T5951] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  118.557498][ T5917] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  118.626748][ T5951] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71
[  118.645373][ T5951] usb 3-1: USB disconnect, device number 24
[  118.709594][ T5917] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  118.718468][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.729685][ T5917] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  118.740237][ T5917] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  118.748310][ T5917] usb 2-1: Manufacturer: syz
[  118.754774][ T5917] usb 2-1: config 0 descriptor??
[  118.810317][ T5917] rc_core: IR keymap rc-hauppauge not found
[  118.816527][ T5917] Registered IR keymap rc-empty
[  118.823311][ T5917] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  118.834927][ T5917] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10
[  118.961424][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  119.034158][ T6585] netlink: 44 bytes leftover after parsing attributes in process `syz.1.192'.
[  119.034215][ T6585] netlink: 43 bytes leftover after parsing attributes in process `syz.1.192'.
[  119.034229][ T6585] netlink: 'syz.1.192': attribute type 5 has an invalid length.
[  119.034291][ T6585] netlink: 43 bytes leftover after parsing attributes in process `syz.1.192'.
[  119.037818][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  119.038230][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.039795][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.172357][ T5917] usb 2-1: USB disconnect, device number 30
[  119.233047][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.259869][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.403816][ T5872] Bluetooth: hci1: link tx timeout
[  119.410039][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.576673][ T5917] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  119.626542][ T5951] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  119.726587][   T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  119.739043][ T5917] usb 2-1: not running at top speed; connect to a high speed hub
[  119.747884][ T5917] usb 2-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  119.762547][ T5917] usb 2-1: config 1 interface 0 has no altsetting 0
[  119.771155][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.40
[  119.780259][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.786440][ T5951] usb 3-1: Using ep0 maxpacket: 32
[  119.788272][ T5917] usb 2-1: Product: syz
[  119.795669][ T5951] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  119.798087][ T5917] usb 2-1: Manufacturer: 랹糂�腑鴜꽮滻ꀲᓶ��隋㺠Ţ䃖�浆�
[  119.808205][ T5951] usb 3-1: config 0 has no interface number 0
[  119.816205][ T5917] usb 2-1: SerialNumber: syz
[  119.823117][ T5951] usb 3-1: config 0 interface 12 has no altsetting 0
[  119.839744][ T5951] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  119.849890][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.858309][ T5951] usb 3-1: Product: syz
[  119.864418][ T5951] usb 3-1: Manufacturer: syz
[  119.869421][ T5951] usb 3-1: SerialNumber: syz
[  119.877697][ T5951] usb 3-1: config 0 descriptor??
[  119.886910][   T10] usb 4-1: Using ep0 maxpacket: 16
[  119.893805][   T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  119.902568][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.912701][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  119.924215][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  119.933349][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.941464][   T10] usb 4-1: Product: syz
[  119.945650][   T10] usb 4-1: Manufacturer: syz
[  119.950432][   T10] usb 4-1: SerialNumber: syz
[  120.031254][ T5918] usb 1-1: USB disconnect, device number 26
[  120.123047][ T6601] Invalid source name
[  120.181818][ T6603] netlink: 'syz.0.200': attribute type 10 has an invalid length.
[  120.190851][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.199155][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.214535][ T6603] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.221784][ T6603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.229408][ T6603] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.236656][ T6603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.240060][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'.
[  120.252372][ T6603] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  120.262923][ T6604] bridge_slave_1: left allmulticast mode
[  120.268857][ T6604] bridge_slave_1: left promiscuous mode
[  120.275463][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.289186][ T6604] bridge_slave_0: left allmulticast mode
[  120.295212][ T6604] bridge_slave_0: left promiscuous mode
[  120.304034][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.317121][ T5917] usbhid 2-1:1.0: can't add hid device: -71
[  120.323935][ T5917] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  120.340813][ T5917] usb 2-1: USB disconnect, device number 31
[  120.342633][ T6604] bond0: (slave bridge0): Releasing backup interface
[  120.363546][   T10] usb 4-1: 0:2 : does not exist
[  120.498638][ T5951] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  120.507487][ T5951] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  120.514910][ T5951] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  120.522619][ T5951] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  120.536149][ T5918] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  120.539036][ T5951] usb 3-1: USB disconnect, device number 25
[  120.698704][ T5918] usb 1-1: unable to get BOS descriptor or descriptor too short
[  120.707026][ T5918] usb 1-1: not running at top speed; connect to a high speed hub
[  120.715827][ T5918] usb 1-1: config 13 has an invalid interface number: 104 but max is 0
[  120.724870][ T5918] usb 1-1: config 13 has no interface number 0
[  120.731470][ T5918] usb 1-1: config 13 interface 104 has no altsetting 0
[  120.741847][ T5918] usb 1-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=64.37
[  120.750975][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.759064][ T5918] usb 1-1: Product: syz
[  120.763224][ T5918] usb 1-1: Manufacturer: syz
[  120.767943][ T5918] usb 1-1: SerialNumber: syz
[  120.865464][ T6607] netlink: 52 bytes leftover after parsing attributes in process `syz.1.201'.
[  120.985419][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.997409][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.006313][ T6599] netlink: 'syz.3.198': attribute type 5 has an invalid length.
[  121.010953][ T5918] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f
[  121.026679][ T5918] gspca_sn9c20x: Write register 1000 failed -71
[  121.033732][ T5918] gspca_sn9c20x: Device initialization failed
[  121.040523][ T5918] gspca_sn9c20x 1-1:13.104: probe with driver gspca_sn9c20x failed with error -71
[  121.059338][ T5918] usb 1-1: USB disconnect, device number 27
[  121.115120][ T6612] mmap: syz.2.203 (6612) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  121.174789][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'.
[  121.185867][ T5951] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  121.335693][ T5951] usb 2-1: device descriptor read/64, error -71
[  121.435674][ T5917] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  121.437076][ T5872] Bluetooth: hci1: command 0x0406 tx timeout
[  121.585577][ T5951] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  121.587693][ T5917] usb 3-1: device descriptor read/64, error -71
[  121.699830][   T30] audit: type=1326 audit(1758846971.687:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.0.205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43a3d8eec9 code=0x0
[  121.722903][ T5951] usb 2-1: device descriptor read/64, error -71
[  121.836633][ T5951] usb usb2-port1: attempt power cycle
[  121.887263][ T5917] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  121.899105][ T6624] syzkaller1: entered promiscuous mode
[  121.904609][ T6624] syzkaller1: entered allmulticast mode
[  122.035373][ T5917] usb 3-1: device descriptor read/64, error -71
[  122.057754][   T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  122.145686][ T5917] usb usb3-port1: attempt power cycle
[  122.185336][ T5951] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  122.225264][   T24] usb 1-1: Using ep0 maxpacket: 8
[  122.231330][ T5951] usb 2-1: device descriptor read/8, error -71
[  122.241223][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  122.257167][   T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  122.267175][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.275502][   T24] usb 1-1: Product: syz
[  122.279769][   T24] usb 1-1: Manufacturer: syz
[  122.284418][   T24] usb 1-1: SerialNumber: syz
[  122.296012][   T24] usb 1-1: config 0 descriptor??
[  122.307077][   T24] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  122.378531][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.391151][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.485124][ T5951] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  122.495216][ T5917] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  122.510644][   T24] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  122.515966][ T5917] usb 3-1: device descriptor read/8, error -71
[  122.519482][ T5951] usb 2-1: device descriptor read/8, error -71
[  122.536441][   T24] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  122.580668][   T10] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1)
[  122.604907][   T10] usb 4-1: USB disconnect, device number 30
[  122.640311][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.665260][ T5951] usb usb2-port1: unable to enumerate USB device
[  122.785004][ T5917] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  122.815819][ T5917] usb 3-1: device descriptor read/8, error -71
[  122.925331][ T5917] usb usb3-port1: unable to enumerate USB device
[  123.234789][ T5951] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  123.384708][ T5951] usb 4-1: Using ep0 maxpacket: 16
[  123.393090][ T5951] usb 4-1: config 8 has an invalid interface number: 206 but max is 0
[  123.401660][ T5951] usb 4-1: config 8 has no interface number 0
[  123.407964][ T5951] usb 4-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  123.419663][ T5951] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  123.431018][ T5951] usb 4-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  123.446641][ T5951] usb 4-1: config 8 interface 206 has no altsetting 0
[  123.456118][ T5951] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  123.465239][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.473249][ T5951] usb 4-1: Product: syz
[  123.477646][ T5951] usb 4-1: Manufacturer: syz
[  123.482255][ T5951] usb 4-1: SerialNumber: syz
[  123.694009][ T5951] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected
[  123.707127][ T5951] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  123.721932][ T5951] usb 4-1: USB disconnect, device number 31
[  123.735855][ T5951] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  123.745805][ T5951] garmin_gps 4-1:8.206: device disconnected
[  123.959884][ T6640] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  123.966804][ T6640] netlink: 156 bytes leftover after parsing attributes in process `syz.1.214'.
[  124.022299][ T6641] Â: renamed from pim6reg1
[  124.172209][ T5866] Bluetooth: hci3: link tx timeout
[  124.178834][ T5866] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.228622][ T6645] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  124.238321][ T6645] overlayfs: missing 'lowerdir'
[  124.293755][ T6648] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  124.550224][ T6659] netlink: 56 bytes leftover after parsing attributes in process `syz.2.220'.
