last executing test programs:

1m17.784491528s ago: executing program 0 (id=1444):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x5c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
getsockopt$inet_tcp_int(r2, 0x11e, 0x1, 0x0, &(0x7f0000000000))
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)

1m13.414038033s ago: executing program 0 (id=1452):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="240043f0c8b580ad29ab7153f01945a2b6b1c3e3a3a6430e000001000100050016002b0000000000000000000000000000000000849ab9907a3ddc"], 0x24}}, 0x800)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ptrace(0x8, r1)
chdir(&(0x7f00000000c0)='./bus\x00')
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)

1m12.354518715s ago: executing program 0 (id=1454):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/205)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="00225c27598196a5e3698748e38fdd1bffdcbc01d25944c4cbf5e76b315914ee32d448c895b800000000000000c2fa1b4c31a5ca845aede05617fd51"], 0x0}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, 0x0, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x10000, 0x2})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)

1m7.064368274s ago: executing program 0 (id=1462):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000000c0)={0xc000002, 0x0, 0x0, 0x1, 0x4000007})
fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffd, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe85, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

1m5.604705389s ago: executing program 0 (id=1464):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a00030724c7bd7002f8dbdf250d00"], 0x14}}, 0x4008800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYBLOB="6007bd959b9de336c54b93257b194030b8639c359ae00fb628eaa371b5af0a1f3656b58bde6852ec4bfd431837c0fd23907fc085bf2d277c13d259af40ba6b4bacb4a1e3823d5289be081d052820ca67eb4f4fd602643e4095e3712cd5c37a0835709091d00bc539a93fddd3f9984932496330d1b8e158e31207b6fb95deec77", @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYRES64=r2], 0x50)
landlock_restrict_self(0xffffffffffffffff, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10081)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYRES32=0x41424344], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000713000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, 0x0, 0x0)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0)
write$UHID_INPUT(r9, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006)

1m0.533659165s ago: executing program 0 (id=1477):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x2, r0}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r4, 0x107, 0x7, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[], 0x34, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x82, 0x85, 0x20000}, 0x20)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x2d38}, 0x1, 0x0, 0x0, 0x4000044}, 0x10)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)

