last executing test programs:

48.493332963s ago: executing program 4 (id=626):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

45.025045555s ago: executing program 4 (id=632):
socket(0x80000000000000a, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYRES32=r3], 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0xe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x1, 0x30, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xff, 0x5, 0x41, {0x7, 0x25, 0x1, 0xc, 0x6, 0xe3e4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x9, 0x40, {0x7, 0x25, 0x1, 0x0, 0xeb, 0x7}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})

34.710922929s ago: executing program 4 (id=651):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/24, 0x18}, 0x2}], 0x1, 0x12161, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000005bc0)=""/255, 0x2b, 0xff, 0x9, 0x1000}, 0x28)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020051ff", @ANYRES32=r6, @ANYBLOB="080024007f000001549ee8099e407b281f08a576a27525f03be7256b19e51ea7ec9237c43711ffe214a87c1775ba72ae6404afcaa899e3fd2eefa6c20d6d22b9f39a1547bf7d6e7457eab4547bc9af6a0de80cb73cd6fda006aaa5aa5ca3044210beef40e331c9072ca0969d042c734634f1d3f269a969d75c787dd8"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
io_setup(0x2, &(0x7f00000001c0)=<r7=>0x0)
pipe(&(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write(r9, &(0x7f0000000340), 0x11000)
vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfd9c}], 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000300), 0x10)
io_submit(r7, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, r2, 0x0, 0xfffffe60, 0x800, 0x0, 0x6}])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x0, &(0x7f0000000080)})
setitimer(0x2, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x4)
writev(r10, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51", 0x3f}], 0x1)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000000)='nl80211\x00', 0x80100, &(0x7f0000000040)={@align=0x8001, {0x4e, 0xf, 0x4, 0x4e3}}, 0x80000000, &(0x7f0000000180), &(0x7f0000000200)=0x7})
process_vm_writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000480)=""/95, 0x5f}, {&(0x7f0000000500)=""/127, 0x7f}, {0x0}, {&(0x7f00000005c0)=""/3, 0x3}, {&(0x7f0000000600)=""/153, 0x99}], 0x6, &(0x7f0000000840)=[{&(0x7f0000000740)=""/44, 0x2c}, {&(0x7f0000000780)=""/145, 0x91}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x3, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

33.485862444s ago: executing program 4 (id=655):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
socket$key(0xf, 0x3, 0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
recvmmsg(r4, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)

32.06678356s ago: executing program 4 (id=657):
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14)

30.945211621s ago: executing program 4 (id=660):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

18.584693509s ago: executing program 5 (id=689):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, 0x0, 0xa)

18.316447751s ago: executing program 5 (id=692):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file0\x00', 0x810, &(0x7f0000000100)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@space_cache_v2}, {@compress_force}, {@noautodefrag}, {@enospc_debug}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x1f, 0x78, 0x37, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=")
fspick(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet_tcp(0x2, 0x1, 0x0)
epoll_create1(0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000000000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xad0c24, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

17.508278317s ago: executing program 1 (id=694):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socket$alg(0x26, 0x5, 0x0)
socket(0x11, 0x3, 0x0)
fanotify_init(0x200, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
epoll_create1(0x0)
epoll_create1(0x0)
epoll_create1(0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

15.687208346s ago: executing program 32 (id=660):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

15.661169604s ago: executing program 5 (id=696):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180))
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
write$dsp(r0, &(0x7f0000000200)="dce4", 0x2)

15.617869075s ago: executing program 1 (id=698):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket(0x2, 0x80805, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x140048d0}, 0x20088004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000240)=@assoc_value={<r10=>0x0}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x83, &(0x7f0000000140)={r10}, 0x8)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r11], 0x1, r3, r4, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})

13.56516641s ago: executing program 2 (id=701):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r4 = gettid()
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8)
tkill(r4, 0xb)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)

12.02513351s ago: executing program 2 (id=702):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000003940)=0x10)
syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0xffffffffffffff0c, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)

11.990489619s ago: executing program 0 (id=703):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)

11.269109347s ago: executing program 1 (id=705):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

10.829099432s ago: executing program 5 (id=706):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000016c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xb2}, @flat=@weak_binder, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x29}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

10.660564335s ago: executing program 3 (id=707):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x800, 0x9)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@directio}, {@access_client}, {@loose}], [{@pcr={'pcr', 0x3d, 0x14}}, {@subj_role={'subj_role', 0x3d, './cgroup.cpu/syz1\x00'}}, {@uid_eq}, {@appraise_type}, {@smackfsroot}, {@dont_hash}]}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x4001090}, 0x40080)
syz_emit_ethernet(0x1046, 0x0, 0x0)

10.548295299s ago: executing program 2 (id=708):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80)
getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00)

10.477278384s ago: executing program 5 (id=709):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x4000000)
syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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")

10.144077257s ago: executing program 0 (id=710):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="22000000afcb4775fe64364063ae6dc7406e00a6c32a031e2b8864c2772f5315c614fede3666f68b98a27353a8", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="0c005a800800038004000100"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)=ANY=[@ANYBLOB="6400000043000701fefffffffcdbdf25027c0000040045804c0001804500f3804d6162970056486ad90a0246c5165918226c866b5293728dc5ee01e07823881f0c272b3301cc958ee776688d2b276c1c7f5cdf30e827f21e"], 0x64}}, 0xc000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$cont(0x7, r6, 0x2, 0x7)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000009c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd})

9.462465136s ago: executing program 3 (id=711):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

8.214168171s ago: executing program 0 (id=712):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket(0x2, 0x80805, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="56777f0ae0f7614c27daa0723461e49117ae7f473fe78e2648e43feaf7d61b81cd77a46498505a5137bbeeacfe19790cf52a307a46e39bfb48000b0f1425f924c2497f104bdf7652570d67e2301d81c13d62a7e0348044a69cabd561ddfb103dbf270c2148da8428481330164a918073d08b849fdffdb3bd41607aad0c51808aa880097ba38cfe8567ac428b5949e645d55831000c4e26a8a7823e5674bc63787a9f9a78cc89c2a6d62e3b816d965e33f00259b0ef557f74bd86d38caff49fa1e465515b2a19c3494428e835025ef3f318702097949f423d61c102565cfdf02a4c6f900a07314e15298088152b24778653ea84168d7db71ea85ffeaaeeb254cd94ef2b99a1bc1d1bf48ec64f95eeaa05440e2aad5be9c31cf85816c705f5638f3af43453d34926d0d78ddd86110f7bfeb37a362497a760441e30acfb1ec79bdd0c2cf965dc"], 0x84}, 0x1, 0x0, 0x0, 0x140048d0}, 0x20088004)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000240)=@assoc_value={<r9=>0x0}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x83, &(0x7f0000000140)={r9}, 0x8)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r10], 0x1, r2, r3, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})

6.25529901s ago: executing program 3 (id=713):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file0\x00', 0x810, &(0x7f0000000100)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@space_cache_v2}, {@compress_force}, {@noautodefrag}, {@enospc_debug}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x1f, 0x78, 0x37, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet_tcp(0x2, 0x1, 0x0)
epoll_create1(0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000000000)
ioctl$sock_SIOCETHTOOL(r0, 0x89b0, 0x0)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xad0c24, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

5.946894099s ago: executing program 5 (id=714):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001580)=@urb_type_iso={0x0, {0xc}, 0x4f, 0xe4, &(0x7f0000000040)="506262757a23be2cd0ecef1aad9306b5c4b3", 0x12, 0x3, 0xf, 0x65, 0x8000, 0x2, &(0x7f00000001c0), [{0x7fff, 0x1, 0x6}, {0x10001, 0xc8a, 0x2}, {0x1ff, 0x7, 0x3}, {0xb0f3, 0x3, 0x6}, {0x81, 0x3, 0x1}, {0xffff058e, 0x7, 0x4}, {0xec, 0x0, 0x2}, {0x3, 0x6, 0x9}, {0x101, 0x100, 0xd0}, {0xe90, 0xffff8001}, {0x9, 0x7, 0x3ff}, {0x8, 0x7, 0x200}, {0x300000, 0x7, 0x345}, {0x1, 0xa7f4, 0xfffff801}, {0x4, 0x916, 0x3}, {0x9, 0x5, 0x9}, {0x81, 0x3, 0x6}, {0x2, 0x2, 0x8}, {0xc597, 0x8, 0xe}, {0xd4, 0x3, 0x9}, {0x47, 0x5, 0x6}, {0x9, 0x3, 0x7fffffff}, {0x2, 0x9d9, 0x4}, {0x6, 0x2, 0x3}, {0x2566, 0x8, 0x3ff}, {0x0, 0xfffffff9, 0x40}, {0xfffffff6, 0xeb9, 0x80000000}, {0x0, 0x8001, 0x6}, {0x5, 0x1, 0x5}, {0x400, 0xfffffffc, 0x4}, {0x7, 0x3, 0x80}, {0x9, 0x100, 0x4}, {0x200, 0x0, 0x6}, {0x9, 0x5, 0x1}, {0x1, 0x10, 0x6}, {0x60000, 0x6, 0xa}, {0xfffffffc, 0x5, 0xffffffff}, {0x3, 0x9, 0x5}, {0x3, 0xb2, 0x1}, {0x0, 0x2, 0x5}, {0x3ff, 0x5, 0x70000000}, {0x2, 0xd877, 0x10001}, {0xfffffff9, 0x0, 0x8}, {0x4e, 0xffff}, {0x7f800000, 0xc}, {0x8, 0x8, 0x6}, {0x8, 0x0, 0x40}, {0x5, 0x9000000}, {0xffffff00, 0x2, 0x2}, {0x3, 0x2, 0x8}, {0x800, 0xa, 0xfffffffa}, {0x10000, 0x5a7, 0x5}, {0x1, 0x8, 0x1}, {0x7, 0x9}, {0xff, 0x1, 0x705}, {0x96c, 0x7, 0xd}, {0x7, 0x9e, 0x2}, {0x7, 0x80000001, 0xfffffff7}, {0x7, 0x200, 0xffffff2a}, {0xd71e, 0x5, 0x2}, {0x49, 0xf214, 0x1}, {0x9d, 0x698}, {0xac9, 0x5268c4d7, 0x8a}, {0x401, 0x1, 0x885}, {0x400, 0x4, 0xfffffff8}, {0x8, 0x6, 0x5}, {0x2000, 0x9, 0x8}, {0x1ff, 0x100, 0x7}, {0x1000, 0xf, 0x5}, {0x7, 0x1, 0x6}, {0x1c12, 0x1ff}, {0x4, 0x3, 0xa}, {0x3, 0x1, 0xfffffffb}, {0x9, 0x800, 0xa}, {0x2, 0x3, 0xffff5f2b}, {0xa1de, 0x7, 0x9}, {0x9, 0x4, 0x3}, {0x5, 0x2, 0x6}, {0xffff8001, 0x4, 0xc77c}, {0x80000000, 0x6, 0x1}, {0x7, 0x7, 0xe}, {0x7fff, 0x1, 0x1ff}, {0xfffff9a2, 0x7f, 0x48}, {0x10, 0x0, 0x3688b7c7}, {0xf, 0x3, 0x5578}, {0x8, 0x1ff, 0x4}, {0x8, 0x3, 0x7}, {0xc, 0x8, 0xb027}, {0x5, 0x200, 0x9}, {0xfff, 0x3, 0x6}, {0x5, 0xd412, 0x8}, {0x1ff, 0x2, 0x9}, {0x7, 0x255c, 0xffff8000}, {0x0, 0xe, 0x3}, {0xb, 0xb, 0x7fffffff}, {0x8, 0x0, 0x200}, {0x5, 0x40, 0x8efc}, {0xffffffff, 0x3, 0x10}, {0xf, 0x4, 0x7}, {0x7fff, 0xffff, 0x2}, {0x1000, 0x6, 0x7}]})
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000402505a8a4412001020b0109021b00010100c00009040000020701010009050102"], 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000008982, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000fc0))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000001040)={0x60, 0x1, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4, &(0x7f0000001000), 0x0, 0x784, 0x40, 0x44, 0x2})
io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r2, 0x0, 0x2000, 0x1000000, 0x0, 0x10}])
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc)
r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x2, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0xe7ffffff, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x4, 0x40}, 0x400, 0x1, {}, 0x1, 0x0, r5})
syz_usb_disconnect(0xffffffffffffffff)
close(0x3)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)

5.87226128s ago: executing program 1 (id=715):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r4 = gettid()
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8)
tkill(r4, 0xb)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)

5.8712035s ago: executing program 2 (id=716):
chdir(&(0x7f0000000540)='./cgroup\x00')
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000", @ANYBLOB, @ANYRESOCT], 0x0)

4.491328996s ago: executing program 1 (id=717):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="de6ba77804823dda8987fdc989c127f72f24722e4a0f1988738716b30a6634caf873e3456c8f2ea19b393a1022ebd0d4cb193c383412576d9d61f4131548b763d2acfeddaf13767aa07590c47d44bb7fbae74444260330aef2bb22032cfbbc5562", 0x61}], 0x1}, 0x24000000)
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

4.375095514s ago: executing program 0 (id=718):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)}, 0x800)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.30547567s ago: executing program 0 (id=719):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket(0x2, 0x80805, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x140048d0}, 0x20088004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000240)=@assoc_value={<r10=>0x0}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x83, &(0x7f0000000140)={r10}, 0x8)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r11], 0x1, r3, r4, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})

