last executing test programs:

27m47.31534083s ago: executing program 32 (id=158):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000b00), 0x0, 0x4d8, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x8041, 0x0)
write$dsp(r2, &(0x7f0000000340)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000200)="1a52b8cd5ecb", &(0x7f0000000a40)="e5307700e66b8125a9f5ed60910a84b04b3be1853ad49c04efc1ee6adbb7f55d6036c72c26d0b81d433f8d387458726178a1b62d87c19b964a58dcad0e1c28fc0c5f887112e5ea47a0cd598aca19463b15e6f611e88b9637c8cec26426de57e58887182d6b0c1d7a011548572cdc240dc4b49dd05ae967f1a1e8654a077e296c4448630e7be8c7e6a7b669dbcf8ccb4c3eea9868307c4bb43ead879fd4dca70b"}}, &(0x7f00000003c0))
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000440)=0x2dff)

27m22.603135982s ago: executing program 3 (id=209):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x8042, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="390242000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007d351f5bde", @ANYRES32=0x0, @ANYRES32=0x0], 0x239)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./trace\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1, 0xf, 0x94b8)
ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0)
syz_usb_connect$sierra_net(0x6, 0x0, 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)

27m19.395834687s ago: executing program 3 (id=213):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x141080, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x2, 0x7, 0x4, 0x2000000, 0xb, "4b94b89fc43c3328eae4cae1f5eba329e6f216"})

27m17.544608064s ago: executing program 3 (id=214):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
read$char_usb(r1, &(0x7f0000000700)=""/117, 0x75)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='#')

27m14.447640948s ago: executing program 3 (id=223):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f00000000c0)={[{@grpquota}]}, 0x1, 0xbbc, &(0x7f0000000100)="$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")
open(&(0x7f0000001500)='./bus\x00', 0x400141042, 0x22)
mount(&(0x7f0000001540)=@loop={'/dev/loop', 0x0}, &(0x7f0000001580)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f00000015c0)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x402)

27m12.330357502s ago: executing program 3 (id=228):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000980)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001b80)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x28}}}}}}}, 0x66)

27m10.651526832s ago: executing program 3 (id=231):
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x236, &(0x7f0000000180)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0xb, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x24}}, 0x400800c)

27m9.400483599s ago: executing program 33 (id=231):
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x236, &(0x7f0000000180)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0xb, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x24}}, 0x400800c)

26m35.523423078s ago: executing program 2 (id=298):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2100, 0x108)
r1 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x200)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8b, 0xd)

26m35.20276548s ago: executing program 2 (id=301):
timer_create(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000580)=0x1, 0x4)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000140)={0x6, {"000004a31887a80000002c4b2e00", "e5fad343e15e00deffffffff0500"}, 0x8003eb3, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x48})

26m28.233307946s ago: executing program 2 (id=313):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000600)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b1b70500000000000400", 0x800, 0x1})

26m27.561083674s ago: executing program 2 (id=314):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f00000000c0)={[{@grpquota}]}, 0x1, 0xbbc, &(0x7f0000000100)="$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")
open(&(0x7f0000001500)='./bus\x00', 0x400141042, 0x22)
mount(&(0x7f0000001540)=@loop={'/dev/loop', 0x0}, &(0x7f0000001580)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f00000015c0)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x402)

26m26.867911394s ago: executing program 2 (id=317):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/ocfs2/node/node0\x00', 0x1ff)
rmdir(&(0x7f0000000580)='./config/cluster/ocfs2/node/node0\x00')

26m25.035867399s ago: executing program 2 (id=320):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2100, 0x108)
r1 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x200)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8b, 0xd)

26m22.242643032s ago: executing program 34 (id=320):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2100, 0x108)
r1 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x200)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8b, 0xd)

25m39.835984035s ago: executing program 4 (id=391):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x48020, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x890)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)='add syz0 127.0.0.1+', 0x13)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendfile(r3, r4, 0x0, 0x8000fb00)

25m36.876175064s ago: executing program 4 (id=394):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/152, 0x98}], 0x1, &(0x7f0000000440)=[{&(0x7f0000000480)=""/95, 0x5f}], 0x1, 0x0)

25m36.81865072s ago: executing program 4 (id=395):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
mount(0x0, 0x0, &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none')
openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
add_key(&(0x7f00000005c0)='encrypted\x00', &(0x7f0000000700), &(0x7f0000000740), 0xca, 0xfffffffffffffffe)

25m35.817851892s ago: executing program 4 (id=396):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]})
r1 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000780)='./dm0\x00', 0x2, 0x0)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, 0x0)

25m35.528166431s ago: executing program 4 (id=399):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x8082, 0x10)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/21, 0x15}], 0x1)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, 0x0)
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000140))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x40001, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x400000000a882, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000440)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f00000005c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000600)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b1b70500000000000400", 0x800, 0x1})

25m32.790056598s ago: executing program 4 (id=405):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/hostname\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000002c0), 0x8c, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

25m17.428806453s ago: executing program 35 (id=405):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/hostname\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000002c0), 0x8c, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

22m11.263230802s ago: executing program 6 (id=874):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7)
getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0)
read$msr(r1, &(0x7f0000001800)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f000001a800)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f000001a880)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f000001a8c0)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0)
read(r2, &(0x7f000001a900)=""/265, 0x109)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa4011, 0x0, 0x0, {<r3=>0x0, {'syz', 0x0, '3\x00'}}})
socket$inet6(0xa, 0x1, 0x0)
r4 = syz_io_uring_setup(0xf03, &(0x7f0000000480)={0x0, 0x2948, 0x80, 0x0, 0x51}, &(0x7f0000000500), 0x0, &(0x7f0000000580))
io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000016c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r5=>0x0, {'syz', 0x0, '2\x00'}}})
ioctl$DM_DEV_STATUS(r0, 0xc138fd07, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa4010, 0x0, 0x0, @by_dev={r3}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r5}, [@raid={0x0, 0x448, 0x0, 0x68, 'raid\x00', {'raid10_near', 0x20, '3 64 data_offset 8', 0x20, 0x1, [{0x20, @none, 0x20, @ram={'/dev/ram', 0x0}}]}}]})

22m10.338597527s ago: executing program 6 (id=876):
mknodat$null(0xffffffffffffffff, 0x0, 0xa000, 0x103)

22m5.226522011s ago: executing program 6 (id=883):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./trace\x00', &(0x7f0000000940)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./trace/set_event\x00', 0x2, 0x0)
write(r1, &(0x7f00000009c0)='!:', 0x2)

22m4.914147103s ago: executing program 6 (id=885):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002080)={0xe, 0x4, {0x5, @usage=0x6, 0x0, 0x1, 0x5, 0x4, 0x9, 0x6, 0x21, @struct={0x0, 0xfffffff9}, 0x1, 0x3, [0x9, 0x7, 0x3, 0xfffffffffffffffc, 0x60, 0x200]}, {0xffff, @usage=0x10001, 0x0, 0x9, 0x3, 0x0, 0x27, 0x1, 0xc8, @usage=0x6, 0x6, 0x10000, [0x761d, 0xfffffffffffffffc, 0x200, 0xfffffffffffffff7, 0x101, 0x8]}, {0x4, @usage=0xfff, 0x0, 0x37, 0x0, 0x4, 0x4b88, 0x6, 0x38, @struct={0x1, 0x6}, 0xd, 0x5, [0x4b32, 0x101, 0x45, 0x2c, 0x3, 0xd]}, {0xffff, 0x6, 0x8}})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})

22m4.004001236s ago: executing program 6 (id=887):
openat$comedi(0xffffffffffffff9c, 0x0, 0x80001, 0x0)
pipe(0x0)
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x143102)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='1\n', 0x2)
close(r1)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='1\n', 0x2)
r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0)
writev(r3, &(0x7f00000004c0)=[{&(0x7f00000000c0)="2f5704c9e480f8a066a415fedc8a624da45232beedd5ccb2fa81d46055be29af610a7f42f691", 0x26}, {&(0x7f0000000000)="82d20cf0", 0x4}], 0x2)

22m1.923504209s ago: executing program 6 (id=889):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x4000087, 0x2, 0x0)
r4 = syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x10000, &(0x7f0000000240)=ANY=[], 0xfd, 0x1501, &(0x7f0000000280)="$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")
readlinkat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000001880)=""/171, 0xab)
rmdir(&(0x7f00000017c0)='./file0\x00')

21m46.215088748s ago: executing program 36 (id=889):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x4000087, 0x2, 0x0)
r4 = syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x10000, &(0x7f0000000240)=ANY=[], 0xfd, 0x1501, &(0x7f0000000280)="$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")
readlinkat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000001880)=""/171, 0xab)
rmdir(&(0x7f00000017c0)='./file0\x00')

10m14.027898483s ago: executing program 5 (id=2932):
syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x300000a, &(0x7f0000000140), 0x3, 0x55a3, &(0x7f0000012380)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
lsetxattr$system_posix_acl(&(0x7f0000036b80)='.\x00', &(0x7f0000036bc0)='system.posix_acl_default\x00', &(0x7f0000036c00)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

10m6.800010153s ago: executing program 5 (id=2948):
epoll_create1(0x80000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002840), 0x20040, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x88)

10m2.791820514s ago: executing program 5 (id=2955):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x1, &(0x7f0000000040)={{r2, r3+60000000}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x5428)

9m54.220116202s ago: executing program 5 (id=2966):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
timerfd_create(0x7, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x82)
umount2(&(0x7f0000000340)='.\x00', 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

9m52.573196891s ago: executing program 5 (id=2971):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r3 = getpid()
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
lremovexattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@known='system.posix_acl_access\x00')
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
umount2(&(0x7f0000000580)='.\x00', 0x2)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

9m51.039052058s ago: executing program 5 (id=2975):
mkdirat(0xffffffffffffff9c, 0x0, 0x1a)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xe0400, 0x0)
ioctl$TCGETA(r0, 0x5405, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, 0x0, 0x0, 0x7}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="300e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000e80d08001c0001000000000000000000000000000000000000000000e2060000c80d0200"], 0xe30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000d00)=ANY=[@ANYBLOB="380e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f00d08001c0001000000000000000000000000000000000000000000e6060000d00d02"], 0xe38}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="400e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f80d08001c0001000000000000000000000000000000000000000000ea060000d80d0200"], 0xe40}}, 0x0)
syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000700)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000740), 0xfc, 0x562, &(0x7f0000000780)="$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")

9m34.975299823s ago: executing program 37 (id=2975):
mkdirat(0xffffffffffffff9c, 0x0, 0x1a)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xe0400, 0x0)
ioctl$TCGETA(r0, 0x5405, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, 0x0, 0x0, 0x7}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="300e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000e80d08001c0001000000000000000000000000000000000000000000e2060000c80d0200"], 0xe30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000d00)=ANY=[@ANYBLOB="380e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f00d08001c0001000000000000000000000000000000000000000000e6060000d00d02"], 0xe38}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="400e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f80d08001c0001000000000000000000000000000000000000000000ea060000d80d0200"], 0xe40}}, 0x0)
syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000700)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000740), 0xfc, 0x562, &(0x7f0000000780)="$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")

4m10.187827002s ago: executing program 8 (id=5042):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

4m9.91798433s ago: executing program 8 (id=5044):
setns(0xc9, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
tee(0xffffffffffffffff, r0, 0xfffffffffffffc01, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

4m8.851609189s ago: executing program 8 (id=5047):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone3(&(0x7f0000000000)={0x120801400, &(0x7f0000000100), 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58)

4m5.13581377s ago: executing program 8 (id=5049):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000380)='./trace\x00', 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone3(&(0x7f0000000000)={0x120801400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58)
capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000300)={0x0, 0x6, 0xa, 0x0, 0x9})

4m1.200951834s ago: executing program 8 (id=5050):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x6, 0xb, &(0x7f0000001440)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4m0.803248145s ago: executing program 8 (id=5052):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x1ac, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_ACT={0x17c, 0x1, [@m_skbmod={0x140, 0x12, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0x7a, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x38, 0xe, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3m45.63791018s ago: executing program 38 (id=5052):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x1ac, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_ACT={0x17c, 0x1, [@m_skbmod={0x140, 0x12, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0x7a, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x38, 0xe, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3.719320938s ago: executing program 7 (id=5750):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x7, &(0x7f0000002580)=ANY=[])

3.558293224s ago: executing program 1 (id=5751):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000440), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000005c0)={0x0, [[0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffbfffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0x7ff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x3, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x13c8, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x3fd, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x0, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffe, 0x4000, 0x0, 0x0, 0x1}, {0x80000, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000880)={0x1, 0x7, 0x1, 0x200000000000005, 0x401, 0x0, 0x200000003, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x4})

3.456669695s ago: executing program 1 (id=5752):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x178)
mount(&(0x7f0000000340)=@filename='mtd0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000000400)='./file0\x00')
r0 = open(&(0x7f0000000440)='.\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000000480)=""/184, 0xb8)

3.424611698s ago: executing program 1 (id=5753):
r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x24, &(0x7f0000000940)={0x20, 0xf, 0x2, "7ecd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001340)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="2011060000"], 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

3.216367779s ago: executing program 0 (id=5754):
syz_usb_connect(0x2, 0xc7, &(0x7f0000000180)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d240100013400000000000101122417010102000000000000"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

2.71839927s ago: executing program 9 (id=5755):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778625d52}, 0x4)

2.618156161s ago: executing program 9 (id=5756):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})

2.561484597s ago: executing program 9 (id=5757):
syz_emit_vhci(&(0x7f0000001900)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x7fff, 0x149, 0x6}}}}, 0xd)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)

2.003143084s ago: executing program 9 (id=5758):
openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0)

1.74416681s ago: executing program 0 (id=5759):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, 0x0, 0x1, 0x0, 0x0)

1.64933374s ago: executing program 0 (id=5760):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000880)={{0x40, 0x13}, 0x1, 0x4, 0x88, {}, 0x0, 0x4000ffff})

1.562164999s ago: executing program 0 (id=5761):
r0 = socket$kcm(0xa, 0x3, 0x3a)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4004800)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

1.562030039s ago: executing program 0 (id=5762):
syz_usb_connect(0x5, 0x35, &(0x7f0000000280)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x20, 0xd, 0x6, "e6f6f7ed76a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

649.317833ms ago: executing program 9 (id=5763):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6)
syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e"], 0x16)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x8}}}, 0x4)

601.452238ms ago: executing program 7 (id=5764):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778625d52}, 0x4)

447.951674ms ago: executing program 7 (id=5765):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000a40)={0x1, 0x0, [{0x80a}]})

447.862043ms ago: executing program 7 (id=5766):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)