44.842549272s ago: executing program 32 (id=1477):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x2, r0}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r4, 0x107, 0x7, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[], 0x34, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x82, 0x85, 0x20000}, 0x20)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="382d00000d0a0500000000000000000001000003040003800800044000000003082d03803c030080540001804f000100e68a9b1dabfa259822cf0062ee98cc6769a9912f398b8a3e55527d64ba46375071f2ee41ccbc0dbcc9dd9bcfbc5671348aa421947f4ac40010c8873b030e462690192be0349abbaa697d03000900090073797a3000000000b0000b80140001800e000100696d6d656469617465000000280001800d00010073796e70726f78790000000014000280080003400000000a0600014000050000640001800900010068617368000000005400028008000640000000060800024000000016080002400000000308000540fffffff60800044000000009080005400000000908000240000000140800074000000001080002400000000c08000640000000090c000180080001006475700090000180040001002c00028008000340000000030900020073797a31000000000900020073797a300000000008000180fffffffc2400028008000180fffffffd08000180fffffffb08000180fffffffc0800034000000003180002800900020073797a300000000008000180fffffffc08000100068be35e180002800900020073797a31000000000800034000000002100001800c00028008000340000000017c000b800c000180080001006c6f67000c00018008000100647570003c0001800b00010072656a65637400002c000280080001400000000205000200ae000000080001400000000105000200090000000800014000000000240001800b00010074756e6e656c00001400028008000140000000000800014000000001800002802400028008000180ffffffff0900020073797a30000000000900020073797a32000000001c000280080003400000000108000180ffffffff08000340000000033c0002800900020073797a31000000000800034000000001080003400000000108000180fffffffe08000180fffffffc0900020073797a31000000008c000b80100001800a000100696e6e65720000004000018008000100647570003400028008000240000000150800024000000000080002400000000e0800024000000015080002400000001008000240000000040c00018008000100647570002c0001800b0001006e756d67656e00001c000280080002400000000808000240000000060800014000000000901400800c00044000000000000007ff780007800a00010071756f7461000000680002800c00014000000000000000000c00014000000000000000000c000440000000000000000808000240000000010c00044000000000000000000c0004400000000049d6c0380c0001400000000000008f8808000240000000020c0004400000000000000004f0000640d9fb080fe10d2f2402330b83849e3b66bd166a786a8b2e2d0e895b118c29ae2d7238d452aff429ea1c3fc02ec06840ff7bb7e18247133e8863681b257fdc4806f2bd25f88a76a3514c0cf9aa51a9671cd5e8de4bfb092052dac65e43a0ffe28853da1dc2d880f8b0b7c880178ffa35b113d238b747d3973ff06d197e05eac0e693ab15387f42d7bf21d569cec689125513f6cece1618f69203365b360c37eee2279207b89342d6ee2d87df5fc9b425f691ed129943b74275a7f0a97dd987de522a5dca8bd82f585448947e394e960211ae94f7f47e90b14a4bb184b40dbfff00f78312d9ae1ea4d05760d1689010018004100100f3a646557d2f2c67d4096e41aaed21c265ac323360645b297f6f22e7e78b0f55a5431e7c057700912af03ddfbfecaa57cf02977dcf129c696c44c1d834657be7247186e3ac5b6926b00a37a5278e003873bd4e5311e3759ab255b865d291bd6bc1589e2883244b93652e384b878e87c6942fa6c6d91d242f1d1afb3d041a01d0a4f34d4fd61f4bd6bd44fd72f9fa14456aedd8885cd4da1abb08c4b9c8d1ae8ae8b9e28554ac052fbbf4a9eca5cf3c07a3f12f5c4df3aaab7d96b3e9b62bbe66f40e239428e3198c09b2dee91e5a469f74314bf2b15aafaa19fdddae5bb8024fcf6f0cacf54008554e781a742df0c4ade9708192835f5b8acd323a406169145ad7a8411429691277b4a00374dcb6867cbc579b6023d007923f6e5d844c61fa703475778fef4414a012d3dae77edd74ddbca69ce74e42485a77f5f603ba13781eccf96e3616a3cc839804ac7e24eda7b6f4fc5e088681eddb13fbcb3c76d57ba5335928da97e421edcdf4cd9160dba19e78f17da05b8fa8d031a195f561f206f152c25cb550342fb058cb486e76d86cb1c5cddd698e974d0b3efd44782adb7c5b58a8753cf178fa5af6040fb676edc939008c0a2f924e5656d823107fd4831b3711c3430922ac364bab601e07c4d4ee97e7ecbfdb5ca8fba8873e64f1bb56128e720c703b5fcad8b495dae4705a71f08191a72f2e825f0ecede61ce2d6bfcbedac6df0284c9df9568c1bc1561d36822a79cae976e9c09c8dc2bda979461ee4fca34ffcc4350cc4de1191ec087e116edd39f8ccac0236d7d633714e4887b75d1f36d6df1e798d3f7561976f5ee86cced273c71c9c696e70b7b8c277393fe392d9b5d3a52dc37b2e8c1e4813d76299797e051658c893ef20ea15cefdcb41c703046e2976d83175b21d2c06e8154e20c49d6f3ea402cc8ed9d9cf519a37cd3f1bf90224bb18ac5f8bdfe1675a36b072a13f019a6fc87206612acafaf69e14834598b919fb58e53dde1bc84106f980d5c4aaf66b78a1c2746db5365a79e2222c6a5928a343c96faa77eb8ed84b15eecd09b7c7b4a94cd103ae594bd5993ac4209fbd93a732c83da878ecac3884e73fda70362ccf53b5077738a13fe74a6cc8d92cf16b6bf42bf52b595d18f0ac3b5efa88ec4fb7ff17d9d007767dff7cd1b3fe365bc42ac39bf002cc2ccdb518912794022ba64ee007447f45dc48953b757589a26c4cf7e86f330a95fc01b8f9c4f4a85b6eaf2f89b75ad3f442830420589d82308cb55c8f47ccd5393207436d75a91904decec7e7fbcc660b698c7b7723b685a2a16cf622056cf947036a0a198c86a7ba8b38d8054370bb2d4d1fae2b1194182cf47494281936b4253e0a17d40cabde9d2d27c0f3f101dfcad135e1906d18a144d9d71c36dda5156f7341eae1514fa8e776a60689ecb2d47b3bdb632fddb39682cf425f18785460b94dc98cc100a9a0b42fb6645a3bed231de67eed30722f719de14250fff5efcaebf36731c7c6aa07c29b603759a9f674e5e1d10f4fc7f0b013700d06cbb504776b50c41c368278c3065f66471dabc1f0ffba12eaa7ff40e371ae99a6772c953dd5d1e809eb58bbf7b42c27366ed22fdf8868b9ab324fd3e994febe9be3cec42fa215d47f0c9e7a0c5f6a758208918e94bb6ca3559bf52d06384bb5ade66188fbdb7cf0ebda6f808558166889928b73edb10fd5e13359602971605eee05d8beaf374b9523758dab1d96220acd6cbc08679e3b0d07e325c3aed30b469ea92576c3ece6e82df6ee8ddd4eb4087b2f036c7eff2ec4ec22ae906ba1f99b611f263c3eb46ca32599e04064d59459b2178a7ec59b8438b02ae593ef397d39a1bd3f79cb3ee62775e6c157e41c845ccaf2c26a4d70124dd123f9e30460fb3ea3f0b9447e6074ca1c252e84fa77eb24b653acc8b2d0a7266d46faa3087099f6a91f5b543add9be297c1e7c9c129ae7ded6b7ea3ddef15b93266a421d8f91f882b6253fd793ca15955d6813a6cc5d4b6bdb3cd9ecb9620055140c09ca0682395392e08945ac18921bbf6c3892f21de8aa5a52ae0cec814023c614fe932e1a51e40e8d59609d9b2b8cfa627f1bb98209fe8a550acb2e1ca5fb58c130febaa5b8e9a1529913199a58e6a7d9c4ed88da