3.298037372s ago: executing program 3 (id=720):
unshare(0x400)
socket(0x2b, 0x80801, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0)

1.817806858s ago: executing program 3 (id=721):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffe)

1.666095497s ago: executing program 0 (id=722):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket(0x2, 0x80805, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="56777f0ae0f7614c27daa0723461e49117ae7f473fe78e2648e43feaf7d61b81cd77a46498505a5137bbeeacfe19790cf52a307a46e39bfb48000b0f1425f924c2497f104bdf7652570d67e2301d81c13d62a7e0348044a69cabd561ddfb103dbf270c2148da8428481330164a918073d08b849fdffdb3bd41607aad0c51808aa880097ba38cfe8567ac428b5949e645d55831000c4e26a8a7823e5674bc63787a9f9a78cc89c2a6d62e3b816d965e33f00259b0ef557f74bd86d38caff49fa1e465515b2a19c3494428e835025ef3f318702097949f423d61c102565cfdf02a4c6f900a07314e15298088152b24778653ea84168d7db71ea85ffeaaeeb254cd94ef2b99a1bc1d1bf48ec64f95eeaa05440e2aad5be9c31cf85816c705f5638f3af43453d34926d0d78ddd86110f7bfeb37a362497a760441e30acfb1ec79bdd0c2cf965dc"], 0x84}, 0x1, 0x0, 0x0, 0x140048d0}, 0x20088004)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000240)=@assoc_value={<r9=>0x0}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x83, &(0x7f0000000140)={r9}, 0x8)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r10], 0x1, r2, r3, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})

1.664619435s ago: executing program 2 (id=723):
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f00000000c0)=0x9, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r5 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r5, 0x0, 0xcf, 0x0, &(0x7f0000000380))
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@bcast, @remote, @default, @default, @bcast, @default, @remote, @netrom]}, &(0x7f0000000040)=0x48, 0x80800)

389.548425ms ago: executing program 2 (id=724):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)

677.704µs ago: executing program 1 (id=725):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x4000000)
syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")

0s ago: executing program 3 (id=726):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond0\x00', 0x0})

kernel console output (not intermixed with test programs):