368.727082ms ago: executing program 1 (id=5767):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f00000000c0)={'gre0\x00', @ifru_ivalue=0xc5e})
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4097, 0x1001}], 0x1, 0xa, 0x6a76)
ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000100))
socket$netlink(0x10, 0x3, 0x4)
close(0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, &(0x7f0000001340)='./script.sh\x00', 0x42, 0x1ff)
r2 = syz_open_dev$sg(&(0x7f0000001380), 0x5, 0x401)
write$tun(r2, &(0x7f00000013c0)=ANY=[@ANYBLOB="00009914a9b1", @ANYRES64=r2], 0xb2)
write(r0, &(0x7f0000000100)="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", 0x1a0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000030c0)={{}, 0x0, 0x19, @unused=[0x4800003, 0x1, 0x7, 0x1], @name="2de2751849b69ba17b56c2eef263c70dc846713c6eb4a47f6818a0fe536a949717d61e837e58155f95d86218e332aca401f7c096a65247984b4e8becff319037ddd54fe7f110d335a9df3d2aa9d90a467c9f27c2b4c059926ef5cba5adc8d0b257ee40d227e9e3ad37cf3998ebf0147bda84b7523f063f097e66db87f498227ab12fc4f355773f7ba0e2d06d376134be4e1768b27db0dfe207c119cb9e1c7a22df16973a48cdb622901e4bbde1f1fd1cede284c89ea9f9b0a75487ff160bb261bc46feaaa1469b00fc3878c14c19d4ea1606fd137cf065bc7ba285573baf774e4c3bd25cc606aa2c62fb6ff84aadb05712f40beecdec3f72df6285ae4e0ac74558d6b3606f5ae050691305ba2ad1fbe0632976bb2fe8051780b0182754ae042b628eac621432d82f763c3e9791b43b710ee132199b789189df606d6f37672d886b54025f618c1b9cdc523808141f61dab2b08593802599fb51327c2d66ead26c1031b0394928d003d7ea1835949d77e92f5a3cf477aa9394ba720f039f3ced9b260b3d6069d17d787c873f84e162abd15cc155e6398917f27a2fdabc6b86639bb94947070c737c178964f738c58293f457512fb2c9f009432a6821409d58234b4a4f44365ef4a8f6007c535bb145094bc6d5114667905bd38f26fc499561089484fbb07d46a0aa002dadd25b82f2895fa1e2e2f2781be1bd2b4cb33ca046a2442c2b567a36ec652375ff153d879ec588c05a4e0af4ebb2ce82b91bc19a2fa04352b5bbfa7821eb6a333b742681b10009a7dcf8c947987cfd7b7c4725a90e0f1b7a3f0098254abc7d31ffe42d3fbcfe5d22ee5111ee29c813a6dddfcd3a99538fbd28c8cf491cc6145113206e912df89bb2816e1eedeea7391c77e86b9f28348fbf4dddbb4c8c09286c1c8bf3354ce1ef92e7a1e3b3b16ac9c708733eb5729988a7aba946f70cbec1d1b75a849576cce03ae10bfbc86505ea0c550aa4019534eae39723579bac9e401363010d30b1d3fdcf02a2833d9dfe265ddc0447f3d3bfbb7a8bc966bea70bfcb65f9334abc92057abedad2d2d2582b1c147787178fd146975391c2bbf2e3e71dc7709952e9d639026b0f4f523309c0c78fcff2c4939ff81cfbf04f0508fecae06fb7b67da6e1ab64a4fc838eadddd670db992b0d6f9ff4c447939bfcff2c5def9eb7592d359652110862dcd8564bd9cdfb6ae333707015733d64fc06ccf793227ac980a9e367ab7b933e3f8b84e3447c56a3a751c95595a295fe48351c51d1e765b0f7a1fdb9a4370f2677933de15e988da8cc25b63d44c4394460370ce4e471b0011885e174d4b382d3f296c90070ff34de5c16e68e2dc11ea1a55239969dcd4258b9e42787e6445208b9b012e4158b32367a14a1e4cf9080d630c55bb167aae9c60e6aa9fa51b7dd07202efd599862c901bffba0e65daa0f3f4baa1a93d0c16b8803df30bf26bbaa5ebe61bc97269dafeb7a6ed51e8addf6ae752eacb269d89cc58b0715285c657e0066b81ac637bd5034411c8e3039fb2fbcd0fd894dd0b14e01415a25f58a02f276cb1dab0b0f12aac2815d8759d914d670064b9ea88329bf5f335d2fd8fc2b282e143ab1e9dfcec426d323a3e7acc6d752d5b19a3b967823990bc261d9f003722282c1ccdc2999bbd80b8882ff61582708a8cc4ef5b46e86d07cc7e5ac1f73b94a6352c39e1f425fbcd4b21b2a70a7301fc894632a5592314bc76ef6603945e80090743cbd38654bd902ac776083eb122dbd7270b56ad753e169ded2b0ddfe1aaf116bdc084dd8221db155943274dc726176a0fae976b3d8614b17587ef9fbbaceebd1fa6944962205d82d328f6d503defc8692ba0985ccdb0ce858c14eb8b082ee25f0e8f284798e144c84300e00522047c4138da819db6838f0dae93bae8c6029fa345b469f538d528c12b7c9ceda4b522bdf19228d68334256b33b05c442415c249556f7012f9a213c6fd27e5e81b67332d397cda4f767a948a154f5c41c36ad1738f70ac72114ea66b62569e47a70e1f81ee1acbb85114f5312ee50069bb03e10f1818b3bfc97a03fd480b1f5cd8a551304a66b08a0bd066b829b6a603d56f9b4d77a7a6ac35e8ad90b48c12cf442035bcc60e949e16437b00661ba7830199c0eb63cf4de8702017201c277517427ad61e50b07a0dd93aa3a2da68f607a065083fa17bd8ab8224883195763018ad50112578983696eedbe9ffb518c3bf58f79feb5d312bda8347d5606a4bb57c5148f43e00663a020d975beeb2a4c8bd0c423379aac13d4aaf767f2ff40c3dba2811acaa472675d58d4cb459704238473c5316ef45182fd8c20da2fa79be9e52f2a9446f0bbf381cd874b928ff499d63f8822f4de3613a2a73c78722ca4f3a8c0e94585ac16031ea8352a8cc60ec6990be621bca9cfd2d668ad2728c9af7f9d6d9c15f7fa7ab32630f0cc733c63426377afcd0132a1a2574a0ef040aafc68d7d56bb2135891e2fca4541bb0f6aa48f84f1d6f20298ffa8506611cc0dffc763ce9bba660fe1183dd4b8fcf7fccc2bab3e61b5cda9ac6002d9caadfcbedd4b00261779096b6a070e19f759937ea1cecc28194dc44dd2a0fd826ff188516038f3e5ed167a1090b8187fcbfd16a8114849c02b62b4c0364e4e6c2fcefce01137713b1e72e33e53217505bbea8dc7aeedf7e87903e3a7138bbc97db5569e6e8eda2662704cc428fed74fd9980832f0f6549a681d4f842fe33f6c10e1d3cfc39df4ebf7864c35818750ee0be02c535b67538008e9e37ae0f3b556acfac23c448fdda1e45e1101d5cc5d3b0aaa03da64cf74c2dfcac1aa4ef27be3c1512d3b45bac1c41aebe1a098ff4599bff45791959fc1840e8283ea0a625903118ebbd1d6608fc36830158e01d54b7f9656b52eae300312ec27cb97e2894d8074eccea3007eb7883d3b2e608005cfa1eaa21661675735ed595b2c6711300b3440294ea57fab49e00585f0a9a5c773f03c5eb01ee7d07cc058fadf1dddfdea098afd32d22df966f8c3b01810580b05c1796c361c749074f21a026b294aa3bcd073a442c234deef6a5388a396c3f4a22ab73c5551effbc9d0b5dc6e01983bbb808356ef0fd7ac4e1aaef7612f8a92846046869fbef90f28c5af1abde7e2945cfae573d22b931f43f50122b388ec48500d2a773f5a416714506616cd065358c9e95be4daab764db5a3ed7311b1654174486a0ce4bc30de90014c3ddfbfd7aca2edd6386783358947816d53082f010d8101383b1b81e09df99aa98aecbf5dd4acb32cbd7e7fde2ece71ae021ec61195b07d7040600a0643e22f370b3c6002235d1aafdbe3c05ecf2f0a590b6e84f9f32caf885bda4450c8a398fd74a51a389f4d7a52581e8f1b5d0d657bfe5bde2f60da3699597dfe94e7ac4c131f8ab2d75938a16c593824f12493d669aa9821cabb845b460cdb2cde21a071fe30cd80c0d3ccc82acfc26c557f3928a11c7d770d1ac3b74055c170245b4851d0d94465946e78475d3554a1d27022daadde4ea219fae5b8b98d504d1a739dca86405c24c1a812cdc38115aee81b8e76c0b3dbf5042aa8a3826316cba2cae81ec13df84095a5ae85293ddba75924ca878799736147289aadcd028bc3eb8909506a51cde923b6642dfbfb785f11bd3edef9bb8bc28bba0fb65e2f98e24f53f0ae3b70ac6db88c7972cf9d7ca5c5c807fc1a18acd56048bd1d0f076c79601f533d8ddcf678e652f63e3e432db0a4df8b0cc91302a7f0831ee3d00887ccc01e6ffa8c46953d677ce14e2367fc7d7c4c70ea8841800bb8a7fa234483bb9f7b2612ed319512a951d5efc48594b25bd72801a5f7efd9724833c40827daeea93dd140912281395b74f8244db57227ee6a8a530b01e9ea9c709930f2b39352c93146623ddc18079846d6cb595cfc50842b0addf15329d6201963d3c90a18d305a9b2eb43522fb57430c0ab2cf97173ed77f0e49715236d83d31906f40bc9fcd5b682ea79a2448155f6a4238020a02e1fe22e7e0a731ed9ba3173c48ea53b55b9c7250ea5f4c6c1de1b55a46b9a39db0e3004f7de224c2112af2dd5e37fb45aac8456c9543afad8838202359355768ba202a8a0c090960cf78668542f7959c50d4e9d7a3596b6d2607c9c374aa14f8866fa8f8f1efcab0da7d318fa518f837202c05e7ba7f5c5a2822e16c1aafe2744196fab316bf99f190c9c7e8578205fd902247bc1ff1a9c09111295ae1761456a09074a36bb8f7e5f68bc4f2ebda63270bcd617d7662b8c9bc1f5a93a9d4cecb743eec51ccce7753ad254ca32116638282fa5cc7bdc2120aa96f4e52cfd99cc852885e2da8c60d0a6c38ef378eb81bae29749bf41b5715a8801f14c60632a606acf46d95d9758f1e79b50db5cdd0e70ed499380f9054ad0439b6244418710bae93dd4559ccf59d0bcc609c3f827cfb1057dd81822b81b1a8db7b75db2fe215b5bb4d14ede51eead5b1fac1cb00396e139762c0cf90b125e7f2faeea964f2af1b9d7cb8c7b73f021795e1b8c52967a3a31d7b9eb3dcb8ea818c6344c8ac9ef0c2938cbc85b96bfa19a02cbeb33d1b16ba0a438c2e8bf48f018005f93bcc3bc4d0f7de1af888a121c44fa9530797e1fe9122b287744c20225bbc6e59d9e5125a2afed0946015fa8ab975468f0cc7e21078c336a01b34e61fa1f8ba7448fb7a618930057a77172ccfa93f3cab8ee54d78776c2f9c574fd0e9a2b1bbbb2412d5da9a94d229ccb439e5bf7f99b223f14f77c299c15a9163aaf60892d721c35b9d95ef5195370714c2e21f05cff350d4ca0e3c092f0c099effe0e44ed87b4eff198429e7d6dbdb038db889d61d0be52bdc81e301236bbc88196700351c3cf9cd1a4c5001ca5aa166c2aec18b1a372793b8b7faa80fcd932703ab20094b3c0f7edcf554862dbb0c95f18b0bac7f3092f097e4ab8ae8e951c959097251c05007f88473c0ea34dd983795554e79e68b3c2361d815b5d1b5be51e41e57dc096cc7b1bcda7500dbab895416e0fcd8fdfdfef2ed597a56f4b84edf7254a2ec66a2a9acba66520fbde9c6daced7b06bc0a2dbcb0167f1ab77c19a68c0fd60ca58878cf509a42917d0c3080047b6d03e76be96fe75fcd667f64f903f6cf3a1ceda2d6c08b00afc018613275feafe932def8a42d9bf1018d9be5cf4d926dd9b8e5422b33a718250b4575ca4df9bfa5d1d2e1ff9f71ac7bd9e83caf722192648a8fad30217c1e32ed76ec945220727d0b542d20acaa42920e939c9eaf613c6e877bf5e5fa89f674bd7fd599a88b41f6780958abe7c69ed4d3217bfe69e57aa6677225a6085164d9fe8afc6de60b43ebb7d139b504156a81b33aaf46e596d8d5849689fe03ed27d65826ea97cfd540ba43984ce962f655ff7e09f8f88324e986d501db6aa9df3afecf7037a71bad98c04cf9b29dfb4c36470a59bec75cb59c067b664fc7f079fd26fdfb6704a3b9a953d0a1d502f7ef39ac6db9f451f3832a3734e885093b95890fba6fc66659aca1678e85dd6e55e1928de22b191480d7f9cf75da22885bd4b38502e4425741198c00cd829e31800a2e8ee8050aeac75b94ebc08d85222dfc1b56c8fb8408f3117d8a5d26b2ec4519f847ce021f02ce0281fcab7d7063d9850938ab62040debde832dcb86b003319b6cb607ad406e88a79985e3ffbe489d7f083d5141de2b37456e170738317764d0"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

365.938302ms ago: executing program 7 (id=5768):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, 0x0, 0x1, 0x0, 0x0)

186.72134ms ago: executing program 7 (id=5769):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_disconnect(r1)

151.493964ms ago: executing program 0 (id=5770):
r0 = openat$md_new_array(0xffffff9c, &(0x7f00000004c0), 0x1, 0x0)
write$md_new_array(r0, &(0x7f0000000500)={'md', @num=0x0}, 0x3)
r1 = openat$md(0xffffff9c, &(0x7f0000000540)={'/dev/md', @num=0x0}, 0x2, 0x0)
ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000580)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1})
ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000600)={0x0, {0x1, 0x0}, 0x0, 0x6})
write$tun(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0xfdef)
ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x1, {0x1, 0x1}, 0x1, 0x6})
ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0)
ioctl$GET_ARRAY_INFO(r1, 0x80480911, 0x0)
pwrite64(r1, &(0x7f0000000740)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x12, 0x1000)
ioctl$STOP_ARRAY(r1, 0x932, 0x0)

80.068901ms ago: executing program 1 (id=5771):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

20.823587ms ago: executing program 1 (id=5772):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x7, &(0x7f0000002580)=ANY=[])

0s ago: executing program 9 (id=5773):
socket$inet6(0xa, 0x80003, 0x6)
socket$kcm(0x2b, 0x1, 0x0)
setns(0xc9, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e0b0a42b820a8e8c988", @ANYRES8, @ANYRES64=r1], 0x97)

kernel console output (not intermixed with test programs):