1c33e8a658b722d69625f41bd74307ebbaa2a708bfcb3825938ee68a9564ae6ead1a0a49fd1697bc40ace473df87d594a2871cb4e4e93f3959c0cbcc6b4210c513e2da2bf1f34ac74c7c7e2ff72accde3a083a8a7e7d9b0c20d3f2263a2ca8b06f1c890a38dcfba3bd7e9f9e8c517b9ba3a4d2eb80d71f09a23e77de0ab572836fe50d50c8e62114c892309f15967a27bff6dd34b398fc1565780f910bbe4745956e1c558d8e36b0db0991dd7415ddcc2eb8272b844fa1c6a3c3bd3b99392ffde6ab2e4eff99404e463d9ab37a70addbb74f1d23a68c690b02dfd951d479d5f18db8d1308a52e72835deb0f8a0196ba46cc83a769805ed8c6396c53f61f6f561fed872ba3be4cae3d0b1a6faa927714334fa990136156ef2e554cbed232cc56e7354cb5e479adb3584a6c37c8c2c7bb45d8d789633f18b510e7704bf25b9eaf6417853dc3a5dccf009d8f328075972c52ffe7531982fc2b8492cea670dcc150c65ecf870526d70885ae3fedb2df44c4167810eecce2422c5d6171ca3a4d9aac136c41c7ad7d98f6394a4edd01dfe4d461e8ab904ec7bd4848c26fe461e575ec0f36f2304d88b9a21f277b8adc251cdfa30d579b19c749582519e5c7a2c1c93901893f2f3b7b159142c7833676c2142cf6777a1e391ac72fe78c35b17508d0a94ba8d060761857dc59e284a1b6f630bce7444dd11081d1cfcbe9347c49e6d77b710470414635267eee177a2ce0968782eb590b9fc00e8fd5dff8f1dde8d9c4459ed8e4d480d2397af16ac68ca805247165381e124bfe43607c27e08429845af84b2e7e38262620d304c673935bddf5ea2e0e3caedef54f825d6b1b1b7158f338ff918a5cee9bb0659de3d47c1aa15b7d0af0df5b83b8a930316416d9340db63f95c72ca0c0366e06371bb8afc2b7a6e4c49527901631713e9245f7158132ec36029f8b6aaf8364321000a55f670ea3598c92efaa1817497bbf4e59ef2da6a023d17b9e0b28e97175300f03ce8cba8b73634eb7e73cbd6bafc52a4573e1ddfa4b2b575c769cab3c03a91a96271adcab4ca8b97c2baa05d9ae23eaeb956dab6a9a03c91996ba03ecdf8065070bcda7c3aa56f3873886305180bb29fb33c0739655fd9e4deb8954037439a9a43984e3b78fca90ab2f4d4772f998eeffd3d435644d5ce25b26b77a60d6be67377a95b04ea1b4ced5e7b884fef71c611a69b2bb2415c7b529e06d2ba38c8d67cab5ade86d3688a9219dbe458adecada92b6bee6f832b247b6c3c5316c017a9dabefac0bc90c087d408fefd8fb7efdb767ab0b51570afc59d2fb35e30071dc1178878b186f3f35e9f2a4edabaef8c4eeb7162c285f79b84c29e4c0ef1fdf29ef2c0cbe727ac6abf25a6aed6b15dee6a1d94e0c2756aeefb5165564d5b394ea14074743c6a25c33c6e7ab4e59f384d6090ef81c80c8ba839af9c9a453a7e8c59f65c7ca7a8b1da75b64336df36c01f9663ca9dd86d0c5239612b2a39bd1a4583e506205d4a09cdd67bc77064083faf07f6b2932559d0328ab0121479513dcec1d90b6da14e25b819ac36ba8993a3ccff2d381616d3bcfb625101c2ceef3ed1e869dfb003a4e1f7ec344f9eefcf173858f45b38f623e0c1f7d8db27ff7b07c4981573abbd3686d7ac06a02b21891d8395b21d57406f4042a86a566b600bbf035614ac388f14b850938f8a1e085755dece73ce9d08e515ec0c046d1309e113cdca95ac1c777956a7a9797adad6a1f413330c8501a74a2108dc8931aa14b714cfaaf51ac05a30c2b3417452c86d60455dae129888a200cb4fbbf21972eb28c03857b6865f6bfea454d633501d0fddf57371f7e837e6aae5c8945668d1cef789c110d34c96468fa4403db8d5f700f4ba6deada2423ff02fcbe429ee492242543d0586967605eda235bca4c6ab27114347c7c7b2fe5234aef6149b318d7f8568caa1d70e9129251782b33d5d964c8e6faf0709ca5e7ea6803bbdbcbece4de2613b2d29c8daa736e1f8acba9ccaf9f2e1496b39652b702010b55fc5f7217d12ff503f60d5b795b2b8a8d3006e6dfbb4f7c8615fdb0d7ebd17034a331965cd940202c5a7acdac24db4da07f25df516bb7cdc077f5009b8bfba47a2215b6cef197b99eedf10645bd370ba8dce5882f39cca6ef4525a6d0d5cbe088517028b1f9757e0774368a4a0e96f32aeee541f42ddab50f23c91948e5639a291675805f0f0ccf946532c3d05e9315a4ed3b043f832be6f4dfa5b40e0cb07ea091a20e22523a435bad5e4f608e25c5392dbd53c9315c72a46047eb306ce9825d0b66e7b0edf0a18d72d9f7d78dd42565188ce9f70db875230de70dc1809ea3b28d5f001322e22c7ed676bc0332f335d936a33b51ed1dd51aa98530b30343a0aa3adebd4600ddfcd66fbf03f30627ba25013319fbab75fbf4312f23724c1726edde31c9b4cef92165f0f5adb37ccdc85d68f2cf852cf1787921b6b3c4d0059c45795a4ddfcc737c65d6eaa1bed112d35181c340d7570f1a4f500b4847b5fe7ab4133351e83af9d0fc04f15d35e48e1b7318dc8f30084f534c7a43d493302483ff2e5bf94bd641a77fa4d0e591c23b0a43a291505601042003a0eb346a1b809bf12e1fe519f697fa90eaf9650f3fce64c014e36b7c839898f16d45e7f1605974812b47303ef1f294ca5ae7a7562e113e59915b84f68de26313855b10de82739db9bb815eb8ef96090000007d535124dee16a62560008dc4f1658fa9abb062eb178781a35607630ee2e8411e68f8e269f6bf6a4902f5b345979529fa4263ef68903d81a0a1252371f18641b41b5c4c4435ac3b896919bc9e9910295dd971c7f88a32955d7adac3fa44b15af602632f08f68ef450aed0de10a2ffb29a2a4c0dd67cfb1f3db12064d13115cac84a4723f8baabaf9120c38b77fe5f9b4c9490655c2bfa5ae386971287baec747f0f86e7ec503250ead6503a3011e75a56c708d67b62d58595f41eebaa20ef4a630f1a1262878d7b74e1fe59d8740b590c93bda2056b5313d9465f1019f0d28f890f588548363676d3b5d18a601b89374308cbac83a54ce11ba93035d77c945482b6e7197188af4c0c0e1e4d58b592baa688903d0c470847984a93b4b37fc75a75a28e1cb67df35cbe466bce9d44f756f4153791083aad1dd547d20fcc2cb524a7632fb635ba190c21117cbc85b2c0072dcc1536777d0b9c3cbb873c747bf08be990f8b5259bf4664a7c4cb81594dd14663636ad39ac946ad8c0aca0ab87aefff1da9cc7a026902caef8687024144407f1fd0bc982d69db84ade106591d6fdba7684516cfb32ab17434645aeaa29d647a0cc0fd0bc33e5e73ed79d87f09d80917643e8360b937f09930b7510809f3193dede5ef1cdb3bac289f8918b5998b3212c6aec9f6946f91c16e9db4454e1950fc8bc11a0c54b2be60b9129ec026a6897805f2c8c40bdde61e68bc97236017b479b347ee0d8947aadad9b779df65755290b9a8586890d954eff50841d33da4425d99bb82564d9326660ad65951b32f361dc67064b769150655d4e260830f48276229f8a6981d1722ee7a00ae454e51867ec52ee63249e13310c4d494c2dea0b9a27a9f3d3dcad1da7cc41ef4bab0dd5eb7d5f18a0a3f906e1c0002800900020073797a32000000000900020073797a32000000001c00028008000180fffffffe0800034000000004080003400000000450000100c4a13fb08d74b2846860fb5be2af0501acbb241bea2f6a2bccab37046419659f9de160257bc69635be35d840989b9340fb5ccc038bb5391dca2ae0c52ff3156140f5fa3fdf0f7ac06bc6bcb510000780090001006861736800000000080003400000000170020b806400018011000100666c6f775f6f66666c6f6164000000004c0002800900010073797a30000000000900010073797a31000000000900010073797a32000000000900010073797a31000000000900010073797a32000000000900010073797a31000000000c00018008000100636d7000100001800a0001007175657565000000140001800e000100696d6d6564696174650000000c00018008000100647570000c00018008000100636d700030000180080001006677640024000280080003400000000a080001400000001308000140000000120