evice number 5
[  167.684183][ T6771] loop3: detected capacity change from 0 to 1024
[  167.748506][ T6771] EXT4-fs: Ignoring removed nomblk_io_submit option
[  167.910926][ T6771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.139955][ T5971] usb 6-1: device descriptor read/64, error -71
[  169.099941][ T5910] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  169.169932][ T5971] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  169.183821][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.271993][ T5910] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  169.282442][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.449931][ T5971] usb 6-1: Using ep0 maxpacket: 32
[  169.462964][ T5971] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  169.463478][ T5910] usb 5-1: config 0 descriptor??
[  169.471621][ T5971] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  169.519213][ T5971] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  169.552000][ T5910] cp210x 5-1:0.0: cp210x converter detected
[  169.590475][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  169.640773][ T5971] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  169.666960][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'.
[  169.700864][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  169.731250][ T5971] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  169.755853][ T5971] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  169.756131][ T6796] netlink: 'syz.3.193': attribute type 4 has an invalid length.
[  169.789465][ T5971] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  169.799609][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.820477][ T5971] usb 6-1: config 0 descriptor??
[  169.870155][ T6796] netlink: 152 bytes leftover after parsing attributes in process `syz.3.193'.
[  169.890360][ T6794] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.941857][ T6796] .`: renamed from bond0 (while UP)
[  169.980347][ T5910] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  170.051495][ T5910] usb 5-1: cp210x converter now attached to ttyUSB0
[  170.054707][ T5971] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  170.110632][ T5971] usb 6-1: USB disconnect, device number 9
[  170.184325][ T5971] usblp0: removed
[  170.255681][    T9] usb 5-1: USB disconnect, device number 6
[  170.321847][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  170.345262][    T9] cp210x 5-1:0.0: device disconnected
[  170.392912][ T6804] loop1: detected capacity change from 0 to 1024
[  170.421302][ T6804] EXT4-fs: Ignoring removed nomblk_io_submit option
[  170.614759][ T6804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.661046][ T5971] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  171.538536][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.881433][  T790] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  173.192636][  T790] usb 2-1: Using ep0 maxpacket: 32
[  173.207477][  T790] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  173.218079][  T790] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  173.233035][  T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  173.247273][  T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  173.260457][  T790] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  173.300326][ T5971] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  173.333602][  T790] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  173.344089][  T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.357986][  T790] usb 2-1: Product: syz
[  173.363303][  T790] usb 2-1: Manufacturer: syz
[  173.368292][  T790] usb 2-1: SerialNumber: syz
[  173.387509][  T790] usb 2-1: config 0 descriptor??
[  173.444939][ T6837] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  173.486689][ T5971] usb 6-1: Using ep0 maxpacket: 32
[  173.492914][ T5936] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  173.521838][ T5971] usb 6-1: config 0 has an invalid interface number: 83 but max is 0
[  173.531371][ T5971] usb 6-1: config 0 has no interface number 0
[  173.537722][ T5971] usb 6-1: config 0 interface 83 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  173.564709][ T5971] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  173.574992][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.587086][ T5971] usb 6-1: Product: syz
[  173.703797][ T5971] usb 6-1: Manufacturer: syz
[  173.708827][ T5971] usb 6-1: SerialNumber: syz
[  173.794731][ T5971] usb 6-1: config 0 descriptor??
[  173.800171][ T5910] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  173.804943][ T5971] redrat3 6-1:0.83: Couldn't find all endpoints
[  173.821703][ T5936] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  173.846757][ T5936] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  173.866701][ T5936] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  173.885532][ T5936] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  173.929290][ T5936] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  173.949815][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.981394][ T5936] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  173.981438][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.991987][ T5936] usb 3-1: invalid MIDI out EP 0
[  174.008144][ T5971] usb 6-1: USB disconnect, device number 11
[  174.096287][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  174.118744][ T5910] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  174.202344][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.258265][ T5910] usb 5-1: config 0 descriptor??
[  174.267741][ T5910] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  174.479350][ T5927] usb 5-1: USB disconnect, device number 7
[  174.554150][ T5936] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  174.607872][ T5936] usb 3-1: USB disconnect, device number 6
[  174.687905][ T6843] loop5: detected capacity change from 0 to 512
[  174.694885][ T6843] EXT4-fs: Ignoring removed bh option
[  174.701379][ T6843] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  174.731665][ T6843] EXT4-fs (loop5): 1 truncate cleaned up
[  174.738755][ T6843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.817837][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.960400][ T5971] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  175.023941][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.208'.
[  175.106010][ T6855] netlink: 'syz.5.208': attribute type 4 has an invalid length.
[  175.169918][ T5971] usb 5-1: Using ep0 maxpacket: 32
[  175.187997][ T6855] netlink: 152 bytes leftover after parsing attributes in process `syz.5.208'.
[  175.259914][ T5971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.293068][ T6848] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.299921][ T5971] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  175.335732][ T5971] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  175.341138][ T6855] .`: renamed from bond0 (while UP)
[  175.369890][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.396896][ T5971] usb 5-1: config 0 descriptor??
[  175.444260][ T5971] ldusb 5-1:0.0: Interrupt in endpoint not found
[  175.550965][ T5971] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  175.617579][    T9] usb 2-1: USB disconnect, device number 15
[  175.710114][ T5910] usb 5-1: USB disconnect, device number 8
[  176.000277][ T5889] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  176.151042][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  176.245542][ T5889] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  176.261545][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.304589][ T5889] usb 6-1: Product: syz
[  176.308849][ T5889] usb 6-1: Manufacturer: syz
[  176.324709][    T9] usb 2-1: Using ep0 maxpacket: 32
[  176.351275][    T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  176.434189][ T5889] usb 6-1: SerialNumber: syz
[  176.442782][ T5910] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  176.559284][    T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  176.756584][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  176.878970][ T5910] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  176.891666][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  176.925200][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.941979][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  177.000180][ T5910] usb 4-1: Product: syz
[  177.004406][ T5910] usb 4-1: Manufacturer: syz
[  177.041347][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  177.070679][ T5910] usb 4-1: SerialNumber: syz
[  177.103664][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  177.180779][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  177.282389][ T5889] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  177.300880][    T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  177.422264][ T5889] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  177.433474][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.519648][ T5910] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  177.538850][    T9] usb 2-1: config 0 descriptor??
[  177.567982][ T5910] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  177.586222][ T5910] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  177.599363][ T5910] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  177.815372][    T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  177.850686][    T9] usb 2-1: USB disconnect, device number 16
[  178.501301][ T6883] loop0: detected capacity change from 0 to 512
[  178.538572][ T6883] FAT-fs (loop0): IO charset utf�Ѿ¹Éh$Û‚‰œ#wî•w9Á‹C=Yæ’³�t¤•áÁEÅ’&y3‹_òÀ©„@¥rRh¢BÀ&5dùˆÓÁxpOêø¤ß�‚upˆ‚êš@HÆäX¡ð[ƒòæ›–[ò²â°î7VGø†¥1‰˜ yª{´îþvŽìX±œõªñ)P1uô&-÷@=õ6 not found
[  178.567506][    T9] usblp0: removed
[  178.904452][    T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  179.342952][    T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  179.416875][    T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  179.425905][ T5889] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  179.452110][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  179.495048][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  179.507770][ T5889] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  179.521406][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  179.536502][ T5889] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  179.566990][ T5889] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  179.637517][ T5889] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  179.679936][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  179.717211][  T790] usb 4-1: USB disconnect, device number 8
[  179.757689][ T5889] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  179.772421][    T9] usb 2-1: string descriptor 0 read error: -71
[  179.857732][    T9] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  179.894131][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.933324][ T5889] usb 6-1: USB disconnect, device number 12
[  179.974511][ T6899] loop3: detected capacity change from 0 to 512
[  179.982659][ T6899] EXT4-fs: Ignoring removed bh option
[  179.995725][ T6899] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  180.045882][    T9] usb 2-1: config 0 descriptor??
[  180.051677][    T9] usb 2-1: can't set config #0, error -71
[  180.068437][    T9] usb 2-1: USB disconnect, device number 17
[  180.315484][ T6899] EXT4-fs (loop3): 1 truncate cleaned up
[  180.322629][ T6899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.480465][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.734167][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'.
[  180.832000][ T6913] netlink: 'syz.1.223': attribute type 4 has an invalid length.
[  180.839676][ T6913] netlink: 152 bytes leftover after parsing attributes in process `syz.1.223'.
[  182.410082][ T5936] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  182.495051][ T6905] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.570921][ T6913] .`: renamed from bond0 (while UP)
[  182.640105][ T5936] usb 6-1: Using ep0 maxpacket: 16
[  182.673695][ T5936] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  182.719873][ T5936] usb 6-1: config 251 has 0 interfaces, different from the descriptor's value: 1
[  182.766175][ T5936] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  182.816141][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.852703][ T5936] usb 6-1: Product: syz
[  182.863890][ T5936] usb 6-1: Manufacturer: syz
[  182.874822][ T5936] usb 6-1: SerialNumber: syz
[  183.978261][ T5889] usb 6-1: USB disconnect, device number 13
[  187.670102][ T5889] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  187.695340][ T6953] loop4: detected capacity change from 0 to 512
[  187.702377][ T6953] EXT4-fs: Ignoring removed bh option
[  187.710674][ T6953] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  187.755271][ T6953] EXT4-fs (loop4): 1 truncate cleaned up
[  187.762472][ T6953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.879020][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.960067][ T5936] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  188.109896][ T5889] usb 4-1: Using ep0 maxpacket: 32
[  188.118434][ T5889] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  188.127145][ T5889] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  188.136238][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  188.145291][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  188.146737][ T5936] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  188.155004][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  188.155034][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  188.927516][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  188.939949][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  188.948153][ T5936] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  188.953360][ T5889] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  188.979907][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.015072][ T5889] usb 4-1: config 0 descriptor??
[  189.046943][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.075895][ T5936] usb 3-1: Product: syz
[  189.088424][ T5936] usb 3-1: Manufacturer: syz
[  189.093136][ T6967] syz_tun: entered allmulticast mode
[  189.106935][ T5936] usb 3-1: SerialNumber: syz
[  189.123617][ T6966] syz_tun: left allmulticast mode
[  189.144215][ T5936] usb 3-1: config 0 descriptor??
[  189.186788][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.239'.
[  189.196507][ T6971] bond1: option mode: unable to set because the bond device is up
[  189.208829][ T6971] netlink: 36 bytes leftover after parsing attributes in process `syz.5.239'.
[  189.218254][ T6971] netlink: 'syz.5.239': attribute type 4 has an invalid length.
[  189.237944][ T6971] netlink: 152 bytes leftover after parsing attributes in process `syz.5.239'.
[  189.288127][ T5889] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  189.347948][ T5889] usb 4-1: USB disconnect, device number 9
[  189.395698][ T5889] usblp0: removed
[  189.749116][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[  189.789913][ T5889] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  190.069907][ T6982] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  190.090188][ T6982] xt_CONNSECMARK: invalid mode: 0
[  190.877466][  T974] usb 3-1: USB disconnect, device number 7
[  190.990078][ T5889] usb 4-1: device not accepting address 10, error -71
[  192.111707][  T974] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  192.406972][ T5889] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  192.422873][  T974] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  192.455263][  T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.496990][ T5889] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  193.519197][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  193.525805][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  193.538843][  T974] usb 3-1: Product: syz
[  193.543307][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.552210][  T974] usb 3-1: Manufacturer: syz
[  193.556812][  T974] usb 3-1: SerialNumber: syz
[  193.561856][ T5889] usb 4-1: Product: syz
[  193.566018][ T5889] usb 4-1: Manufacturer: syz
[  193.580942][ T5889] usb 4-1: SerialNumber: syz
[  193.589033][ T5889] usb 4-1: config 0 descriptor??
[  194.082436][  T974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  194.621507][ T5889] usb 4-1: Firmware version (0.0) predates our first public release.
[  194.649898][ T5889] usb 4-1: Please update to version 0.2 or newer
[  194.657449][  T974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  194.699286][  T974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  194.754592][  T974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  194.764978][ T7014] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  194.780814][  T974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  194.796072][ T5889] usb 4-1: USB disconnect, device number 11
[  194.913057][  T974] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32
[  194.992997][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'.
[  195.124832][ T7022] bond1: option mode: unable to set because the bond device is up
[  195.337204][ T7023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.253'.
[  195.724968][ T7025] netlink: 'syz.1.253': attribute type 4 has an invalid length.
[  195.917289][ T7025] netlink: 152 bytes leftover after parsing attributes in process `syz.1.253'.
[  196.567334][    T9] usb 3-1: USB disconnect, device number 8
[  197.036764][ T7042] comedi comedi3: comedi_test: 3879 microvolt, 100000 microsecond waveform attached
[  198.269955][ T7049] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  198.540097][    T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  198.929670][    T9] usb 6-1: Using ep0 maxpacket: 16
[  198.986190][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.040660][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.067326][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.098479][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  199.124556][ T5889] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  199.144183][    T9] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  199.168097][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.305057][ T7063] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  199.411950][ T7064] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  199.420959][    T9] usb 6-1: config 0 descriptor??
[  199.453129][ T5889] usb 4-1: Using ep0 maxpacket: 16
[  199.524659][ T7068] xt_CONNSECMARK: invalid mode: 0
[  199.876083][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  200.181933][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  200.184821][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  200.209164][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  200.219205][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.227295][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  200.235158][ T5889] usb 4-1: Product: syz