[  124.635692][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'.
[  124.662681][   T10] usb 1-1: USB disconnect, device number 28
[  124.813977][   T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  124.835673][ T6665] netlink: 830 bytes leftover after parsing attributes in process `syz.1.219'.
[  124.978600][   T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  124.988663][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.996819][   T24] usb 4-1: Product: syz
[  125.000981][   T24] usb 4-1: Manufacturer: syz
[  125.005613][   T24] usb 4-1: SerialNumber: syz
[  125.024418][ T5951] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  125.063945][   T10] usb 1-1: new low-speed USB device number 29 using dummy_hcd
[  125.173758][   T43] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  125.193896][   T10] usb 1-1: device descriptor read/64, error -71
[  125.198031][ T5951] usb 3-1: Using ep0 maxpacket: 16
[  125.207447][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.219722][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.229628][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  125.243070][ T5951] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  125.252605][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.262713][ T5951] usb 3-1: config 0 descriptor??
[  125.333714][   T43] usb 2-1: Using ep0 maxpacket: 16
[  125.340955][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.351230][   T43] usb 2-1: config 0 interface 0 has no altsetting 0
[  125.359956][   T43] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  125.369071][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.377241][   T43] usb 2-1: Product: syz
[  125.381413][   T43] usb 2-1: Manufacturer: syz
[  125.386099][   T43] usb 2-1: SerialNumber: syz
[  125.393976][   T43] usb 2-1: config 0 descriptor??
[  125.434250][   T10] usb 1-1: new low-speed USB device number 30 using dummy_hcd
[  125.476946][ T5951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  125.484287][ T5951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  125.496380][ T5951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  125.503714][ T5951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  125.511058][ T5951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  125.519004][ T5951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  125.526370][ T5951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  125.534024][ T5951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  125.541273][ T5951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  125.548814][ T5951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  125.560449][ T5951] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input11
[  125.574060][   T10] usb 1-1: device descriptor read/64, error -71
[  125.583584][ T5951] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  125.671433][ T5951] usb 3-1: USB disconnect, device number 30
[  125.684060][   T10] usb usb1-port1: attempt power cycle
[  125.807936][   T43] usb 2-1: USB disconnect, device number 36
[  125.832903][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.844326][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.023366][   T10] usb 1-1: new low-speed USB device number 31 using dummy_hcd
[  126.043802][   T10] usb 1-1: device descriptor read/8, error -71
[  126.087987][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.097199][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.127747][   T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  126.139841][   T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  126.149802][   T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  126.160560][   T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  126.172975][   T24] usb 4-1: USB disconnect, device number 32
[  126.217145][ T5872] Bluetooth: hci2: link tx timeout
[  126.222513][ T5872] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  126.233586][ T5878] Bluetooth: hci3: command 0x0406 tx timeout
[  126.234579][ T5872] Bluetooth: hci2: link tx timeout
[  126.246089][ T5872] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.305454][   T10] usb 1-1: new low-speed USB device number 32 using dummy_hcd
[  126.348405][   T10] usb 1-1: device descriptor read/8, error -71
[  126.463372][   T10] usb usb1-port1: unable to enumerate USB device
[  126.504230][ T6688] program syz.1.231 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  126.522943][ T6688] program syz.1.231 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  126.603400][ T5917] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  126.635334][ T6693] netlink: 56 bytes leftover after parsing attributes in process `syz.1.232'.
[  126.761746][ T6699] comedi comedi3: comedi_config --init_data is deprecated
[  126.770121][ T6699] comedi comedi3: comedi_config --init_data is deprecated
[  126.778673][ T5917] usb 3-1: Using ep0 maxpacket: 16
[  126.793759][ T5917] usb 3-1: unable to read config index 0 descriptor/start: -61
[  126.801515][ T5917] usb 3-1: can't read configurations, error -61
[  126.912930][ T5918] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  126.942885][ T5917] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  127.082856][ T5918] usb 2-1: Using ep0 maxpacket: 16
[  127.089402][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.100360][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.110226][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  127.124874][ T5918] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  127.134977][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.143072][ T5917] usb 3-1: Using ep0 maxpacket: 16
[  127.150857][ T5917] usb 3-1: unable to read config index 0 descriptor/start: -61
[  127.159600][ T5918] usb 2-1: config 0 descriptor??
[  127.164702][ T5917] usb 3-1: can't read configurations, error -61
[  127.171604][ T5917] usb usb3-port1: attempt power cycle
[  127.181283][ T5918] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13
[  127.203770][ T5222] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  127.215796][ T5222] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  127.224494][ T5222] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  127.237453][ T6390] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  127.246242][ T5222] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  127.255070][ T5222] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  127.265086][ T5222] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  127.379510][ T6695] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  127.388241][ T5951] usb 2-1: USB disconnect, device number 37
[  127.394274][   T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  127.532639][ T5917] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  127.552563][   T24] usb 4-1: Using ep0 maxpacket: 16
[  127.553202][ T5917] usb 3-1: Using ep0 maxpacket: 16
[  127.561723][   T24] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  127.566402][ T5917] usb 3-1: unable to read config index 0 descriptor/start: -61
[  127.572811][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.579742][ T5917] usb 3-1: can't read configurations, error -61
[  127.589578][   T24] usb 4-1: Product: syz
[  127.598054][   T24] usb 4-1: Manufacturer: syz
[  127.602697][   T24] usb 4-1: SerialNumber: syz
[  127.609144][   T24] usb 4-1: config 0 descriptor??
[  127.722547][ T5917] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  127.744957][ T5917] usb 3-1: Using ep0 maxpacket: 16
[  127.752074][ T5917] usb 3-1: unable to read config index 0 descriptor/start: -61
[  127.760825][ T5917] usb 3-1: can't read configurations, error -61
[  127.767561][ T5917] usb usb3-port1: unable to enumerate USB device
[  127.814100][ T6715] netlink: 56 bytes leftover after parsing attributes in process `syz.0.240'.
[  127.825685][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.839008][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.852567][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.863287][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.872190][   T24] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  127.902192][   T24] usb 4-1: USB disconnect, device number 33
[  127.998482][ T6721] netlink: 56 bytes leftover after parsing attributes in process `syz.0.241'.
[  128.260719][ T6732] netlink: 260 bytes leftover after parsing attributes in process `syz.1.245'.
[  128.313865][ T5866] Bluetooth: hci2: command 0x0406 tx timeout
[  128.507511][ T6741] netlink: 'syz.3.248': attribute type 10 has an invalid length.
[  128.515885][ T6741] netlink: 152 bytes leftover after parsing attributes in process `syz.3.248'.
[  128.606831][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.616501][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.643461][ T5917] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  128.802040][ T5917] usb 2-1: Using ep0 maxpacket: 16
[  128.808792][ T5917] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  128.817884][ T5917] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  128.826973][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.837267][ T5917] usb 2-1: config 0 descriptor??
[  128.842346][ T5918] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  128.923288][ T6155] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  128.981909][ T5918] usb 4-1: device descriptor read/64, error -71
[  129.082253][ T6155] usb 1-1: too many configurations: 237, using maximum allowed: 8
[  129.101363][ T6155] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  129.110543][ T6155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.118656][ T6155] usb 1-1: Product: syz
[  129.122988][ T6155] usb 1-1: Manufacturer: syz
[  129.127591][ T6155] usb 1-1: SerialNumber: syz
[  129.137840][ T6155] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  129.159852][   T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  129.222004][ T5918] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  129.351720][ T5918] usb 4-1: device descriptor read/64, error -71
[  129.456927][ T6752] netlink: 56 bytes leftover after parsing attributes in process `syz.2.252'.
[  129.472494][ T5918] usb usb4-port1: attempt power cycle
[  129.566980][   T24] usb 1-1: USB disconnect, device number 33
[  129.809801][ T6758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.811479][ T5918] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  129.818888][ T6758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.857472][ T5918] usb 4-1: device descriptor read/8, error -71
[  129.911492][ T5951] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  130.071572][ T5951] usb 3-1: Using ep0 maxpacket: 32
[  130.078712][ T5951] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  130.087259][ T5951] usb 3-1: config 0 has no interface number 0
[  130.095714][ T5951] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  130.111284][ T5918] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  130.122770][ T5951] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  130.134205][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.152119][ T5918] usb 4-1: device descriptor read/8, error -71
[  130.167432][ T5951] usb 3-1: Product: syz
[  130.181247][ T5951] usb 3-1: Manufacturer: syz
[  130.185864][ T5951] usb 3-1: SerialNumber: syz
[  130.203566][ T5951] usb 3-1: config 0 descriptor??
[  130.209021][ T5866] Bluetooth: hci0: link tx timeout
[  130.215217][ T5866] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa
[  130.225841][ T5866] Bluetooth: hci0: link tx timeout
[  130.230964][ T5866] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.241468][   T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  130.244339][ T5951] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  130.268511][ T5951] em28xx 3-1:0.132: Video interface 132 found:
[  130.392830][ T5866] Bluetooth: hci2: command 0x0406 tx timeout
[  130.508957][ T5918] usb usb4-port1: unable to enumerate USB device
[  130.525132][   T10] ath9k_htc: Failed to initialize the device
[  130.542910][   T24] usb 1-1: ath9k_htc: USB layer deinitialized
[  130.714324][ T5951] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  131.333760][ T6756] netlink: 136 bytes leftover after parsing attributes in process `syz.2.254'.