800034000000002900101800a00010072616e67650000008001028008000240000000000c0104801c00028008000180fffffffe08000180fffffffc08000180fffffffb1c00028008000180fffffffe080003400000000208000180fffffffe7100010000f205031d6eeeaee59e3bbf78e9b3b0336cf314b5e3fd67fcb15f802d4b92abca5a71495331899e821275ee8c522dcbca948a5d1eaf838586092c57fb316228946c2e64b87816ba7462e3a30193c0a8597245447df2578e7d80fc9fef01cf449ac0a71907cdecb19b4a3e3bae0000005c000280080003400000000208000180ffffffff080001800000000008000340000000010900020073797a310000000008000180ffffffff08000180fffffffe08000340000000010900020073797a320000000008000180fffffffc0800014000000002600003801800028008000180fffffffc0900020073797a3200000000440002800900020073797a31000000000900020073797a31000000000900020073797a320000000008000340000000020900020073797a3000000000080001800000000088140080900006409f001578e6cde9730cf0d537df88f0bf77c2aa1082cd4d8998ce1f3f973c7aad654c381f6d5c715722d34b3edf78e4dc762a02c33f4d88a93bb3f037a9b437b7e5f4bb2ef3ade63a9908d82d7a06c6e670ef4b5e55b40ed649601050529be01237c9ddb3c20dd30403e0536b6d3aa52aca1297dc039ba5ec94490e13a4497d4f1be48dcd49dc690a19192cdc880302802000028008000340000000020900020073797a3100000000080003400000000128000280080003400000000408000180fffffffc08000340000000010900020073797a3200000000f1000100106e98f6f53eb73c3ddb115babf64504246fc8d45e3ebe95d2cf081ec9453dbffcd73515b24979af54de89c999ebf6726daa55b5fc01dbd946bfd2cb8b58110543bad9f96b90fba920b187be768ffc3485d6a7458eaa322fb40577fdca724a28d669accd26c97bb2e97badf2fdbc162fc8a61aa61b34684474e8798559b1950a512b5f03a448f9e5ded8b08280d96ad4be2f00d520671b6321d8e42436677132450be383f41a8caeb69870c344fe5ed98e8c05fbd8fad017837cce182004cac13233aadc9c9817b5a6ba7edd1ddf03dbfa59561f987c724a3dfc09f6bb4eb06762e36609358b555a0804f17b3d0000008b000100c88d2e9db9d0ff5498f28f65041802ee27ae0236a8c096050ce5b2485d81ff72556eb7fd012bd044a7b4eafb4ca614a7fddaa38167a8ae7ac7f26af85411d79dc752aafcc8397355bbf315e0d48f678194c75913b52f33c8ade42d5caff186c2ee2896db27c79ebeb638a3950d43190c9815c17eb530d41f952e7723caa28c0a831bd00afc9dae003c00028008000340000000020800034000000001080003400000000408000180fffffffd0900020073797a32000000000900020073797a3200000000630001006b448f71f5e5f86d80b24f1137403db2bdee8b467729b452b90ca2eeac3970c30c886213fc6e8cb3663f142b4cf53731cf464ffd000adcfabf2e03d2cf1d0c34ff9eec360b9f9768d1a5473db32d0417a9122a8619dbbda30ca992e108edec003c0002800900020073797a3100000000080003400000000308000340000000020900020073797a310000000008000180ffffffff0800034000000003c40001003e61a1390fcc861b6d1d8a7cb72cdfd21902d8fa6aac7da7b97d0bee6ad6d457508438f2e9da6b3620a2d8a2bccc957f5fdb27788f2e58447a18a7fc83cb2b947b3e8f2541bb0b6ae4261b291fe0bec52c557e1f1b8d094d2d60bb9afa24b4b5675afa8cffc8c68111261df1aa91da1d2e0a1fe8e3b584af7bf52cde5c711b016374bffd8265e8c45ece4eb0deb9bcf2673bc37fee661e3afe442b21169e4c336827e22440446bf1730fb6531226c1ae5485a6cfe496c7ab33d343ae05ffe7c11c0002800900020073797a31000000000900020073797a300000000024000a80200002800900020073797a310000000008000340000000020800034000000003080003400000000340100a803800028008000180000000000900020073797a32000000000900020073797a31000000000900020073797a300000000008000180f8cd5358041001003bfffefeffe553d3c048f73f9ff467c95db9d330e36ba40f2cd3e19a3bc4dddfe1c4ae063d0a6f17ba5b6ae80a52b6bbe58cca143458be221690476d53b0bca26ae63b798fba76ec91239e31a00d7a9cd7bbdd00624ab5c1f101c27cf62e17a59abebe2923f6e80753058e829d73fac45fe8c8e0c18c070ea84f53b0a6a49c51a1b5f65c38a0997f286197937eb37d6a5020496a9f3c644916bc6b148061c3ee73070dd00984b6ce10bc8800fca7960d70ee116a3f23826cc894636c4a34b0f18c2dd68ff060253ebda3c5a7e287d7c858f30532a2c4e6c6107fcfcbad55596676cc718d17d5e795ad2571c183d6d35d6f5f13d3b55dacde31a180b4beaad006b2ec6e93088a18e84e3a9670c31f2bffe654e0d5c390fc608ce0bd1a664f80ef7b6352bb8c98aaf5e0d58ddf8733469d1d4365e81609918a84d8e5e79f363289d5e765c57fe1d565dc949c35d82a8413f2ef1f2e626a26ad0c33fb41ee6da2fafcb2e2559091a2f93b0aa8bf00c259ac21d84de46bde0252eb7921b8a27e32bff1b567e8fc4e95543c090aeeabcb5852b9fbb0825b01661a904e7f883e108e9a995b3f324d55c013c40be94a70f27dc452e7c70a536f6c7a2cdf0a39deb6638874abb29158a541bd6a0cc08583e881e35ab410fbd034cb16b2cd5a19b90948851cdd9ad516388c91f9e4c27dd1ac3d1bfc1d21a38ad943b47173b1554a08e4ae726b1284eee11115f5a8b4829569e800dd3700d4f91944e9ddd711e847ed8be7f9795f3deae4593d7c2a88facaba9bc5472dbc849678b2ee5eb36c6e8c7762711ef3aa1306d71e7527f168c5d20d5f1487be2ee674d4899fb3abb9a5fee683c013f1ee1f13b63de6f504739b35553600b3d0e3c5c034a0cfcd1da4e384dda13b70cfdf8aeedbf5bdae55622b0b5839174cbcc99b40ba71ace583775e9f676ec338f475403dd1edf73e2f7f1f96b9ac6656765ba17c0217b2148788df78879817821011ea013b76c080bb61a8add97ac3713d8c731d60b4ea0cbebc67291f3a22995010489b69b3f4784961d8cc367398a5664839117b81a24e65f843df949bb02209ee2b2840a85470f973aefde015549d84d651a7704ed9aa5915feb6455b742eb3c6f1351e57028da37ef3701eb6e4daffac0102d1aa69bd4bf6355024211291b9bbd45a7d0d6014cf74f04560d5d2d032c65f70b3b55016a7a5276fa3141200f65237708cbcd8da491b7dc429e66a14f3c6b2af1017cac7b31ed9ebb645b264068b6f5e6b2a80a45bfc2c17ca7bbf7ed5b8f59480657a96943d02623de10fffb181497d16204e4081b84f88237a61b25723d7aa647efa2b3a706d8c39b4a91938cbeb321ffc52bcbc4689a1d234b9f0d0f57cc8038e623aa2740326df986c78d82588c2b2b4f0f416ac67328271f31d4ad36b4902834443f7d2a0e95bd10cf4e598968fd28e45ad37af68355c59ed97ea14419b94bad5337b335264616989004f152ff7e92db9e56bdf98e73829b6293eaf962600340ad0e8bc38fdb8a4d2c274d5c33a8e62a44d80c9c7e28d3f1d30b35c45ad9d327ed3c625bff8290e483ee2b6b54182c9abf9cb293a9157a3f14901cb4b50b5769aafeb32626b5011e0e37430b196084e93f54faee893867b8cdf218a22e7115a883410c989a47a3c9ab229e8becdb3f58d6cfe590f0fc25169cd2e97f51d07b5d3f9fa26b7360ce48d52a076378ee84a74fe9ed5a6c3c3396779fcfe8b20d3eeca7061a0ca67420da489cf5be358bec13cb89cce805b60f7e52842746542345e99736b744bcfa146aae8928a113d37fac274c216695996c127824f861599a684a3cc361728f0cd73dcfea9d4167c11553a909423e02bdf25dbc78cc3328fabd43977a2d209b7215ac30639874b00daf5ad5332c1896f70514a380baee63ebb30b10a46c3a85c7e3e62271ede858556f1a377