9.705229][T14147] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1729.715515][    T8] gspca_stk1135: Sensor read failed
[ 1729.725739][    T8] gspca_stk1135: serial bus timeout: status=0x00
[ 1729.733395][T14147] usb 10-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1729.744752][    T8] gspca_stk1135: Sensor write failed
[ 1729.752150][    T8] gspca_stk1135: serial bus timeout: status=0x00
[ 1729.760495][T14147] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1729.772343][    T8] gspca_stk1135: Sensor write failed
[ 1729.793248][    T8] stk1135: probe of 8-1:0.0 failed with error -71
[ 1729.821543][    T8] usb 8-1: USB disconnect, device number 62
[ 1729.882231][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1729.888786][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.437106][    T8] page_pool_release_retry() stalled pool shutdown 1 inflight 243 sec
[ 1730.688954][ T5168] usb 8-1: new full-speed USB device number 63 using dummy_hcd
[ 1730.908923][ T5168] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1730.940319][ T5168] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1730.966530][ T5168] usb 8-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1730.990005][ T5168] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1731.416106][T10607] gspca_stk1135: reg_w 0x351 err -71
[ 1731.438644][T10607] gspca_stk1135: serial bus timeout: status=0x00
[ 1731.472416][T10607] gspca_stk1135: Sensor write failed
[ 1731.490990][T10607] gspca_stk1135: serial bus timeout: status=0x00
[ 1731.518645][T10607] gspca_stk1135: Sensor write failed
[ 1731.544382][T10607] gspca_stk1135: serial bus timeout: status=0x00
[ 1731.571595][T10607] gspca_stk1135: Sensor read failed
[ 1731.601869][T10607] gspca_stk1135: serial bus timeout: status=0x00
[ 1731.631619][T10607] gspca_stk1135: Sensor read failed
[ 1731.661625][T10607] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1731.689649][T10607] gspca_stk1135: serial bus timeout: status=0x00
[ 1731.696033][T10607] gspca_stk1135: Sensor read failed
[ 1731.744040][T10607] gspca_stk1135: serial bus timeout: status=0x00
[ 1731.764117][T10607] gspca_stk1135: Sensor read failed
[ 1731.793523][T10607] gspca_stk1135: serial bus timeout: status=0x00
[ 1731.818080][T14147] pegasus 10-1:1.0: setup Pegasus II specific registers
[ 1731.846122][T10607] gspca_stk1135: Sensor write failed
[ 1731.865842][T10607] gspca_stk1135: serial bus timeout: status=0x00
[ 1731.892814][T10607] gspca_stk1135: Sensor write failed
[ 1731.908410][T10607] stk1135: probe of 2-1:0.0 failed with error -71
[ 1731.951193][T10607] usb 2-1: USB disconnect, device number 18
[ 1731.982884][T14147] pegasus 10-1:1.0: can't locate MII phy, using default
[ 1732.047576][T14147] pegasus 10-1:1.0: eth1, 3Com USB Ethernet 3C460B, 12:16:ee:ae:ea:e0
[ 1732.129517][T14147] usb 10-1: USB disconnect, device number 5
[ 1732.167037][T24931] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1732.376981][T24931] usb 1-1: Using ep0 maxpacket: 16
[ 1732.408266][T24931] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1732.461286][ T5168] pegasus 8-1:1.0: can't reset MAC
[ 1732.469962][T24931] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1732.486658][ T5168] pegasus: probe of 8-1:1.0 failed with error -5
[ 1732.534340][ T5168] usb 8-1: USB disconnect, device number 63
[ 1732.546471][T24931] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1732.575571][T24931] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 1732.622957][T24931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1732.664913][T24931] usb 1-1: config 0 descriptor??
[ 1732.670144][T24883] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1732.876260][T24883] usb 2-1: Using ep0 maxpacket: 16
[ 1732.895627][T24883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1732.936583][T24883] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1732.996881][T24883] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1733.052181][T24883] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1733.116023][T24883] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1733.129420][T24931] usbhid 1-1:0.0: can't add hid device: -71
[ 1733.144880][T24931] usbhid: probe of 1-1:0.0 failed with error -71
[ 1733.159977][T24883] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[ 1733.185961][T24931] usb 1-1: USB disconnect, device number 69
[ 1733.199807][T24883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1733.241122][T24883] usb 2-1: config 0 descriptor??
[ 1733.386211][ T5168] usb 8-1: new high-speed USB device number 64 using dummy_hcd
[ 1733.595106][ T5168] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1733.646280][ T5168] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1733.712358][ T5168] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1733.739122][T24883] logitech-djreceiver 0003:046D:C53A.001F: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0
[ 1733.808560][ T5168] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1733.888796][ T5168] usb 8-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1733.958171][ T5168] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1734.044372][T25896] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1734.090301][T25896] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1734.979271][T18900] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1735.186397][T18900] usb 1-1: Using ep0 maxpacket: 32
[ 1735.205240][T18900] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1735.213836][ T5168] pegasus: probe of 8-1:1.0 failed with error -71
[ 1735.243622][T18900] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 71, changing to 7
[ 1735.263008][ T5168] usb 8-1: USB disconnect, device number 64
[ 1735.287719][T18900] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1735.330917][T18900] usb 1-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40
[ 1735.356587][T18900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1735.373029][T18900] usb 1-1: Product: syz
[ 1735.389789][T18900] usb 1-1: Manufacturer: syz
[ 1735.394399][T18900] usb 1-1: SerialNumber: syz
[ 1735.649913][T18900] usb 1-1: found format II with max.bitrate = 172, frame size=4
[ 1735.690436][T18900] usb 1-1: found format II with max.bitrate = 172, frame size=4
[ 1735.775203][T18900] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1735.782240][T24931] usb 2-1: USB disconnect, device number 19
[ 1735.952944][T18900] usb 1-1: USB disconnect, device number 70
[ 1735.996288][    T8] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1736.151442][T25010] udevd[25010]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1736.246087][    T8] usb 10-1: Using ep0 maxpacket: 16
[ 1736.287496][    T8] usb 10-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1736.349702][    T8] usb 10-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1736.396458][T24931] usb 8-1: new high-speed USB device number 65 using dummy_hcd
[ 1736.425257][    T8] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1736.464024][    T8] usb 10-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 1736.497273][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1736.528629][    T8] usb 10-1: config 0 descriptor??
[ 1736.616240][T24931] usb 8-1: Using ep0 maxpacket: 16
[ 1736.630410][T24931] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1736.656281][T24931] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1736.678763][T24931] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1736.701512][T24931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1736.721915][T24931] usb 8-1: Product: syz
[ 1736.741332][T24931] usb 8-1: Manufacturer: syz
[ 1736.746344][T18900] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 1736.756027][T10761] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[ 1736.773852][T24931] usb 8-1: SerialNumber: syz
[ 1736.799749][T24931] usb 8-1: config 0 descriptor??
[ 1736.946064][T18900] usb 1-1: Using ep0 maxpacket: 16
[ 1736.961781][T10761] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1736.975892][    T8] usbhid 10-1:0.0: can't add hid device: -71
[ 1736.986217][T18900] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1737.010974][    T8] usbhid: probe of 10-1:0.0 failed with error -71
[ 1737.020410][T10761] usb 2-1: not running at top speed; connect to a high speed hub
[ 1737.036178][T18900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1737.068196][T10761] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1737.082763][    T8] usb 10-1: USB disconnect, device number 6
[ 1737.107125][T18900] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1737.128890][T10761] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1737.149140][T18900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1737.167765][T10761] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1737.191377][T18900] usb 1-1: Product: syz
[ 1737.202670][T18900] usb 1-1: Manufacturer: syz
[ 1737.212942][T18900] usb 1-1: SerialNumber: syz
[ 1737.221614][T10761] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[ 1737.256016][    C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1737.264373][T24931] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input21
[ 1737.293368][T10761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1737.320136][T10761] usb 2-1: Product: syz
[ 1737.334656][T24931] imon:send_packet: packet tx failed (-71)
[ 1737.349781][T10761] usb 2-1: Manufacturer: syz
[ 1737.393225][T24931] imon 8-1:0.0: panel buttons/knobs setup failed
[ 1737.474632][T18900] usb 1-1: 0:2 : does not exist
[ 1737.529393][T18900] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 1737.565761][T24931] rc_core: IR keymap rc-imon-pad not found
[ 1737.585682][T24931] Registered IR keymap rc-empty
[ 1737.590629][T24931] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1737.622625][T18900] usb 1-1: USB disconnect, device number 71
[ 1737.647076][T10761] usb 2-1: Found UVC 1.00 device syz (8086:0ad2)
[ 1737.686362][T10761] usb 2-1: Failed to query (GET_INFO) UVC control 2 on unit 3: -71 (exp. 1).
[ 1737.696564][T24931] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1737.721074][T10761] usb 2-1: Failed to query (GET_INFO) UVC control 8 on unit 3: -71 (exp. 1).
[ 1737.734844][T24931] imon:send_packet: packet tx failed (-71)
[ 1737.752326][T10761] usb 2-1: Failed to query (GET_INFO) UVC control 9 on unit 3: -71 (exp. 1).
[ 1737.773406][T24931] imon 8-1:0.0: remote input dev register failed
[ 1737.782168][T10761] usb 2-1: Failed to query (GET_INFO) UVC control 16 on unit 3: -71 (exp. 1).
[ 1737.795962][T24931] imon 8-1:0.0: imon_init_intf0: rc device setup failed
[ 1737.813577][T10761] usb 2-1: Failed to query (GET_INFO) UVC control 11 on unit 3: -71 (exp. 1).
[ 1737.842370][T24931] imon 8-1:0.0: unable to initialize intf0, err 0
[ 1737.857133][T10761] usb 2-1: Failed to query (GET_INFO) UVC control 13 on unit 3: -71 (exp. 1).
[ 1737.882441][T24931] imon:imon_probe: failed to initialize context!
[ 1737.889999][T10761] usb 2-1: No streaming interface found for terminal 2.
[ 1737.900074][T24931] imon 8-1:0.0: unable to register, err -19
[ 1737.907046][T10761] usb 2-1: Failed to create links for entity 3
[ 1737.921273][T24931] usb 8-1: USB disconnect, device number 65
[ 1737.927343][T14147] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1737.941763][T10761] usb 2-1: Failed to register entities (-22).
[ 1737.982239][T10761] usb 2-1: USB disconnect, device number 20
[ 1738.136050][T14147] usb 10-1: Using ep0 maxpacket: 32
[ 1738.158749][T14147] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1738.191929][T14147] usb 10-1: config 0 has no interface number 0
[ 1738.228961][T14147] usb 10-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 1738.265004][T14147] usb 10-1: config 0 interface 1 has no altsetting 0
[ 1738.287051][T26013] md: array md0 already has disks!
[ 1738.295102][T26013] md: could not open device unknown-block(1,1).
[ 1738.302037][T14147] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1738.314627][T26013] md: error, md_import_device() returned -16
[ 1738.320819][T14147] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1738.335340][T14147] usb 10-1: Product: syz
[ 1738.348038][T14147] usb 10-1: Manufacturer: syz
[ 1738.363053][T14147] usb 10-1: SerialNumber: syz
[ 1738.380988][T14147] usb 10-1: config 0 descriptor??
[ 1738.403045][T26013] md/linear:md0: not enough drives present. Aborting!
[ 1738.426462][T26013] md: pers->run() failed ...
[ 1738.435940][T26015] md: md0 stopped.
[ 1738.525961][T10761] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1738.631955][T14147] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1738.680933][T14147] cx231xx 10-1:0.1: Failed to read PCB config
[ 1738.702951][T14147] cx231xx: probe of 10-1:0.1 failed with error -71
[ 1738.732904][T10761] usb 2-1: Using ep0 maxpacket: 16
[ 1738.747223][T14147] usb 10-1: USB disconnect, device number 7
[ 1738.768669][T10761] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1738.801104][T10761] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1738.819896][T10761] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[ 1738.855523][T10761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1738.873774][T10761] usb 2-1: Product: syz
[ 1738.883882][T10761] usb 2-1: Manufacturer: syz
[ 1738.899585][T10761] usb 2-1: SerialNumber: syz
[ 1738.914887][T10761] usb 2-1: config 0 descriptor??
[ 1738.975572][T24931] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 1739.131966][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f5a3000: rx timeout, send abort
[ 1739.153719][    C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1739.163990][T10761] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input23
[ 1739.176912][T24931] usb 1-1: Using ep0 maxpacket: 32
[ 1739.214668][T24931] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1739.239204][T10761] imon:send_packet: packet tx failed (-71)
[ 1739.246433][T24931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1739.254410][T24931] usb 1-1: Product: syz
[ 1739.265232][T14147] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1739.275259][T10761] imon 2-1:0.0: panel buttons/knobs setup failed
[ 1739.298299][T24931] usb 1-1: Manufacturer: syz
[ 1739.303015][T24931] usb 1-1: SerialNumber: syz
[ 1739.336364][T24931] usb 1-1: config 0 descriptor??
[ 1739.367637][T24931] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1739.419940][T10761] rc_core: IR keymap rc-imon-pad not found
[ 1739.442398][T10761] Registered IR keymap rc-empty
[ 1739.454069][T10761] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1739.474927][T10761] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1739.497550][T14147] usb 10-1: Using ep0 maxpacket: 32
[ 1739.516819][T10761] imon:send_packet: packet tx failed (-71)
[ 1739.523722][T14147] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1739.544501][T14147] usb 10-1: config 0 has no interface number 0
[ 1739.555838][T10761] imon 2-1:0.0: remote input dev register failed
[ 1739.562244][T10761] imon 2-1:0.0: imon_init_intf0: rc device setup failed
[ 1739.580876][T14147] usb 10-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 1739.605947][T10761] imon 2-1:0.0: unable to initialize intf0, err 0
[ 1739.621775][T14147] usb 10-1: config 0 interface 1 has no altsetting 0
[ 1739.639279][T10761] imon:imon_probe: failed to initialize context!
[ 1739.645787][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f5a3000: abort rx timeout. Force session deactivation
[ 1739.685562][T14147] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1739.718327][T14147] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1739.738140][T10761] imon 2-1:0.0: unable to register, err -19
[ 1739.767045][T14147] usb 10-1: Product: syz
[ 1739.774403][T10761] usb 2-1: USB disconnect, device number 21
[ 1739.790829][T14147] usb 10-1: Manufacturer: syz
[ 1739.820172][T14147] usb 10-1: SerialNumber: syz
[ 1739.872605][T14147] usb 10-1: config 0 descriptor??
[ 1739.882782][T26045] futex_wake_op: syz.7.5510 tries to shift op by 144; fix this program
[ 1740.118562][T14147] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1740.152624][T14147] cx231xx 10-1:0.1: Failed to read PCB config
[ 1740.171200][T14147] cx231xx: probe of 10-1:0.1 failed with error -71
[ 1740.185227][T10761] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[ 1740.211101][T14147] usb 10-1: USB disconnect, device number 8
[ 1740.405279][    T8] usb 8-1: new high-speed USB device number 66 using dummy_hcd
[ 1740.424887][T10761] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1740.458668][T10761] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[ 1740.481372][T10761] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1740.502235][T10761] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[ 1740.536253][T10761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1740.554488][T10761] usb 2-1: Product: syz
[ 1740.564604][T10761] usb 2-1: Manufacturer: syz
[ 1740.574595][T10761] usb 2-1: SerialNumber: syz
[ 1740.593432][T10761] usb 2-1: config 0 descriptor??
[ 1740.616035][T26011] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1740.625146][    T8] usb 8-1: Using ep0 maxpacket: 16
[ 1740.652936][    T8] usb 8-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1740.700199][    T8] usb 8-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1740.754147][    T8] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1740.784532][    T8] usb 8-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 1740.815219][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1740.844835][    T8] usb 8-1: config 0 descriptor??
[ 1740.891658][    C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1740.904028][T10761] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25
[ 1741.215310][T10761] rc_core: IR keymap rc-imon-pad not found
[ 1741.228156][T10761] Registered IR keymap rc-empty
[ 1741.239916][T10761] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1741.271926][T10761] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1741.300443][    T8] usbhid 8-1:0.0: can't add hid device: -71
[ 1741.323383][    T8] usbhid: probe of 8-1:0.0 failed with error -71
[ 1741.362079][T10761] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1741.382718][    T8] usb 8-1: USB disconnect, device number 66
[ 1741.434261][T10761] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26
[ 1741.483871][T10761] imon 2-1:0.0: iMON device (15c2:0045, intf0) on usb<2:22> initialized
[ 1741.575797][T26011] imon:lcd_write: invalid payload size: 0 (expected 8)
[ 1741.611283][T10761] usb 2-1: USB disconnect, device number 22
[ 1741.726558][ T5168] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[ 1741.936594][ T5168] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1741.980357][ T5168] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1742.012980][ T5168] usb 10-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1742.032909][ T5168] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1742.236471][T26091] block device autoloading is deprecated and will be removed.
[ 1742.350587][T26091] md/linear:md1: not enough drives present. Aborting!
[ 1742.368175][T26091] md: pers->run() failed ...
[ 1742.380417][T26095] md: md1 stopped.
[ 1742.459336][T26099] FAULT_INJECTION: forcing a failure.
[ 1742.459336][T26099] name failslab, interval 1, probability 5, space 0, times 9994
[ 1742.479607][T26099] CPU: 0 PID: 26099 Comm: syz.1.5519 Not tainted syzkaller #0
[ 1742.487099][T26099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1742.497167][T26099] Call Trace:
[ 1742.500436][T26099]  <TASK>
[ 1742.503357][T26099]  dump_stack_lvl+0x18c/0x250
[ 1742.508049][T26099]  ? show_regs_print_info+0x20/0x20
[ 1742.513234][T26099]  ? load_image+0x420/0x420
[ 1742.517724][T26099]  ? __might_sleep+0xe0/0xe0
[ 1742.522305][T26099]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1742.527321][T26099]  should_fail_ex+0x394/0x4c0
[ 1742.532002][T26099]  should_failslab+0x9/0x20
[ 1742.536511][T26099]  slab_pre_alloc_hook+0x59/0x300
[ 1742.541537][T26099]  ? usb_alloc_urb+0x46/0x140
[ 1742.546243][T26099]  ? usb_alloc_urb+0x46/0x140
[ 1742.550910][T26099]  __kmem_cache_alloc_node+0x53/0x260
[ 1742.556324][T26099]  ? usb_alloc_urb+0x46/0x140
[ 1742.560988][T26099]  __kmalloc+0xa7/0x240
[ 1742.565139][T26099]  usb_alloc_urb+0x46/0x140