[  131.344269][ T6756] netlink: 'syz.2.254': attribute type 10 has an invalid length.
[  131.355246][ T6756] macvlan0: entered promiscuous mode
[  131.360914][ T6756] macvlan0: entered allmulticast mode
[  131.375336][ T6756] veth1_vlan: entered allmulticast mode
[  131.387535][ T6756] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  131.400101][ T5951] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  131.409811][ T5951] em28xx 3-1:0.132: failed to read eeprom (err=-5)
[  131.419978][ T5951] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  131.490834][ T5951] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  131.500805][ T5951] em28xx 3-1:0.132: analog set to bulk mode.
[  131.507763][   T24] em28xx 3-1:0.132: Registering V4L2 extension
[  131.520091][ T5951] usb 3-1: USB disconnect, device number 35
[  131.530850][ T5951] em28xx 3-1:0.132: Disconnecting em28xx
[  131.585391][   T43] usb 2-1: USB disconnect, device number 38
[  131.700525][ T5917] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  131.713728][   T24] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  131.722424][   T24] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  131.729738][   T24] em28xx 3-1:0.132: No AC97 audio processor
[  131.751315][   T24] usb 3-1: Decoder not found
[  131.755946][   T24] em28xx 3-1:0.132: failed to create media graph
[  131.770448][   T24] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  131.794756][   T24] em28xx 3-1:0.132: Remote control support is not available for this card.
[  131.810809][ T5951] em28xx 3-1:0.132: Closing input extension
[  131.840265][ T5951] em28xx 3-1:0.132: Freeing device
[  131.885153][ T5917] usb 1-1: config 0 has no interfaces?
[  131.896453][ T5917] usb 1-1: New USB device found, idVendor=19d2, idProduct=0062, bcdDevice=2d.21
[  131.936719][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.969772][ T5917] usb 1-1: config 0 descriptor??
[  132.057956][ T5878] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  132.203329][ T5951] usb 1-1: USB disconnect, device number 34
[  132.218876][ T6798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.267'.
[  132.310246][ T5878] Bluetooth: hci0: command 0x0406 tx timeout
[  132.329042][ T6801] netlink: 56 bytes leftover after parsing attributes in process `syz.1.261'.
[  132.490162][   T43] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  132.580065][ T5918] usb 4-1: new low-speed USB device number 38 using dummy_hcd
[  132.642193][   T43] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  132.651629][ T5951] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  132.659485][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.670669][   T43] usb 3-1: config 0 descriptor??
[  132.678332][   T43] cp210x 3-1:0.0: cp210x converter detected
[  132.734397][ T5918] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  132.754199][ T5918] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  132.765108][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.775365][ T5918] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  132.787246][ T5918] usb 4-1: string descriptor 0 read error: -22
[  132.794498][ T5918] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  132.804208][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.815052][ T5918] usb 4-1: config 0 descriptor??
[  132.822423][ T5918] hub 4-1:0.0: bad descriptor, ignoring hub
[  132.828465][ T5918] hub 4-1:0.0: probe with driver hub failed with error -5
[  132.830002][ T5951] usb 2-1: Using ep0 maxpacket: 16
[  132.849402][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.862169][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.873923][ T5951] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  132.878161][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  132.887641][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.894951][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.906699][ T5951] usb 2-1: config 0 descriptor??
[  132.909216][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.921166][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.930123][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.938775][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.947739][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.957092][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.966985][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.975973][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.985128][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.005213][   T43] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -121
[  133.013942][   T43] cp210x 3-1:0.0: GPIO initialisation failed: -121
[  133.019913][ T5917] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  133.031118][   T43] usb 3-1: cp210x converter now attached to ttyUSB0
[  133.045031][ T6803] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config
[  133.179816][ T5917] usb 1-1: Using ep0 maxpacket: 16
[  133.186507][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.198361][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.208457][ T5917] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  133.217643][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.228029][ T5917] usb 1-1: config 0 descriptor??
[  133.230035][ T5969] usb 4-1: USB disconnect, device number 38
[  133.317181][ T5951] hid (null): unknown global tag 0xe
[  133.328833][ T5951] razer 0003:1532:011B.0006: unknown global tag 0xe
[  133.335538][ T5951] razer 0003:1532:011B.0006: item 0 0 1 14 parsing failed
[  133.343333][ T5951] razer 0003:1532:011B.0006: probe with driver razer failed with error -22
[  133.443918][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.452882][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.462535][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.471390][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.521903][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.530668][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.539784][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.548770][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.557838][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.567244][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.578501][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.587882][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.610431][   T43] usb 2-1: USB disconnect, device number 39
[  133.699052][ T5917] usbhid 1-1:0.0: can't add hid device: -71
[  133.714425][ T5917] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  133.728454][ T5917] usb 1-1: USB disconnect, device number 35
[  133.773460][ T6819] binder: 6818:6819 unknown command 0
[  133.778984][ T6819] binder: 6818:6819 ioctl c0306201 200000000080 returned -22
[  134.007797][ T6831] netlink: 56 bytes leftover after parsing attributes in process `syz.3.277'.
[  134.400168][ T5872] Bluetooth: hci0: command 0x0406 tx timeout
[  134.429129][ T5969] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  134.478689][ T6814] orangefs_mount: mount request failed with -4
[  134.509140][ T5917] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  134.589050][ T5969] usb 4-1: Using ep0 maxpacket: 16
[  134.596516][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.609048][ T5969] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  134.624740][ T5969] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  134.636111][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.644241][ T5969] usb 4-1: Product: syz
[  134.648668][ T5969] usb 4-1: Manufacturer: syz
[  134.653483][ T5969] usb 4-1: SerialNumber: syz
[  134.661459][ T5969] usb 4-1: config 0 descriptor??
[  134.668996][ T5917] usb 1-1: Using ep0 maxpacket: 8
[  134.675940][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0
[  134.689502][ T5917] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  134.698581][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.708129][ T5917] usb 1-1: Product: syz
[  134.716493][ T5917] usb 1-1: Manufacturer: syz
[  134.721158][ T5917] usb 1-1: SerialNumber: syz
[  134.728074][ T5917] usb 1-1: config 0 descriptor??
[  134.739969][ T5917] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  134.762525][ T6846] Zero length message leads to an empty skb
[  134.884762][ T5969] usb 4-1: USB disconnect, device number 39
[  134.957346][ T5917] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  134.971177][ T5917] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  135.008890][ T6852] netlink: 56 bytes leftover after parsing attributes in process `syz.1.286'.
[  135.079810][ T5969] hid_parser_main: 5 callbacks suppressed
[  135.079832][ T5969] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  135.100681][ T5969] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  135.152393][ T5969] usb 1-1: USB disconnect, device number 36
[  135.232794][ T5917] usb 3-1: USB disconnect, device number 36
[  135.248065][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  135.269649][ T5917] cp210x 3-1:0.0: device disconnected
[  135.305990][ T6857] netlink: 'syz.2.288': attribute type 27 has an invalid length.
[  135.320794][ T6857] process 'syz.2.288' launched './file2' with NULL argv: empty string added
[  135.334476][ T6857] overlay: ./bus is not a directory
[  135.618543][ T5918] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  135.688537][ T5969] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  135.703085][ T5872] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  135.780882][ T6874] netlink: 56 bytes leftover after parsing attributes in process `syz.0.295'.
[  135.792624][ T5918] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  135.801527][ T5918] usb 2-1: config 0 has no interface number 0
[  135.811390][ T5918] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  135.820528][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.838399][ T5918] usb 2-1: Product: syz
[  135.842786][ T5918] usb 2-1: Manufacturer: syz
[  135.847403][ T5918] usb 2-1: SerialNumber: syz
[  135.862308][ T5969] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  135.863272][ T5918] usb 2-1: config 0 descriptor??
[  135.877581][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.890375][ T5969] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  135.900739][ T5969] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  135.909128][ T5969] usb 3-1: Manufacturer: syz
[  135.920998][ T5969] usb 3-1: config 0 descriptor??
[  135.977745][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.989028][   T43] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  135.993460][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.028361][ T5969] rc_core: IR keymap rc-hauppauge not found
[  136.035535][ T5969] Registered IR keymap rc-empty
[  136.043357][ T5969] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  136.055875][ T5969] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14
[  136.150413][   T43] usb 4-1: config 4 has an invalid interface number: 156 but max is 0
[  136.159172][   T43] usb 4-1: config 4 has no interface number 0
[  136.167619][   T43] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e
[  136.176816][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.185000][   T43] usb 4-1: Product: syz
[  136.189473][   T43] usb 4-1: Manufacturer: syz
[  136.194083][   T43] usb 4-1: SerialNumber: syz
[  136.198775][ T5951] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  136.217963][   T43] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state.