477423a00d7eabcd14345e26905b73040ec9e080edccd2a510f2006aa8b8043d2edfa2812135ece09075328241720bdfeb85fe0cb5990d469af5e59ff4716e57a8000eea7a4c0ccd7988597283030c341126c9b224d4526020650882d9df901d1478ebe11d76f88119522647a5b311271d78c05c09759d6e056b5cf74a5492256d8eb895e3028b7a41c5ef63bd3957d1f59e30bd3d6ff796aa8bf27c63839f1b2cbafd6f4902f8010b6a3475bc3125fce430a3a20e3fda604d3bb93596f9416013bfb8fa248763acf3269d190a748fdc059849c0c44b9eb3ec1485e5439bc850240a048b2915770ddaa5d14e841f38a426d2aae4417d452fd1a13db9cd01dee9baaef904b56cd64c3c5f79193f2b241eab9ad98409977efbe2432c47544941dee3a6b119aaa3f51055a718019fb289edf966dc5a25f4f760b553afc0e5e6c08ba9b3688c4cd3c9c0a3dfa382d27245357d67f838f8c28aef842ecadb3b2efcd75e4cb72156161d532b6bb5bef9738f7b4f77e33cf2fd5a6db2cbe92f9539a861d6050c47d89555bef927536d51d388a3eff73232d17eb4b462ff92a2594ba5552b04aef20fa73d252e9fa8f932377d9942e3f10953d754997842f81dbf3030c4d18bf466dc76b9d75fd95c8d246169a301de26fb07c9103307d77e5cdb472c2baa86f4aab7a974e0285257ba43dd0f34c56fdaa6d2d3fe0a98ebe208484693fbbb8f2c40a6680095b6e63be43e71cd1400e29fc778916a7f2152dc8b6e7abcb9428bc6b9aae45e0abe15d2d81b8ec0e4b1ec5ed3736eaa2f97a0a7f3f64c06bbae83d64cab6f2c030f9c916bf197f1064e510fe7caaefbe79f2865f97475ea8daaa00706b6a4909e23e2555b37af320aa13fcda4ee28bc2d452bd65d77feb1bd5af1f80571dedeeae3e54d2ba2a01894e7d412c1e0e5dcf0b4dec748dfc02a31a4fee1ac7fde4b2d3dbc7215a6667fb77bf4b7d3c661075d8a372282d8c25492112dc40e804c586eec9f8a9ed0d1584d3c92e7fddc79e4be43bbd1a7e1b786d631ba730afd934351f8f63b3c95321921cadb433119ae401e6c1aceba3de2f83cefc3df23a8cad50974cd609e3a6e42782c5e313a7f81c94dd0701cd1dd80d1e1d4b9dcc44edc3d5ea5be6ce7fffe56c1518b4b8b0448984b1e44fa1674e4dfe5efb67887e8ea7c84d468ee2b122ef12c8d586817caf19ffda44d555f6ccf80abb54856c453a0fa37471842a424989395278325119d34a072e24f2aa9a5788e16b152587847e33911d55e2c751000ebab24364c1ef9693f943d93a53312622cc24750605e94a9a57fd0576099ba24f6a8999d36da6f09cdd05c0898ad44a23edd0433150ee9e4b432c940f51bf6673da309f56ab70cdab90a39d6ce20d779332e5348dabf933138dde69629227a6a5a76cd64ed4588b247a6518b9995873b88442679cd53d856d46fbe151300f1ba7c3a1fe0cd33fbfd644d4c6dea20cf6b33140320c40db0395928272dfd40324723d3bffbb4e38d5e0f4435231a472f2c2a0147453603357929c09e75fe3ef38319a454c95c4a5be6f51470b7713772a52aacbcb9980e80ca8655e4e03194d03ae4808d550fce55bd201b8a24a4b11fe052d521ee3ccff6fc3f5e88b4274638665d3f030f25cbe6f113d1b17c5123c116bb992efa83f88e266c4e30cffe97ca03697b1456372b0c8f9144a73551d40fa5b1a048a1a3ec7effa8f0b2b163d05c76ade01dd2d70336a512fa5d9f9e6c19a725979502fadc95eac59def870170c0f00e1b03650abaa56f21edbbaede08e3a59cff74ae106c23d3e08563c3a03ffb06f30438de4c94b4dfb45fa6e098ecc2464d8e68e4ee4d7f546b50ecd70bbbf228b86fa6eb1ea18794f79ce4f8d5dff7b91d558d3305b276d1af073b715fb079484ef4dc8b774fb2769895db6d303c21ecbf086834ed041530f069e1d056aca5b41e560aeef41890491857c501b10f14a11bb93a69195daa931cc5daf60ca4af75a2a3616d7941178e485da283ca9b2b174b4cf57c970eb66276e83a9fa86452b34349f296124de92d23119c862e6b674aae1fc36a1b8acb07c7d85de9da756da23bd9246db341211f728a40dd5b0949ea8d5e32754a1fe770b6e7598a14ae6c055249cde221f445d57f033095ba14d3edb2556c64c49e644beff1451c48992dd94d359cab888075f1a43c8dfc70e4e23ae4f7374eec367969127d9f9cfc8e5400ea5683d29cfb28395fa426bbf7e23526570bb881aab1d2c071de330e1b4f4a522febb97a798d64be770092d506e7ec028c746eaadf50a686e556abee6e21f79e27dfe83567e801797d3dd7ccf12617d9c82177cffca451e9723f84c341e4563774dbb4ee4da7bcbad852e9f53d3bd0d977eae99770aebb404ee6d3a1c1be1f44bb9f1651c7f2f5ab76e69fabd71a0a7c5fff038aa492176f8308f1cd1bfea54bcb3c74d3397048eb2351fc019af955bf785dc8603ca93e607dfa3e6823936fa629916e58413111fb416864abadd6c5289e804451daaf1ab224b0d22f2d85173d68c6aca38fd02ef590962796f1573fdf7996d7409807801ee256eef1cccd5b8f1a01c90f5223db8b646f1c3e08153579977f597eae31e5eed74f2b282cb8d243415a71c33b5021f4ae2d8c1117fff5e651a49acae69c614443dac3331502eddf06c553ba3e93305ae58c3743db3167442c8fc4d783e73d6cca6a14e287e34ed0496f0c957084394985563859a2399d748d020ebaa1c4786cc214c349a5b7831ece537661e7222553d62a5403dee2aadf4c23d40355dc22e51558b7f6587dcf28d36aeef7a235db2fc64909a3dc2fa0c10405a58e31e40465b1fd4808a64a6ef863daca41a2543786be207d09044faabaf31f0d0567f79387e37b080c0fff8908719016569ec3dd3ec4c037009a94d0c65d2b31c72e5ad7f6ceed80010b5efa7bb89d048a82b926f2a822344afa15b8e9ee4d77142e39939273bdfa31ed751b87c365627a72f40764f107e5e63cffa58599adbf3562a09b10e6f349d4ab44d8431cee4f234b5c8e0581d1d63418f73cd2d73d133ff0b7fd42d8852833d13031519bb06260d2ac219c11f0250bc5bc09a5dc01f0b7474345ab27b86554a9ec8bcd5f467c87480583ef6c54eaca3092b910933cfd55b18ea90aaa8219c225d680d2be35593bec5756a022ec24a81c705697494a39ea9bf41e4d6f4b0c4b873267159cb9f4f335ed9edcb79af285447623e5e24d723bf05d95866d91c23fc72493665a0970d4f85ca30a6e8327df27197ce808751bbbe9b5336046b68d52ff3fe09b02d1fe6a387746fb47cbef1bfa611e72d881fe4133c11aa4ece78b58dd69bbe27a5ca5b8454035d5fbd768a707b29eb90808b63c2a8ca72b14c336126b543d0d4c45514e0690962ba70d893a2bea2452d9f32ee72acb7a705c6fc3a202748756d4a14c6563cc4261b2f4c4314907a9c8d1f42f1192b89af8eb3c1952c397004b004ec52c076838f3d8b4ca7c539fd3dd71f9116324aa4ac7ca3088ffcc1e71bfd5e6f73ce9e2e88f97e1c5f4f38c1bad62820cdc2229c4200b37ceac8c6b409f0756e0aa6ed43da4a4a7a5af8425a6f417ab7496b8ad5960f07be3983dc894f23958ae595d15b16bb0c294a0217203df8a2e0cc6b11a42b96226797f5cf6414f53f66cbef0c4e5faa9505a6a81a001e5a1a85f2f4f3cdcf8f88fd49565685a824da2c2a1956a48d8c56af190a78824ae0188620db0d9c8185003e477a791ba104a1e5f540007ca6ceb4bc4d0a73b1b9a387d0d7fa9de876419270e95992565ddf0dd7db1a151bd2393b0000080a0000b801800018007000100727400000c0002800800024000000004100001800c0001006e6f747261636b00480001800a0001006c696d6974000000380002800c00014000000000000000010c000140000000000000000e080004400000000008000540000000010c00014000000000000000092c0001800a000100696e6e65720000001c0002800800014000000000080003400000000c08000140000000000900090073797a310000000008000440000000000800044000000000"], 0x2d38}, 0x1, 0x0, 0x0, 0x4000044}, 0x10)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)