[  200.239329][ T5889] usb 4-1: Manufacturer: syz
[  200.246771][    T9] usb 6-1: USB disconnect, device number 14
[  200.297628][ T5889] usb 4-1: SerialNumber: syz
[  200.397421][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'.
[  200.427595][ T5889] usb 4-1: config 0 descriptor??
[  200.488488][ T7075] netlink: 36 bytes leftover after parsing attributes in process `syz.4.269'.
[  200.611637][ T7077] netlink: 'syz.4.269': attribute type 4 has an invalid length.
[  200.619513][ T7077] netlink: 152 bytes leftover after parsing attributes in process `syz.4.269'.
[  200.844399][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  200.850551][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[  200.856741][ T5833] Bluetooth: hci1: command 0x0406 tx timeout
[  200.863098][ T5829] Bluetooth: hci3: command 0x0406 tx timeout
[  200.869451][ T5828] Bluetooth: hci4: command 0x0406 tx timeout
[  201.208443][ T7072] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.236577][ T7077] .`: renamed from bond0 (while UP)
[  202.251368][ T7082] loop5: detected capacity change from 0 to 512
[  202.260182][ T7082] EXT4-fs: Ignoring removed bh option
[  202.405303][ T7082] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  202.418388][ T5889] usb 4-1: USB disconnect, device number 12
[  202.449937][ T5971] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  202.503766][ T7082] EXT4-fs (loop5): 1 truncate cleaned up
[  202.557501][ T7082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.760842][ T5971] usb 2-1: Using ep0 maxpacket: 16
[  202.799454][ T5971] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  202.827501][ T5971] usb 2-1: config 251 has 0 interfaces, different from the descriptor's value: 1
[  202.903605][ T5971] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  202.938477][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.976277][ T5971] usb 2-1: Product: syz
[  203.043791][ T5971] usb 2-1: Manufacturer: syz
[  203.046696][ T7098] syz.0.274 uses obsolete (PF_INET,SOCK_PACKET)
[  203.080574][ T5971] usb 2-1: SerialNumber: syz
[  203.349553][    T9] usb 2-1: USB disconnect, device number 18
[  203.363342][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.162529][ T7116] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  205.454856][ T7117] loop0: detected capacity change from 0 to 32768
[  205.469994][ T7117] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.281 (7117)
[  205.503545][ T7117] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  205.513704][ T7117] BTRFS info (device loop0): using crc32c checksum algorithm
[  205.535359][ T7112] syz.1.279 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  205.761499][ T7117] BTRFS info (device loop0): enabling ssd optimizations
[  205.768531][ T7117] BTRFS info (device loop0): turning on async discard
[  205.775495][ T7117] BTRFS info (device loop0): enabling free space tree
[  205.785198][ T7117] BTRFS info (device loop0): enabling auto defrag
[  205.791837][ T7117] BTRFS info (device loop0): force zlib compression, level 3
[  205.799240][ T7117] BTRFS info (device loop0): max_inline set to 0
[  206.760293][ T7139] BTRFS info (device loop0 state M): max_inline set to 0
[  208.131837][ T5816] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  208.661981][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'.
[  209.312792][ T7147] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  209.471996][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[  209.606720][ T7156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.284'.
[  209.674257][ T7152] 8021q: adding VLAN 0 to HW filter on device bond1
[  209.701182][ T7158] netlink: 'syz.0.284': attribute type 4 has an invalid length.
[  210.571554][ T7158] netlink: 152 bytes leftover after parsing attributes in process `syz.0.284'.
[  210.678513][ T7158] .`: renamed from bond0 (while UP)
[  211.614312][ T7171] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  211.870101][ T7172] Cannot find add_set index 0 as target
[  213.554770][ T7183] hub 9-0:1.0: USB hub found
[  213.590323][ T7183] hub 9-0:1.0: 1 port detected
[  213.869937][  T974] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  213.920018][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  214.072457][  T974] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  214.119258][  T974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.132059][    T9] usb 1-1: Using ep0 maxpacket: 16
[  214.178893][  T974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  214.225623][  T974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.355050][  T974] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  214.375465][  T974] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  214.375597][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  214.396568][  T974] usb 5-1: Product: syz
[  214.400766][  T974] usb 5-1: Manufacturer: syz
[  214.417661][    T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7
[  214.463453][    T9] usb 1-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40
[  214.478226][  T974] cdc_wdm 5-1:1.0: skipping garbage
[  214.483966][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.493037][  T974] cdc_wdm 5-1:1.0: skipping garbage
[  214.500836][    T9] usb 1-1: Product: syz
[  214.507005][    T9] usb 1-1: Manufacturer: syz
[  214.508661][  T974] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  214.524231][    T9] usb 1-1: SerialNumber: syz
[  214.540153][  T974] cdc_wdm 5-1:1.0: Unknown control protocol
[  214.706951][ T7174] loop2: detected capacity change from 0 to 32768
[  214.721279][  T974] usb 5-1: USB disconnect, device number 9
[  214.775325][ T7174] JBD2: Ignoring recovery information on journal
[  215.006336][ T7174] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  215.523439][ T7208] loop5: detected capacity change from 0 to 32768
[  215.546011][ T7208] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.299 (7208)
[  215.595273][ T5818] ocfs2: Unmounting device (7,2) on (node local)
[  215.623300][ T7208] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  215.633444][ T7208] BTRFS info (device loop5): using crc32c checksum algorithm
[  215.733393][ T7208] BTRFS info (device loop5): enabling ssd optimizations
[  215.744083][ T7208] BTRFS info (device loop5): turning on async discard
[  215.750998][ T7208] BTRFS info (device loop5): enabling free space tree
[  215.757762][ T7208] BTRFS info (device loop5): enabling auto defrag
[  215.764362][ T7208] BTRFS info (device loop5): force zlib compression, level 3
[  215.773361][ T7208] BTRFS info (device loop5): max_inline set to 0
[  215.903342][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'.
[  215.913501][ T7229] bond1: option mode: unable to set because the bond device is up
[  215.923349][ T7229] netlink: 36 bytes leftover after parsing attributes in process `syz.3.301'.
[  216.151756][ T7232] netlink: 'syz.3.301': attribute type 4 has an invalid length.
[  216.466610][ T7234] BTRFS info (device loop5 state M): max_inline set to 0
[  216.893927][ T7230] xt_CONNSECMARK: invalid mode: 0
[  217.007672][ T7232] netlink: 152 bytes leftover after parsing attributes in process `syz.3.301'.
[  217.099279][ T5824] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  217.164258][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  217.190586][    T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[  217.302488][    T9] usb 1-1: USB disconnect, device number 9
[  218.386983][ T5889] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  218.803294][ T5889] usb 5-1: Using ep0 maxpacket: 16
[  218.983918][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.133241][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.767810][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.302'.
[  219.789411][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.799294][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  219.812522][ T5889] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  219.879304][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.905219][ T5889] usb 5-1: config 0 descriptor??
[  219.966466][ T7257] team0: Port device team_slave_0 removed
[  220.361703][ T5889] usbhid 5-1:0.0: can't add hid device: -71
[  220.374486][ T5889] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  220.416203][ T5889] usb 5-1: USB disconnect, device number 10
[  220.785465][ T7267] netlink: 'syz.1.310': attribute type 2 has an invalid length.
[  222.806368][ T7280] loop5: detected capacity change from 0 to 32768
[  222.828053][ T7280] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.314 (7280)
[  222.849356][ T7280] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  222.860361][ T7280] BTRFS info (device loop5): using crc32c checksum algorithm
[  222.950118][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'.
[  222.960322][ T5889] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  222.984836][ T7280] BTRFS info (device loop5): enabling ssd optimizations
[  222.991808][ T7280] BTRFS info (device loop5): turning on async discard
[  222.998578][ T7280] BTRFS info (device loop5): enabling free space tree
[  223.005413][ T7280] BTRFS info (device loop5): enabling auto defrag
[  223.011859][ T7280] BTRFS info (device loop5): force zlib compression, level 3
[  223.019234][ T7280] BTRFS info (device loop5): max_inline set to 0
[  223.021234][ T7298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.316'.
[  223.123921][ T5889] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  223.133440][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.143583][ T5889] usb 5-1: Product: syz
[  223.147809][ T5889] usb 5-1: Manufacturer: syz
[  223.157263][ T5889] usb 5-1: SerialNumber: syz
[  223.169133][ T5889] usb 5-1: config 0 descriptor??
[  223.333347][ T7299] netlink: 'syz.2.316': attribute type 4 has an invalid length.
[  223.359117][ T7282] 8021q: adding VLAN 0 to HW filter on device bond1
[  223.422831][ T7301] BTRFS info (device loop5 state M): max_inline set to 0
[  224.030261][ T5824] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  224.120586][ T7299] netlink: 152 bytes leftover after parsing attributes in process `syz.2.316'.
[  224.186266][ T7299] .`: renamed from bond0 (while UP)
[  224.554927][  T974] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  224.567942][ T5889] usb 5-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  225.169886][ T5889] f81604 5-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO
[  225.205216][ T5889] f81604 5-1:0.0: probe with driver f81604 failed with error -121
[  225.560183][  T974] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  225.595696][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.629886][  T974] usb 2-1: Product: syz
[  225.634083][  T974] usb 2-1: Manufacturer: syz
[  225.908813][  T974] usb 2-1: SerialNumber: syz
[  225.942268][  T974] usb 2-1: config 0 descriptor??
[  226.020420][ T5889] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  226.690055][  T974] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  226.710433][ T1994] usb 5-1: USB disconnect, device number 11
[  226.725799][ T5889] usb 4-1: Using ep0 maxpacket: 32
[  226.794371][ T5889] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  226.819945][ T5889] usb 4-1: config 0 has no interface number 0
[  226.846214][ T5889] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  226.871604][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.899918][ T5889] usb 4-1: Product: syz
[  226.914586][ T5889] usb 4-1: Manufacturer: syz
[  226.919233][ T5889] usb 4-1: SerialNumber: syz
[  227.470652][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  227.772270][ T5889] usb 4-1: config 0 descriptor??
[  227.931368][    T9] usb 3-1: Using ep0 maxpacket: 16
[  227.947457][    T9] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  228.034902][    T9] usb 3-1: config 251 has 0 interfaces, different from the descriptor's value: 1
[  228.055816][  T974] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  228.080891][  T974] usb 2-1: USB disconnect, device number 19
[  228.090767][    T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  228.100924][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.108958][    T9] usb 3-1: Product: syz
[  228.127596][    T9] usb 3-1: Manufacturer: syz
[  228.135937][    T9] usb 3-1: SerialNumber: syz
[  228.200236][ T5910] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  228.249332][ T5889] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  228.269440][ T5889] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  228.407004][ T5910] usb 1-1: config 6 has an invalid interface number: 104 but max is 0
[  228.415813][ T5910] usb 1-1: config 6 has no interface number 0
[  228.426315][ T5910] usb 1-1: config 6 interface 104 has no altsetting 0
[  228.436942][ T5910] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=23.79
[  228.452601][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.461179][ T5910] usb 1-1: Product: syz
[  228.468410][ T5910] usb 1-1: Manufacturer: syz
[  228.474749][ T5910] usb 1-1: SerialNumber: syz
[  228.492170][ T5889] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  228.507364][ T5889] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61
[  228.700378][ T5910] sierra 1-1:6.104: Sierra USB modem converter detected
[  228.753096][ T5910] usb 1-1: Sierra USB modem converter now attached to ttyUSB0
[  228.820885][ T5910] usb 1-1: USB disconnect, device number 10
[  228.834602][ T5910] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  228.864364][ T5910] sierra 1-1:6.104: device disconnected
[  229.292122][ T5910] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  229.469911][ T5910] usb 2-1: Using ep0 maxpacket: 8
[  229.476794][ T5910] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  229.494262][ T5910] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  229.517479][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  229.539707][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  229.561739][ T5910] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  229.589896][ T5910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  229.611163][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.741496][ T5889] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  229.826369][    T9] usb 4-1: USB disconnect, device number 13
[  229.859271][ T5910] usb 2-1: usb_control_msg returned -32
[  229.895570][ T7359] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  230.007624][  T974] usb 3-1: USB disconnect, device number 9
[  230.034569][ T5889] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  230.050011][ T5910] usbtmc 2-1:16.0: can't read capabilities
[  230.083827][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.132316][ T5889] usb 5-1: Product: syz
[  230.156917][ T5889] usb 5-1: Manufacturer: syz
[  230.179960][ T5889] usb 5-1: SerialNumber: syz
[  230.228369][ T5889] usb 5-1: config 0 descriptor??
[  230.296525][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'.
[  230.410253][ T7364] bond1: option mode: unable to set because the bond device is up
[  230.461289][ T1994] usb 2-1: USB disconnect, device number 20
[  230.470001][ T7343] usbtmc 2-1:16.0: usb_control_msg returned -71
[  230.520256][  T974] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  230.528388][ T5889] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  230.529143][ T7364] netlink: 36 bytes leftover after parsing attributes in process `syz.3.333'.
[  230.594889][ T7364] netlink: 'syz.3.333': attribute type 4 has an invalid length.
[  230.603151][ T7364] netlink: 152 bytes leftover after parsing attributes in process `syz.3.333'.
[  230.701494][  T974] usb 3-1: Using ep0 maxpacket: 8
[  230.735533][  T974] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  230.750078][  T974] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  230.761403][  T974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  230.771633][  T974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  230.793389][ T7373] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  230.870511][  T974] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  230.887482][  T974] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  230.900649][  T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.230512][  T974] usb 3-1: usb_control_msg returned -32
[  231.236663][  T974] usbtmc 3-1:16.0: can't read capabilities
[  231.731995][    T9] usb 3-1: USB disconnect, device number 10
[  231.732188][ T7362] usbtmc 3-1:16.0: usb_control_msg returned -71
[  232.533509][ T7388] loop1: detected capacity change from 0 to 32768
[  232.593930][ T7387] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19
[  232.758609][ T7388] JBD2: Ignoring recovery information on journal
[  232.831557][ T7388] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  233.194310][ T5817] ocfs2: Unmounting device (7,1) on (node local)
[  234.463397][ T5889] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  234.773315][ T5889] usb 5-1: USB disconnect, device number 12
[  234.954847][ T7402] netlink: 'syz.1.340': attribute type 2 has an invalid length.
[  237.470634][ T7406] netlink: 'syz.4.341': attribute type 2 has an invalid length.
[  239.139971][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  239.410402][    T9] usb 2-1: Using ep0 maxpacket: 8
[  239.458821][    T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  239.549398][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  239.660027][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  239.725397][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'.
[  239.787590][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  239.831167][ T7425] bond1: option mode: unable to set because the bond device is up
[  239.915200][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  239.950169][ T7426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.347'.
[  240.005565][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  240.015038][ T7429] netlink: 'syz.0.347': attribute type 4 has an invalid length.
[  240.093660][ T7429] netlink: 152 bytes leftover after parsing attributes in process `syz.0.347'.
[  240.208166][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.083056][    T9] usb 2-1: usb_control_msg returned -32
[  241.088689][    T9] usbtmc 2-1:16.0: can't read capabilities
[  241.384788][    T9] usb 2-1: USB disconnect, device number 21
[  241.431911][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'.
[  242.518437][ T7443] loop3: detected capacity change from 0 to 32768
[  242.539702][ T7444] team0: Port device team_slave_0 removed
[  242.578577][ T7443] JBD2: Ignoring recovery information on journal
[  242.732284][ T7443] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  242.830132][ T5910] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  243.736043][ T7456] loop4: detected capacity change from 0 to 32768
[  243.780889][ T7456] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.353 (7456)