[  136.226991][   T43] usb 4-1: setting power ON
[  136.232505][   T43] dvb-usb: bulk message failed: -22 (2/0)
[  136.243141][   T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  136.256614][   T43] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19)
[  136.266535][   T43] dvb_usb_cxusb 4-1:4.156: probe with driver dvb_usb_cxusb failed with error -22
[  136.348276][ T5951] usb 1-1: device descriptor read/64, error -71
[  136.355166][ T6884] rc rc0: two consecutive events of type space
[  136.558277][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.567016][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.588457][ T5951] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  136.728029][ T5951] usb 1-1: device descriptor read/64, error -71
[  136.811765][   T10] usb 3-1: USB disconnect, device number 37
[  136.838347][ T5951] usb usb1-port1: attempt power cycle
[  136.884709][ T5918] usb 2-1: non-Atmel transceiver xxxx8ab2
[  137.092094][ T5918] usb 2-1: Firmware version (0.0) predates our first public release.
[  137.101873][ T5918] usb 2-1: Please update to version 0.2 or newer
[  137.109707][ T5918] usb 2-1: atusb_probe: initialization failed, error = -19
[  137.121288][ T5918] usb 2-1: USB disconnect, device number 40
[  137.177847][ T5951] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  137.200588][ T5951] usb 1-1: device descriptor read/8, error -71
[  137.343375][ T6888] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.298'.
[  137.447667][ T5951] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  137.468165][ T5951] usb 1-1: device descriptor read/8, error -71
[  137.577821][ T5951] usb usb1-port1: unable to enumerate USB device
[  137.617522][ T5918] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  137.778971][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.789478][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.803007][ T5918] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  137.812493][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.828177][ T5918] usb 3-1: config 0 descriptor??
[  138.161759][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.229811][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.256972][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.272119][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.283512][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.299133][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.329178][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.420484][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.518052][ T5918] usbhid 3-1:0.0: can't add hid device: -71
[  138.534830][ T5918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  138.589813][ T5918] usb 3-1: USB disconnect, device number 38
[  138.614448][   T43] usb 4-1: USB disconnect, device number 40
[  138.636322][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  138.649239][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  138.659637][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  138.670106][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  138.679843][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  138.754291][   T13] bridge_slave_1: left allmulticast mode
[  138.761563][   T13] bridge_slave_1: left promiscuous mode
[  138.771813][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.783326][   T13] bridge_slave_0: left allmulticast mode
[  138.790271][   T13] bridge_slave_0: left promiscuous mode
[  138.796089][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.087522][ T6908] netlink: 140 bytes leftover after parsing attributes in process `syz.2.308'.
[  139.092226][   T43] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  139.141659][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.153930][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.164110][   T13] bond0 (unregistering): Released all slaves
[  139.316753][   T43] usb 4-1: Using ep0 maxpacket: 16
[  139.338682][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.377544][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.396634][   T24] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  139.406822][   T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  139.438466][   T43] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  139.457714][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.480476][   T43] usb 4-1: config 0 descriptor??
[  139.579959][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  139.597738][   T24] usb 1-1: not running at top speed; connect to a high speed hub
[  139.610418][   T24] usb 1-1: config 5 has an invalid interface number: 141 but max is 0
[  139.627013][   T24] usb 1-1: config 5 has no interface number 0
[  139.633154][   T24] usb 1-1: config 5 interface 141 has no altsetting 0
[  139.643250][   T24] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=31.f3
[  139.661207][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.669681][   T24] usb 1-1: Product: syz
[  139.674046][   T24] usb 1-1: Manufacturer: syz
[  139.689889][   T24] usb 1-1: SerialNumber: syz
[  139.780035][ T5951] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  139.933658][ T6930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.939089][   T43] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  139.955393][ T6930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.989412][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.016629][ T5951] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  140.032332][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.048736][   T43] microsoft 0003:045E:07DA.0008: unsupported Resolution Multiplier 0
[  140.058399][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.104038][ T5951] usb 3-1: Product: syz
[  140.112444][   T43] microsoft 0003:045E:07DA.0008: implement() called with n (152) > 32! (kworker/1:1)
[  140.134193][ T5951] usb 3-1: Manufacturer: syz
[  140.144588][ T5951] usb 3-1: SerialNumber: syz
[  140.160422][   T24] pcwd_usb: The device isn't a Human Interface Device
[  140.180682][ T5951] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  140.203019][   T43] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  140.227192][   T43] microsoft 0003:045E:07DA.0008: no inputs found
[  140.235825][ T5969] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  140.246862][   T24] usb 1-1: USB disconnect, device number 41
[  140.257114][   T43] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  140.315679][   T43] usb 4-1: USB disconnect, device number 41
[  140.505566][ T6942] fido_id[6942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  140.523594][   T13] hsr_slave_0: left promiscuous mode
[  140.559405][   T13] hsr_slave_1: left promiscuous mode
[  140.574195][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.583167][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.594217][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.604001][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.634387][   T13] veth1_macvtap: left promiscuous mode
[  140.646892][   T13] veth0_macvtap: left promiscuous mode
[  140.652745][   T13] veth1_vlan: left promiscuous mode
[  140.663477][   T13] veth0_vlan: left promiscuous mode
[  140.786018][ T5878] Bluetooth: hci3: command tx timeout
[  140.906301][ T6155] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  140.920562][   T43] usb 3-1: USB disconnect, device number 39
[  141.079069][ T6155] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  141.090942][ T6155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.102201][ T6155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1628, setting to 1024
[  141.113345][ T6155] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253
[  141.127237][ T6155] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  141.137383][ T6155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.140054][   T13] team0 (unregistering): Port device team_slave_1 removed
[  141.148867][ T6155] usb 4-1: config 0 descriptor??
[  141.181217][ T6947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  141.199041][   T13] team0 (unregistering): Port device team_slave_0 removed
[  141.481306][ T6949] netlink: 'syz.2.315': attribute type 33 has an invalid length.
[  141.490580][ T6949] netlink: 164 bytes leftover after parsing attributes in process `syz.2.315'.
[  141.520590][ T5969] usb 3-1: Service connection timeout for: 256
[  141.527093][ T5969] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  141.541229][ T5969] ath9k_htc: Failed to initialize the device
[  141.549244][   T43] usb 3-1: ath9k_htc: USB layer deinitialized
[  141.550720][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.315'.
[  141.621878][ T6155] waterforce 0003:1044:7A4D.0009: hidraw0: USB HID v0.08 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0
[  141.688167][ T6900] chnl_net:caif_netlink_parms(): no params data found
[  141.719571][ T6155] waterforce 0003:1044:7A4D.0009: fw version request failed with -71
[  141.829227][ T6155] usb 4-1: USB disconnect, device number 42
[  142.006888][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.020350][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.030955][ T6900] bridge_slave_0: entered allmulticast mode
[  142.039282][ T6900] bridge_slave_0: entered promiscuous mode
[  142.049248][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.058587][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.066664][ T6900] bridge_slave_1: entered allmulticast mode
[  142.075774][ T6900] bridge_slave_1: entered promiscuous mode
[  142.177771][ T6900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.187081][ T5917] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  142.207989][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.319'.
[  142.218477][ T5878] Bluetooth: hci2: unexpected event for opcode 0x1804
[  142.220697][ T6900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.281162][ T6900] team0: Port device team_slave_0 added
[  142.292577][ T6900] team0: Port device team_slave_1 added
[  142.334022][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.341245][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  142.347346][ T5917] usb 1-1: Using ep0 maxpacket: 8
[  142.367721][ T6900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.390346][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.397452][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  142.424200][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.427887][ T6900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.453491][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 32768, setting to 64
[  142.500894][ T5917] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  142.535113][ T6155] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  142.544183][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  142.556401][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.571444][ T5917] usb 1-1: Product: syz
[  142.576061][ T5917] usb 1-1: Manufacturer: syz
[  142.578455][ T6977] netlink: 'syz.3.320': attribute type 3 has an invalid length.
[  142.586499][ T5917] usb 1-1: SerialNumber: syz
[  142.596344][ T6900] hsr_slave_0: entered promiscuous mode
[  142.603636][ T6900] hsr_slave_1: entered promiscuous mode
[  142.614115][ T6977] netlink: 'syz.3.320': attribute type 1 has an invalid length.
[  142.615652][ T5917] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  142.623132][ T6900] debugfs: 'hsr0' already exists in 'hsr'
[  142.636886][ T6977] netlink: 192 bytes leftover after parsing attributes in process `syz.3.320'.
[  142.647058][ T6900] Cannot create hsr debugfs directory
[  142.652856][ T6977] NCSI netlink: No device for ifindex 0
[  142.655903][ T5917] usbtest 1-1:1.0: couldn't get endpoints, -22
[  142.664700][ T5917] usbtest 1-1:1.0: probe with driver usbtest failed with error -22
[  142.697648][ T6155] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  142.724985][ T6155] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  142.745079][ T6155] usb 3-1: config 220 has no interface number 2
[  142.763403][ T6155] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  142.791837][ T6155] usb 3-1: config 220 interface 0 has no altsetting 0
[  142.829805][ T5917] usb 1-1: USB disconnect, device number 42
[  142.839987][ T6155] usb 3-1: config 220 interface 76 has no altsetting 0
[  142.850422][ T6155] usb 3-1: config 220 interface 1 has no altsetting 0
[  142.863591][ T6155] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  142.873773][ T6155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.875443][ T5878] Bluetooth: hci3: command tx timeout
[  142.881898][ T6155] usb 3-1: Product: syz
[  142.893093][ T6155] usb 3-1: Manufacturer: syz
[  142.898094][ T6155] usb 3-1: SerialNumber: syz
[  143.099004][ T6900] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  143.137811][ T6900] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  143.152797][ T6900] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  143.176916][ T6900] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  143.473887][ T6900] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.585502][ T6900] 8021q: adding VLAN 0 to HW filter on device team0
[  143.619605][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.626862][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.694873][ T5951] IPVS: starting estimator thread 0...