15.550419463s ago: executing program 5 (id=1511):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x90, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

14.214284111s ago: executing program 5 (id=1570):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

14.065771809s ago: executing program 1 (id=1571):
socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x80000000101008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, 0x0)

13.997209733s ago: executing program 4 (id=1572):
prctl$PR_MCE_KILL(0x35, 0x0, 0x1)

13.823030313s ago: executing program 4 (id=1573):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x25, 0xe, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000002c0)=[0x1, 0x5], 0x985e, 0x0, 0x1}}, 0x40)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x1a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/222, 0xde}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

13.822433573s ago: executing program 1 (id=1574):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00)

11.635817051s ago: executing program 1 (id=1575):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socket$nl_route(0x10, 0x3, 0x0)

11.634924021s ago: executing program 4 (id=1576):
syz_open_dev$video(&(0x7f0000000000), 0xffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000000)='./file2\x00', 0x18000, &(0x7f0000000080)=ANY=[], 0x1, 0x556e, &(0x7f0000004000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c)
open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000002000100", @ANYRES8=r0], 0x456681)

10.881387835s ago: executing program 5 (id=1578):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="240043f0c8b580ad29ab7153f01945a2b6b1c3e3a3a6430e000001000100050016002b0000000000000000000000000000000000849ab9907a3ddc"], 0x24}}, 0x800)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ptrace(0x8, r1)
chdir(&(0x7f00000000c0)='./bus\x00')
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)
chdir(&(0x7f00000000c0)='./bus\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141)
getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000)

10.540432655s ago: executing program 3 (id=1579):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5fa3, &(0x7f0000007fc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

9.441711309s ago: executing program 5 (id=1580):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x2000005c, &(0x7f0000000500)=ANY=[], 0x1, 0x1536, &(0x7f0000001ec0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = fsopen(&(0x7f0000001100)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r6, 0x1}, 0x20)

9.373883993s ago: executing program 2 (id=1581):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x90, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

8.23464018s ago: executing program 2 (id=1582):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="240043f0c8b580ad29ab7153f01945a2b6b1c3e3a3a6430e000001000100050016002b0000000000000000000000000000000000849ab9907a3ddc"], 0x24}}, 0x800)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ptrace(0x8, r1)
chdir(&(0x7f00000000c0)='./bus\x00')
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)
chdir(&(0x7f00000000c0)='./bus\x00')
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)

7.384446289s ago: executing program 4 (id=1583):
sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x40408c0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), 0x4)
r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x600c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
r2 = open_tree(0xffffffffffffffff, 0x0, 0x8001)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r4, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0)
recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0xf8d}], 0x1, 0x140, 0x0)
r5 = fanotify_init(0x4, 0x1000)
readv(r5, &(0x7f0000000340)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$sequencer(r6, &(0x7f0000019480)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r2, @ANYRES16=r4, @ANYRES64, @ANYRESHEX=r5, @ANYRES32=r2, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESDEC=r6, @ANYBLOB="63e527a5b3cafc5b80bc2ffe7fe1060f50d6e25bde6cb3dc7016b1e2b189779d9ccf38fa47"], 0x1b)
bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x6, 0x6, &(0x7f0000019300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
sync()
getdents64(r3, &(0x7f0000000740)=""/4096, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)