[ 1742.569637][T26099]  usb_control_msg+0x119/0x3e0
[ 1742.574397][T26099]  hub_ext_port_status+0x103/0x6c0
[ 1742.579507][T26099]  hub_activate+0x735/0x1aa0
[ 1742.584095][T26099]  hub_resume+0xa6/0x360
[ 1742.588323][T26099]  ? usb_hub_find_child+0x119/0x1d0
[ 1742.593510][T26099]  ? hub_suspend+0xaa0/0xaa0
[ 1742.598084][T26099]  ? hcd_bus_resume+0x54a/0x6f0
[ 1742.602924][T26099]  usb_resume_both+0x5e7/0xae0
[ 1742.607702][T26099]  ? autosuspend_check+0x5b0/0x5b0
[ 1742.612799][T26099]  __rpm_callback+0x2fd/0x790
[ 1742.617497][T26099]  ? autosuspend_check+0x5b0/0x5b0
[ 1742.622593][T26099]  ? read_tsc+0x9/0x20
[ 1742.626652][T26099]  rpm_resume+0x119b/0x1b80
[ 1742.631147][T26099]  ? autosuspend_check+0x5b0/0x5b0
[ 1742.636251][T26099]  ? __pm_runtime_resume+0x170/0x170
[ 1742.641520][T26099]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1742.646531][T26099]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1742.652067][T26099]  pm_runtime_set_autosuspend_delay+0x7e/0xc0
[ 1742.658120][T26099]  autosuspend_delay_ms_store+0x14a/0x1c0
[ 1742.663824][T26099]  ? autosuspend_delay_ms_show+0xd0/0xd0
[ 1742.669444][T26099]  ? sysfs_kf_write+0x187/0x2a0
[ 1742.674318][T26099]  ? sysfs_kf_read+0x360/0x360
[ 1742.679074][T26099]  kernfs_fop_write_iter+0x3a4/0x520
[ 1742.684385][T26099]  vfs_write+0x474/0x9a0
[ 1742.688623][T26099]  ? file_end_write+0x250/0x250
[ 1742.693471][T26099]  ? __fget_files+0x3fc/0x460
[ 1742.698142][T26099]  ? __fdget_pos+0x2a3/0x330
[ 1742.702714][T26099]  ? ksys_write+0x74/0x260
[ 1742.707117][T26099]  ksys_write+0x151/0x260
[ 1742.711433][T26099]  ? __ia32_sys_read+0x90/0x90
[ 1742.716204][T26099]  ? lockdep_hardirqs_on+0x98/0x150
[ 1742.721397][T26099]  do_syscall_64+0x55/0xb0
[ 1742.725801][T26099]  ? clear_bhb_loop+0x40/0x90
[ 1742.730463][T26099]  ? clear_bhb_loop+0x40/0x90
[ 1742.735139][T26099]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1742.741029][T26099] RIP: 0033:0x7f349f19f559
[ 1742.745441][T26099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1742.765049][T26099] RSP: 002b:00007f34a00a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1742.773445][T26099] RAX: ffffffffffffffda RBX: 00007f349f425fa0 RCX: 00007f349f19f559
[ 1742.781406][T26099] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003
[ 1742.789369][T26099] RBP: 00007f349f236b20 R08: 0000000000000000 R09: 0000000000000000
[ 1742.797328][T26099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1742.805286][T26099] R13: 00007f349f426038 R14: 00007f349f425fa0 R15: 00007fff3da62c48
[ 1742.813253][T26099]  </TASK>
[ 1742.825504][T24931] gspca_stk1135: reg_w 0x353 err -71
[ 1742.831807][T24931] gspca_stk1135: serial bus timeout: status=0x00
[ 1742.853016][T26099] hub 2-0:1.0: hub_ext_port_status failed (err = -12)
[ 1742.867113][T24931] gspca_stk1135: Sensor write failed
[ 1742.873001][T24931] gspca_stk1135: serial bus timeout: status=0x00
[ 1742.889391][T24931] gspca_stk1135: Sensor write failed
[ 1742.907268][T24931] gspca_stk1135: serial bus timeout: status=0x00
[ 1742.913644][T24931] gspca_stk1135: Sensor read failed
[ 1742.942613][T24931] gspca_stk1135: serial bus timeout: status=0x00
[ 1742.956422][T24931] gspca_stk1135: Sensor read failed
[ 1742.961650][T24931] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1742.990341][T24931] gspca_stk1135: serial bus timeout: status=0x00
[ 1742.998621][T24931] gspca_stk1135: Sensor read failed
[ 1743.003935][T24931] gspca_stk1135: serial bus timeout: status=0x00
[ 1743.013069][T24931] gspca_stk1135: Sensor read failed
[ 1743.020143][T24931] gspca_stk1135: serial bus timeout: status=0x00
[ 1743.029027][T24931] gspca_stk1135: Sensor write failed
[ 1743.034430][T24931] gspca_stk1135: serial bus timeout: status=0x00
[ 1743.044292][T24931] gspca_stk1135: Sensor write failed
[ 1743.051915][T24931] stk1135: probe of 1-1:0.0 failed with error -71
[ 1743.071673][T24931] usb 1-1: USB disconnect, device number 72
[ 1743.390171][T26103] futex_wake_op: syz.0.5521 tries to shift op by 144; fix this program
[ 1743.629903][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888032d0d400: rx timeout, send abort
[ 1743.840613][ T5168] pegasus 10-1:1.0: can't reset MAC
[ 1743.854657][ T5168] pegasus: probe of 10-1:1.0 failed with error -5
[ 1743.871587][ T5168] usb 10-1: USB disconnect, device number 9
[ 1744.138400][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888032d0d400: abort rx timeout. Force session deactivation
[ 1744.294622][T24931] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1744.464062][T26117] md/linear:md9: not enough drives present. Aborting!
[ 1744.476414][T26117] md: pers->run() failed ...
[ 1744.484338][T26117] md: md9 stopped.
[ 1744.488321][T24931] usb 1-1: Using ep0 maxpacket: 16
[ 1744.515030][T24931] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1744.539866][T24931] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1744.570673][T24931] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1744.588644][T24931] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 1744.610693][T24931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1744.625009][T24931] usb 1-1: config 0 descriptor??
[ 1744.704636][ T5168] usb 8-1: new high-speed USB device number 67 using dummy_hcd
[ 1744.844490][T10607] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1744.895923][ T5168] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1744.909870][ T5168] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1744.927670][ T5168] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1744.948971][ T5168] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1744.956485][ T5168] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1744.969551][ T5168] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1744.988189][ T5168] usb 8-1: config 0 descriptor??
[ 1745.035936][T10607] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1745.052511][T10607] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1745.064225][T24931] usbhid 1-1:0.0: can't add hid device: -71
[ 1745.079732][T24931] usbhid: probe of 1-1:0.0 failed with error -71
[ 1745.089138][T10607] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1745.104833][T24931] usb 1-1: USB disconnect, device number 73
[ 1745.115917][T10607] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1745.143742][T10607] usb 10-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice=ac.66
[ 1745.170454][T10607] usb 10-1: New USB device strings: Mfr=99, Product=111, SerialNumber=3
[ 1745.180408][T10607] usb 10-1: Product: syz
[ 1745.187416][T10607] usb 10-1: Manufacturer: syz
[ 1745.192275][T10607] usb 10-1: SerialNumber: syz
[ 1745.231639][T24128] Bluetooth: hci4: urb ffff88801df5ac00 submission failed (90)
[ 1745.418135][T24931] usb 10-1: USB disconnect, device number 10
[ 1745.613540][ T5168] usbhid 8-1:0.0: can't add hid device: -71
[ 1745.631113][ T5168] usbhid: probe of 8-1:0.0 failed with error -71
[ 1745.648007][T26122] futex_wake_op: syz.0.5530 tries to shift op by 144; fix this program
[ 1745.658793][ T5168] usb 8-1: USB disconnect, device number 67
[ 1746.352720][T26136] block device autoloading is deprecated and will be removed.
[ 1746.397769][T26136] md/linear:md0: not enough drives present. Aborting!
[ 1746.407789][T26136] md: pers->run() failed ...
[ 1746.413506][T26136] md: md0 stopped.
[ 1746.474765][ T5168] usb 8-1: new high-speed USB device number 68 using dummy_hcd
[ 1746.647235][T26143] futex_wake_op: syz.1.5539 tries to shift op by 144; fix this program
[ 1746.686303][ T5168] usb 8-1: Using ep0 maxpacket: 16
[ 1746.708348][ T5168] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1746.738898][ T5168] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1746.771068][ T5168] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1746.797326][ T5168] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1746.827628][ T5168] usb 8-1: Product: syz
[ 1746.831837][ T5168] usb 8-1: Manufacturer: syz
[ 1746.864190][ T5168] usb 8-1: SerialNumber: syz
[ 1746.924593][T24931] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1747.095833][ T5168] usb 8-1: 0:2 : does not exist
[ 1747.115955][T24931] usb 1-1: Using ep0 maxpacket: 16
[ 1747.127945][ T5168] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 1747.150025][T24931] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1747.174447][T24931] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1747.212553][ T5168] usb 8-1: USB disconnect, device number 68
[ 1747.226283][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888022999400: rx timeout, send abort
[ 1747.254655][T24931] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1747.273819][T24948] udevd[24948]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1747.313263][T24931] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 1747.336585][T24931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1747.381785][T24931] usb 1-1: config 0 descriptor??
[ 1747.734680][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888022999400: abort rx timeout. Force session deactivation
[ 1747.846026][T24931] usbhid 1-1:0.0: can't add hid device: -71
[ 1747.876840][T24931] usbhid: probe of 1-1:0.0 failed with error -71
[ 1747.908222][T24931] usb 1-1: USB disconnect, device number 74
[ 1747.964522][T10761] usb 8-1: new high-speed USB device number 69 using dummy_hcd
[ 1748.165600][T10761] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1748.179422][T10761] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1748.190706][T10761] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1748.210477][T10761] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1748.217409][T10761] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1748.230488][T10761] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1748.248069][T10761] usb 8-1: config 0 descriptor??
[ 1748.480403][T26182] block device autoloading is deprecated and will be removed.
[ 1748.578378][T26182] md/linear:md0: not enough drives present. Aborting!
[ 1748.587948][T26186] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5547'.
[ 1748.598524][T26182] md: pers->run() failed ...
[ 1748.609035][T26185] md: md0 stopped.
[ 1748.727482][T26190] futex_wake_op: syz.0.5549 tries to shift op by 144; fix this program
[ 1748.860866][T10761] usbhid 8-1:0.0: can't add hid device: -71
[ 1748.872624][T10761] usbhid: probe of 8-1:0.0 failed with error -71
[ 1748.889091][T10761] usb 8-1: USB disconnect, device number 69
[ 1748.964036][ T5168] usb 10-1: new full-speed USB device number 11 using dummy_hcd
[ 1749.084056][T24931] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1749.158258][ T5168] usb 10-1: too many endpoints for config 0 interface 0 altsetting 8: 34, using maximum allowed: 30
[ 1749.172679][ T5168] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1749.188787][ T5168] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1749.201559][ T5168] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[ 1749.219144][ T5168] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1749.226739][ T5168] usb 10-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[ 1749.240690][ T5168] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1749.250425][ T5168] usb 10-1: config 0 descriptor??
[ 1749.263543][T26188] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1749.284099][T24931] usb 1-1: Using ep0 maxpacket: 16
[ 1749.290633][T24931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1749.306401][T24931] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1749.319723][T24931] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1749.336932][T24931] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1749.351394][T24931] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1749.360163][T24931] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[ 1749.370802][T24931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1749.399789][T24931] usb 1-1: config 0 descriptor??
[ 1749.692168][ T5168] usbhid 10-1:0.0: can't add hid device: -71
[ 1749.702321][ T5168] usbhid: probe of 10-1:0.0 failed with error -71
[ 1749.722650][ T5168] usb 10-1: USB disconnect, device number 11
[ 1749.829232][T24931] hid_parser_main: 26 callbacks suppressed
[ 1749.829246][T24931] logitech-djreceiver 0003:046D:C53A.0020: unknown main item tag 0x2
[ 1749.848968][T24931] logitech-djreceiver 0003:046D:C53A.0020: unknown main item tag 0x4
[ 1749.859104][T24931] logitech-djreceiver 0003:046D:C53A.0020: unknown main item tag 0x6
[ 1749.870521][T24931] logitech-djreceiver 0003:046D:C53A.0020: unknown main item tag 0x1
[ 1749.878935][T24931] logitech-djreceiver 0003:046D:C53A.0020: unknown main item tag 0x6
[ 1750.030621][T24931] usb 1-1: USB disconnect, device number 75
[ 1750.581622][T26207] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5556'.
[ 1750.607889][T24931] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1750.650170][T26209] block device autoloading is deprecated and will be removed.
[ 1750.697087][T26209] md/linear:md0: not enough drives present. Aborting!
[ 1750.708786][T26209] md: pers->run() failed ...
[ 1750.715513][T26209] md: md0 stopped.
[ 1750.722318][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880242f3800: rx timeout, send abort
[ 1750.774289][T24931] usb 10-1: device descriptor read/64, error -71
[ 1750.792856][T26212] futex_wake_op: syz.0.5558 tries to shift op by 144; fix this program
[ 1751.043826][T24931] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1751.133853][    T8] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[ 1751.203892][T24931] usb 10-1: device descriptor read/64, error -71
[ 1751.230674][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880242f3800: abort rx timeout. Force session deactivation
[ 1751.324488][T24931] usb usb10-port1: attempt power cycle
[ 1751.333711][    T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1751.348011][    T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1751.358137][    T8] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1751.372486][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1751.553753][ T5168] usb 8-1: new full-speed USB device number 70 using dummy_hcd
[ 1751.733742][T24931] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1751.743464][ T5168] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1751.759125][ T5168] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1751.770103][ T5168] usb 8-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1751.779498][T24931] usb 10-1: device descriptor read/8, error -71
[ 1751.790635][ T5168] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1752.065055][T24931] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1752.105389][T24931] usb 10-1: device descriptor read/8, error -71
[ 1752.224940][T24931] usb usb10-port1: unable to enumerate USB device
[ 1752.407443][    T8] pegasus: probe of 1-1:1.0 failed with error -32
[ 1753.803531][    T8] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1753.829056][ T5168] pegasus 8-1:1.0: setup Pegasus II specific registers
[ 1753.883377][T18900] usb 1-1: USB disconnect, device number 76
[ 1753.942236][T26233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5566'.
[ 1753.965497][ T5168] pegasus 8-1:1.0: can't locate MII phy, using default
[ 1753.997138][    T8] usb 10-1: Using ep0 maxpacket: 16
[ 1754.018842][ T5168] pegasus 8-1:1.0: eth1, 3Com USB Ethernet 3C460B, ba:ce:36:49:b8:16
[ 1754.046728][    T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1754.103846][ T5168] usb 8-1: USB disconnect, device number 70
[ 1754.110676][    T8] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1754.178232][T26237] futex_wake_op: syz.0.5567 tries to shift op by 144; fix this program
[ 1754.188335][    T8] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1754.226533][    T8] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1754.292733][    T8] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1754.310419][    T8] usb 10-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[ 1754.340372][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1754.402275][    T8] usb 10-1: config 0 descriptor??
[ 1754.773535][ T5168] usb 8-1: new high-speed USB device number 71 using dummy_hcd
[ 1754.841385][    T8] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x2
[ 1754.861948][    T8] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x4
[ 1754.892295][    T8] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x6
[ 1754.911034][    T8] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x1
[ 1754.919561][T10761] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1754.939555][    T8] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x6
[ 1754.977841][ T5168] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1755.009256][ T5168] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1755.029908][ T5168] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1755.067209][T24931] usb 10-1: USB disconnect, device number 16
[ 1755.080558][ T5168] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1755.094295][T10761] usb 1-1: device descriptor read/64, error -71
[ 1755.113252][ T5168] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1755.136768][ T5168] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1755.163740][ T5168] usb 8-1: config 0 descriptor??
[ 1755.394318][T10761] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 1755.419443][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805fe3cc00: rx timeout, send abort
[ 1755.553416][T10761] usb 1-1: device descriptor read/64, error -71
[ 1755.674435][T10761] usb usb1-port1: attempt power cycle
[ 1755.794676][ T5168] usbhid 8-1:0.0: can't add hid device: -71
[ 1755.807341][ T5168] usbhid: probe of 8-1:0.0 failed with error -71
[ 1755.828111][ T5168] usb 8-1: USB disconnect, device number 71
[ 1755.927754][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805fe3cc00: abort rx timeout. Force session deactivation
[ 1755.973211][    T8] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[ 1756.093223][T10761] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1756.126172][T10761] usb 1-1: device descriptor read/8, error -71
[ 1756.176272][    T8] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1756.187256][    T8] usb 10-1: not running at top speed; connect to a high speed hub
[ 1756.198483][    T8] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1756.211844][    T8] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1756.221744][    T8] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1756.239095][    T8] usb 10-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[ 1756.248913][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1756.257609][    T8] usb 10-1: Product: syz
[ 1756.269147][    T8] usb 10-1: Manufacturer: syz
[ 1756.280516][    T8] usb 10-1: Found UVC 1.00 device syz (8086:0ad2)
[ 1756.291795][    T8] usb 10-1: No streaming interface found for terminal 2.
[ 1756.301500][    T8] usb 10-1: Failed to create links for entity 3
[ 1756.320398][    T8] usb 10-1: Failed to register entities (-22).
[ 1756.382640][T26278] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5575'.
[ 1756.395043][T10761] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1756.444560][T10761] usb 1-1: device descriptor read/8, error -71
[ 1756.489887][T24931] usb 10-1: USB disconnect, device number 17
[ 1756.573701][T10761] usb usb1-port1: unable to enumerate USB device
[ 1756.723164][    T8] usb 8-1: new high-speed USB device number 72 using dummy_hcd
[ 1756.903144][    T8] usb 8-1: Using ep0 maxpacket: 16
[ 1756.912154][    T8] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1756.931862][    T8] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1756.940452][    T8] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[ 1756.952549][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1756.960808][    T8] usb 8-1: Product: syz
[ 1756.967997][    T8] usb 8-1: Manufacturer: syz
[ 1756.972587][    T8] usb 8-1: SerialNumber: syz
[ 1756.983627][    T8] usb 8-1: config 0 descriptor??
[ 1757.199854][    C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1757.213639][    T8] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input27
[ 1757.234196][    T8] imon:send_packet: packet tx failed (-71)
[ 1757.257896][    T8] imon 8-1:0.0: panel buttons/knobs setup failed
[ 1757.323101][    T8] rc_core: IR keymap rc-imon-pad not found