[  143.721445][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.728720][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.795000][ T7011] IPVS: using max 28 ests per chain, 67200 per kthread
[  143.895186][ T5951] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  143.903535][   T43] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  143.977983][ T7021] netlink: 'syz.2.325': attribute type 10 has an invalid length.
[  144.071477][ T5951] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  144.084665][   T43] usb 1-1: Using ep0 maxpacket: 8
[  144.089817][ T5951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.111818][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.126365][ T5951] usb 4-1: config 0 has no interface number 0
[  144.132645][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.135975][ T6900] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.145100][   T43] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[  144.164261][ T5951] usb 4-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a
[  144.195500][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.203525][ T5951] usb 4-1: Product: syz
[  144.214322][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.232949][ T5951] usb 4-1: Manufacturer: syz
[  144.245002][ T5951] usb 4-1: SerialNumber: syz
[  144.251440][   T43] usb 1-1: config 0 descriptor??
[  144.267273][ T5951] usb 4-1: config 0 descriptor??
[  144.299274][ T5951] cx231xx 4-1:0.1: New device syz syz @ 12 Mbps (0572:58a2) with 1 interfaces
[  144.327217][ T7032] netlink: 56 bytes leftover after parsing attributes in process `syz.2.326'.
[  144.332229][ T5951] cx231xx 4-1:0.1: Not found matching IAD interface
[  144.481461][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'.
[  144.531395][   T10] usb 4-1: USB disconnect, device number 43
[  144.693731][   T43] input: HID 28bd:0935 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0935.000A/input/input15
[  144.809617][ T6900] veth0_vlan: entered promiscuous mode
[  144.829553][   T43] uclogic 0003:28BD:0935.000A: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.0-1/input0
[  144.840919][ T6900] veth1_vlan: entered promiscuous mode
[  144.899298][   T43] usb 1-1: USB disconnect, device number 43
[  144.944041][ T5878] Bluetooth: hci3: command tx timeout
[  144.979540][ T6900] veth0_macvtap: entered promiscuous mode
[  145.029367][ T6900] veth1_macvtap: entered promiscuous mode
[  145.076975][ T7050] fido_id[7050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  145.103034][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.138724][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.197953][ T1156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.236036][ T1156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.277875][ T1156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.299044][ T1156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.443837][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.452784][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.564116][   T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  145.575673][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.593966][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.747255][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  145.783572][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  145.809494][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  145.827300][   T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  145.853789][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.869062][   T10] usb 4-1: Product: syz
[  145.873279][   T10] usb 4-1: Manufacturer: syz
[  145.893471][   T10] usb 4-1: SerialNumber: syz
[  145.896580][ T1156] Bluetooth: (null): Invalid header checksum
[  145.914154][   T10] usb 4-1: config 0 descriptor??
[  145.926089][ T1156] Bluetooth: (null): Invalid header checksum
[  145.932494][ T7056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  145.947620][ T7056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  145.965756][   T10] usb 4-1: ucan: probing device on interface #0
[  145.966018][ T7076] netlink: 56 bytes leftover after parsing attributes in process `syz.0.334'.
[  146.003645][ T1139] Bluetooth: (null): Invalid header checksum
[  146.026045][   T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  146.189979][   T13] Bluetooth: (null): Invalid header checksum
[  146.227055][ T5878] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  146.240024][ T5878] Bluetooth: hci2: Injecting HCI hardware error event
[  146.248121][ T5878] Bluetooth: hci2: hardware error 0x00
[  146.257576][   T43] usb 5-1: Using ep0 maxpacket: 16
[  146.293035][ T1139] Bluetooth: (null): Too short H5 packet
[  146.301058][ T1139] Bluetooth: (null): Invalid header checksum
[  146.313949][ T5951] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  146.394064][ T3491] Bluetooth: (null): Invalid header checksum
[  146.473504][ T5951] usb 1-1: device descriptor read/64, error -71
[  146.514525][ T3491] Bluetooth: (null): Invalid header checksum
[  146.548487][   T43] usb 5-1: unable to get BOS descriptor or descriptor too short
[  146.558247][   T43] usb 5-1: unable to read config index 0 descriptor/start: -71
[  146.565899][   T43] usb 5-1: can't read configurations, error -71
[  146.713067][ T5951] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  146.843058][ T5951] usb 1-1: device descriptor read/64, error -71
[  146.910831][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.337'.
[  146.963415][ T5951] usb usb1-port1: attempt power cycle
[  146.981908][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.992128][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.006785][ T7094] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.340'.
[  147.023920][   T10] usb 4-1: ucan: could not read protocol version, ret=-110
[  147.031358][   T10] usb 4-1: ucan: probe failed; try to update the device firmware
[  147.072213][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.081723][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.312691][ T5951] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  147.333235][ T5951] usb 1-1: device descriptor read/8, error -71
[  147.412688][   T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  147.564206][   T43] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  147.572618][   T43] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  147.583556][ T5951] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  147.591932][   T43] usb 5-1: config 220 has no interface number 2
[  147.598361][   T43] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  147.612694][   T43] usb 5-1: config 220 interface 0 has no altsetting 0
[  147.619569][   T43] usb 5-1: config 220 interface 76 has no altsetting 0
[  147.626832][ T5951] usb 1-1: device descriptor read/8, error -71
[  147.633130][   T43] usb 5-1: config 220 interface 1 has no altsetting 0
[  147.641883][   T43] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  147.651332][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.659371][   T43] usb 5-1: Product: syz
[  147.663791][   T43] usb 5-1: Manufacturer: syz
[  147.668425][   T43] usb 5-1: SerialNumber: syz
[  147.742820][ T5951] usb usb1-port1: unable to enumerate USB device
[  148.000177][ T6155] usb 3-1: selecting invalid altsetting 0
[  148.013017][ T6155] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  148.021640][ T6155] uvcvideo 3-1:220.0: No valid video chain found.
[  148.033978][ T6155] usb 3-1: selecting invalid altsetting 0
[  148.039729][ T6155] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  148.290924][ T6155] usb 4-1: USB disconnect, device number 44
[  148.302315][ T5878] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  148.465555][ T7101] netlink: 'syz.4.342': attribute type 17 has an invalid length.
[  148.474901][ T7101] netlink: 'syz.4.342': attribute type 16 has an invalid length.
[  148.483238][ T7101] netlink: 152 bytes leftover after parsing attributes in process `syz.4.342'.
[  148.682037][ T6155] usb 4-1: new low-speed USB device number 45 using dummy_hcd
[  148.811983][ T6155] usb 4-1: device descriptor read/64, error -71
[  149.058205][ T6155] usb 4-1: new low-speed USB device number 46 using dummy_hcd
[  149.201800][ T6155] usb 4-1: device descriptor read/64, error -71
[  149.237299][ T7111] IPv6: syztnl0: Disabled Multicast RS
[  149.321992][ T6155] usb usb4-port1: attempt power cycle
[  149.663968][ T6155] usb 4-1: new low-speed USB device number 47 using dummy_hcd
[  149.702240][ T6155] usb 4-1: device descriptor read/8, error -71
[  149.941619][    T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  149.949469][ T6155] usb 4-1: new low-speed USB device number 48 using dummy_hcd
[  149.972129][ T6155] usb 4-1: device descriptor read/8, error -71
[  150.025463][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.038775][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.081826][ T6155] usb usb4-port1: unable to enumerate USB device
[  150.101306][    T9] usb 1-1: Using ep0 maxpacket: 8
[  150.108114][    T9] usb 1-1: config index 0 descriptor too short (expected 1828, got 36)
[  150.123045][    T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.137187][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  150.146292][    T9] usb 1-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00
[  150.155767][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30
[  150.165166][    T9] usb 1-1: SerialNumber: syz
[  150.178438][    T9] usb 1-1: config 0 descriptor??
[  150.259343][ T7128] netlink: 10 bytes leftover after parsing attributes in process `syz.4.351'.
[  150.384212][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.394977][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.416501][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  150.422626][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  150.433605][    T9] usb 1-1: USB disconnect, device number 48
[  150.720830][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.729760][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.739304][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.749909][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.759486][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.768543][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.941336][ T5878] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  150.949909][ T5878] Bluetooth: hci3: Injecting HCI hardware error event
[  150.958721][ T5872] Bluetooth: hci3: hardware error 0x00
[  151.028969][ T7154] netlink: 'syz.4.356': attribute type 21 has an invalid length.
[  151.046176][ T7154] netlink: 128 bytes leftover after parsing attributes in process `syz.4.356'.