7.095453326s ago: executing program 2 (id=1584):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0xa0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0x5, 0x1}, {}, @ext={0x0, 0x0}}, {0x10, 0x0, 0xe, 0x0, @tick=0x1, {}, {}, @raw32={[0xb]}}, {0x0, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @queue={0x2, {0x2, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x4}, {0x0, 0x10}, @queue={0x0, {0x4, 0x8001}}}], 0x70)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r2, 0x4b49, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)="00525af96ea7e3b01a285232823045660c19f7718d407fad3e8c322a419693141b796e340fada90c9640404eca2eb44c2625428f845d5dcb4e6855646d3d2abbbc0ab59e934d399bd49ec501198bfa56000000000000001348bbd31e00000000b49c709ff5919366e1fec186679a3c5586a8a1913ceba9cce16d08f1f95cd7b2aea6104e530100008000000000ad122c40f2dd3cd0299a36000000000000000100"/170, 0xaa)
recvfrom$inet_nvme(r1, &(0x7f0000000040)=""/143, 0x8f, 0x2020, &(0x7f0000000200)=@phonet={0x23, 0x58, 0x5, 0x2}, 0x80)

5.82304774s ago: executing program 3 (id=1585):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x60d3, 0x1})
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
syz_open_dev$video(&(0x7f0000000480), 0x400000000006, 0x2600)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x34}}, 0x0)

4.489189488s ago: executing program 3 (id=1586):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
dup(r0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
listen(0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x133d, 0x0, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, 0x0, 0x1)

4.431769902s ago: executing program 4 (id=1587):
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0xc1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x4, 0xf}}}}}]}}]}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000000c0)='./file1\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000))
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r6 = accept4(r4, 0x0, 0x0, 0x0)
sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700})
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})
ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
unshare(0x62000280)

3.854545365s ago: executing program 2 (id=1588):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3.708475964s ago: executing program 3 (id=1589):
r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x28081)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x1, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x2}, {0x2, 0x25000, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x3000, 0x3000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x3, 0x6}, {0x1, 0x8000000, 0x0, 0xd, 0x59, 0xad, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x10, 0x1, 0xbf, 0x6, 0x2, 0x5}, {0x50000, 0x8000000, 0xd, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0xfe, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1003, 0x17}, 0x40019, 0x0, 0xd000, 0x0, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]})
listen(0xffffffffffffffff, 0x9)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000002380)={0x73622a85, 0x100})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x81, 0x4)
read$FUSE(r5, &(0x7f0000002580)={0x2020}, 0x2020)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1)
ioctl$TCSETA(r0, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"})

3.707969904s ago: executing program 2 (id=1590):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, 0x0, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

3.518392415s ago: executing program 1 (id=1591):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0)
mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r5, 0xdffaa000)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3)
ioctl$KVM_GET_REG_LIST(r8, 0xc008aeb0, &(0x7f00000008c0))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
lseek(r0, 0x8, 0x0)

2.58406267s ago: executing program 4 (id=1592):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8002, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x1, 0x6249, &(0x7f000000c6c0)="$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")
chdir(&(0x7f0000000340)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00')
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)

2.516542984s ago: executing program 3 (id=1593):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}})
socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28)
r2 = socket(0x2, 0x80805, 0x0)
flistxattr(r2, &(0x7f0000000240)=""/53, 0x35)
sendmmsg$inet(r2, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x2, 0x48000)

2.364955443s ago: executing program 2 (id=1594):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80003, 0x0)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000)

1.54464536s ago: executing program 1 (id=1595):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
r2 = getpid()
write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12)

1.256185787s ago: executing program 1 (id=1596):
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
listen(0xffffffffffffffff, 0x0)
times(0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.240399088s ago: executing program 3 (id=1597):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x60d3, 0x1})
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
syz_open_dev$video(&(0x7f0000000480), 0x400000000006, 0x2600)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x34}}, 0x0)

0s ago: executing program 5 (id=1598):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0xa0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0x5, 0x1}, {}, @ext={0x0, 0x0}}, {0x10, 0x0, 0xe, 0x0, @tick=0x1, {}, {}, @raw32={[0xb]}}, {0x0, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @queue={0x2, {0x2, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x4}, {0x0, 0x10}, @queue={0x0, {0x4, 0x8001}}}], 0x70)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r2, 0x4b49, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)="00525af96ea7e3b01a285232823045660c19f7718d407fad3e8c322a419693141b796e340fada90c9640404eca2eb44c2625428f845d5dcb4e6855646d3d2abbbc0ab59e934d399bd49ec501198bfa56000000000000001348bbd31e00000000b49c709ff5919366e1fec186679a3c5586a8a1913ceba9cce16d08f1f95cd7b2aea6104e530100008000000000ad122c40f2dd3cd0299a36000000000000000100"/170, 0xaa)
recvfrom$inet_nvme(r1, &(0x7f0000000040)=""/143, 0x8f, 0x2020, &(0x7f0000000200)=@phonet={0x23, 0x58, 0x5, 0x2}, 0x80)

kernel console output (not intermixed with test programs):