[ 1757.331687][    T8] Registered IR keymap rc-empty
[ 1757.336645][ T5168] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1757.344888][    T8] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1757.358126][    T8] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1757.376076][    T8] imon:send_packet: packet tx failed (-71)
[ 1757.393980][    T8] imon 8-1:0.0: remote input dev register failed
[ 1757.411561][    T8] imon 8-1:0.0: imon_init_intf0: rc device setup failed
[ 1757.430509][    T8] imon 8-1:0.0: unable to initialize intf0, err 0
[ 1757.437424][    T8] imon:imon_probe: failed to initialize context!
[ 1757.447768][    T8] imon 8-1:0.0: unable to register, err -19
[ 1757.460069][    T8] usb 8-1: USB disconnect, device number 72
[ 1757.546529][ T5168] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x92, skipping
[ 1757.559207][ T5168] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1757.577277][ T5168] usb 10-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[ 1757.592841][ T5168] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1757.604553][ T5168] usb 10-1: Product: syz
[ 1757.608794][ T5168] usb 10-1: Manufacturer: syz
[ 1757.615026][ T5168] usb 10-1: SerialNumber: syz
[ 1757.626642][ T5168] usb 10-1: config 0 descriptor??
[ 1757.637729][ T5168] redrat3 10-1:0.0: Couldn't find all endpoints
[ 1757.709397][T26285] futex_wake_op: syz.0.5578 tries to shift op by 144; fix this program
[ 1757.837326][ T5168] usb 10-1: USB disconnect, device number 18
[ 1757.854309][    T8] usb 8-1: new full-speed USB device number 73 using dummy_hcd
[ 1758.054614][    T8] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1758.093260][    T8] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[ 1758.123412][    T8] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1758.156018][    T8] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[ 1758.183986][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1758.202351][    T8] usb 8-1: Product: syz
[ 1758.212451][    T8] usb 8-1: Manufacturer: syz
[ 1758.222580][    T8] usb 8-1: SerialNumber: syz
[ 1758.249268][    T8] usb 8-1: config 0 descriptor??
[ 1758.269290][T26280] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[ 1758.516682][    C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1758.533787][    T8] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input29
[ 1758.590222][T26309] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5584'.
[ 1758.833443][    T8] rc_core: IR keymap rc-imon-pad not found
[ 1758.848321][    T8] Registered IR keymap rc-empty
[ 1758.865169][    T8] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1758.885288][    T8] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1758.933582][    T8] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 1758.957960][    T8] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input30
[ 1758.983849][ T5168] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1759.022266][    T8] imon 8-1:0.0: iMON device (15c2:0045, intf0) on usb<8:73> initialized
[ 1759.154331][T24931] usb 8-1: USB disconnect, device number 73
[ 1759.192857][ T5168] usb 10-1: Using ep0 maxpacket: 16
[ 1759.209520][ T5168] usb 10-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1759.268903][ T5168] usb 10-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1759.324589][ T5168] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1759.348882][ T5168] usb 10-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 1759.372553][ T5168] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1759.402691][ T5168] usb 10-1: config 0 descriptor??
[ 1759.448761][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88807bca9800: rx timeout, send abort
[ 1759.957071][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88807bca9800: abort rx timeout. Force session deactivation
[ 1760.023237][ T5168] usbhid 10-1:0.0: can't add hid device: -71
[ 1760.040146][ T5168] usbhid: probe of 10-1:0.0 failed with error -71
[ 1760.057871][T26333] futex_wake_op: syz.0.5588 tries to shift op by 144; fix this program
[ 1760.071961][ T5168] usb 10-1: USB disconnect, device number 19
[ 1760.172825][T18900] usb 8-1: new full-speed USB device number 74 using dummy_hcd
[ 1760.324516][T18900] usb 8-1: device descriptor read/64, error -71
[ 1760.432748][T24931] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[ 1760.604772][T18900] usb 8-1: new full-speed USB device number 75 using dummy_hcd
[ 1760.617988][T24931] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 34, using maximum allowed: 30
[ 1760.639235][T24931] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1760.651515][T24931] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1760.665654][T24931] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[ 1760.690203][T24931] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1760.710068][T24931] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[ 1760.731582][T24931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1760.759716][T24931] usb 1-1: config 0 descriptor??
[ 1760.765101][T18900] usb 8-1: device descriptor read/64, error -71
[ 1760.795684][T26335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1760.883019][T18900] usb usb8-port1: attempt power cycle
[ 1761.058919][T26346] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5593'.
[ 1761.312926][T18900] usb 8-1: new full-speed USB device number 76 using dummy_hcd
[ 1761.366651][T18900] usb 8-1: device descriptor read/8, error -71
[ 1761.433071][    T8] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1761.454997][T24931] usbhid 1-1:0.0: can't add hid device: -71
[ 1761.471147][T24931] usbhid: probe of 1-1:0.0 failed with error -71
[ 1761.495893][T24931] usb 1-1: USB disconnect, device number 81
[ 1761.642907][    T8] usb 10-1: Using ep0 maxpacket: 32
[ 1761.648287][T18900] usb 8-1: new full-speed USB device number 77 using dummy_hcd
[ 1761.663810][    T8] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1761.682326][    T8] usb 10-1: config 0 has no interface number 0
[ 1761.702459][    T8] usb 10-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 1761.718317][T18900] usb 8-1: device descriptor read/8, error -71
[ 1761.738124][    T8] usb 10-1: config 0 interface 1 has no altsetting 0
[ 1761.760999][    T8] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1761.778743][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1761.792046][    T8] usb 10-1: Product: syz
[ 1761.811824][    T8] usb 10-1: Manufacturer: syz
[ 1761.819942][    T8] usb 10-1: SerialNumber: syz
[ 1761.837155][    T8] usb 10-1: config 0 descriptor??
[ 1761.845897][T18900] usb usb8-port1: unable to enumerate USB device
[ 1762.056542][    T8] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1762.084699][T26374] FAULT_INJECTION: forcing a failure.
[ 1762.084699][T26374] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1762.113839][    T8] cx231xx 10-1:0.1: Failed to read PCB config
[ 1762.133655][    T8] cx231xx: probe of 10-1:0.1 failed with error -71
[ 1762.162287][T26374] CPU: 0 PID: 26374 Comm: syz.0.5595 Not tainted syzkaller #0
[ 1762.169792][T26374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1762.179837][T26374] Call Trace:
[ 1762.183100][T26374]  <TASK>
[ 1762.186013][T26374]  dump_stack_lvl+0x18c/0x250
[ 1762.190786][T26374]  ? show_regs_print_info+0x20/0x20
[ 1762.195983][T26374]  ? load_image+0x420/0x420
[ 1762.200472][T26374]  ? mmap_region+0x192c/0x2090
[ 1762.205235][T26374]  should_fail_ex+0x394/0x4c0
[ 1762.209900][T26374]  get_futex_key+0x136/0x1030
[ 1762.214563][T26374]  ? futex_setup_timer+0xc0/0xc0
[ 1762.219481][T26374]  ? cap_mmap_addr+0x157/0x2b0
[ 1762.224234][T26374]  futex_wake+0x127/0x4f0
[ 1762.228570][T26374]  ? futex_wake_mark+0x150/0x150
[ 1762.233501][T26374]  ? userfaultfd_unmap_complete+0x293/0x310
[ 1762.239385][T26374]  ? vm_mmap_pgoff+0x2a6/0x3f0
[ 1762.244249][T26374]  ? userfaultfd_unmap_prep+0x3c0/0x3c0
[ 1762.249786][T26374]  do_futex+0x35d/0x3e0
[ 1762.253957][T26374]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1762.259857][T26374]  ? vm_mmap_pgoff+0x2e1/0x3f0
[ 1762.264621][T26374]  __se_sys_futex+0x3a9/0x440
[ 1762.269291][T26374]  ? __x64_sys_futex+0xf0/0xf0
[ 1762.274041][T26374]  ? __x64_sys_futex+0x21/0xf0
[ 1762.278791][T26374]  do_syscall_64+0x55/0xb0
[ 1762.283201][T26374]  ? clear_bhb_loop+0x40/0x90
[ 1762.287862][T26374]  ? clear_bhb_loop+0x40/0x90
[ 1762.292526][T26374]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1762.298406][T26374] RIP: 0033:0x7fe91b99f559
[ 1762.302810][T26374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1762.322412][T26374] RSP: 002b:00007fe91c7a10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1762.330810][T26374] RAX: ffffffffffffffda RBX: 00007fe91bc25fa8 RCX: 00007fe91b99f559
[ 1762.338762][T26374] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe91bc25fac
[ 1762.346720][T26374] RBP: 00007fe91bc25fa0 R08: 0000000000745cf6 R09: 0000000000000000
[ 1762.354678][T26374] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1762.362632][T26374] R13: 00007fe91bc26038 R14: 00007ffe0eb86790 R15: 00007ffe0eb86878
[ 1762.370599][T26374]  </TASK>
[ 1762.390857][    T8] usb 10-1: USB disconnect, device number 20
[ 1762.812597][T10761] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1762.822496][    T8] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1762.971150][T26387] futex_wake_op: syz.7.5598 tries to shift op by 144; fix this program
[ 1762.992606][T10761] usb 1-1: Using ep0 maxpacket: 16
[ 1763.004764][    T8] usb 10-1: Using ep0 maxpacket: 32
[ 1763.011317][T10761] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1763.031607][    T8] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1763.041504][T10761] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1763.048368][    T8] usb 10-1: config 0 has no interface number 0
[ 1763.074880][T10761] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[ 1763.088245][    T8] usb 10-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 1763.117846][T10761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.132506][    T8] usb 10-1: config 0 interface 1 has no altsetting 0
[ 1763.143187][T10761] usb 1-1: Product: syz
[ 1763.147366][T10761] usb 1-1: Manufacturer: syz
[ 1763.182674][    T8] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1763.192031][T10761] usb 1-1: SerialNumber: syz
[ 1763.220457][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.230150][T10761] usb 1-1: config 0 descriptor??
[ 1763.246467][    T8] usb 10-1: Product: syz
[ 1763.277816][    T8] usb 10-1: Manufacturer: syz
[ 1763.286934][    T8] usb 10-1: SerialNumber: syz
[ 1763.304704][    T8] usb 10-1: config 0 descriptor??
[ 1763.456719][    C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1763.465882][T10761] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31
[ 1763.540876][    T8] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1763.583500][T10761] imon:send_packet: packet tx failed (-71)
[ 1763.611839][    T8] cx231xx 10-1:0.1: Failed to read PCB config
[ 1763.622449][T10761] imon 1-1:0.0: panel buttons/knobs setup failed
[ 1763.647009][    T8] cx231xx: probe of 10-1:0.1 failed with error -71
[ 1763.657051][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888027625000: rx timeout, send abort
[ 1763.709060][    T8] usb 10-1: USB disconnect, device number 21
[ 1763.785462][T10761] rc_core: IR keymap rc-imon-pad not found
[ 1763.811636][T10761] Registered IR keymap rc-empty
[ 1763.819512][T10761] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1763.845871][T10761] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1763.866908][T10761] imon:send_packet: packet tx failed (-71)
[ 1763.906708][T10761] imon 1-1:0.0: remote input dev register failed
[ 1763.925230][T10761] imon 1-1:0.0: imon_init_intf0: rc device setup failed
[ 1763.951891][T10761] imon 1-1:0.0: unable to initialize intf0, err 0
[ 1763.978456][T10761] imon:imon_probe: failed to initialize context!
[ 1763.995175][T10761] imon 1-1:0.0: unable to register, err -19
[ 1764.021590][T10761] usb 1-1: USB disconnect, device number 82
[ 1764.162433][T14147] usb 8-1: new high-speed USB device number 78 using dummy_hcd
[ 1764.170035][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888027625000: abort rx timeout. Force session deactivation
[ 1764.423179][T14147] usb 8-1: Using ep0 maxpacket: 8
[ 1764.431738][T14147] usb 8-1: config 0 has no interfaces?
[ 1764.441408][T14147] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1764.450758][T10761] usb 1-1: new full-speed USB device number 83 using dummy_hcd
[ 1764.470914][T14147] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1764.494801][T14147] usb 8-1: Product: syz
[ 1764.498988][T14147] usb 8-1: Manufacturer: syz
[ 1764.516756][T14147] usb 8-1: SerialNumber: syz
[ 1764.536538][T14147] usb 8-1: config 0 descriptor??
[ 1764.633675][    T8] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1764.650428][T10761] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1764.680770][T10761] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[ 1764.703011][T10761] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1764.721498][T10761] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[ 1764.741375][T10761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1764.759408][T10607] usb 8-1: USB disconnect, device number 78
[ 1764.790238][T10761] usb 1-1: Product: syz
[ 1764.812141][T10761] usb 1-1: Manufacturer: syz
[ 1764.822933][    T8] usb 10-1: device descriptor read/64, error -71
[ 1764.829419][T10761] usb 1-1: SerialNumber: syz
[ 1764.844437][T10761] usb 1-1: config 0 descriptor??
[ 1764.850013][T26384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1765.091019][    C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1765.105128][T10761] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33
[ 1765.119196][    T8] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1765.272294][    T8] usb 10-1: device descriptor read/64, error -71
[ 1765.392371][T10761] rc_core: IR keymap rc-imon-pad not found
[ 1765.400510][T10761] Registered IR keymap rc-empty
[ 1765.405752][    T8] usb usb10-port1: attempt power cycle
[ 1765.418731][T10761] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1765.430045][T10761] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1765.535520][T10761] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1765.548864][T10761] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34
[ 1765.567447][T10761] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:83> initialized
[ 1765.592236][T14147] usb 8-1: new high-speed USB device number 79 using dummy_hcd
[ 1765.725301][T10761] usb 1-1: USB disconnect, device number 83
[ 1765.772300][T14147] usb 8-1: device descriptor read/64, error -71
[ 1765.832267][    T8] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1765.863318][    T8] usb 10-1: device descriptor read/8, error -71
[ 1766.052226][T14147] usb 8-1: new high-speed USB device number 80 using dummy_hcd
[ 1766.132207][    T8] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1766.185259][    T8] usb 10-1: device descriptor read/8, error -71
[ 1766.212323][T14147] usb 8-1: device descriptor read/64, error -71
[ 1766.313160][    T8] usb usb10-port1: unable to enumerate USB device
[ 1766.342522][T14147] usb usb8-port1: attempt power cycle
[ 1766.752503][    T8] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[ 1766.760167][T14147] usb 8-1: new high-speed USB device number 81 using dummy_hcd
[ 1766.803374][T14147] usb 8-1: device descriptor read/8, error -71
[ 1766.922197][    T8] usb 1-1: device descriptor read/64, error -71
[ 1767.072342][T14147] usb 8-1: new high-speed USB device number 82 using dummy_hcd
[ 1767.114149][T14147] usb 8-1: device descriptor read/8, error -71
[ 1767.192254][    T8] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[ 1767.232792][T14147] usb usb8-port1: unable to enumerate USB device
[ 1767.342221][    T8] usb 1-1: device descriptor read/64, error -71
[ 1767.472735][    T8] usb usb1-port1: attempt power cycle
[ 1767.842103][T14147] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1767.882260][    T8] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[ 1767.923624][    T8] usb 1-1: device descriptor read/8, error -71
[ 1768.034363][T14147] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1768.047790][T14147] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1768.070827][T14147] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1768.080408][T14147] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1768.090247][T14147] usb 10-1: Product: syz
[ 1768.097585][T14147] usb 10-1: Manufacturer: syz
[ 1768.104290][T14147] usb 10-1: SerialNumber: syz
[ 1768.192123][    T8] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[ 1768.233786][    T8] usb 1-1: device descriptor read/8, error -71
[ 1768.325571][T26451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1768.346826][T26451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1768.358592][    T8] usb usb1-port1: unable to enumerate USB device
[ 1768.394659][T14147] cdc_ether: probe of 10-1:1.0 failed with error -22
[ 1768.428956][T14147] usb 10-1: USB disconnect, device number 26
[ 1769.012073][T14147] usb 10-1: new full-speed USB device number 27 using dummy_hcd
[ 1769.194053][T14147] usb 10-1: config index 0 descriptor too short (expected 301, got 72)
[ 1769.208169][T14147] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1769.219206][T14147] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1769.232393][T14147] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64
[ 1769.246039][T14147] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1769.258098][T14147] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1769.270207][T14147] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1769.491919][T14147] usb 10-1: usb_control_msg returned -71
[ 1769.514377][T14147] usbtmc 10-1:16.0: can't read capabilities
[ 1769.553975][T14147] usb 10-1: USB disconnect, device number 27
[ 1769.870445][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888078271000: rx timeout, send abort
[ 1770.261875][    T8] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1770.364483][T14147] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1770.378757][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888078271000: abort rx timeout. Force session deactivation
[ 1770.455688][    T8] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1770.482497][    T8] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1770.506228][    T8] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1770.533212][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1770.539839][    T8] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1770.552862][T14147] usb 10-1: device descriptor read/64, error -71
[ 1770.559264][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1770.576383][    T8] usb 1-1: config 0 descriptor??
[ 1770.791791][T18900] usb 8-1: new high-speed USB device number 83 using dummy_hcd
[ 1770.821820][T14147] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1770.971805][T18900] usb 8-1: Using ep0 maxpacket: 16
[ 1770.980987][T18900] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1770.991445][T14147] usb 10-1: device descriptor read/64, error -71
[ 1771.002101][T18900] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1771.015886][T18900] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1771.026707][T18900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1771.039406][T18900] usb 8-1: Product: syz
[ 1771.044417][T18900] usb 8-1: Manufacturer: syz
[ 1771.049148][T18900] usb 8-1: SerialNumber: syz
[ 1771.122007][T14147] usb usb10-port1: attempt power cycle
[ 1771.203419][    T8] usbhid 1-1:0.0: can't add hid device: -71
[ 1771.217719][    T8] usbhid: probe of 1-1:0.0 failed with error -71
[ 1771.231543][    T8] usb 1-1: USB disconnect, device number 88
[ 1771.271139][T18900] usb 8-1: 0:2 : does not exist
[ 1771.290556][T18900] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 1771.320812][T18900] usb 8-1: USB disconnect, device number 83
[ 1771.531742][T14147] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1771.564373][T14147] usb 10-1: device descriptor read/8, error -71
[ 1771.831791][T14147] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1771.885473][T14147] usb 10-1: device descriptor read/8, error -71