[  151.397051][ T7175] binder: 7173:7175 ioctl c0306201 200000000080 returned -14
[  151.560354][ T5878] Bluetooth: hci3: unexpected event for opcode 0x1804
[  151.562280][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.361'.
[  151.608323][ T7185] 9pnet_fd: Insufficient options for proto=fd
[  151.674572][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.695940][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.698848][ T7190] netlink: 56 bytes leftover after parsing attributes in process `syz.0.364'.
[  151.811680][ T5969] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  151.857307][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'.
[  151.871513][ T7196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.882534][ T7196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.970341][ T5969] usb 4-1: Using ep0 maxpacket: 8
[  151.986794][ T5969] usb 4-1: unable to get BOS descriptor or descriptor too short
[  152.005575][ T5969] usb 4-1: config 17 has an invalid interface number: 8 but max is 1
[  152.014575][ T5969] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2
[  152.024015][ T5969] usb 4-1: config 17 has no interface number 0
[  152.031400][ T5969] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 144, changing to 7
[  152.044603][ T5969] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 57893, setting to 1024
[  152.057188][ T5969] usb 4-1: config 17 interface 8 has no altsetting 0
[  152.069013][ T5969] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  152.090906][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.099079][ T5969] usb 4-1: Product: syz
[  152.104844][ T5969] usb 4-1: Manufacturer: syz
[  152.109902][ T5969] usb 4-1: SerialNumber: syz
[  152.148681][ T7203] program syz.0.369 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  152.167538][ T7204] program syz.0.369 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  152.329723][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.350652][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.377612][ T5969] usb 4-1: selecting invalid altsetting 0
[  152.386647][ T5969] usb 4-1: 8:6 : no UAC_FORMAT_TYPE desc
[  152.394759][ T5969] usb 4-1: selecting invalid altsetting 0
[  152.404486][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.417443][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.430249][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.431472][ T5969] usb 4-1: USB disconnect, device number 49
[  152.442980][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.450327][ T5909] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  152.465963][ T7209] loop6: detected capacity change from 0 to 7
[  152.478784][ T7209] Dev loop6: unable to read RDB block 7
[  152.490463][ T7209]  loop6: unable to read partition table
[  152.496349][ T7209] loop6: partition table beyond EOD, truncated
[  152.524963][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  152.541069][ T7209] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  152.593893][ T7214] netlink: 56 bytes leftover after parsing attributes in process `syz.2.373'.
[  152.625054][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.635836][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  152.645471][ T5909] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  152.655081][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.668525][ T5909] usb 1-1: config 0 descriptor??
[  152.678174][ T5909] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  152.685480][ T5909] dvb-usb: bulk message failed: -22 (3/0)
[  152.696839][ T5909] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  152.710979][ T5909] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  152.720422][ T5909] usb 1-1: media controller created
[  152.734612][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  152.743995][   T43] usb 5-1: selecting invalid altsetting 0
[  152.750376][   T43] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  152.764768][   T43] uvcvideo 5-1:220.0: No valid video chain found.
[  152.786297][   T43] usb 5-1: selecting invalid altsetting 0
[  152.793001][   T43] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  152.804414][ T5909] dvb-usb: bulk message failed: -22 (6/0)
[  152.814275][ T5909] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  152.838265][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16
[  152.866327][ T5909] dvb-usb: schedule remote query interval to 150 msecs.
[  152.875900][ T5909] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  152.893240][ T7206] dvb-usb: bulk message failed: -22 (2/0)
[  152.924443][ T5918] usb 1-1: USB disconnect, device number 49
[  152.972473][ T5918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  153.020746][ T5872] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  153.142953][ T7222] netlink: 'syz.2.376': attribute type 10 has an invalid length.
[  153.152537][ T7222] netlink: 55 bytes leftover after parsing attributes in process `syz.2.376'.
[  153.198281][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.225356][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.586425][ T7229] syzkaller1: entered promiscuous mode
[  153.592059][ T7229] syzkaller1: entered allmulticast mode
[  153.869403][ T5909] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  154.046048][ T5909] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  154.057852][ T5909] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  154.070311][ T5909] usb 1-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config
[  154.083197][ T5909] usb 1-1: config 220 has no interface number 2
[  154.090124][ T5909] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  154.125345][ T5909] usb 1-1: config 220 interface 0 has no altsetting 0
[  154.135965][ T5909] usb 1-1: config 220 interface 76 has no altsetting 0
[  154.143540][ T5909] usb 1-1: config 220 interface 1 has no altsetting 0
[  154.153840][ T5909] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  154.174561][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.182995][ T5909] usb 1-1: Product: syz
[  154.187173][ T5909] usb 1-1: Manufacturer: syz
[  154.192183][ T5909] usb 1-1: SerialNumber: syz
[  154.273974][ T7240] netlink: 56 bytes leftover after parsing attributes in process `syz.2.382'.
[  154.382972][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.393182][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.415865][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.423544][ T5909] usb 1-1: selecting invalid altsetting 0
[  154.427616][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.472391][ T5909] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  154.486886][ T5909] uvcvideo 1-1:220.0: No valid video chain found.
[  154.507052][ T5909] usb 1-1: selecting invalid altsetting 0
[  154.512905][ T5909] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  154.526286][ T5909] usb 1-1: USB disconnect, device number 50
[  154.565656][ T7244] netlink: 'syz.3.384': attribute type 3 has an invalid length.
[  154.573934][ T7244] netlink: 224 bytes leftover after parsing attributes in process `syz.3.384'.
[  155.065477][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.095018][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.116225][ T7262] binder: 7261:7262 ioctl c018620c 200000000280 returned -1
[  155.143392][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.155987][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.191340][ T5872] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  155.467671][ T7270] netlink: 'syz.3.387': attribute type 10 has an invalid length.
[  155.491690][ T7270] veth0_vlan: left promiscuous mode
[  155.500100][ T7270] veth0_vlan: entered promiscuous mode
[  155.510868][ T7270] team0: Device veth0_vlan failed to register rx_handler
[  155.541150][ T7273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.559135][ T7273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.729217][ T7276] Bluetooth: MGMT ver 1.23
[  155.830172][ T7284] netlink: 56 bytes leftover after parsing attributes in process `syz.2.391'.
[  155.998989][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.083748][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.227376][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.254955][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.269592][ T5872] Bluetooth: hci1: unexpected event for opcode 0x1804
[  156.275395][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.395'.
[  156.598036][   T43] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  156.743761][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.760103][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.761862][   T43] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  156.776526][   T43] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  156.791672][   T43] usb 4-1: config 220 has no interface number 2
[  156.799257][   T43] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  156.813971][   T43] usb 4-1: config 220 interface 0 has no altsetting 0
[  156.821106][   T43] usb 4-1: config 220 interface 76 has no altsetting 0
[  156.828583][   T43] usb 4-1: config 220 interface 1 has no altsetting 0
[  156.837513][   T43] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  156.849049][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.857324][   T43] usb 4-1: Product: syz
[  156.868136][   T43] usb 4-1: Manufacturer: syz
[  156.872764][   T43] usb 4-1: SerialNumber: syz
[  156.931298][   T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  157.053157][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.075522][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.088712][   T24] usb 1-1: device descriptor read/64, error -71
[  157.331478][ T7343] netlink: 56 bytes leftover after parsing attributes in process `syz.2.400'.
[  157.347774][   T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  157.405890][ T7348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.417295][ T7348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.500918][ T7348] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  157.505187][   T24] usb 1-1: device descriptor read/64, error -71
[  157.646440][   T24] usb usb1-port1: attempt power cycle
[  157.735352][ T7356] netlink: 'syz.3.402': attribute type 15 has an invalid length.
[  158.007357][   T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  158.070929][   T24] usb 1-1: device descriptor read/8, error -71
[  158.136406][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.407'.
[  158.194373][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.206623][ T7372] team0: Port device team_slave_0 removed
[  158.219660][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.233324][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.242541][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.344177][   T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  158.398045][   T24] usb 1-1: device descriptor read/8, error -71
[  158.536817][   T24] usb usb1-port1: unable to enumerate USB device
[  158.546172][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.411'.
[  158.644986][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.664451][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.765729][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.776817][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.066595][ T7397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.619182][ T7407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.628258][ T7407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.728043][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'.
[  159.750967][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.766938][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.841514][ T7407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.857450][ T7407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.905096][ T5872] Bluetooth: hci0: unexpected event for opcode 0x1804
[  159.908403][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.421'.
[  160.296382][ T5872] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  160.305827][ T5872] Bluetooth: hci1: Injecting HCI hardware error event
[  160.314054][ T5872] Bluetooth: hci1: hardware error 0x00
[  160.420635][ T7424] mkiss: ax0: crc mode is auto.
[  160.458284][ T7424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.469968][ T7424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.474277][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.424'.