[  243.926560][ T7456] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  243.936752][ T7456] BTRFS info (device loop4): using crc32c checksum algorithm
[  244.098685][ T7456] BTRFS info (device loop4): enabling ssd optimizations
[  244.110069][ T7456] BTRFS info (device loop4): turning on async discard
[  244.111605][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.116828][ T7456] BTRFS info (device loop4): enabling free space tree
[  244.116860][ T7456] BTRFS info (device loop4): enabling auto defrag
[  244.127972][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.128017][ T5910] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  244.128045][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.132572][ T5910] usb 6-1: config 0 descriptor??
[  244.137171][ T7456] BTRFS info (device loop4): force zlib compression, level 3
[  244.181361][ T7456] BTRFS info (device loop4): max_inline set to 0
[  244.395694][ T5910] usbhid 6-1:0.0: can't add hid device: -71
[  244.412086][ T5910] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  244.449741][ T5910] usb 6-1: USB disconnect, device number 15
[  244.720118][ T7483] BTRFS info (device loop4 state M): max_inline set to 0
[  245.236022][ T7484] loop1: detected capacity change from 0 to 512
[  245.254206][ T7484] EXT4-fs: Ignoring removed nomblk_io_submit option
[  245.282278][ T7484] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  245.299034][ T7486] loop0: detected capacity change from 0 to 2048
[  245.327167][ T7484] EXT4-fs (loop1): 1 truncate cleaned up
[  245.337907][ T7486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.357709][ T7484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.386537][ T5826] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  245.386896][ T7486] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.519925][ T5910] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  245.545171][ T7491] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 16: comm syz.0.357: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0
[  245.693619][ T5822] ocfs2: Unmounting device (7,3) on (node local)
[  245.716541][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.832893][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.413626][ T5910] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  246.674500][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.757600][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.781647][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.795790][ T5910] usb 6-1: config 0 descriptor??
[  246.839537][ T5910] usb 6-1: can't set config #0, error -71
[  246.909699][ T5910] usb 6-1: USB disconnect, device number 16
[  247.199347][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.364'.
[  247.254214][ T7503] bond1: option mode: unable to set because the bond device is up
[  247.290541][ T7503] netlink: 36 bytes leftover after parsing attributes in process `syz.5.364'.
[  247.325155][ T7503] netlink: 'syz.5.364': attribute type 4 has an invalid length.
[  247.342675][ T7503] netlink: 152 bytes leftover after parsing attributes in process `syz.5.364'.
[  247.399995][  T790] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  247.564773][  T790] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.582012][  T790] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  247.598571][  T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.620372][ T5910] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  247.630680][  T790] usb 3-1: config 0 descriptor??
[  247.645835][  T790] pwc: Askey VC010 type 2 USB webcam detected.
[  247.779899][ T5910] usb 5-1: Using ep0 maxpacket: 32
[  247.787171][ T5910] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  247.797793][ T5910] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  247.817451][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  247.826515][ T5889] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  247.848212][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  247.850033][ T5936] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  247.874775][ T5910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  247.894682][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  247.942781][ T5910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  247.954445][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  247.967730][ T5910] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  247.977831][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.992132][ T5910] usb 5-1: config 0 descriptor??
[  248.047972][  T790] pwc: recv_control_msg error -32 req 02 val 2b00
[  248.056307][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.056485][ T5936] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  248.076741][  T790] pwc: recv_control_msg error -32 req 02 val 2700
[  248.088802][  T790] pwc: recv_control_msg error -32 req 02 val 2c00
[  248.116595][ T5889] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  248.136644][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.178189][  T790] pwc: recv_control_msg error -32 req 04 val 1000
[  248.200783][  T790] pwc: recv_control_msg error -32 req 04 val 1300
[  248.202389][ T5889] usb 4-1: Product: syz
[  248.213167][ T5889] usb 4-1: Manufacturer: syz
[  248.227991][ T5910] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  248.238072][  T790] pwc: recv_control_msg error -32 req 04 val 1400
[  248.246753][ T5889] usb 4-1: SerialNumber: syz
[  248.248144][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.276096][ T5889] usb 4-1: config 0 descriptor??
[  248.281629][ T5936] usb 6-1: Product: syz
[  248.281656][ T5936] usb 6-1: Manufacturer: syz
[  248.281675][ T5936] usb 6-1: SerialNumber: syz
[  248.282222][  T790] pwc: recv_control_msg error -32 req 02 val 2000
[  248.296877][ T5910] usb 5-1: USB disconnect, device number 13
[  248.334706][ T5889] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  248.336899][  T790] pwc: recv_control_msg error -32 req 02 val 2100
[  248.345617][ T5910] usblp0: removed
[  248.350690][  T790] pwc: recv_control_msg error -32 req 04 val 1500
[  248.358923][  T790] pwc: recv_control_msg error -32 req 02 val 2500
[  248.379067][  T790] pwc: recv_control_msg error -32 req 02 val 2400
[  248.392995][  T790] pwc: recv_control_msg error -32 req 02 val 2600
[  248.426095][  T790] pwc: recv_control_msg error -32 req 02 val 2900
[  248.436801][  T790] pwc: recv_control_msg error -71 req 02 val 2800
[  248.450738][  T790] pwc: recv_control_msg error -71 req 04 val 1100
[  248.468042][  T790] pwc: recv_control_msg error -71 req 04 val 1200
[  248.491128][  T790] pwc: Registered as video103.
[  248.504627][  T790] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  248.592630][  T790] usb 3-1: USB disconnect, device number 11
[  248.731468][ T5936] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  248.740028][ T5889] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71
[  248.756218][ T5889] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  248.765784][ T5910] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  248.791971][ T5936] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  248.798751][ T5889] usb 4-1: USB disconnect, device number 14
[  248.834817][ T5936] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  248.869377][ T5936] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  248.896112][ T5936] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  248.921642][ T5936] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[  248.933684][ T5910] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  248.954099][ T5910] usb 5-1: config 5 has no interface number 0
[  248.980085][ T5910] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0
[  249.011740][ T5910] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  249.046195][ T5910] usb 5-1: config 5 interface 123 has no altsetting 0
[  249.058350][ T5910] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  249.083666][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.101233][ T5910] usb 5-1: Product: syz
[  249.111218][ T5910] usb 5-1: Manufacturer: syz
[  249.119472][ T5910] usb 5-1: SerialNumber: syz
[  249.228067][ T7522] loop1: detected capacity change from 0 to 32768
[  249.292412][ T7522] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.368 (7522)
[  249.365820][ T7522] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  249.367187][ T5910] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device.
[  249.392727][ T7522] BTRFS info (device loop1): using blake2b checksum algorithm
[  249.448101][ T5910] usb 5-1: USB disconnect, device number 14
[  249.831827][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'.
[  251.577080][ T7553] loop0: detected capacity change from 0 to 32768
[  252.087526][ T7553] JBD2: Ignoring recovery information on journal
[  252.125752][ T7553] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  252.218589][ T1994] usb 6-1: USB disconnect, device number 17
[  252.386936][ T7522] BTRFS error (device loop1): open_ctree failed: -4
[  252.829733][ T7566] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  253.122859][ T5889] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  253.409950][ T5889] usb 3-1: Using ep0 maxpacket: 16
[  253.427874][ T5816] ocfs2: Unmounting device (7,0) on (node local)
[  253.462537][ T5889] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  253.573987][ T5889] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  253.599333][ T5889] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  253.643981][ T5889] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  254.619938][ T5889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  254.628839][ T5889] usb 3-1: config 0 has no interface number 0
[  254.843965][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'.
[  254.874360][ T5889] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  254.914256][ T7581] bond1: option mode: unable to set because the bond device is up
[  254.928146][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  254.936098][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  254.990041][ T5889] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  255.040606][ T5889] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  255.054441][ T7581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.379'.
[  255.083973][ T5889] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  255.110131][ T7583] netlink: 'syz.1.379': attribute type 4 has an invalid length.
[  255.162502][ T5889] usb 3-1: config 0 interface 125 has no altsetting 0
[  255.380636][ T7583] netlink: 152 bytes leftover after parsing attributes in process `syz.1.379'.
[  256.050583][ T5889] usb 3-1: config 0 interface 125 has no altsetting 2
[  256.137124][ T5889] usb 3-1: string descriptor 0 read error: -71
[  256.264518][ T5889] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  256.329879][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.428502][ T5889] usb 3-1: config 0 descriptor??
[  256.491813][ T5889] usb 3-1: can't set config #0, error -71
[  256.551516][ T5889] usb 3-1: USB disconnect, device number 12
[  260.369035][ T7618] loop5: detected capacity change from 0 to 32768
[  260.454167][ T7618] JBD2: Ignoring recovery information on journal
[  260.498893][ T7618] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  260.850177][ T5910] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  261.684049][ T5824] ocfs2: Unmounting device (7,5) on (node local)
[  261.735754][ T5910] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  261.764293][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.900019][ T5910] usb 2-1: Product: syz
[  261.904219][ T5910] usb 2-1: Manufacturer: syz
[  262.067082][ T7632] loop0: detected capacity change from 0 to 512
[  262.100005][ T7632] EXT4-fs: Ignoring removed bh option
[  262.252493][ T5910] usb 2-1: SerialNumber: syz
[  262.434907][ T7632] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  263.072569][ T5910] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  263.219602][ T5910] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  263.328185][ T7632] EXT4-fs (loop0): 1 truncate cleaned up
[  263.381242][ T5910] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  263.464829][ T7641] loop2: detected capacity change from 0 to 512
[  263.498258][ T7641] EXT4-fs: Ignoring removed bh option
[  263.746462][ T7632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.782648][ T5910] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  263.801160][ T7641] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  263.848476][ T5910] usb 2-1: USB disconnect, device number 22
[  263.871058][ T7641] EXT4-fs (loop2): 1 truncate cleaned up
[  263.878135][ T7641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.022804][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.099485][ T7649] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  265.184322][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.869961][ T1994] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  266.451939][ T1994] usb 1-1: Using ep0 maxpacket: 16
[  266.461568][ T7670] loop1: detected capacity change from 0 to 1024
[  266.486359][ T1994] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  266.510914][ T7670] EXT4-fs: Ignoring removed nomblk_io_submit option
[  266.519920][ T1994] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  266.714567][ T7673] loop4: detected capacity change from 0 to 32768
[  266.729919][ T1994] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  266.738167][ T7673] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.404 (7673)
[  266.753555][ T1994] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  266.763308][ T1994] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  266.809024][ T7673] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.819553][ T7673] BTRFS info (device loop4): using crc32c checksum algorithm
[  266.839945][ T1994] usb 1-1: config 0 has no interface number 0
[  266.848999][ T1994] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  266.860937][ T1994] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  266.876418][ T1994] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  266.876735][ T7670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.888369][ T1994] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  266.916603][ T1994] usb 1-1: config 0 interface 125 has no altsetting 0
[  266.924047][ T1994] usb 1-1: config 0 interface 125 has no altsetting 2
[  266.936910][ T1994] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  266.947636][ T1994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.018500][ T1994] usb 1-1: Product: syz
[  267.028606][ T1994] usb 1-1: Manufacturer: syz
[  267.070813][ T7673] BTRFS info (device loop4): enabling ssd optimizations
[  267.077781][ T7673] BTRFS info (device loop4): turning on async discard
[  267.093424][ T7673] BTRFS info (device loop4): enabling free space tree
[  267.103395][ T7673] BTRFS info (device loop4): enabling auto defrag
[  267.109811][ T7673] BTRFS info (device loop4): force zlib compression, level 3
[  267.117238][ T7673] BTRFS info (device loop4): max_inline set to 0
[  267.132951][ T1994] usb 1-1: SerialNumber: syz
[  267.183411][ T1994] usb 1-1: config 0 descriptor??
[  267.825230][ T7697] BTRFS info (device loop4 state M): max_inline set to 0
[  268.380785][ T1994] usb 1-1: selecting invalid altsetting 2
[  268.535389][ T5826] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.625901][    C1] usb 1-1: async_complete: urb error -71
[  268.631696][    C1] usb 1-1: async_complete: urb error -71
[  268.637408][    C1] usb 1-1: async_complete: urb error -71
[  268.643113][    C1] usb 1-1: async_complete: urb error -71
[  268.652286][ T1994] get_1284_register: usb error -71
[  268.657501][ T1994] uss720 1-1:0.125: probe with driver uss720 failed with error -71
[  268.882512][ T1994] usb 1-1: USB disconnect, device number 11
[  271.081958][ T7717] netlink: 'syz.0.412': attribute type 2 has an invalid length.
[  271.160172][ T1994] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  271.571752][ T1994] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  271.659637][ T1994] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  271.823145][ T1994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  272.013715][ T1994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  272.076166][ T1994] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  272.131821][ T1994] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  272.169914][ T1994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.201120][ T1994] usb 4-1: config 0 descriptor??
[  272.207215][ T7713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  272.392775][ T7723] loop4: detected capacity change from 0 to 512
[  272.413214][ T7723] EXT4-fs: Ignoring removed bh option
[  272.571795][ T7723] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  272.728940][ T7723] EXT4-fs (loop4): 1 truncate cleaned up
[  272.825697][ T7723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.891232][ T1994] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  272.898634][ T1994] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  272.938121][ T1994] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  272.968462][ T1994] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.013818][ T1994] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.044443][ T1994] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.063130][ T1994] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.085639][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.098551][ T1994] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.129362][ T1994] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.151767][ T1994] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.210464][ T1994] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  273.591021][ T7735] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  273.599417][ T7735] overlayfs: overlapping lowerdir path
[  274.194156][ T1994] usb 4-1: USB disconnect, device number 15
[  274.356015][ T7739] fido_id[7739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  274.670226][ T1994] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  275.269935][ T1994] usb 6-1: Using ep0 maxpacket: 32
[  275.443185][ T7756] loop4: detected capacity change from 0 to 32768
[  275.484381][ T7756] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.422 (7756)
[  275.499085][ T1994] usb 6-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config
[  275.528525][ T7756] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  275.538658][ T7756] BTRFS info (device loop4): using crc32c checksum algorithm
[  275.597159][ T1994] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  275.646148][ T7756] BTRFS info (device loop4): enabling ssd optimizations
[  275.648614][ T1994] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  275.653138][ T7756] BTRFS info (device loop4): turning on async discard