[ 1772.022566][T14147] usb usb10-port1: unable to enumerate USB device
[ 1772.029159][T10761] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[ 1772.181808][T10761] usb 1-1: device descriptor read/64, error -71
[ 1772.472047][T10761] usb 1-1: new full-speed USB device number 90 using dummy_hcd
[ 1772.561729][T14147] usb 8-1: new high-speed USB device number 84 using dummy_hcd
[ 1772.641670][T10761] usb 1-1: device descriptor read/64, error -71
[ 1772.752610][T14147] usb 8-1: Using ep0 maxpacket: 32
[ 1772.761083][T14147] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1772.774202][T10761] usb usb1-port1: attempt power cycle
[ 1772.780683][T14147] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1772.790391][T14147] usb 8-1: Product: syz
[ 1772.797469][T14147] usb 8-1: Manufacturer: syz
[ 1772.802556][T14147] usb 8-1: SerialNumber: syz
[ 1772.808550][T14147] usb 8-1: config 0 descriptor??
[ 1772.825505][T14147] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1773.191547][T10761] usb 1-1: new full-speed USB device number 91 using dummy_hcd
[ 1773.225004][T10761] usb 1-1: device descriptor read/8, error -71
[ 1773.501622][T10761] usb 1-1: new full-speed USB device number 92 using dummy_hcd
[ 1773.542753][T10761] usb 1-1: device descriptor read/8, error -71
[ 1773.662288][T10761] usb usb1-port1: unable to enumerate USB device
[ 1774.388511][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805ec3cc00: rx timeout, send abort
[ 1774.896836][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805ec3cc00: abort rx timeout. Force session deactivation
[ 1775.025238][T26509] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (266218)
[ 1775.301442][    T8] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1775.471567][T24883] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1775.479378][    T8] usb 1-1: device descriptor read/64, error -71
[ 1775.643868][T24883] usb 10-1: device descriptor read/64, error -71
[ 1775.762892][    T8] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1775.921453][T24883] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[ 1775.929246][    T8] usb 1-1: device descriptor read/64, error -71
[ 1776.054175][T14147] gspca_stk1135: reg_w 0x353 err -71
[ 1776.064334][    T8] usb usb1-port1: attempt power cycle
[ 1776.073728][T14147] gspca_stk1135: serial bus timeout: status=0x00
[ 1776.080085][T14147] gspca_stk1135: Sensor write failed
[ 1776.089744][T14147] gspca_stk1135: serial bus timeout: status=0x00
[ 1776.097136][T24883] usb 10-1: device descriptor read/64, error -71
[ 1776.106755][T14147] gspca_stk1135: Sensor write failed
[ 1776.115389][T14147] gspca_stk1135: serial bus timeout: status=0x00
[ 1776.126685][T14147] gspca_stk1135: Sensor read failed
[ 1776.132234][T14147] gspca_stk1135: serial bus timeout: status=0x00
[ 1776.138951][T14147] gspca_stk1135: Sensor read failed
[ 1776.147221][T14147] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1776.158482][T14147] gspca_stk1135: serial bus timeout: status=0x00
[ 1776.168106][T14147] gspca_stk1135: Sensor read failed
[ 1776.173533][T14147] gspca_stk1135: serial bus timeout: status=0x00
[ 1776.180020][T14147] gspca_stk1135: Sensor read failed
[ 1776.185620][T14147] gspca_stk1135: serial bus timeout: status=0x00
[ 1776.195923][T14147] gspca_stk1135: Sensor write failed
[ 1776.202797][T14147] gspca_stk1135: serial bus timeout: status=0x00
[ 1776.209125][T14147] gspca_stk1135: Sensor write failed
[ 1776.217661][T14147] stk1135: probe of 8-1:0.0 failed with error -71
[ 1776.230380][T14147] usb 8-1: USB disconnect, device number 84
[ 1776.236687][T24883] usb usb10-port1: attempt power cycle
[ 1776.491349][    T8] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1776.524506][    T8] usb 1-1: device descriptor read/8, error -71
[ 1776.661583][T24883] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[ 1776.704742][T24883] usb 10-1: device descriptor read/8, error -71
[ 1776.791414][    T8] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1776.832536][    T8] usb 1-1: device descriptor read/8, error -71
[ 1776.881344][ T5168] usb 8-1: new high-speed USB device number 85 using dummy_hcd
[ 1776.953380][    T8] usb usb1-port1: unable to enumerate USB device
[ 1776.981346][T24883] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 1777.014927][T24883] usb 10-1: device descriptor read/8, error -71
[ 1777.072681][ T5168] usb 8-1: Using ep0 maxpacket: 32
[ 1777.087485][ T5168] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1777.105896][ T5168] usb 8-1: config 0 has no interface number 0
[ 1777.128968][ T5168] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 1777.152820][T24883] usb usb10-port1: unable to enumerate USB device
[ 1777.167720][ T5168] usb 8-1: config 0 interface 1 has no altsetting 0
[ 1777.186268][ T5168] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1777.197925][ T5168] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1777.207568][ T5168] usb 8-1: Product: syz
[ 1777.213645][ T5168] usb 8-1: Manufacturer: syz
[ 1777.218231][ T5168] usb 8-1: SerialNumber: syz
[ 1777.231954][ T5168] usb 8-1: config 0 descriptor??
[ 1777.456821][ T5168] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1777.480231][ T5168] cx231xx 8-1:0.1: Failed to read PCB config
[ 1777.490312][ T5168] cx231xx: probe of 8-1:0.1 failed with error -71
[ 1777.506787][ T5168] usb 8-1: USB disconnect, device number 85
[ 1777.554890][T18012] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1777.564967][T18012] Bluetooth: hci1: Injecting HCI hardware error event
[ 1778.021297][ T5168] usb 8-1: new high-speed USB device number 86 using dummy_hcd
[ 1778.038433][T18012] Bluetooth: hci1: command 0x0406 tx timeout
[ 1778.060323][T24128] Bluetooth: hci1: hardware error 0x00
[ 1778.236581][ T5168] usb 8-1: Using ep0 maxpacket: 32
[ 1778.254779][ T5168] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1778.270460][ T5168] usb 8-1: config 0 has no interface number 0
[ 1778.287939][ T5168] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 1778.315628][ T5168] usb 8-1: config 0 interface 1 has no altsetting 0
[ 1778.335146][ T5168] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1778.350793][ T5168] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1778.376370][ T5168] usb 8-1: Product: syz
[ 1778.390765][ T5168] usb 8-1: Manufacturer: syz
[ 1778.400876][ T5168] usb 8-1: SerialNumber: syz
[ 1778.416288][ T5168] usb 8-1: config 0 descriptor??
[ 1778.438608][T26526] futex_wake_op: syz.9.5641 tries to shift op by 144; fix this program
[ 1778.551162][T24883] usb 1-1: new full-speed USB device number 97 using dummy_hcd
[ 1778.636679][ T5168] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1778.653531][ T5168] cx231xx 8-1:0.1: Failed to read PCB config
[ 1778.659639][ T5168] cx231xx: probe of 8-1:0.1 failed with error -71
[ 1778.669830][ T5168] usb 8-1: USB disconnect, device number 86
[ 1778.701289][T24883] usb 1-1: device descriptor read/64, error -71
[ 1778.971191][T24883] usb 1-1: new full-speed USB device number 98 using dummy_hcd
[ 1779.131235][T24883] usb 1-1: device descriptor read/64, error -71
[ 1779.263699][T24883] usb usb1-port1: attempt power cycle
[ 1779.561206][ T5168] usb 8-1: new full-speed USB device number 87 using dummy_hcd
[ 1779.681186][T24883] usb 1-1: new full-speed USB device number 99 using dummy_hcd
[ 1779.722940][T24883] usb 1-1: device descriptor read/8, error -71
[ 1779.755441][ T5168] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1779.767295][ T5168] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1779.779586][ T5168] usb 8-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1779.795290][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88801efe9000: rx timeout, send abort
[ 1779.806797][ T5168] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1779.991093][T24883] usb 1-1: new full-speed USB device number 100 using dummy_hcd
[ 1780.025851][T24883] usb 1-1: device descriptor read/8, error -71
[ 1780.111245][T24128] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1780.152802][T24883] usb usb1-port1: unable to enumerate USB device
[ 1780.303596][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88801efe9000: abort rx timeout. Force session deactivation
[ 1780.631211][T24883] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[ 1780.824294][T24883] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1780.837516][T24883] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1780.848792][T24883] usb 10-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1780.860167][T24883] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1781.250459][ T5168] pegasus 8-1:1.0: can't reset MAC
[ 1781.257372][ T5168] pegasus: probe of 8-1:1.0 failed with error -5
[ 1781.651021][T24883] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1781.811028][T24883] usb 1-1: device descriptor read/64, error -71
[ 1782.080952][T24883] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 1782.242578][T24883] usb 1-1: device descriptor read/64, error -71
[ 1782.317804][    T8] usb 8-1: USB disconnect, device number 87
[ 1782.364164][T24883] usb usb1-port1: attempt power cycle
[ 1782.781143][T24883] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 1782.822019][T24883] usb 1-1: device descriptor read/8, error -71
[ 1782.860880][    T8] usb 8-1: new high-speed USB device number 88 using dummy_hcd
[ 1783.050862][    T8] usb 8-1: Using ep0 maxpacket: 16
[ 1783.059631][    T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1783.070550][    T8] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1783.085359][    T8] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1783.097484][T24883] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 1783.107420][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1783.118028][    T8] usb 8-1: Product: syz
[ 1783.126485][    T8] usb 8-1: Manufacturer: syz
[ 1783.133030][    T8] usb 8-1: SerialNumber: syz
[ 1783.142897][T24883] usb 1-1: device descriptor read/8, error -71
[ 1783.153962][T24128] Bluetooth: hci3: command 0x0406 tx timeout
[ 1783.282961][T24883] usb usb1-port1: unable to enumerate USB device
[ 1783.345733][    T8] usb 8-1: 0:2 : does not exist
[ 1783.362829][    T8] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 1783.417210][T14147] usb 10-1: USB disconnect, device number 36
[ 1783.452178][    T8] usb 8-1: USB disconnect, device number 88
[ 1783.542023][T24948] udevd[24948]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1783.585153][T26561] jffs2: notice: (26561) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1784.080830][    T8] usb 10-1: new full-speed USB device number 37 using dummy_hcd
[ 1784.190907][T14147] usb 8-1: new full-speed USB device number 89 using dummy_hcd
[ 1784.241286][    T8] usb 10-1: device descriptor read/64, error -71
[ 1784.383026][T14147] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1784.405152][T14147] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1784.418528][T14147] usb 8-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1784.429177][T14147] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1784.530750][    T8] usb 10-1: new full-speed USB device number 38 using dummy_hcd
[ 1784.670876][T10761] usb 1-1: new full-speed USB device number 105 using dummy_hcd
[ 1784.684460][    T8] usb 10-1: device descriptor read/64, error -71
[ 1784.810813][    T8] usb usb10-port1: attempt power cycle
[ 1784.872104][T10761] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 34, using maximum allowed: 30
[ 1784.888824][T10761] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1784.905045][T10761] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1784.917123][T10761] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[ 1784.933994][T10761] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1784.941090][T10761] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[ 1784.950243][T10761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1784.958385][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805e540800: rx timeout, send abort
[ 1784.984058][T10761] usb 1-1: config 0 descriptor??
[ 1785.007874][T26577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1785.221318][    T8] usb 10-1: new full-speed USB device number 39 using dummy_hcd
[ 1785.261239][    T8] usb 10-1: device descriptor read/8, error -71
[ 1785.458441][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805e540800: abort rx timeout. Force session deactivation
[ 1785.530728][    T8] usb 10-1: new full-speed USB device number 40 using dummy_hcd
[ 1785.562991][    T8] usb 10-1: device descriptor read/8, error -71
[ 1785.639197][T10761] usbhid 1-1:0.0: can't add hid device: -71
[ 1785.656047][T10761] usbhid: probe of 1-1:0.0 failed with error -71
[ 1785.670296][T10761] usb 1-1: USB disconnect, device number 105
[ 1785.684550][    T8] usb usb10-port1: unable to enumerate USB device
[ 1785.863852][T14147] pegasus 8-1:1.0: can't reset MAC
[ 1785.869411][T14147] pegasus: probe of 8-1:1.0 failed with error -5
[ 1786.451928][T10761] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[ 1786.646434][T10761] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1786.657338][T10761] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1786.666889][T10761] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1786.681658][T10761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1786.953800][T10761] usb 8-1: USB disconnect, device number 89
[ 1787.361001][T14147] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[ 1787.563352][T10761] usb 8-1: new high-speed USB device number 90 using dummy_hcd
[ 1787.571704][T14147] usb 10-1: Using ep0 maxpacket: 8
[ 1787.586815][T14147] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1787.614187][T14147] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1787.642980][T14147] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1787.677570][T14147] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1787.695674][T14147] usb 10-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00
[ 1787.717323][T14147] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1787.730571][T10761] usb 8-1: device descriptor read/64, error -71
[ 1787.744113][T14147] usb 10-1: config 0 descriptor??
[ 1787.769783][T14147] hub 10-1:0.0: USB hub found
[ 1787.989313][T14147] hub 10-1:0.0: 9 ports detected
[ 1787.998196][T14147] hub 10-1:0.0: insufficient power available to use all downstream ports
[ 1788.020848][T10761] usb 8-1: new high-speed USB device number 91 using dummy_hcd
[ 1788.180513][T10761] usb 8-1: device descriptor read/64, error -71
[ 1788.301832][T10761] usb usb8-port1: attempt power cycle
[ 1788.721104][T10761] usb 8-1: new high-speed USB device number 92 using dummy_hcd
[ 1788.771800][T10761] usb 8-1: device descriptor read/8, error -71
[ 1789.062873][T10761] usb 8-1: new high-speed USB device number 93 using dummy_hcd
[ 1789.071180][T26638] FAULT_INJECTION: forcing a failure.
[ 1789.071180][T26638] name failslab, interval 1, probability 5, space 0, times 9993
[ 1789.089806][T14147] hub 10-1:0.0: hub_hub_status failed (err = -32)
[ 1789.099735][T14147] hub 10-1:0.0: config failed, can't get hub status (err -32)
[ 1789.113033][T10761] usb 8-1: device descriptor read/8, error -71
[ 1789.139604][T26638] CPU: 0 PID: 26638 Comm: syz.9.5669 Not tainted syzkaller #0
[ 1789.147081][T26638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1789.157122][T26638] Call Trace:
[ 1789.160392][T26638]  <TASK>
[ 1789.163327][T26638]  dump_stack_lvl+0x18c/0x250
[ 1789.168000][T26638]  ? show_regs_print_info+0x20/0x20
[ 1789.173183][T26638]  ? load_image+0x420/0x420
[ 1789.177669][T26638]  ? __might_sleep+0xe0/0xe0
[ 1789.182250][T26638]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1789.187263][T26638]  should_fail_ex+0x394/0x4c0
[ 1789.191954][T26638]  should_failslab+0x9/0x20
[ 1789.196465][T26638]  slab_pre_alloc_hook+0x59/0x300
[ 1789.201474][T26638]  ? lockdep_softirqs_off+0x440/0x440
[ 1789.206827][T26638]  ? proc_init_fs_context+0x57/0x330
[ 1789.212114][T26638]  __kmem_cache_alloc_node+0x53/0x260
[ 1789.217469][T26638]  ? lockdep_softirqs_off+0x440/0x440
[ 1789.222829][T26638]  ? proc_init_fs_context+0x57/0x330
[ 1789.228121][T26638]  kmalloc_trace+0x2a/0xe0
[ 1789.232526][T26638]  proc_init_fs_context+0x57/0x330
[ 1789.237626][T26638]  alloc_fs_context+0x618/0x7a0
[ 1789.242481][T26638]  do_new_mount+0x10e/0xa60
[ 1789.246973][T26638]  __se_sys_mount+0x2e7/0x3d0
[ 1789.251638][T26638]  ? __x64_sys_mount+0xc0/0xc0
[ 1789.256388][T26638]  ? lockdep_hardirqs_on+0x98/0x150
[ 1789.261600][T26638]  ? __x64_sys_mount+0x20/0xc0
[ 1789.266350][T26638]  do_syscall_64+0x55/0xb0
[ 1789.270754][T26638]  ? clear_bhb_loop+0x40/0x90
[ 1789.275441][T26638]  ? clear_bhb_loop+0x40/0x90
[ 1789.280119][T26638]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1789.286067][T26638] RIP: 0033:0x7f5de2f9f559
[ 1789.290561][T26638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1789.310241][T26638] RSP: 002b:00007f5de3f2a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1789.318673][T26638] RAX: ffffffffffffffda RBX: 00007f5de3225fa0 RCX: 00007f5de2f9f559
[ 1789.326648][T26638] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000
[ 1789.334613][T26638] RBP: 00007f5de3036b20 R08: 0000000000000000 R09: 0000000000000000
[ 1789.342569][T26638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1789.350530][T26638] R13: 00007f5de3226038 R14: 00007f5de3225fa0 R15: 00007fffccd6f518
[ 1789.358507][T26638]  </TASK>
[ 1789.375667][T10761] usb usb8-port1: unable to enumerate USB device
[ 1789.412981][T10761] usb 1-1: USB disconnect, device number 106
[ 1789.880965][T10761] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 1790.070442][T10761] usb 1-1: Using ep0 maxpacket: 16
[ 1790.089442][T10761] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1790.109884][T10761] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1790.137694][T10761] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1790.153609][T10761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1790.186667][    T8] usb 10-1: USB disconnect, device number 41
[ 1790.207364][T10761] usb 1-1: Product: syz
[ 1790.226481][T10761] usb 1-1: Manufacturer: syz
[ 1790.255242][T10761] usb 1-1: SerialNumber: syz
[ 1790.505589][T10761] usb 1-1: 0:2 : does not exist
[ 1790.536248][T10761] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 1790.575238][T10761] usb 1-1: USB disconnect, device number 107
[ 1790.582048][    T8] usb 10-1: new full-speed USB device number 42 using dummy_hcd
[ 1790.635899][T24948] udevd[24948]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1790.805601][    T8] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1790.817024][T14147] usb 8-1: new full-speed USB device number 94 using dummy_hcd
[ 1790.833400][ T5168] page_pool_release_retry() stalled pool shutdown 1 inflight 303 sec
[ 1790.850955][    T8] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1790.870506][    T8] usb 10-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1790.893094][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1790.994551][T14147] usb 8-1: device descriptor read/64, error -71
[ 1791.280609][T14147] usb 8-1: new full-speed USB device number 95 using dummy_hcd
[ 1791.318562][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.327235][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.360404][ T5168] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 1791.440667][T14147] usb 8-1: device descriptor read/64, error -71
[ 1791.561874][ T5168] usb 1-1: Using ep0 maxpacket: 32
[ 1791.572232][T14147] usb usb8-port1: attempt power cycle
[ 1791.584135][ T5168] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1791.602697][ T5168] usb 1-1: config 0 has no interface number 0
[ 1791.608830][ T5168] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 1791.653627][ T5168] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1791.671620][ T5168] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1791.684265][ T5168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1791.693411][ T5168] usb 1-1: Product: syz
[ 1791.697682][ T5168] usb 1-1: Manufacturer: syz
[ 1791.708306][ T5168] usb 1-1: SerialNumber: syz
[ 1791.724630][ T5168] usb 1-1: config 0 descriptor??
[ 1791.934743][    T8] pegasus: probe of 10-1:1.0 failed with error -32