[  160.510693][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.525073][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.786015][ T6155] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  160.935918][ T6155] usb 1-1: Using ep0 maxpacket: 8
[  160.943326][ T6155] usb 1-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11
[  160.954860][ T6155] usb 1-1: config 1 interface 0 has no altsetting 0
[  160.963886][ T6155] usb 1-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40
[  160.973040][ T6155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.981181][ T6155] usb 1-1: Product: syz
[  160.985529][ T6155] usb 1-1: Manufacturer: syz
[  160.990207][ T6155] usb 1-1: SerialNumber: syz
[  161.215485][ T6155] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input17
[  161.230564][ T5222] bcm5974 1-1:1.0: could not read from device
[  161.236725][ T6155] usb 1-1: USB disconnect, device number 55
[  161.245587][ T7436] cgroup: Need name or subsystem set
[  161.253708][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.274853][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.519062][ T7439] netlink: 'syz.2.429': attribute type 11 has an invalid length.
[  161.609001][ T7441] netlink: 'syz.2.430': attribute type 21 has an invalid length.
[  161.617004][ T7441] netlink: 'syz.2.430': attribute type 5 has an invalid length.
[  161.626111][ T7441] netlink: 128 bytes leftover after parsing attributes in process `syz.2.430'.
[  161.649763][ T7441] netlink: 'syz.2.430': attribute type 1 has an invalid length.
[  161.659628][ T7441] netlink: 'syz.2.430': attribute type 2 has an invalid length.
[  161.680895][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'.
[  161.690744][    C0] vcan0: j1939_session_tx_dat: 0xffff88805d954c00: queue data error: -100
[  161.699500][    C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  161.707254][    C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  161.714933][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.722783][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.730730][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.738782][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.747637][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.755484][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.763401][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.771268][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.779217][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.787521][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.795469][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.803401][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.811362][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.819210][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.827167][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.835079][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.843023][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.850876][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.858831][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.866674][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.874755][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.882699][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.890659][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.898503][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.906452][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.914278][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.922298][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.922913][ T7443] sctp: [Deprecated]: syz.0.431 (pid 7443) Use of int in max_burst socket option deprecated.
[  161.922913][ T7443] Use struct sctp_assoc_value instead
[  161.930138][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.930247][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.930261][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.930346][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.930360][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.930447][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.930461][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.930548][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.930562][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.930650][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.930661][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.930735][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.953032][   T43] usb 4-1: selecting invalid altsetting 0
[  161.953977][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.954090][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.977975][   T43] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  161.985297][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.985416][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.019796][   T43] uvcvideo 4-1:220.0: No valid video chain found.
[  162.024467][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.024587][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.059078][   T43] usb 4-1: selecting invalid altsetting 0
[  162.061478][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.069453][   T43] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  162.076799][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.076820][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.144182][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.152051][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.160004][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.167865][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.175808][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.183631][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.191589][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.199549][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.207519][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.215398][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.223325][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.231193][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.239145][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.247015][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.254925][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.262841][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.270769][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.278665][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.286590][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.294415][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.302396][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.310246][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.318182][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.326017][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.333896][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.341749][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.349648][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.357482][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.365412][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.373228][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.375289][ T5872] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  162.381169][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.395331][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.403264][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.411111][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.419066][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.426907][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.434788][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.442634][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.450567][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.458389][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.466286][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.474086][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.482385][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.490228][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.498191][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.506035][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.513958][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.521858][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.529883][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.537753][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.545858][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.553693][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.561775][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.569706][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.577634][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.585571][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.593578][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.601441][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.609479][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.617326][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.625226][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.633045][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.640999][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.648844][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.656800][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.664622][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.672552][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.680487][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.688409][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.696257][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.704180][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.712036][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.719980][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.727849][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.735745][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.743548][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  162.751474][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  162.759307][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  163.267356][ T5872] Bluetooth: hci0: unexpected event for opcode 0x1804
[  163.277249][ T7474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.437'.
[  163.465303][ T7488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.476023][ T7488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.528987][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.539997][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.585505][    T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  163.735969][    T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  163.744286][    T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  163.754688][    T9] usb 1-1: config 220 has no interface number 2
[  163.761099][    T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  163.776998][    T9] usb 1-1: config 220 interface 0 has no altsetting 0
[  163.783766][    T9] usb 1-1: config 220 interface 76 has no altsetting 0
[  163.790828][    T9] usb 1-1: config 220 interface 1 has no altsetting 0
[  163.800192][    T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  163.809379][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.820442][    T9] usb 1-1: Product: syz
[  163.824761][    T9] usb 1-1: Manufacturer: syz
[  163.829465][    T9] usb 1-1: SerialNumber: syz
[  163.975299][ T5872] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  163.983918][ T5872] Bluetooth: hci0: Injecting HCI hardware error event
[  163.992693][ T5878] Bluetooth: hci0: hardware error 0x00
[  163.999932][ T5878] ==================================================================
[  164.008005][ T5878] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190