[  275.653162][ T7756] BTRFS info (device loop4): enabling free space tree
[  275.653182][ T7756] BTRFS info (device loop4): enabling auto defrag
[  275.653204][ T7756] BTRFS info (device loop4): force zlib compression, level 3
[  275.653228][ T7756] BTRFS info (device loop4): max_inline set to 0
[  275.697867][ T1994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.706055][ T1994] usb 6-1: Product: syz
[  275.710362][ T1994] usb 6-1: Manufacturer: syz
[  275.714955][ T1994] usb 6-1: SerialNumber: syz
[  275.723322][ T1994] usb 6-1: config 0 descriptor??
[  275.945457][ T1994] usb 6-1: USB disconnect, device number 18
[  276.097159][ T7774] BTRFS info (device loop4 state M): max_inline set to 0
[  276.710341][ T5826] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  277.670533][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.971283][ T7784] loop3: detected capacity change from 0 to 512
[  278.037929][ T7784] EXT4-fs: Ignoring removed bh option
[  278.141313][ T7784] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  278.417594][ T7784] EXT4-fs (loop3): 1 truncate cleaned up
[  278.496094][ T7784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.446348][ T7819] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  279.454987][ T7819] overlayfs: overlapping lowerdir path
[  282.798986][ T7851] netlink: 'syz.5.441': attribute type 2 has an invalid length.
[  285.487484][ T7876] fuse: Bad value for 'fd'
[  285.759994][ T7877] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  285.769960][ T7877] overlayfs: overlapping lowerdir path
[  286.361221][ T1994] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  287.006604][ T7882] loop2: detected capacity change from 0 to 512
[  287.042529][ T7882] EXT4-fs: Ignoring removed nomblk_io_submit option
[  287.049941][ T1994] usb 5-1: Using ep0 maxpacket: 32
[  287.072561][ T1994] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  287.073848][ T7882] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  287.102806][ T1994] usb 5-1: config 2 has no interface number 0
[  287.106233][ T7882] EXT4-fs (loop2): 1 truncate cleaned up
[  287.109083][ T7880] loop1: detected capacity change from 0 to 1024
[  287.122257][ T7882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.124066][ T1994] usb 5-1: config 2 interface 88 has no altsetting 0
[  287.192470][ T7880] EXT4-fs: Ignoring removed nomblk_io_submit option
[  287.198006][ T1994] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  287.350617][ T7880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.457681][ T1994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.047175][ T1994] usb 5-1: Product: syz
[  288.051511][ T1994] usb 5-1: Manufacturer: syz
[  288.056182][ T1994] usb 5-1: SerialNumber: syz
[  288.140451][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.395990][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.682333][ T1994] usb 5-1: can't set config #2, error -71
[  288.936182][ T1994] usb 5-1: USB disconnect, device number 15
[  289.508563][ T7899] loop4: detected capacity change from 0 to 512
[  289.516344][ T7899] EXT4-fs: Ignoring removed nomblk_io_submit option
[  289.530596][ T7899] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  289.620933][ T7899] EXT4-fs (loop4): 1 truncate cleaned up
[  289.755369][ T7899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.780893][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.662700][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.428888][ T7947] loop1: detected capacity change from 0 to 1024
[  296.516426][ T7947] EXT4-fs: Ignoring removed nomblk_io_submit option
[  297.138559][ T7947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.570976][ T7962] loop3: detected capacity change from 0 to 32768
[  297.621852][ T7962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.468 (7962)
[  297.643607][ T7962] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  297.653852][ T7962] BTRFS info (device loop3): using crc32c checksum algorithm
[  297.711974][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.822770][ T7962] BTRFS info (device loop3): enabling ssd optimizations
[  298.829767][ T7962] BTRFS info (device loop3): turning on async discard
[  298.836601][ T7962] BTRFS info (device loop3): enabling free space tree
[  298.843406][ T7962] BTRFS info (device loop3): enabling auto defrag
[  298.853621][ T7962] BTRFS info (device loop3): force zlib compression, level 3
[  298.861267][ T7962] BTRFS info (device loop3): max_inline set to 0
[  298.906829][ T7962] btrfs: Unknown parameter ''
[  298.977308][ T5822] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  299.225465][ T5944] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  300.261594][ T5944] usb 3-1: Using ep0 maxpacket: 32
[  300.287516][ T5944] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  300.379948][ T5944] usb 3-1: config 0 has no interface number 0
[  300.386073][ T5944] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  300.461556][ T5944] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  300.513444][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.537303][ T5944] usb 3-1: Product: syz
[  300.541935][  T790] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  300.564826][ T5944] usb 3-1: Manufacturer: syz
[  300.612698][ T5944] usb 3-1: SerialNumber: syz
[  300.775805][ T5944] usb 3-1: config 0 descriptor??
[  300.820972][  T790] usb 5-1: Using ep0 maxpacket: 32
[  301.204049][  T790] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  301.368125][  T790] usb 5-1: config 2 has no interface number 0
[  301.489146][  T790] usb 5-1: config 2 interface 88 has no altsetting 0
[  301.534023][ T5944] usb 3-1: can't set config #0, error -71
[  301.610030][ T5944] usb 3-1: USB disconnect, device number 13
[  301.886000][  T790] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  301.899891][  T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.071865][  T790] usb 5-1: Product: syz
[  302.076668][  T790] usb 5-1: Manufacturer: syz
[  302.081622][  T790] usb 5-1: SerialNumber: syz
[  303.535672][  T790] asix 5-1:2.88: probe with driver asix failed with error -71
[  303.596214][  T790] usb 5-1: USB disconnect, device number 16
[  303.644263][ T8024] loop1: detected capacity change from 0 to 1024
[  303.677098][ T8024] EXT4-fs: Ignoring removed nomblk_io_submit option
[  303.737596][ T8024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.380949][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.529943][    T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  304.725352][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  304.759893][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.767902][    T9] usb 4-1: Product: syz
[  304.788200][    T9] usb 4-1: Manufacturer: syz
[  304.799280][    T9] usb 4-1: SerialNumber: syz
[  304.800168][ T5936] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  304.823482][    T9] usb 4-1: config 0 descriptor??
[  305.061888][    T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  305.799099][ T5936] usb 2-1: Using ep0 maxpacket: 8
[  305.821616][ T5936] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  305.860125][ T5936] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  305.895455][ T5936] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  306.131544][ T5936] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  306.141826][ T5936] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  306.180097][ T5936] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  306.220001][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.664960][ T5936] usb 2-1: usb_control_msg returned -32
[  306.690470][ T5936] usbtmc 2-1:16.0: can't read capabilities
[  306.952876][    T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  307.011213][    T9] usb 4-1: USB disconnect, device number 16
[  307.087073][ T8053] usbtmc 2-1:16.0: usb_control_msg returned -71
[  307.087473][ T5910] usb 2-1: USB disconnect, device number 23
[  308.283861][ T8107] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  308.338890][ T8106] loop0: detected capacity change from 0 to 1024
[  308.366867][ T8106] EXT4-fs: Ignoring removed nomblk_io_submit option
[  309.335816][ T8106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.613992][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.616863][ T8122] gretap0: entered promiscuous mode
[  309.850252][ T8122] vlan2: entered promiscuous mode
[  316.743997][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  316.753286][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.284453][ T8170] loop3: detected capacity change from 0 to 512
[  317.324989][ T8170] EXT4-fs: Ignoring removed nomblk_io_submit option
[  317.549566][ T8175] loop0: detected capacity change from 0 to 1024
[  318.461340][ T8175] EXT4-fs: Ignoring removed nomblk_io_submit option
[  318.663338][ T8170] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  319.117067][ T8175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.119998][ T8170] EXT4-fs (loop3): 1 truncate cleaned up
[  319.183470][ T8170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.200051][ T5944] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  320.224480][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.380080][ T5944] usb 6-1: Using ep0 maxpacket: 32
[  320.397363][ T5944] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  320.429931][ T5944] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  320.438539][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  320.613286][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  320.624859][ T5944] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  320.634555][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  320.644323][ T5944] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  320.654152][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  320.698891][ T5944] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  320.747830][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.460751][ T5944] usb 6-1: config 0 descriptor??
[  321.495598][ T8198] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  321.675382][ T5944] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  321.714012][ T5944] usb 6-1: USB disconnect, device number 19
[  321.731663][ T5944] usblp0: removed
[  321.769919][ T5999] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  321.840216][ T5910] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  322.040380][ T5999] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.067090][ T5999] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  322.085945][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.059359][ T5910] usb 5-1: Using ep0 maxpacket: 32
[  323.060273][ T5944] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  323.078256][ T5910] usb 5-1: config 0 has an invalid interface number: 83 but max is 0
[  323.999907][ T5999] usb 3-1: Product: syz
[  324.004932][ T5999] usb 3-1: Manufacturer: syz
[  324.009527][ T5999] usb 3-1: SerialNumber: syz
[  324.017208][ T5910] usb 5-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config
[  324.027574][ T5910] usb 5-1: config 0 has no interface number 0
[  324.034164][ T5910] usb 5-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  324.055195][ T5910] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  324.064407][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.073017][ T5910] usb 5-1: Product: syz
[  324.077317][ T5910] usb 5-1: Manufacturer: syz
[  324.082167][ T5910] usb 5-1: SerialNumber: syz
[  324.106856][ T5910] usb 5-1: config 0 descriptor??
[  324.112884][ T5999] usb 3-1: config 0 descriptor??
[  324.179074][ T5910] redrat3 5-1:0.83: Couldn't find all endpoints
[  324.270757][ T5999] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  324.573358][ T5999] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71
[  324.590355][ T5910] usb 5-1: USB disconnect, device number 17
[  324.600391][ T5999] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  325.222154][ T5999] usb 3-1: USB disconnect, device number 14
[  325.291345][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.532'.
[  325.526057][ T8232] hub 9-0:1.0: USB hub found
[  325.531678][ T8232] hub 9-0:1.0: 1 port detected
[  325.830232][  T790] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  325.838106][ T5944] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  326.700103][ T5944] usb 4-1: Using ep0 maxpacket: 32
[  326.705324][  T790] usb 2-1: Using ep0 maxpacket: 16
[  326.731534][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.747944][  T790] usb 2-1: unable to get BOS descriptor or descriptor too short
[  326.773996][ T5944] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  326.787999][  T790] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7
[  326.804334][  T790] usb 2-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40
[  326.816344][  T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.826143][ T5944] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  326.835665][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.843944][  T790] usb 2-1: Product: syz
[  326.882957][  T790] usb 2-1: Manufacturer: syz
[  326.889463][ T5944] usb 4-1: Product: syz
[  326.894387][  T790] usb 2-1: SerialNumber: syz
[  326.899053][ T5944] usb 4-1: Manufacturer: syz
[  326.911130][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.922194][ T5944] usb 4-1: SerialNumber: syz
[  326.937603][ T5944] usb 4-1: config 0 descriptor??
[  326.942712][ T5971] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  327.110949][ T5971] usb 3-1: Using ep0 maxpacket: 8
[  327.162505][ T5971] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  327.171076][ T5971] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  327.270372][ T5971] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  327.336622][ T5971] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  327.450508][ T1994] usb 4-1: USB disconnect, device number 17
[  327.673213][ T8250] loop4: detected capacity change from 0 to 32768
[  327.695972][ T8250] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.541 (8250)
[  327.709098][ T5971] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  327.722481][ T5971] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  327.732085][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.742187][ T5944] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  327.765181][ T8250] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  327.775325][ T8250] BTRFS info (device loop4): using crc32c checksum algorithm
[  327.878230][ T8250] BTRFS info (device loop4): enabling ssd optimizations
[  327.885285][ T8250] BTRFS info (device loop4): turning on async discard
[  327.892114][ T8250] BTRFS info (device loop4): enabling free space tree
[  327.900058][ T8250] BTRFS info (device loop4): enabling auto defrag
[  327.906461][ T8250] BTRFS info (device loop4): force zlib compression, level 3
[  327.914262][ T8250] BTRFS info (device loop4): max_inline set to 0
[  327.941918][ T5944] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  327.950846][ T5944] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  327.967252][ T5971] usb 3-1: usb_control_msg returned -32
[  328.169758][ T5944] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[  328.179581][ T5971] usbtmc 3-1:16.0: can't read capabilities
[  328.185458][ T5944] usb 1-1: config 220 has no interface number 1
[  328.199032][ T5944] usb 1-1: config 220 interface 0 has no altsetting 0
[  328.208339][ T5971] usb 3-1: USB disconnect, device number 15
[  328.229894][ T5944] usb 1-1: config 220 interface 76 has no altsetting 0
[  328.336646][ T8266] BTRFS info (device loop4 state M): max_inline set to 0
[  328.895518][ T5944] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  329.023858][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.055646][ T5826] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  329.065894][ T5944] usb 1-1: Product: syz
[  329.065918][ T5944] usb 1-1: Manufacturer: syz
[  329.065936][ T5944] usb 1-1: SerialNumber: syz
[  329.418119][ T5944] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  329.703394][ T5944] uvcvideo 1-1:220.0: No valid video chain found.
[  329.802320][ T5944] usb 1-1: USB disconnect, device number 12
[  331.408881][  T790] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  331.698213][  T790] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[  332.542525][ T8297] hub 9-0:1.0: USB hub found
[  332.565459][ T8296] loop3: detected capacity change from 0 to 512
[  332.738250][  T790] usb 2-1: USB disconnect, device number 24
[  332.784466][ T8296] EXT4-fs: Ignoring removed nomblk_io_submit option
[  332.806106][ T8297] hub 9-0:1.0: 1 port detected
[  333.100224][ T8296] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  334.928059][ T8296] EXT4-fs (loop3): 1 truncate cleaned up
[  334.947828][ T8296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.397072][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  335.909949][ T5971] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  335.989187][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.163357][ T5971] usb 5-1: config index 0 descriptor too short (expected 65183, got 72)
[  336.185451][ T5971] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  336.199555][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.393033][ T5971] usb 5-1: Product: syz
[  336.976750][ T5971] usb 5-1: Manufacturer: syz
[  336.981432][ T5971] usb 5-1: SerialNumber: syz
[  336.992585][ T5971] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  337.029941][ T5936] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  337.103971][ T5944] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  337.230017][ T5936] usb 4-1: Using ep0 maxpacket: 32
[  337.273186][ T5936] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  337.306114][ T5936] usb 4-1: config 0 has no interface number 0
[  337.602022][ T5936] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  337.615698][ T5936] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  337.630082][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.638131][ T5936] usb 4-1: Product: syz
[  337.655804][ T8334] loop5: detected capacity change from 0 to 1024
[  337.662537][ T5936] usb 4-1: Manufacturer: syz
[  337.667238][ T5936] usb 4-1: SerialNumber: syz
[  337.690076][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.694290][ T8334] EXT4-fs: Ignoring removed nomblk_io_submit option
[  337.712164][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.977281][ T5936] usb 4-1: config 0 descriptor??
[  337.983778][ T8327] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  338.880968][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.979931][ T5944] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  338.987467][ T5944] ath9k_htc: Failed to initialize the device
[  339.022084][ T8327] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  339.078662][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.136529][ T5944] usb 5-1: ath9k_htc: USB layer deinitialized