[ 1791.958225][ T5168] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1791.989962][ T5168] cx231xx 1-1:0.1: Failed to read PCB config
[ 1792.008103][ T5168] cx231xx: probe of 1-1:0.1 failed with error -71
[ 1792.020240][T14147] usb 8-1: new full-speed USB device number 96 using dummy_hcd
[ 1792.042953][ T5168] usb 1-1: USB disconnect, device number 108
[ 1792.081132][T14147] usb 8-1: device descriptor read/8, error -71
[ 1792.370316][T14147] usb 8-1: new full-speed USB device number 97 using dummy_hcd
[ 1792.411391][T14147] usb 8-1: device descriptor read/8, error -71
[ 1792.531177][T14147] usb usb8-port1: unable to enumerate USB device
[ 1792.550283][ T5168] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 1792.730218][ T5168] usb 1-1: Using ep0 maxpacket: 32
[ 1792.737609][ T5168] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1792.749916][ T5168] usb 1-1: config 0 has no interface number 0
[ 1792.759303][ T5168] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 1792.772855][ T5168] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1792.781598][ T5168] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1792.793556][ T5168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1792.804046][ T5168] usb 1-1: Product: syz
[ 1792.808202][ T5168] usb 1-1: Manufacturer: syz
[ 1792.817512][ T5168] usb 1-1: SerialNumber: syz
[ 1792.823805][ T5168] usb 1-1: config 0 descriptor??
[ 1792.967311][    T8] usb 10-1: USB disconnect, device number 42
[ 1793.045790][ T5168] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1793.064421][ T5168] cx231xx 1-1:0.1: Failed to read PCB config
[ 1793.072547][ T5168] cx231xx: probe of 1-1:0.1 failed with error -71
[ 1793.086317][ T5168] usb 1-1: USB disconnect, device number 109
[ 1793.390244][    T8] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[ 1793.590525][    T8] usb 10-1: Using ep0 maxpacket: 16
[ 1793.612287][    T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1793.647307][    T8] usb 10-1: config 0 has no interfaces?
[ 1793.704953][    T8] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1795.090939][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1795.217630][    T8] usb 10-1: Product: syz
[ 1795.247399][    T8] usb 10-1: Manufacturer: syz
[ 1795.280249][    T8] usb 10-1: SerialNumber: syz
[ 1795.319478][    T8] usb 10-1: config 0 descriptor??
[ 1795.432818][T18012] Bluetooth: hci2: unexpected event 0x1c length: 7 > 5
[ 1796.260325][ T5168] usb 1-1: new full-speed USB device number 110 using dummy_hcd
[ 1796.290702][    T8] usb 8-1: new full-speed USB device number 98 using dummy_hcd
[ 1796.492122][    T8] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1796.505540][ T5168] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 34, using maximum allowed: 30
[ 1796.518450][    T8] usb 8-1: not running at top speed; connect to a high speed hub
[ 1796.526395][ T5168] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1796.543685][ T5168] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1796.556025][ T5168] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[ 1796.569139][    T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1796.587817][ T5168] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1796.595893][    T8] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1796.614036][T10761] usb 10-1: USB disconnect, device number 43
[ 1796.627390][ T5168] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[ 1796.648240][    T8] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1796.681558][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1796.699006][    T8] usb 8-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[ 1796.715545][ T5168] usb 1-1: config 0 descriptor??
[ 1796.736362][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1796.748687][T26728] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1796.785225][    T8] usb 8-1: Product: syz
[ 1796.789403][    T8] usb 8-1: Manufacturer: syz
[ 1796.816184][    T8] usb 8-1: Found UVC 0.00 device syz (8086:0ad2)
[ 1796.826847][    T8] usb 8-1: No valid video chain found.
[ 1797.020045][T10761] usb 8-1: USB disconnect, device number 98
[ 1797.388388][ T5168] usbhid 1-1:0.0: can't add hid device: -71
[ 1797.410759][ T5168] usbhid: probe of 1-1:0.0 failed with error -71
[ 1797.432982][ T5168] usb 1-1: USB disconnect, device number 110
[ 1797.659424][T26757] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5696'.
[ 1797.950118][ T5168] usb 8-1: new high-speed USB device number 99 using dummy_hcd
[ 1798.029999][    T8] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[ 1798.162889][ T5168] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1798.176891][ T5168] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1798.193481][ T5168] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1798.207182][ T5168] usb 8-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1798.218728][ T5168] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1798.228349][    T8] usb 10-1: Using ep0 maxpacket: 16
[ 1798.238131][T26759] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1798.253682][    T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1798.269095][ T5168] pegasus 8-1:1.0: Missing or invalid endpoints
[ 1798.286265][    T8] usb 10-1: config 0 has no interfaces?
[ 1798.306936][    T8] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1798.318154][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1798.326857][T10761] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 1798.338520][    T8] usb 10-1: Product: syz
[ 1798.343071][    T8] usb 10-1: Manufacturer: syz
[ 1798.348063][    T8] usb 10-1: SerialNumber: syz
[ 1798.370333][    T8] usb 10-1: config 0 descriptor??
[ 1798.533370][T10761] usb 1-1: Using ep0 maxpacket: 32
[ 1798.545743][T10761] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1798.556084][T10761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1798.567400][T10761] usb 1-1: Product: syz
[ 1798.571969][T10761] usb 1-1: Manufacturer: syz
[ 1798.585601][T10761] usb 1-1: SerialNumber: syz
[ 1798.598933][T10761] usb 1-1: config 0 descriptor??
[ 1798.612534][T10761] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1800.704323][T24883] usb 8-1: USB disconnect, device number 99
[ 1800.802130][    T8] usb 10-1: USB disconnect, device number 44
[ 1801.045013][T26791] jffs2: notice: (26791) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1801.239778][T24883] usb 8-1: new high-speed USB device number 100 using dummy_hcd
[ 1801.432098][T24883] usb 8-1: Using ep0 maxpacket: 16
[ 1801.439146][T24883] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1801.451503][T24883] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1801.459749][    T8] usb 10-1: new full-speed USB device number 45 using dummy_hcd
[ 1801.479307][T24883] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[ 1801.498165][T24883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1801.513175][T24883] usb 8-1: Product: syz
[ 1801.517427][T24883] usb 8-1: Manufacturer: syz
[ 1801.524470][T24883] usb 8-1: SerialNumber: syz
[ 1801.533506][T24883] usb 8-1: config 0 descriptor??
[ 1801.664221][    T8] usb 10-1: too many endpoints for config 0 interface 0 altsetting 8: 34, using maximum allowed: 30
[ 1801.675850][    T8] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1801.690660][    T8] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1801.704755][    T8] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[ 1801.725696][    T8] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1801.734139][    T8] usb 10-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[ 1801.762336][    C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1801.773499][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1801.782484][T24883] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input35
[ 1801.799247][    T8] usb 10-1: config 0 descriptor??
[ 1801.816298][T24883] imon:send_packet: packet tx failed (-71)
[ 1801.823480][T26794] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1801.842178][T10761] gspca_stk1135: reg_w 0x353 err -71
[ 1801.848489][T10761] gspca_stk1135: serial bus timeout: status=0x00
[ 1801.868352][T10761] gspca_stk1135: Sensor write failed
[ 1801.874609][T10761] gspca_stk1135: serial bus timeout: status=0x00
[ 1801.884377][T24883] imon 8-1:0.0: panel buttons/knobs setup failed
[ 1801.894449][T10761] gspca_stk1135: Sensor write failed
[ 1801.909690][T10761] gspca_stk1135: serial bus timeout: status=0x00
[ 1801.926544][T10761] gspca_stk1135: Sensor read failed
[ 1801.943183][T10761] gspca_stk1135: serial bus timeout: status=0x00
[ 1801.954383][T10761] gspca_stk1135: Sensor read failed
[ 1801.973097][T10761] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1801.980449][T10761] gspca_stk1135: serial bus timeout: status=0x00
[ 1801.987037][T10761] gspca_stk1135: Sensor read failed
[ 1801.992788][T24883] rc_core: IR keymap rc-imon-pad not found
[ 1802.002448][T10761] gspca_stk1135: serial bus timeout: status=0x00
[ 1802.008964][T24883] Registered IR keymap rc-empty
[ 1802.014831][T10761] gspca_stk1135: Sensor read failed
[ 1802.024411][T24883] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1802.035862][T10761] gspca_stk1135: serial bus timeout: status=0x00
[ 1802.045034][T24883] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1802.061056][T10761] gspca_stk1135: Sensor write failed
[ 1802.075379][T10761] gspca_stk1135: serial bus timeout: status=0x00
[ 1802.083558][T10761] gspca_stk1135: Sensor write failed
[ 1802.088963][T24883] imon:send_packet: packet tx failed (-71)
[ 1802.097466][T10761] stk1135: probe of 1-1:0.0 failed with error -71
[ 1802.116821][T10761] usb 1-1: USB disconnect, device number 111
[ 1802.123033][T24883] imon 8-1:0.0: remote input dev register failed
[ 1802.140105][T24883] imon 8-1:0.0: imon_init_intf0: rc device setup failed
[ 1802.168052][T24883] imon 8-1:0.0: unable to initialize intf0, err 0
[ 1802.177879][T24883] imon:imon_probe: failed to initialize context!
[ 1802.187668][T24883] imon 8-1:0.0: unable to register, err -19
[ 1802.203787][T24883] usb 8-1: USB disconnect, device number 100
[ 1802.485118][    T8] usbhid 10-1:0.0: can't add hid device: -71
[ 1802.503858][    T8] usbhid: probe of 10-1:0.0 failed with error -71
[ 1802.540611][    T8] usb 10-1: USB disconnect, device number 45
[ 1802.580666][T24883] usb 8-1: new full-speed USB device number 101 using dummy_hcd
[ 1802.679892][T10761] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1802.784639][T24883] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1802.795923][T24883] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[ 1802.825271][T24883] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1802.853303][T24883] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[ 1802.869411][T24883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1802.915891][T24883] usb 8-1: Product: syz
[ 1802.923194][T24883] usb 8-1: Manufacturer: syz
[ 1802.928430][T24883] usb 8-1: SerialNumber: syz
[ 1802.933312][T10761] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1802.956277][T10761] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1802.970323][T24883] usb 8-1: config 0 descriptor??
[ 1802.975806][T26786] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1802.989694][T10761] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1803.057972][T10761] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1803.075963][T10761] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1803.107760][T10761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1803.137106][T10761] usb 1-1: config 0 descriptor??
[ 1803.204029][    C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1803.215377][T24883] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input37
[ 1803.519716][T24883] rc_core: IR keymap rc-imon-pad not found
[ 1803.525604][T24883] Registered IR keymap rc-empty
[ 1803.547694][T24883] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1803.578977][T24883] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1803.633398][T18012] Bluetooth: hci2: command 0x0406 tx timeout
[ 1803.657969][T24883] imon:send_packet: packet tx failed (-71)
[ 1803.702435][T24883] imon 8-1:0.0: remote input dev register failed
[ 1803.738668][T24883] imon 8-1:0.0: imon_init_intf0: rc device setup failed
[ 1803.767244][T24883] imon 8-1:0.0: unable to initialize intf0, err 0
[ 1803.792350][T10761] usbhid 1-1:0.0: can't add hid device: -71
[ 1803.810751][T10761] usbhid: probe of 1-1:0.0 failed with error -71
[ 1803.828691][T24883] imon:imon_probe: failed to initialize context!
[ 1803.858666][T10761] usb 1-1: USB disconnect, device number 112
[ 1803.864865][T24883] imon 8-1:0.0: unable to register, err -19
[ 1803.914087][T24883] usb 8-1: USB disconnect, device number 101
[ 1804.279852][ T5168] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[ 1804.470834][ T5168] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1804.481565][ T5168] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1804.517677][ T5168] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1804.567287][ T5168] usb 10-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1804.616477][ T5168] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1804.660826][T26806] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1804.681158][ T5168] pegasus 10-1:1.0: Missing or invalid endpoints
[ 1804.729861][T24883] usb 8-1: new high-speed USB device number 102 using dummy_hcd
[ 1804.947642][T24883] usb 8-1: Using ep0 maxpacket: 16
[ 1804.965421][T24883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1804.984341][T24883] usb 8-1: config 0 has no interfaces?
[ 1805.054710][T24883] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1805.064046][T24883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1805.078046][T24883] usb 8-1: Product: syz
[ 1805.086368][T24883] usb 8-1: Manufacturer: syz
[ 1805.095401][T24883] usb 8-1: SerialNumber: syz
[ 1805.117003][T24883] usb 8-1: config 0 descriptor??
[ 1805.233537][T14147] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 1805.419650][T14147] usb 1-1: Using ep0 maxpacket: 32
[ 1805.438018][T14147] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1805.446493][T14147] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[ 1805.465864][T14147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1805.497194][T14147] usb 1-1: config 0 descriptor??
[ 1805.508708][T14147] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[ 1805.536697][T14147] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1805.576669][T14147] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[ 1805.597651][T14147] usb 1-1: media controller created
[ 1805.645895][T14147] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1805.712230][T26817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1805.748734][T26817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1805.788534][T14147] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1805.805459][T14147] error writing reg: 0xff, val: 0x00
[ 1805.855911][T14147] dvb_usb_mxl111sf: probe of 1-1:0.0 failed with error -22
[ 1805.979152][T26799] Set syz1 is full, maxelem 65536 reached
[ 1807.008120][T18900] usb 10-1: USB disconnect, device number 46
[ 1807.454661][T18900] usb 8-1: USB disconnect, device number 102
[ 1807.580689][T26830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1807.896917][T24883] usb 1-1: USB disconnect, device number 113
[ 1808.029945][T18900] usb 8-1: new high-speed USB device number 103 using dummy_hcd
[ 1808.059441][    T8] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 1808.146015][T26849] futex_wake_op: syz.0.5729 tries to shift op by 144; fix this program
[ 1808.220698][T18900] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1808.242788][T18900] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1808.259651][    T8] usb 10-1: Using ep0 maxpacket: 16
[ 1808.275184][T18900] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1808.299720][    T8] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1808.322203][T18900] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1808.328902][T18900] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1808.343614][    T8] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1808.354162][T18900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1808.367187][    T8] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[ 1808.377531][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1808.391646][T18900] usb 8-1: config 0 descriptor??
[ 1808.407638][    T8] usb 10-1: Product: syz
[ 1808.415161][    T8] usb 10-1: Manufacturer: syz
[ 1808.426265][    T8] usb 10-1: SerialNumber: syz
[ 1808.442140][    T8] usb 10-1: config 0 descriptor??
[ 1808.589678][T24883] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 1808.656861][    C0] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1808.666951][    T8] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input39
[ 1808.707902][    T8] imon:send_packet: packet tx failed (-71)
[ 1808.729399][    T8] imon 10-1:0.0: panel buttons/knobs setup failed
[ 1808.779610][T24883] usb 1-1: Using ep0 maxpacket: 16
[ 1808.788203][T24883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1808.802588][T24883] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1808.812211][T24883] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1808.822453][    T8] rc_core: IR keymap rc-imon-pad not found
[ 1808.828300][    T8] Registered IR keymap rc-empty
[ 1808.834269][T24883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1808.849813][T24883] usb 1-1: Product: syz
[ 1808.854015][T24883] usb 1-1: Manufacturer: syz
[ 1808.858716][    T8] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1808.872989][T24883] usb 1-1: SerialNumber: syz
[ 1808.880894][    T8] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1808.901376][T24883] usb 1-1: config 0 descriptor??
[ 1808.914028][    T8] imon:send_packet: packet tx failed (-71)
[ 1808.939343][    T8] imon 10-1:0.0: remote input dev register failed
[ 1808.946028][    T8] imon 10-1:0.0: imon_init_intf0: rc device setup failed
[ 1808.961174][    T8] imon 10-1:0.0: unable to initialize intf0, err 0
[ 1808.970781][    T8] imon:imon_probe: failed to initialize context!
[ 1808.977133][    T8] imon 10-1:0.0: unable to register, err -19
[ 1809.016689][T18900] usbhid 8-1:0.0: can't add hid device: -71
[ 1809.033125][    T8] usb 10-1: USB disconnect, device number 47
[ 1809.043827][T18900] usbhid: probe of 8-1:0.0 failed with error -71
[ 1809.081685][T18900] usb 8-1: USB disconnect, device number 103
[ 1809.125360][T24883] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1809.157407][T24883] imon 1-1:0.0: unable to initialize intf0, err -19
[ 1809.176468][T24883] imon:imon_probe: failed to initialize context!
[ 1809.188730][T24883] imon 1-1:0.0: unable to register, err -19
[ 1809.419382][    T8] usb 10-1: new full-speed USB device number 48 using dummy_hcd
[ 1809.613928][    T8] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1809.627700][    T8] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[ 1809.644615][    T8] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1809.656944][    T8] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[ 1809.669081][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1809.677640][    T8] usb 10-1: Product: syz
[ 1809.684880][    T8] usb 10-1: Manufacturer: syz
[ 1809.699371][    T8] usb 10-1: SerialNumber: syz
[ 1809.720285][    T8] usb 10-1: config 0 descriptor??
[ 1809.725852][T26840] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1809.869530][T18900] usb 8-1: new high-speed USB device number 104 using dummy_hcd
[ 1809.970437][    C0] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1809.983878][    T8] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input41
[ 1810.013746][    T8] imon:send_packet: packet tx failed (-71)
[ 1810.040957][    T8] imon 10-1:0.0: panel buttons/knobs setup failed
[ 1810.059704][T18900] usb 8-1: Using ep0 maxpacket: 32
[ 1810.078431][T18900] usb 8-1: too many configurations: 17, using maximum allowed: 8
[ 1810.107887][T18900] usb 8-1: config 0 has an invalid interface number: 2 but max is 0
[ 1810.130857][T18900] usb 8-1: config 0 has no interface number 0
[ 1810.144946][T18900] usb 8-1: config 0 has an invalid interface number: 2 but max is 0