[  164.017135][ T5878] Read of size 8 at addr ffff888058f2b568 by task kworker/u9:6/5878
[  164.025118][ T5878] 
[  164.027471][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[  164.027495][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  164.027517][ T5878] Workqueue: hci0 hci_error_reset
[  164.027553][ T5878] Call Trace:
[  164.027559][ T5878]  <TASK>
[  164.027567][ T5878]  dump_stack_lvl+0x189/0x250
[  164.027591][ T5878]  ? __kasan_check_byte+0x12/0x40
[  164.027609][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.027630][ T5878]  ? lock_release+0x4b/0x3e0
[  164.027651][ T5878]  ? __virt_addr_valid+0x4a5/0x5c0
[  164.027668][ T5878]  print_report+0xca/0x240
[  164.027683][ T5878]  ? __list_del_entry_valid_or_report+0x92/0x190
[  164.027704][ T5878]  kasan_report+0x118/0x150
[  164.027720][ T5878]  ? __list_del_entry_valid_or_report+0x92/0x190
[  164.027745][ T5878]  __list_del_entry_valid_or_report+0x92/0x190
[  164.027767][ T5878]  bt_accept_unlink+0x39/0x240
[  164.027784][ T5878]  l2cap_sock_teardown_cb+0x17e/0x460
[  164.027805][ T5878]  l2cap_chan_del+0xb5/0x5e0
[  164.027827][ T5878]  l2cap_conn_del+0x388/0x680
[  164.027846][ T5878]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  164.027864][ T5878]  hci_conn_hash_flush+0x10d/0x230
[  164.027885][ T5878]  hci_dev_close_sync+0xaef/0x1330
[  164.027906][ T5878]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  164.027923][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  164.027946][ T5878]  hci_error_reset+0x127/0x3e0
[  164.027966][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  164.027985][ T5878]  process_scheduled_works+0xae1/0x17b0
[  164.028015][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  164.028041][ T5878]  worker_thread+0x8a0/0xda0
[  164.028061][ T5878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.028087][ T5878]  ? __kthread_parkme+0x7b/0x200
[  164.028110][ T5878]  kthread+0x711/0x8a0
[  164.028132][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  164.028149][ T5878]  ? __pfx_kthread+0x10/0x10
[  164.028171][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.028190][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.028204][ T5878]  ? __pfx_kthread+0x10/0x10
[  164.028225][ T5878]  ret_from_fork+0x4bc/0x870
[  164.028245][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  164.028266][ T5878]  ? __switch_to_asm+0x39/0x70
[  164.028281][ T5878]  ? __switch_to_asm+0x33/0x70
[  164.028295][ T5878]  ? __pfx_kthread+0x10/0x10
[  164.028317][ T5878]  ret_from_fork_asm+0x1a/0x30
[  164.028339][ T5878]  </TASK>
[  164.028346][ T5878] 
[  164.257647][ T5878] Allocated by task 7234:
[  164.261965][ T5878]  kasan_save_track+0x3e/0x80
[  164.266645][ T5878]  __kasan_kmalloc+0x93/0xb0
[  164.271244][ T5878]  __kmalloc_noprof+0x411/0x7f0
[  164.276107][ T5878]  sk_prot_alloc+0xe7/0x220
[  164.280606][ T5878]  sk_alloc+0x3a/0x370
[  164.284663][ T5878]  __netlink_create+0x65/0x260
[  164.289423][ T5878]  netlink_create+0x3ca/0x590
[  164.294088][ T5878]  __sock_create+0x4b3/0x9f0
[  164.298675][ T5878]  __sys_socket+0xd7/0x1b0
[  164.303077][ T5878]  __x64_sys_socket+0x7a/0x90
[  164.307743][ T5878]  do_syscall_64+0xfa/0xfa0
[  164.312231][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.318103][ T5878] 
[  164.320408][ T5878] Freed by task 7235:
[  164.324369][ T5878]  kasan_save_track+0x3e/0x80
[  164.329029][ T5878]  __kasan_save_free_info+0x46/0x50
[  164.334208][ T5878]  __kasan_slab_free+0x5c/0x80
[  164.338959][ T5878]  kfree+0x19a/0x6d0
[  164.342839][ T5878]  __sk_destruct+0x4e1/0x660
[  164.347409][ T5878]  rcu_core+0xcab/0x1770
[  164.351811][ T5878]  handle_softirqs+0x286/0x870
[  164.356557][ T5878]  do_softirq+0xec/0x180
[  164.360787][ T5878]  __local_bh_enable_ip+0x17d/0x1c0
[  164.365976][ T5878]  hash_netport4_add+0x1a8f/0x2720
[  164.371077][ T5878]  hash_netport4_uadt+0xba9/0xf30
[  164.376086][ T5878]  call_ad+0x178/0xb00
[  164.380139][ T5878]  ip_set_ad+0x791/0x930
[  164.384368][ T5878]  nfnetlink_rcv_msg+0xb4d/0x1130
[  164.389388][ T5878]  netlink_rcv_skb+0x208/0x470
[  164.394137][ T5878]  nfnetlink_rcv+0x282/0x2590
[  164.398805][ T5878]  netlink_unicast+0x82f/0x9e0
[  164.403556][ T5878]  netlink_sendmsg+0x805/0xb30
[  164.408308][ T5878]  __sock_sendmsg+0x21c/0x270
[  164.412971][ T5878]  ____sys_sendmsg+0x505/0x830
[  164.417744][ T5878]  ___sys_sendmsg+0x21f/0x2a0
[  164.422405][ T5878]  __x64_sys_sendmsg+0x19b/0x260
[  164.427320][ T5878]  do_syscall_64+0xfa/0xfa0
[  164.431817][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.437718][ T5878] 
[  164.440045][ T5878] Last potentially related work creation:
[  164.445745][ T5878]  kasan_save_stack+0x3e/0x60
[  164.450420][ T5878]  kasan_record_aux_stack+0xbd/0xd0
[  164.455699][ T5878]  call_rcu+0x157/0x9c0
[  164.459847][ T5878]  netlink_release+0x1741/0x1b40
[  164.464781][ T5878]  sock_close+0xc3/0x240
[  164.469008][ T5878]  __fput+0x44c/0xa70
[  164.472974][ T5878]  task_work_run+0x1d4/0x260
[  164.477547][ T5878]  exit_to_user_mode_loop+0xe9/0x130
[  164.482817][ T5878]  do_syscall_64+0x2bd/0xfa0
[  164.487390][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.493267][ T5878] 
[  164.495577][ T5878] The buggy address belongs to the object at ffff888058f2b000
[  164.495577][ T5878]  which belongs to the cache kmalloc-2k of size 2048
[  164.509626][ T5878] The buggy address is located 1384 bytes inside of
[  164.509626][ T5878]  freed 2048-byte region [ffff888058f2b000, ffff888058f2b800)
[  164.523582][ T5878] 
[  164.525903][ T5878] The buggy address belongs to the physical page:
[  164.532317][ T5878] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058f2b000 pfn:0x58f28
[  164.542367][ T5878] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  164.550852][ T5878] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  164.559351][ T5878] page_type: f5(slab)
[  164.563334][ T5878] raw: 00fff00000000240 ffff88813fe27000 ffffea0000c96210 ffffea0000b20010
[  164.571908][ T5878] raw: ffff888058f2b000 0000000000080003 00000000f5000000 0000000000000000
[  164.580480][ T5878] head: 00fff00000000240 ffff88813fe27000 ffffea0000c96210 ffffea0000b20010
[  164.589137][ T5878] head: ffff888058f2b000 0000000000080003 00000000f5000000 0000000000000000
[  164.597803][ T5878] head: 00fff00000000003 ffffea000163ca01 00000000ffffffff 00000000ffffffff
[  164.606462][ T5878] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  164.615154][ T5878] page dumped because: kasan: bad access detected
[  164.621558][ T5878] page_owner tracks the page as allocated
[  164.627261][ T5878] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 76939492450, free_ts 21690027372
[  164.647654][ T5878]  post_alloc_hook+0x240/0x2a0
[  164.652417][ T5878]  get_page_from_freelist+0x2365/0x2440
[  164.657948][ T5878]  __alloc_frozen_pages_noprof+0x181/0x370
[  164.663740][ T5878]  alloc_pages_mpol+0x232/0x4a0
[  164.668668][ T5878]  allocate_slab+0x96/0x3a0
[  164.673164][ T5878]  ___slab_alloc+0xe94/0x1920
[  164.677828][ T5878]  __slab_alloc+0x65/0x100
[  164.682317][ T5878]  __kmalloc_node_track_caller_noprof+0x5c7/0x800
[  164.688731][ T5878]  kmalloc_reserve+0x136/0x290
[  164.693487][ T5878]  __alloc_skb+0x142/0x2d0
[  164.697893][ T5878]  inet6_ifinfo_notify+0x70/0x120
[  164.702908][ T5878]  addrconf_notify+0xc4e/0x1010
[  164.707838][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  164.712936][ T5878]  netif_state_change+0x284/0x3a0
[  164.717949][ T5878]  linkwatch_do_dev+0x124/0x180
[  164.722786][ T5878]  __linkwatch_run_queue+0x56a/0x7e0
[  164.728063][ T5878] page last free pid 1 tgid 1 stack trace:
[  164.733849][ T5878]  __free_frozen_pages+0xbc4/0xd30
[  164.738950][ T5878]  free_contig_range+0x1bd/0x4a0
[  164.743873][ T5878]  destroy_args+0x69/0x660
[  164.748281][ T5878]  debug_vm_pgtable+0x39f/0x3b0
[  164.753119][ T5878]  do_one_initcall+0x236/0x820
[  164.757868][ T5878]  do_initcall_level+0x104/0x190
[  164.762831][ T5878]  do_initcalls+0x59/0xa0
[  164.767149][ T5878]  kernel_init_freeable+0x334/0x4b0
[  164.772340][ T5878]  kernel_init+0x1d/0x1d0
[  164.776654][ T5878]  ret_from_fork+0x4bc/0x870
[  164.781229][ T5878]  ret_from_fork_asm+0x1a/0x30
[  164.786081][ T5878] 
[  164.788388][ T5878] Memory state around the buggy address:
[  164.794097][ T5878]  ffff888058f2b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.802161][ T5878]  ffff888058f2b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.810208][ T5878] >ffff888058f2b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.818257][ T5878]                                                           ^
[  164.825688][ T5878]  ffff888058f2b580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.833742][ T5878]  ffff888058f2b600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.841784][ T5878] ==================================================================
[  164.852306][ T5878] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  164.859521][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[  164.868979][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  164.879032][ T5878] Workqueue: hci0 hci_error_reset
[  164.884070][ T5878] Call Trace:
[  164.887336][ T5878]  <TASK>
[  164.890254][ T5878]  dump_stack_lvl+0x99/0x250
[  164.894836][ T5878]  ? __asan_memcpy+0x40/0x70
[  164.899413][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.904609][ T5878]  ? __pfx__printk+0x10/0x10
[  164.909201][ T5878]  vpanic+0x237/0x6d0
[  164.913180][ T5878]  ? __pfx_vpanic+0x10/0x10
[  164.917666][ T5878]  ? preempt_schedule+0xae/0xc0
[  164.922547][ T5878]  ? __pfx_preempt_schedule+0x10/0x10
[  164.927911][ T5878]  panic+0xb9/0xc0
[  164.931621][ T5878]  ? __pfx_panic+0x10/0x10
[  164.936027][ T5878]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  164.941911][ T5878]  ? __list_del_entry_valid_or_report+0x92/0x190
[  164.948227][ T5878]  check_panic_on_warn+0x89/0xb0
[  164.953154][ T5878]  ? __list_del_entry_valid_or_report+0x92/0x190
[  164.959474][ T5878]  end_report+0x78/0x160
[  164.963736][ T5878]  kasan_report+0x129/0x150
[  164.968227][ T5878]  ? __list_del_entry_valid_or_report+0x92/0x190
[  164.974550][ T5878]  __list_del_entry_valid_or_report+0x92/0x190
[  164.980701][ T5878]  bt_accept_unlink+0x39/0x240
[  164.985452][ T5878]  l2cap_sock_teardown_cb+0x17e/0x460
[  164.990812][ T5878]  l2cap_chan_del+0xb5/0x5e0
[  164.995392][ T5878]  l2cap_conn_del+0x388/0x680
[  165.000065][ T5878]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  165.005514][ T5878]  hci_conn_hash_flush+0x10d/0x230
[  165.010621][ T5878]  hci_dev_close_sync+0xaef/0x1330
[  165.015823][ T5878]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  165.021387][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  165.027103][ T5878]  hci_error_reset+0x127/0x3e0
[  165.031948][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  165.037658][ T5878]  process_scheduled_works+0xae1/0x17b0
[  165.043224][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  165.049193][ T5878]  worker_thread+0x8a0/0xda0
[  165.053773][ T5878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  165.060093][ T5878]  ? __kthread_parkme+0x7b/0x200
[  165.065022][ T5878]  kthread+0x711/0x8a0
[  165.069080][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  165.074263][ T5878]  ? __pfx_kthread+0x10/0x10
[  165.078839][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  165.084114][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.089292][ T5878]  ? __pfx_kthread+0x10/0x10
[  165.093874][ T5878]  ret_from_fork+0x4bc/0x870
[  165.098451][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  165.103639][ T5878]  ? __switch_to_asm+0x39/0x70
[  165.108394][ T5878]  ? __switch_to_asm+0x33/0x70
[  165.113150][ T5878]  ? __pfx_kthread+0x10/0x10
[  165.117734][ T5878]  ret_from_fork_asm+0x1a/0x30
[  165.122485][ T5878]  </TASK>
[  165.125757][ T5878] Kernel Offset: disabled
[  165.130068][ T5878] Rebooting in 86400 seconds..