[  339.145642][ T8334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.345222][ T8353] loop0: detected capacity change from 0 to 512
[  339.437728][ T8353] EXT4-fs: Ignoring removed bh option
[  339.519979][ T8353] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  339.571056][ T5936] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  339.590493][  T790] usb 5-1: USB disconnect, device number 18
[  339.802162][ T5936] asix 4-1:0.188: probe with driver asix failed with error -32
[  339.810145][ T8353] EXT4-fs (loop0): 1 truncate cleaned up
[  340.449924][ T8353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.823786][ T5936] usb 4-1: USB disconnect, device number 18
[  340.915636][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.915777][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.080476][    T9] usb 3-1: device descriptor read/64, error -110
[  341.154780][ T8366] vlan2: entered promiscuous mode
[  341.372065][ T8366] .`: entered promiscuous mode
[  341.400403][ T8366] bond_slave_0: entered promiscuous mode
[  343.038650][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  343.060721][ T8366] bond_slave_1: entered promiscuous mode
[  343.190961][    T9] usb 3-1: device descriptor read/64, error -32
[  343.665284][    T9] usb usb3-port1: attempt power cycle
[  344.894474][ T5999] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  345.830185][ T5999] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  345.839440][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.847871][ T5999] usb 4-1: Product: syz
[  345.852713][ T5999] usb 4-1: Manufacturer: syz
[  345.857316][ T5999] usb 4-1: SerialNumber: syz
[  346.023966][ T8393] loop0: detected capacity change from 0 to 1024
[  346.135128][ T5999] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  346.236599][ T8393] EXT4-fs: Ignoring removed nomblk_io_submit option
[  346.313958][ T8394] hub 9-0:1.0: USB hub found
[  346.658957][ T8393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.706970][ T8394] hub 9-0:1.0: 1 port detected
[  346.712227][   T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  347.022820][ T5999] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  347.033499][ T5999] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  347.120036][ T5999] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  347.309945][   T24] usb 3-1: Using ep0 maxpacket: 16
[  347.345387][ T5944] usb 4-1: USB disconnect, device number 19
[  348.063219][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  348.256544][   T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7
[  348.306591][   T24] usb 3-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40
[  348.327710][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.367146][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.563089][   T24] usb 3-1: Product: syz
[  348.567742][   T24] usb 3-1: Manufacturer: syz
[  348.572421][   T24] usb 3-1: SerialNumber: syz
[  348.831173][ T8413] netlink: 340 bytes leftover after parsing attributes in process `syz.1.578'.
[  349.199416][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  349.649939][    T9] usb 4-1: Using ep0 maxpacket: 32
[  349.713592][    T9] usb 4-1: config 0 has an invalid interface number: 119 but max is 0
[  349.737873][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  349.760631][    T9] usb 4-1: config 0 has no interface number 0
[  349.788276][    T9] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  349.850082][ T8419] vlan2: entered promiscuous mode
[  349.855860][ T8419] .`: entered promiscuous mode
[  349.864461][ T8419] bond_slave_0: entered promiscuous mode
[  349.874112][ T8419] bond_slave_1: entered promiscuous mode
[  349.890890][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  349.905961][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.927282][    T9] usb 4-1: Product: syz
[  349.940957][    T9] usb 4-1: Manufacturer: syz
[  349.949901][    T9] usb 4-1: SerialNumber: syz
[  349.972944][    T9] usb 4-1: config 0 descriptor??
[  349.999371][    T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input9
[  350.010012][ T5971] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  350.039166][ T5944] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  350.243268][    T9] usb 4-1: USB disconnect, device number 20
[  350.256263][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  350.273948][ T5944] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  350.305118][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.313227][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.362813][ T5971] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  350.380987][ T5944] usb 2-1: config 0 descriptor??
[  350.596100][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.621282][ T5944] cp210x 2-1:0.0: cp210x converter detected
[  350.643434][ T5971] usb 6-1: config 0 descriptor??
[  351.513033][ T5971] isku 0003:1E7D:319C.0004: item fetching failed at offset 6/7
[  351.542227][ T5971] isku 0003:1E7D:319C.0004: parse failed
[  351.576368][ T5971] isku 0003:1E7D:319C.0004: probe with driver isku failed with error -22
[  351.616461][ T5971] usb 6-1: USB disconnect, device number 21
[  351.631620][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'.
[  351.704560][ T5944] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  351.806466][ T5944] cp210x 2-1:0.0: GPIO initialisation failed: -524
[  351.893178][ T8433] bridge1: port 1(veth3) entered blocking state
[  351.899638][ T8433] bridge1: port 1(veth3) entered disabled state
[  352.670676][ T1994] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  352.697621][ T5944] usb 2-1: cp210x converter now attached to ttyUSB0
[  352.714821][ T5944] usb 2-1: USB disconnect, device number 25
[  352.719242][ T8433] veth3: entered allmulticast mode
[  352.753256][ T5944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  352.770364][ T8433] veth3: entered promiscuous mode
[  352.800334][ T5944] cp210x 2-1:0.0: device disconnected
[  352.865802][ T1994] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  353.068887][ T1994] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  353.084872][ T1994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  353.095822][ T1994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  353.107231][ T1994] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  353.120234][ T1994] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  353.129930][ T1994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.145023][ T1994] usb 5-1: config 0 descriptor??
[  353.161612][ T8435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  353.168578][ T8437] bridge1: port 2(veth0_to_bond) entered blocking state
[  353.810080][ T8437] bridge1: port 2(veth0_to_bond) entered disabled state
[  353.937638][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  353.946520][   T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  353.970118][ T8437] veth0_to_bond: entered allmulticast mode
[  353.999504][ T8437] veth0_to_bond: entered promiscuous mode
[  354.033848][ T1994] hid_parser_main: 1 callbacks suppressed
[  354.033865][ T1994] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  354.057697][ T1994] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  354.069966][ T1994] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  354.140124][ T1994] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  354.169618][ T1994] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  354.199649][ T1994] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  354.344862][ T5910] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  354.432383][ T1994] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  354.451414][ T1994] usb 5-1: USB disconnect, device number 19
[  355.290977][ T5910] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  355.315880][ T8457] fido_id[8457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  355.340269][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.363508][ T5910] usb 1-1: Product: syz
[  355.367684][ T5910] usb 1-1: Manufacturer: syz
[  355.386984][ T5999] usb 3-1: USB disconnect, device number 19
[  355.425046][ T5910] usb 1-1: SerialNumber: syz
[  355.471230][ T8459] loop5: detected capacity change from 0 to 1024
[  355.515478][ T8459] EXT4-fs: Ignoring removed nomblk_io_submit option
[  355.556104][ T8459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.869672][ T5910] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  355.881871][ T5910] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  355.892412][ T5910] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  357.464130][ T5910] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  357.631523][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.932913][ T1994] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  358.180945][ T8489] 8021q: adding VLAN 0 to HW filter on device .`
[  358.239557][ T8489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  358.513296][ T1994] usb 3-1: Using ep0 maxpacket: 32
[  358.585201][ T5999] usb 1-1: USB disconnect, device number 13
[  358.726250][ T1994] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  358.740012][ T1994] usb 3-1: config 0 has no interface number 0
[  358.746130][ T1994] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  358.761440][ T8483] gretap0: entered promiscuous mode
[  358.762176][ T1994] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  358.776084][ T1994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.784168][ T1994] usb 3-1: Product: syz
[  358.788382][ T1994] usb 3-1: Manufacturer: syz
[  358.793063][ T1994] usb 3-1: SerialNumber: syz
[  358.800904][ T1994] usb 3-1: config 0 descriptor??
[  358.806789][ T8478] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  359.171645][ T8478] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  360.340811][ T1994] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  360.369159][ T1994] asix 3-1:0.188: probe with driver asix failed with error -61
[  361.673996][ T5910] usb 3-1: USB disconnect, device number 20
[  362.889805][ T8526] loop0: detected capacity change from 0 to 1024
[  362.897345][ T8526] EXT4-fs: Ignoring removed nomblk_io_submit option
[  364.128993][ T8526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.251248][ T5910] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  365.298442][  T790] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  365.312027][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.456045][  T790] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  365.496763][  T790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.512954][  T790] usb 6-1: Product: syz
[  365.517662][  T790] usb 6-1: Manufacturer: syz
[  365.537960][  T790] usb 6-1: SerialNumber: syz
[  365.958315][  T790] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  366.134279][  T790] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  366.180648][  T790] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  366.295539][ T5910] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  366.310117][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  366.340326][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 12592, setting to 64
[  366.378659][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  366.567022][ T5910] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  366.594473][  T790] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[  367.341907][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  367.354633][ T5910] usb 3-1: Product: syz
[  367.358810][ T5910] usb 3-1: Manufacturer: syz
[  367.379900][ T5910] usb 3-1: SerialNumber: syz
[  367.389271][ T8552] loop0: detected capacity change from 0 to 512
[  367.398868][ T5910] usb 3-1: config 0 descriptor??
[  367.405122][ T8541] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  367.449906][ T8552] EXT4-fs: Ignoring removed bh option
[  367.506684][ T8552] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  367.557291][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'.
[  367.573905][ T1994] usb 6-1: USB disconnect, device number 22
[  367.597152][ T5910] usb 3-1: can't set config #0, error -71
[  367.617473][ T8552] EXT4-fs (loop0): 1 truncate cleaned up
[  367.669943][ T5910] usb 3-1: USB disconnect, device number 21
[  367.768525][ T8552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.921959][ T5999] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  368.164029][ T8581] hub 9-0:1.0: USB hub found
[  368.169969][ T8581] hub 9-0:1.0: 1 port detected
[  368.209927][ T5999] usb 5-1: Using ep0 maxpacket: 32
[  368.220178][ T5999] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  368.239377][ T5999] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  368.275463][ T5999] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  368.289877][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.331267][ T5999] usb 5-1: Product: syz
[  368.370414][ T5999] usb 5-1: Manufacturer: syz
[  368.389676][ T5999] usb 5-1: SerialNumber: syz
[  368.428177][ T5999] usb 5-1: config 0 descriptor??
[  368.451027][ T5910] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  368.649952][ T5910] usb 3-1: Using ep0 maxpacket: 16
[  368.715596][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short
[  368.741118][ T5999] usb 5-1: USB disconnect, device number 20
[  368.752773][ T5910] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7
[  368.767735][ T5910] usb 3-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40
[  368.778327][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.893304][ T5910] usb 3-1: Product: syz
[  369.018315][ T8590] loop1: detected capacity change from 0 to 512
[  369.028249][ T8590] EXT4-fs: Ignoring removed bh option
[  369.068681][ T8590] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  369.120573][ T5910] usb 3-1: Manufacturer: syz
[  369.345978][ T5910] usb 3-1: SerialNumber: syz
[  369.481290][ T8590] EXT4-fs (loop1): 1 truncate cleaned up
[  369.519783][ T8590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.467403][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.189690][ T8604] loop4: detected capacity change from 0 to 2048
[  372.871487][ T8604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.931777][ T8604] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  373.306803][   T30] audit: type=1804 audit(1772382003.237:3): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.626" name="/newroot/102/file0/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  374.039312][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.218691][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.503085][ T5910] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  374.520415][ T5910] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  374.624351][ T5910] usb 3-1: USB disconnect, device number 22
[  375.040886][ T8637] 8021q: adding VLAN 0 to HW filter on device .`
[  375.506207][ T8637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.832428][ T8634] hub 9-0:1.0: USB hub found
[  375.840304][ T8634] hub 9-0:1.0: 1 port detected
[  375.899723][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'.
[  376.249916][  T790] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  376.469961][  T790] usb 5-1: Using ep0 maxpacket: 16
[  376.479554][  T790] usb 5-1: unable to get BOS descriptor or descriptor too short
[  377.806123][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  377.949942][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  378.173887][ T8664] netlink: 340 bytes leftover after parsing attributes in process `syz.5.640'.
[  379.457010][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'.
[  380.000438][ T8672] team0: Port device team_slave_0 removed
[  380.149010][ T8674] loop0: detected capacity change from 0 to 512
[  380.261155][ T8674] EXT4-fs: Ignoring removed nomblk_io_submit option
[  380.320407][ T8674] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  380.405183][ T8674] EXT4-fs (loop0): 1 truncate cleaned up
[  380.682893][ T8674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.864407][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.645'.
[  382.890039][  T790] usb 5-1: unable to read config index 0 descriptor/start: -110
[  382.897741][  T790] usb 5-1: can't read configurations, error -110
[  382.982003][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.080044][  T790] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  383.266558][  T790] usb 5-1: device descriptor read/64, error -32
[  383.299936][ T5999] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  383.470219][ T5999] usb 6-1: Using ep0 maxpacket: 16
[  383.514465][ T5999] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  383.643920][  T790] usb usb5-port1: attempt power cycle
[  383.668094][ T5999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  383.904127][ T5999] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  384.125014][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.195450][ T5999] usb 6-1: Product: syz
[  384.199638][ T5999] usb 6-1: Manufacturer: syz
[  384.243680][ T5999] usb 6-1: SerialNumber: syz
[  384.271544][ T5999] usb 6-1: config 0 descriptor??
[  384.304867][ T5999] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  384.347310][ T5999] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  384.515836][ T8714] loop0: detected capacity change from 0 to 512
[  384.558323][ T8714] EXT4-fs: Ignoring removed nomblk_io_submit option
[  384.591337][ T8714] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  384.644155][ T8714] EXT4-fs (loop0): 1 truncate cleaned up
[  384.673264][ T8714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.894051][ T5999] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  384.928781][ T5999] em28xx 6-1:0.0: Config register raw data: 0x00
[  385.620971][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.024865][ T5999] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  386.990031][ T5999] usb 1-1: Using ep0 maxpacket: 8
[  387.000652][ T5999] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  387.080722][ T5910] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  387.337675][    T9] usb 6-1: USB disconnect, device number 23
[  387.348243][ T5999] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  387.960120][ T5910] usb 2-1: Using ep0 maxpacket: 16
[  387.969917][    T9] em28xx 6-1:0.0: Disconnecting em28xx
[  387.978548][ T5999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.016919][ T5910] usb 2-1: unable to get BOS descriptor or descriptor too short
[  388.026423][    T9] em28xx 6-1:0.0: Freeing device
[  388.034976][ T5999] usb 1-1: Product: syz
[  388.148277][ T5999] usb 1-1: Manufacturer: syz
[  388.284331][ T5999] usb 1-1: SerialNumber: syz
[  388.319974][ T5910] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7
[  388.389812][ T5999] usb 1-1: config 0 descriptor??
[  388.715654][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'.
[  391.101207][ T5999] msi2500 1-1:0.0: Registered as swradio24
[  391.107086][ T5999] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  391.316086][ T5999] usb 1-1: USB disconnect, device number 14