[ 1810.155698][T18900] usb 8-1: config 0 has no interface number 0
[ 1810.165324][T18900] usb 8-1: config 0 has an invalid interface number: 2 but max is 0
[ 1810.176204][T18900] usb 8-1: config 0 has no interface number 0
[ 1810.183091][    T8] rc_core: IR keymap rc-imon-pad not found
[ 1810.192780][    T8] Registered IR keymap rc-empty
[ 1810.197954][    T8] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1810.215975][T18900] usb 8-1: config 0 has an invalid interface number: 2 but max is 0
[ 1810.224915][T18900] usb 8-1: config 0 has no interface number 0
[ 1810.234590][    T8] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1810.244903][    T8] imon:send_packet: packet tx failed (-71)
[ 1810.251383][T18900] usb 8-1: config 0 has an invalid interface number: 2 but max is 0
[ 1810.264767][T18900] usb 8-1: config 0 has no interface number 0
[ 1810.272161][T18900] usb 8-1: config 0 has an invalid interface number: 2 but max is 0
[ 1810.284908][T18900] usb 8-1: config 0 has no interface number 0
[ 1810.291106][    T8] imon 10-1:0.0: remote input dev register failed
[ 1810.297983][    T8] imon 10-1:0.0: imon_init_intf0: rc device setup failed
[ 1810.307937][T18900] usb 8-1: config 0 has an invalid interface number: 2 but max is 0
[ 1810.327968][T18900] usb 8-1: config 0 has no interface number 0
[ 1810.338278][    T8] imon 10-1:0.0: unable to initialize intf0, err 0
[ 1810.347006][    T8] imon:imon_probe: failed to initialize context!
[ 1810.359472][T18900] usb 8-1: config 0 has an invalid interface number: 2 but max is 0
[ 1810.370786][    T8] imon 10-1:0.0: unable to register, err -19
[ 1810.376853][T18900] usb 8-1: config 0 has no interface number 0
[ 1810.387007][T18900] usb 8-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[ 1810.402990][    T8] usb 10-1: USB disconnect, device number 48
[ 1810.409025][T18900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1810.443250][T18900] usb 8-1: Product: syz
[ 1810.453069][T18900] usb 8-1: Manufacturer: syz
[ 1810.465526][T18900] usb 8-1: SerialNumber: syz
[ 1810.481994][T18900] usb 8-1: config 0 descriptor??
[ 1810.497971][T18900] etas_es58x 8-1:0.2: Starting syz syz (Serial Number syz)
[ 1810.706846][T18900] etas_es58x 8-1:0.2: could not parse product info: ''
[ 1810.862607][T26873] futex_wake_op: syz.1.5738 tries to shift op by 144; fix this program
[ 1811.289869][    T8] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 1811.337695][T14147] usb 1-1: USB disconnect, device number 114
[ 1811.479145][    C0] etas_es58x 8-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0161.
[ 1811.490421][    C0] etas_es58x 8-1:0.2: Recovery successful! Dropped 356 bytes (urb_cmd_len: -61)
[ 1811.501013][    T8] usb 10-1: Using ep0 maxpacket: 32
[ 1811.512489][ T5448] etas_es58x 8-1:0.2 can1: bit-timing not yet defined
[ 1811.524603][    T8] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1811.537666][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1811.553164][    T8] usb 10-1: Product: syz
[ 1811.557577][    T8] usb 10-1: Manufacturer: syz
[ 1811.563788][    T8] usb 10-1: SerialNumber: syz
[ 1811.573277][    T8] usb 10-1: config 0 descriptor??
[ 1811.585252][    T8] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1811.702737][    C0] etas_es58x 8-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[ 1811.711935][    C0] etas_es58x 8-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[ 1811.721100][    C0] etas_es58x 8-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[ 1811.730320][    C0] etas_es58x 8-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[ 1811.739520][    C0] etas_es58x 8-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[ 1811.748959][    C0] etas_es58x 8-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO
[ 1811.761127][ T5448] etas_es58x 8-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL
[ 1811.839873][T14147] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1811.890343][T18900] usb 8-1: USB disconnect, device number 104
[ 1811.908689][T18900] etas_es58x 8-1:0.2: Disconnecting syz syz
[ 1812.055149][T14147] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1812.074716][T14147] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1812.098887][T14147] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1812.132742][T14147] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1812.153001][T14147] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1812.176862][T14147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1812.214006][T14147] usb 1-1: config 0 descriptor??
[ 1812.840343][T14147] usbhid 1-1:0.0: can't add hid device: -71
[ 1812.856676][T14147] usbhid: probe of 1-1:0.0 failed with error -71
[ 1812.891730][T14147] usb 1-1: USB disconnect, device number 115
[ 1813.289814][T18900] usb 8-1: new high-speed USB device number 105 using dummy_hcd
[ 1813.479478][T18900] usb 8-1: Using ep0 maxpacket: 16
[ 1813.494413][T18900] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1813.517982][T18900] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1813.539624][T18900] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1813.553349][T18900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1813.566408][T18900] usb 8-1: Product: syz
[ 1813.575320][T18900] usb 8-1: Manufacturer: syz
[ 1813.580290][T18900] usb 8-1: SerialNumber: syz
[ 1813.709572][T14147] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1813.805295][T18900] usb 8-1: 0:2 : does not exist
[ 1813.813679][T18900] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 1813.842265][T18900] usb 8-1: USB disconnect, device number 105
[ 1813.877476][T25461] udevd[25461]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1813.909216][T14147] usb 1-1: Using ep0 maxpacket: 32
[ 1813.920563][T14147] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1813.938855][T14147] usb 1-1: config 0 has no interface number 0
[ 1813.959867][T14147] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 1813.975255][T14147] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1813.984264][T14147] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1813.997144][T14147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1814.007528][T14147] usb 1-1: Product: syz
[ 1814.017980][T14147] usb 1-1: Manufacturer: syz
[ 1814.024711][T14147] usb 1-1: SerialNumber: syz
[ 1814.051940][T14147] usb 1-1: config 0 descriptor??
[ 1814.173552][T26945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5747'.
[ 1814.267623][T26940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1814.292691][T26940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1814.337206][T14147] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1814.391192][T14147] cx231xx 1-1:0.1: Failed to read PCB config
[ 1814.413468][T26949] futex_wake_op: syz.1.5749 tries to shift op by 144; fix this program
[ 1814.422144][T14147] cx231xx: probe of 1-1:0.1 failed with error -71
[ 1814.452299][T14147] usb 1-1: USB disconnect, device number 116
[ 1814.614032][T26955] jffs2: notice: (26955) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1814.699091][ T5168] usb 8-1: new high-speed USB device number 106 using dummy_hcd
[ 1814.812851][    T8] gspca_stk1135: reg_w 0x353 err -71
[ 1814.825127][    T8] gspca_stk1135: serial bus timeout: status=0x00
[ 1814.834796][    T8] gspca_stk1135: Sensor write failed
[ 1814.843553][    T8] gspca_stk1135: serial bus timeout: status=0x00
[ 1814.863704][    T8] gspca_stk1135: Sensor write failed
[ 1814.872480][    T8] gspca_stk1135: serial bus timeout: status=0x00
[ 1814.878834][    T8] gspca_stk1135: Sensor read failed
[ 1814.889172][ T5168] usb 8-1: Using ep0 maxpacket: 16
[ 1814.913908][    T8] gspca_stk1135: serial bus timeout: status=0x00
[ 1814.922371][ T5168] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1814.942218][    T8] gspca_stk1135: Sensor read failed
[ 1814.947569][ T5168] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1814.962894][    T8] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1814.974658][    T8] gspca_stk1135: serial bus timeout: status=0x00
[ 1814.981991][    T8] gspca_stk1135: Sensor read failed
[ 1814.987582][    T8] gspca_stk1135: serial bus timeout: status=0x00
[ 1814.994878][ T5168] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1815.011854][ T5168] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1815.021593][    T8] gspca_stk1135: Sensor read failed
[ 1815.026856][    T8] gspca_stk1135: serial bus timeout: status=0x00
[ 1815.036959][ T5168] usb 8-1: Product: syz
[ 1815.042764][ T5168] usb 8-1: Manufacturer: syz
[ 1815.047505][    T8] gspca_stk1135: Sensor write failed
[ 1815.055686][ T5168] usb 8-1: SerialNumber: syz
[ 1815.060694][    T8] gspca_stk1135: serial bus timeout: status=0x00
[ 1815.084374][ T5168] usb 8-1: config 0 descriptor??
[ 1815.090116][    T8] gspca_stk1135: Sensor write failed
[ 1815.098514][    T8] stk1135: probe of 10-1:0.0 failed with error -71
[ 1815.119177][    T8] usb 10-1: USB disconnect, device number 49
[ 1815.219104][T18900] usb 1-1: new full-speed USB device number 117 using dummy_hcd
[ 1815.311080][ T5168] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1815.325042][ T5168] imon 8-1:0.0: unable to initialize intf0, err -19
[ 1815.333493][ T5168] imon:imon_probe: failed to initialize context!
[ 1815.350690][ T5168] imon 8-1:0.0: unable to register, err -19
[ 1815.422599][T18900] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1815.442289][T18900] usb 1-1: not running at top speed; connect to a high speed hub
[ 1815.458671][T18900] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1815.484772][T18900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1815.506793][T18900] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1815.540425][T18900] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[ 1815.562539][T18900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1815.573786][T18900] usb 1-1: Product: syz
[ 1815.578040][T18900] usb 1-1: Manufacturer: syz
[ 1815.600904][T18900] usb 1-1: Found UVC 1.00 device syz (8086:0ad2)
[ 1815.607790][T18900] usb 1-1: No valid video chain found.
[ 1815.816987][T18900] usb 1-1: USB disconnect, device number 117
[ 1816.372809][T26972] futex_wake_op: syz.0.5759 tries to shift op by 144; fix this program
[ 1816.389285][ T5168] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[ 1816.591792][ T5168] usb 10-1: Using ep0 maxpacket: 16
[ 1816.599712][ T5168] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1816.614151][ T5168] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1816.625680][ T5168] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1816.637546][ T5168] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1816.646571][ T5168] usb 10-1: Product: syz
[ 1816.654561][ T5168] usb 10-1: Manufacturer: syz
[ 1816.661569][ T5168] usb 10-1: SerialNumber: syz
[ 1816.809035][    T8] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 1816.874065][ T5168] usb 10-1: 0:2 : does not exist
[ 1816.891280][ T5168] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1816.926632][ T5168] usb 10-1: USB disconnect, device number 50
[ 1816.961833][T24948] udevd[24948]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1817.009396][    T8] usb 1-1: Using ep0 maxpacket: 32
[ 1817.025459][    T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1817.034301][    T8] usb 1-1: config 0 has no interface number 0
[ 1817.043537][    T8] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 1817.054362][    T8] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1817.065921][    T8] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1817.078201][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1817.090562][    T8] usb 1-1: Product: syz
[ 1817.094901][    T8] usb 1-1: Manufacturer: syz
[ 1817.103398][    T8] usb 1-1: SerialNumber: syz
[ 1817.113360][    T8] usb 1-1: config 0 descriptor??
[ 1817.332978][T26978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1817.347355][T26978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1817.370165][    T8] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1817.382417][    T8] cx231xx 1-1:0.1: Failed to read PCB config
[ 1817.388488][    T8] cx231xx: probe of 1-1:0.1 failed with error -71
[ 1817.408047][    T8] usb 1-1: USB disconnect, device number 118
[ 1817.477577][ T5168] usb 8-1: USB disconnect, device number 106
[ 1817.539867][T18012] Bluetooth: hci5: hardware error 0x08
[ 1817.658010][T26986] jffs2: notice: (26986) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1817.776021][T26990] futex_wake_op: syz.7.5768 tries to shift op by 144; fix this program
[ 1818.060831][T27001] ------------[ cut here ]------------
[ 1818.066558][T27001] kobject: '(null)' (ffff88805af500f0): is not initialized, yet kobject_get() is being called.
[ 1818.134574][T27001] WARNING: CPU: 0 PID: 27001 at lib/kobject.c:642 kobject_add_internal+0x115/0xc90
[ 1818.144876][T27001] Modules linked in:
[ 1818.148775][T27001] CPU: 0 PID: 27001 Comm: syz.0.5770 Not tainted syzkaller #0
[ 1818.156499][T27001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1818.166620][T27001] RIP: 0010:kobject_add_internal+0x115/0xc90
[ 1818.172654][T27001] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 30 5e f7 49 8b 34 24 48 c7 c7 c0 4e 0b 8c 4c 89 e2 e8 fb d8 ce f6 <0f> 0b e9 e5 00 00 00 e8 cf 2a 05 f7 b8 fe ff ff ff e9 f0 06 00 00
[ 1818.192725][T27001] RSP: 0018:ffffc9000553f8c8 EFLAGS: 00010246
[ 1818.198785][T27001] RAX: 051a376d50126500 RBX: ffff88801bb67878 RCX: 0000000000080000
[ 1818.207114][T27001] RDX: ffffc90010cda000 RSI: 0000000000007308 RDI: 0000000000007309
[ 1818.215140][T27001] RBP: 0000000000000000 R08: ffffc9000553f4c7 R09: 1ffff92000aa7e98
[ 1818.223158][T27001] R10: dffffc0000000000 R11: fffff52000aa7e99 R12: ffff88805af500f0
[ 1818.231335][T27001] R13: dffffc0000000000 R14: ffff88805af5012c R15: dffffc0000000000
[ 1818.239467][T27001] FS:  00007fe91c7806c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[ 1818.249194][T27001] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1818.255768][T27001] CR2: 000000110c3b4dc7 CR3: 000000004bc8f000 CR4: 00000000003506f0
[ 1818.264221][T27001] Call Trace:
[ 1818.267493][T27001]  <TASK>
[ 1818.270486][T27001]  ? kfree+0x31/0x1a0
[ 1818.274467][T27001]  kobject_add+0x164/0x240
[ 1818.278951][T27001]  ? kobject_init+0x1d0/0x1d0
[ 1818.283618][T27001]  ? mddev_create_serial_pool+0x1f3/0x4d0
[ 1818.289466][T27001]  bind_rdev_to_array+0xb51/0x1270
[ 1818.294570][T27001]  ? bind_rdev_to_array+0x5fb/0x1270
[ 1818.299896][T27001]  ? md_import_device+0x7b0/0x7b0
[ 1818.304912][T27001]  md_add_new_disk+0xe31/0x17b0
[ 1818.309778][T27001]  md_ioctl+0x2152/0x24e0
[ 1818.314097][T27001]  ? blkdev_common_ioctl+0x10ee/0x2580
[ 1818.319634][T27001]  ? md_release+0x1e0/0x1e0
[ 1818.324125][T27001]  ? tomoyo_path_number_perm+0x56b/0x5e0
[ 1818.329770][T27001]  ? blkdev_bszset+0x1f0/0x1f0
[ 1818.334522][T27001]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1818.340040][T27001]  ? md_release+0x1e0/0x1e0
[ 1818.345291][T27001]  blkdev_ioctl+0x5b2/0x730
[ 1818.349998][T27001]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1818.355449][T27001]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1818.360431][T27001]  ? security_file_ioctl+0x80/0xa0
[ 1818.365535][T27001]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1818.371012][T27001]  __se_sys_ioctl+0xfd/0x170
[ 1818.375596][T27001]  do_syscall_64+0x55/0xb0
[ 1818.380054][T27001]  ? clear_bhb_loop+0x40/0x90
[ 1818.384719][T27001]  ? clear_bhb_loop+0x40/0x90
[ 1818.389429][T27001]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1818.395312][T27001] RIP: 0033:0x7fe91b99f559
[ 1818.399756][T27001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1818.419395][T27001] RSP: 002b:00007fe91c780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1818.427795][T27001] RAX: ffffffffffffffda RBX: 00007fe91bc26090 RCX: 00007fe91b99f559
[ 1818.435822][T27001] RDX: 0000200000000600 RSI: 0000000040140921 RDI: 0000000000000004
[ 1818.443819][T27001] RBP: 00007fe91ba36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1818.452541][T27001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1818.460648][T27001] R13: 00007fe91bc26128 R14: 00007fe91bc26090 R15: 00007ffe0eb86878
[ 1818.468622][T27001]  </TASK>
[ 1818.471678][T27001] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1818.479041][T27001] CPU: 0 PID: 27001 Comm: syz.0.5770 Not tainted syzkaller #0
[ 1818.486475][T27001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1818.496515][T27001] Call Trace:
[ 1818.499794][T27001]  <TASK>
[ 1818.502720][T27001]  dump_stack_lvl+0x18c/0x250
[ 1818.507424][T27001]  ? show_regs_print_info+0x20/0x20
[ 1818.512615][T27001]  ? load_image+0x420/0x420
[ 1818.517120][T27001]  panic+0x2ca/0x720
[ 1818.520998][T27001]  ? bpf_jit_dump+0xd0/0xd0
[ 1818.525488][T27001]  __warn+0x2e0/0x470
[ 1818.529449][T27001]  ? kobject_add_internal+0x115/0xc90
[ 1818.534800][T27001]  ? kobject_add_internal+0x115/0xc90
[ 1818.540152][T27001]  report_bug+0x2be/0x4f0
[ 1818.544536][T27001]  ? kobject_add_internal+0x115/0xc90
[ 1818.549888][T27001]  ? kobject_add_internal+0x115/0xc90
[ 1818.555243][T27001]  ? kobject_add_internal+0x117/0xc90
[ 1818.560594][T27001]  handle_bug+0xcf/0x120
[ 1818.564828][T27001]  exc_invalid_op+0x1a/0x50
[ 1818.569311][T27001]  asm_exc_invalid_op+0x1a/0x20
[ 1818.574165][T27001] RIP: 0010:kobject_add_internal+0x115/0xc90
[ 1818.580142][T27001] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 30 5e f7 49 8b 34 24 48 c7 c7 c0 4e 0b 8c 4c 89 e2 e8 fb d8 ce f6 <0f> 0b e9 e5 00 00 00 e8 cf 2a 05 f7 b8 fe ff ff ff e9 f0 06 00 00
[ 1818.599734][T27001] RSP: 0018:ffffc9000553f8c8 EFLAGS: 00010246
[ 1818.605783][T27001] RAX: 051a376d50126500 RBX: ffff88801bb67878 RCX: 0000000000080000
[ 1818.613736][T27001] RDX: ffffc90010cda000 RSI: 0000000000007308 RDI: 0000000000007309
[ 1818.621688][T27001] RBP: 0000000000000000 R08: ffffc9000553f4c7 R09: 1ffff92000aa7e98
[ 1818.629657][T27001] R10: dffffc0000000000 R11: fffff52000aa7e99 R12: ffff88805af500f0
[ 1818.637626][T27001] R13: dffffc0000000000 R14: ffff88805af5012c R15: dffffc0000000000
[ 1818.645622][T27001]  ? kobject_add_internal+0x115/0xc90
[ 1818.651010][T27001]  ? kfree+0x31/0x1a0
[ 1818.654986][T27001]  kobject_add+0x164/0x240
[ 1818.659395][T27001]  ? kobject_init+0x1d0/0x1d0
[ 1818.664056][T27001]  ? mddev_create_serial_pool+0x1f3/0x4d0
[ 1818.669762][T27001]  bind_rdev_to_array+0xb51/0x1270
[ 1818.674860][T27001]  ? bind_rdev_to_array+0x5fb/0x1270
[ 1818.680139][T27001]  ? md_import_device+0x7b0/0x7b0
[ 1818.685152][T27001]  md_add_new_disk+0xe31/0x17b0
[ 1818.689993][T27001]  md_ioctl+0x2152/0x24e0
[ 1818.694308][T27001]  ? blkdev_common_ioctl+0x10ee/0x2580
[ 1818.699753][T27001]  ? md_release+0x1e0/0x1e0
[ 1818.704243][T27001]  ? tomoyo_path_number_perm+0x56b/0x5e0
[ 1818.709859][T27001]  ? blkdev_bszset+0x1f0/0x1f0
[ 1818.714608][T27001]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1818.720068][T27001]  ? md_release+0x1e0/0x1e0
[ 1818.724554][T27001]  blkdev_ioctl+0x5b2/0x730
[ 1818.729041][T27001]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1818.734482][T27001]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1818.739400][T27001]  ? security_file_ioctl+0x80/0xa0
[ 1818.744496][T27001]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1818.749940][T27001]  __se_sys_ioctl+0xfd/0x170
[ 1818.754515][T27001]  do_syscall_64+0x55/0xb0
[ 1818.758921][T27001]  ? clear_bhb_loop+0x40/0x90
[ 1818.763611][T27001]  ? clear_bhb_loop+0x40/0x90
[ 1818.768276][T27001]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1818.774174][T27001] RIP: 0033:0x7fe91b99f559
[ 1818.778589][T27001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1818.798198][T27001] RSP: 002b:00007fe91c780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1818.806591][T27001] RAX: ffffffffffffffda RBX: 00007fe91bc26090 RCX: 00007fe91b99f559
[ 1818.814560][T27001] RDX: 0000200000000600 RSI: 0000000040140921 RDI: 0000000000000004
[ 1818.822513][T27001] RBP: 00007fe91ba36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1818.830485][T27001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1818.838439][T27001] R13: 00007fe91bc26128 R14: 00007fe91bc26090 R15: 00007ffe0eb86878
[ 1818.846401][T27001]  </TASK>
[ 1818.849452][T27001] Kernel Offset: disabled
[ 1818.853859][T27001] Rebooting in 86400 seconds..