[  391.852260][ T8774] vlan2: entered promiscuous mode
[  392.187470][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'.
[  392.423161][ T8783] hub 9-0:1.0: USB hub found
[  392.429999][ T8783] hub 9-0:1.0: 1 port detected
[  392.720285][ T5910] usb 2-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40
[  392.761813][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.954561][ T5910] usb 2-1: Product: syz
[  392.976349][ T5910] usb 2-1: can't set config #1, error -71
[  392.987566][ T5910] usb 2-1: USB disconnect, device number 26
[  393.009936][ T5889] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  393.999911][ T5889] usb 4-1: Using ep0 maxpacket: 16
[  394.273904][ T8795] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  395.238392][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'.
[  395.919341][ T8812] netlink: 340 bytes leftover after parsing attributes in process `syz.0.674'.
[  396.672757][ T8811] syzkaller0: entered promiscuous mode
[  396.678302][ T8811] syzkaller0: entered allmulticast mode
[  396.821941][ T8816] loop0: detected capacity change from 0 to 512
[  396.850984][ T8816] EXT4-fs: Ignoring removed nomblk_io_submit option
[  396.913140][ T8816] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  397.032333][ T8816] EXT4-fs (loop0): 1 truncate cleaned up
[  397.100384][ T8816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.299497][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.535214][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short
[  399.545513][ T5889] usb 4-1: unable to read config index 0 descriptor/start: -32
[  399.553713][ T5889] usb 4-1: chopping to 0 config(s)
[  399.558840][ T5889] usb 4-1: can't read configurations, error -32
[  399.699942][ T5889] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  399.870169][ T5889] usb 4-1: device descriptor read/64, error -32
[  400.061145][ T5889] usb usb4-port1: attempt power cycle
[  400.853066][ T5889] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  400.942346][  T790] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  401.193398][ T8859] loop5: detected capacity change from 0 to 32768
[  401.201352][ T5889] usb 4-1: device not accepting address 23, error -71
[  401.211507][ T8859] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.692 (8859)
[  401.235168][  T790] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  401.246163][ T8859] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  401.256285][ T8859] BTRFS info (device loop5): using crc32c checksum algorithm
[  401.614936][  T790] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  401.626186][  T790] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  401.772552][  T790] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  401.783279][  T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  401.794493][  T790] usb 1-1: Product: syz
[  401.798774][  T790] usb 1-1: Manufacturer: syz
[  401.805171][  T790] usb 1-1: SerialNumber: syz
[  402.070848][ T8873] loop3: detected capacity change from 0 to 512
[  402.088998][ T8873] EXT4-fs: Ignoring removed bh option
[  402.121774][ T8873] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  402.262137][ T8859] BTRFS info (device loop5): enabling ssd optimizations
[  402.269139][ T8859] BTRFS info (device loop5): turning on async discard
[  402.275979][ T8859] BTRFS info (device loop5): enabling free space tree
[  402.282778][ T8859] BTRFS info (device loop5): enabling auto defrag
[  402.289187][ T8859] BTRFS info (device loop5): force zlib compression, level 3
[  402.296771][ T8859] BTRFS info (device loop5): max_inline set to 0
[  402.312048][ T8873] EXT4-fs (loop3): 1 truncate cleaned up
[  402.321239][ T8873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.335713][  T790] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  402.728131][ T8886] BTRFS info (device loop5 state M): max_inline set to 0
[  403.401764][ T5824] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  403.437533][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.604201][   T24] usb 1-1: USB disconnect, device number 15
[  403.657785][   T24] usblp0: removed
[  406.010599][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  406.234062][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  406.243468][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  406.251518][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  406.259134][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  408.310344][ T5135] Bluetooth: hci6: command tx timeout
[  408.448902][ T8925] binder: 8923:8925 ioctl 4018620d 0 returned -22
[  409.548140][ T8940] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  409.556413][ T8940] overlayfs: overlapping lowerdir path
[  409.914784][ T8957] netlink: zone id is out of range
[  409.921229][ T8957] netlink: zone id is out of range
[  409.926987][ T8957] netlink: zone id is out of range
[  409.932227][ T8957] netlink: zone id is out of range
[  409.937385][ T8957] netlink: zone id is out of range
[  410.604785][ T5135] Bluetooth: hci6: command tx timeout
[  410.772395][ T8901] chnl_net:caif_netlink_parms(): no params data found
[  410.921126][ T8954] loop5: detected capacity change from 0 to 512
[  410.999990][ T8954] EXT4-fs: Ignoring removed bh option
[  411.039284][ T8954] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  412.141063][ T8954] EXT4-fs: error -4 creating inode table initialization thread
[  412.736655][ T5135] Bluetooth: hci6: command tx timeout
[  412.820479][ T8954] EXT4-fs (loop5): mount failed
[  413.550789][ T8972] loop3: detected capacity change from 0 to 32768
[  413.563364][ T8972] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.713 (8972)
[  413.576993][ T8967] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  413.589209][ T8972] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  413.600099][ T8972] BTRFS info (device loop3): using crc32c checksum algorithm
[  413.633539][ T8967] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  413.651228][ T8967] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  413.755203][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.770041][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.936543][ T8901] bridge_slave_0: entered allmulticast mode
[  414.706605][ T8901] bridge_slave_0: entered promiscuous mode
[  414.736972][ T8972] BTRFS info (device loop3): enabling ssd optimizations
[  414.741185][ T8901] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.744000][ T8972] BTRFS info (device loop3): turning on async discard
[  414.751069][ T8901] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.758025][ T8972] BTRFS info (device loop3): enabling free space tree
[  414.771577][ T8972] BTRFS info (device loop3): enabling auto defrag
[  414.777979][ T8972] BTRFS info (device loop3): force zlib compression, level 3
[  414.785385][ T8972] BTRFS info (device loop3): max_inline set to 0
[  414.794725][ T5135] Bluetooth: hci6: command tx timeout
[  414.810127][ T8901] bridge_slave_1: entered allmulticast mode
[  414.838164][ T8901] bridge_slave_1: entered promiscuous mode
[  414.859964][   T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  415.115149][ T1994] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  415.149565][ T5889] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  415.201726][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  415.279957][ T9002] BTRFS info (device loop3 state M): max_inline set to 0
[  415.371549][ T1994] usb 3-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config
[  415.402221][   T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  415.768441][ T8901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  415.828777][ T8901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  415.854986][ T5889] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  415.880266][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  415.900671][ T1994] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  415.914719][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  415.934169][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  415.936876][ T5822] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  415.943532][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  415.963428][ T5889] usb 2-1: config 0 has no interface number 0
[  415.963907][   T24] usb 6-1: Product: syz
[  415.974116][   T24] usb 6-1: Manufacturer: syz
[  415.978931][   T24] usb 6-1: SerialNumber: syz
[  415.983712][ T1994] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  415.992910][ T1994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  416.001229][ T1994] usb 3-1: Product: syz
[  416.005411][ T1994] usb 3-1: Manufacturer: syz
[  416.009518][ T5889] usb 2-1: too many endpoints for config 0 interface 251 altsetting 188: 85, using maximum allowed: 30
[  416.010203][ T1994] usb 3-1: SerialNumber: syz
[  416.036244][ T5889] usb 2-1: config 0 interface 251 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 85
[  416.068970][ T5889] usb 2-1: config 0 interface 251 has no altsetting 0
[  416.093669][ T5889] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  416.093767][ T1994] usb 3-1: config 0 descriptor??
[  416.112989][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.507885][   T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  416.887763][ T1994] radio-si470x 3-1:0.0: could not find interrupt in endpoint
[  417.037742][ T5889] usb 2-1: Product: syz
[  417.042044][ T5889] usb 2-1: Manufacturer: syz
[  417.046868][ T5889] usb 2-1: SerialNumber: syz
[  417.056057][ T1994] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[  417.111056][ T5889] usb 2-1: config 0 descriptor??
[  417.120646][ T5889] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  417.132402][ T1994] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  417.227294][ T8901] team0: Port device team_slave_0 added
[  417.237200][ T1994] usb 3-1: USB disconnect, device number 23
[  417.261115][ T9006] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  417.280122][  T974] usb 6-1: USB disconnect, device number 24
[  417.284623][ T8901] team0: Port device team_slave_1 added
[  417.291865][  T974] usblp0: removed
[  417.317577][ T9006] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  417.368743][ T9006] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  417.549022][ T5889] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71
[  417.550327][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.590080][ T5889] gspca_pac7302 2-1:0.251: probe with driver gspca_pac7302 failed with error -71
[  417.591963][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.667628][ T5889] usb 2-1: USB disconnect, device number 27
[  417.896168][ T8901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.910712][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.917934][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.945921][ T8901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.256288][ T6090] ==================================================================
[  419.264394][ T6090] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300
[  419.271514][ T6090] Read of size 8 at addr ffff888034fe80a8 by task khidpd_00050001/6090
[  419.279750][ T6090] 
[  419.282078][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: khidpd_00050001 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  419.282113][ T6090] Tainted: [L]=SOFTLOCKUP
[  419.282123][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  419.282138][ T6090] Call Trace:
[  419.282148][ T6090]  <TASK>
[  419.282158][ T6090]  dump_stack_lvl+0xe8/0x150
[  419.282195][ T6090]  print_report+0xba/0x230
[  419.282226][ T6090]  ? __mutex_lock+0x812/0x1300
[  419.282250][ T6090]  kasan_report+0x117/0x150
[  419.282282][ T6090]  ? __mutex_lock+0x812/0x1300
[  419.282312][ T6090]  __mutex_lock+0x812/0x1300
[  419.282340][ T6090]  ? __mutex_lock+0x5ac/0x1300
[  419.282368][ T6090]  ? l2cap_unregister_user+0x6a/0x1b0
[  419.282398][ T6090]  ? __pfx___mutex_lock+0x10/0x10
[  419.282428][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.282460][ T6090]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  419.282497][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.282526][ T6090]  ? lockdep_hardirqs_on+0x7a/0x110
[  419.282552][ T6090]  l2cap_unregister_user+0x6a/0x1b0
[  419.282580][ T6090]  hidp_session_thread+0x3cb/0x440
[  419.282613][ T6090]  ? __pfx_hidp_session_thread+0x10/0x10
[  419.282654][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.282684][ T6090]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  419.282715][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.282747][ T6090]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  419.282778][ T6090]  ? __kthread_parkme+0x7a/0x1f0
[  419.282814][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.282843][ T6090]  ? __kthread_parkme+0x19c/0x1f0
[  419.282882][ T6090]  kthread+0x388/0x470
[  419.282905][ T6090]  ? __pfx_hidp_session_thread+0x10/0x10
[  419.282934][ T6090]  ? __pfx_kthread+0x10/0x10
[  419.282957][ T6090]  ret_from_fork+0x51e/0xb90
[  419.282992][ T6090]  ? __pfx_ret_from_fork+0x10/0x10
[  419.283023][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.283052][ T6090]  ? __switch_to+0xc7d/0x1450
[  419.283081][ T6090]  ? __pfx_kthread+0x10/0x10
[  419.283105][ T6090]  ret_from_fork_asm+0x1a/0x30
[  419.283153][ T6090]  </TASK>
[  419.283162][ T6090] 
[  419.483464][ T6090] The buggy address belongs to the physical page:
[  419.489889][ T6090] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034fea700 pfn:0x34fe8
[  419.499955][ T6090] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  419.507069][ T6090] raw: 00fff00000000000 ffffea0001ba7f08 ffff8880b8640c40 0000000000000000
[  419.515652][ T6090] raw: ffff888034fea700 0000000000000000 00000000ffffffff 0000000000000000
[  419.524226][ T6090] page dumped because: kasan: bad access detected
[  419.530625][ T6090] page_owner tracks the page as freed
[  419.535983][ T6090] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5826, tgid 5826 (syz-executor), ts 75196839950, free_ts 419209723428
[  419.553960][ T6090]  post_alloc_hook+0x231/0x280
[  419.558731][ T6090]  get_page_from_freelist+0x24dc/0x2580
[  419.564284][ T6090]  __alloc_frozen_pages_noprof+0x18d/0x380
[  419.570099][ T6090]  alloc_pages_mpol+0x232/0x4a0
[  419.574956][ T6090]  ___kmalloc_large_node+0x4e/0x150
[  419.580160][ T6090]  __kmalloc_large_node_noprof+0x18/0x90
[  419.585809][ T6090]  __kmalloc_noprof+0x3e8/0x760
[  419.590661][ T6090]  hci_alloc_dev_priv+0x28/0x2060
[  419.595691][ T6090]  vhci_create_device+0x120/0x650
[  419.600724][ T6090]  vhci_write+0x3ce/0x4a0
[  419.605084][ T6090]  vfs_write+0x61d/0xb90
[  419.609327][ T6090]  ksys_write+0x150/0x270
[  419.613657][ T6090]  do_syscall_64+0x14d/0xf80
[  419.618248][ T6090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.624141][ T6090] page last free pid 8756 tgid 8753 stack trace:
[  419.630458][ T6090]  __free_frozen_pages+0xc2b/0xdb0
[  419.635568][ T6090]  bt_host_release+0x82/0x90
[  419.640170][ T6090]  device_release+0x9e/0x1d0
[  419.644766][ T6090]  kobject_put+0x228/0x560
[  419.649183][ T6090]  vhci_release+0x15a/0x1a0
[  419.653695][ T6090]  __fput+0x44f/0xa70
[  419.657685][ T6090]  task_work_run+0x1d9/0x270
[  419.662275][ T6090]  do_exit+0x69b/0x2320
[  419.666427][ T6090]  do_group_exit+0x21b/0x2d0
[  419.671016][ T6090]  get_signal+0x1284/0x1330
[  419.675522][ T6090]  arch_do_signal_or_restart+0xbc/0x830
[  419.681066][ T6090]  exit_to_user_mode_loop+0x86/0x480
[  419.686350][ T6090]  do_syscall_64+0x32d/0xf80
[  419.690936][ T6090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.696836][ T6090] 
[  419.699149][ T6090] Memory state around the buggy address:
[  419.704764][ T6090]  ffff888034fe7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  419.712808][ T6090]  ffff888034fe8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  419.720849][ T6090] >ffff888034fe8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  419.728885][ T6090]                                   ^
[  419.734231][ T6090]  ffff888034fe8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  419.742279][ T6090]  ffff888034fe8180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  419.750330][ T6090] ==================================================================
[  419.759959][ T6090] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  419.767159][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: khidpd_00050001 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  419.778439][ T6090] Tainted: [L]=SOFTLOCKUP
[  419.782751][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  419.792800][ T6090] Call Trace:
[  419.796071][ T6090]  <TASK>
[  419.798995][ T6090]  vpanic+0x56c/0xa60
[  419.802989][ T6090]  ? __pfx_vpanic+0x10/0x10
[  419.807508][ T6090]  panic+0xc5/0xd0
[  419.811238][ T6090]  ? __pfx_panic+0x10/0x10
[  419.815665][ T6090]  ? __mutex_lock+0x812/0x1300
[  419.820435][ T6090]  ? __mutex_lock+0x812/0x1300
[  419.825200][ T6090]  check_panic_on_warn+0x89/0xb0
[  419.830312][ T6090]  ? __mutex_lock+0x812/0x1300
[  419.835076][ T6090]  end_report+0x73/0x180
[  419.839315][ T6090]  ? __mutex_lock+0x812/0x1300
[  419.844070][ T6090]  kasan_report+0x128/0x150
[  419.848572][ T6090]  ? __mutex_lock+0x812/0x1300
[  419.853337][ T6090]  __mutex_lock+0x812/0x1300
[  419.857928][ T6090]  ? __mutex_lock+0x5ac/0x1300
[  419.862690][ T6090]  ? l2cap_unregister_user+0x6a/0x1b0
[  419.868064][ T6090]  ? __pfx___mutex_lock+0x10/0x10
[  419.873086][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.878721][ T6090]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  419.884532][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.890162][ T6090]  ? lockdep_hardirqs_on+0x7a/0x110
[  419.895350][ T6090]  l2cap_unregister_user+0x6a/0x1b0
[  419.900544][ T6090]  hidp_session_thread+0x3cb/0x440
[  419.905654][ T6090]  ? __pfx_hidp_session_thread+0x10/0x10
[  419.911282][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.916914][ T6090]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  419.923153][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.928780][ T6090]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  419.935017][ T6090]  ? __kthread_parkme+0x7a/0x1f0
[  419.939956][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.945584][ T6090]  ? __kthread_parkme+0x19c/0x1f0
[  419.950613][ T6090]  kthread+0x388/0x470
[  419.954674][ T6090]  ? __pfx_hidp_session_thread+0x10/0x10
[  419.960302][ T6090]  ? __pfx_kthread+0x10/0x10
[  419.964898][ T6090]  ret_from_fork+0x51e/0xb90
[  419.969488][ T6090]  ? __pfx_ret_from_fork+0x10/0x10
[  419.974595][ T6090]  ? srso_alias_return_thunk+0x5/0xfbef5
[  419.980224][ T6090]  ? __switch_to+0xc7d/0x1450
[  419.984900][ T6090]  ? __pfx_kthread+0x10/0x10
[  419.989477][ T6090]  ret_from_fork_asm+0x1a/0x30
[  419.994338][ T6090]  </TASK>
[  419.997621][ T6090] Kernel Offset: disabled
[  420.001934][ T6090] Rebooting in 86400 seconds..