[ T4423] netlink: 'syz.2.38': attribute type 3 has an invalid length.
[   79.999590][   T23] usb 1-1: config 0 has an invalid interface number: 76 but max is 0
[   80.012955][   T23] usb 1-1: config 0 has no interface number 0
[   80.197588][   T23] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[   80.223472][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.246133][   T23] usb 1-1: Product: syz
[   80.266014][   T23] usb 1-1: Manufacturer: syz
[   80.276320][   T23] usb 1-1: SerialNumber: syz
[   80.318357][   T23] usb 1-1: config 0 descriptor??
[   80.359344][   T23] dw2102: su3000_identify_state
[   80.367760][   T23] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[   80.396834][   T23] dw2102: su3000_power_ctrl: 1, initialized 0
[   80.429926][   T23] dvb-usb: bulk message failed: -22 (2/0)
[   80.509681][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   80.645300][ T4426] netlink: 52 bytes leftover after parsing attributes in process `syz.0.41'.
[   81.108322][   T23] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[   81.127832][   T23] usb 1-1: media controller created
[   81.133666][   T23] dvb-usb: bulk message failed: -22 (6/0)
[   81.141015][   T23] dw2102: i2c transfer failed.
[   81.246729][   T23] dvb-usb: bulk message failed: -22 (6/0)
[   81.252794][   T23] dw2102: i2c transfer failed.
[   81.327366][   T23] dvb-usb: bulk message failed: -22 (6/0)
[   81.333152][   T23] dw2102: i2c transfer failed.
[   81.368845][   T23] dvb-usb: bulk message failed: -22 (6/0)
[   81.406868][   T23] dw2102: i2c transfer failed.
[   81.412148][   T23] dvb-usb: bulk message failed: -22 (6/0)
[   81.480547][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'.
[   81.489428][   T23] dw2102: i2c transfer failed.
[   81.489481][   T23] dvb-usb: bulk message failed: -22 (6/0)
[   81.489511][   T23] dw2102: i2c transfer failed.
[   81.489522][   T23] dvb-usb: MAC address: 02:02:02:02:02:02
[   81.721121][ T1111] cfg80211: failed to load regulatory.db
[   81.739493][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   82.018052][   T23] dvb-usb: bulk message failed: -22 (3/0)
[   82.275134][   T23] dw2102: command 0x0e transfer failed.
[   82.305914][   T23] dvb-usb: bulk message failed: -22 (3/0)
[   84.076536][    C0] sched: RT throttling activated
[   84.380410][   T23] dw2102: command 0x0e transfer failed.
[   85.345545][   T23] dvb-usb: bulk message failed: -22 (3/0)
[   85.356376][   T23] dw2102: command 0x0e transfer failed.
[   85.424696][   T23] dvb-usb: bulk message failed: -22 (3/0)
[   85.441385][   T23] dw2102: command 0x0e transfer failed.
[   85.454174][   T23] dvb-usb: bulk message failed: -22 (1/0)
[   85.886947][   T23] dw2102: command 0x51 transfer failed.
[   85.931632][ T4238] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   85.959862][ T4238] Bluetooth: hci1: Injecting HCI hardware error event
[   85.997534][ T4191] Bluetooth: hci1: hardware error 0x00
[   86.144049][   T23] DVB: Unable to find symbol ds3000_attach()
[   86.156294][   T23] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[   86.261935][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'.
[   86.436832][   T23] rc_core: IR keymap rc-su3000 not found
[   86.443030][   T23] Registered IR keymap rc-empty
[   86.532793][ T4466] IPv6: NLM_F_CREATE should be specified when creating new route
[   86.541425][ T4466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.549084][ T4466] IPv6: NLM_F_CREATE should be set when creating new route
[   87.090247][   T23] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[   87.108557][   T23] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5
[   87.157271][ T4259] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   87.656869][ T4259] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.832735][ T4259] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.199525][   T23] dvb-usb: schedule remote query interval to 150 msecs.
[   88.226716][ T4259] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   88.248666][ T4259] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   89.074557][ T4259] usb 4-1: Manufacturer: syz
[   89.081867][ T4259] usb 4-1: config 0 descriptor??
[   89.088445][   T23] dw2102: su3000_power_ctrl: 0, initialized 1
[   89.094989][   T23] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[   89.206802][   T23] usb 1-1: USB disconnect, device number 2
[   89.473574][ T4259] usbhid 4-1:0.0: can't add hid device: -71
[   89.492482][ T4259] usbhid: probe of 4-1:0.0 failed with error -71
[   89.520564][ T4259] usb 4-1: USB disconnect, device number 3
[   89.630459][ T4494] overlayfs: './file0' not a directory
[   90.484225][   T23] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[   91.874337][ T4511] netlink: 'syz.3.61': attribute type 3 has an invalid length.
[   92.039684][ T4511] netlink: 'syz.3.61': attribute type 3 has an invalid length.
[   92.548385][ T4516] syz.0.64 uses obsolete (PF_INET,SOCK_PACKET)
[   93.638326][   T26] audit: type=1326 audit(1771069646.694:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ceea3f79 code=0x7ffc0000
[   94.310042][ T4521] =======================================================
[   94.310042][ T4521] WARNING: The mand mount option has been deprecated and
[   94.310042][ T4521]          and is ignored by this kernel. Remove the mand
[   94.310042][ T4521]          option from the mount to silence this warning.
[   94.310042][ T4521] =======================================================
[   94.386437][   T26] audit: type=1326 audit(1771069646.694:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ceea3f79 code=0x7ffc0000
[   94.417576][   T26] audit: type=1326 audit(1771069646.854:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f63ceea3f79 code=0x7ffc0000
[   95.039371][ T4538] device gre0 entered promiscuous mode
[   97.708160][ T4559] netlink: 32 bytes leftover after parsing attributes in process `syz.0.75'.
[  100.254657][ T4594] device gre0 entered promiscuous mode
[  102.131134][    T7] hid-generic FFF7:0000:FFFFF9CB.0001: item fetching failed at offset 0/2
[  102.141553][    T7] hid-generic: probe of FFF7:0000:FFFFF9CB.0001 failed with error -22
[  103.001001][ T4620] Invalid ELF header magic: != ELF
[  104.125581][ T4633] ieee802154 phy0 wpan0: encryption failed: -22
[  106.170049][ T4646] netlink: 'syz.4.95': attribute type 3 has an invalid length.
[  106.179209][ T4646] netlink: 'syz.4.95': attribute type 3 has an invalid length.
[  106.759463][   T23] hid-generic FFF7:0000:FFFFF9CB.0002: item fetching failed at offset 0/2
[  106.793341][   T23] hid-generic: probe of FFF7:0000:FFFFF9CB.0002 failed with error -22
[  109.424767][ T4667] ptrace attach of "./syz-executor exec"[4668] was attempted by "./syz-executor exec"[4667]
[  111.255112][ T4679] ieee802154 phy0 wpan0: encryption failed: -22
[  112.106180][   T21] hid-generic FFF7:0000:FFFFF9CB.0003: item fetching failed at offset 0/2
[  112.124601][   T21] hid-generic: probe of FFF7:0000:FFFFF9CB.0003 failed with error -22
[  112.557486][ T4687] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.414842][ T4690] device bond_slave_0 entered promiscuous mode
[  113.421504][ T4690] device bond_slave_1 entered promiscuous mode
[  113.507936][ T4690] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  113.517468][ T4690] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  113.741222][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  115.357321][ T4730] ieee802154 phy0 wpan0: encryption failed: -22
[  116.448641][ T4731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.119'.
[  116.626943][ T4733] tmpfs: Unknown parameter '18446744073709551615'
[  116.782424][ T4731] device bond0 entered promiscuous mode
[  117.210571][ T4731] device bond_slave_0 entered promiscuous mode
[  117.218292][ T4731] device bond_slave_1 entered promiscuous mode
[  117.237662][ T4731] device gretap0 entered promiscuous mode
[  117.253582][ T4731] device hsr1 entered promiscuous mode
[  121.268295][ T4767] option changes via remount are deprecated (pid=4766 comm=syz.3.132)
[  124.420506][   T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  124.776714][   T21] usb 2-1: Using ep0 maxpacket: 32
[  124.916906][   T21] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  124.953950][   T21] usb 2-1: config 0 has no interface number 0
[  125.207518][   T21] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  125.262375][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.375132][   T21] usb 2-1: Product: syz
[  125.431309][   T21] usb 2-1: Manufacturer: syz
[  125.489154][   T21] usb 2-1: SerialNumber: syz
[  125.622388][   T21] usb 2-1: config 0 descriptor??
[  125.717915][   T21] smsc95xx v2.0.0
[  126.958879][   T13] Bluetooth: hci4: command 0x0405 tx timeout
[  127.117411][ T4825] binder: 4821:4825 ioctl c00c620f 2000000004c0 returned -22
[  127.933758][ T4788] sctp: failed to load transform for md5: -2
[  128.089719][ T4837] process 'syz.2.152' launched './file1' with NULL argv: empty string added
[  128.105507][   T13] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  128.481567][   T21] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  128.545516][   T21] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  128.566734][   T21] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  128.587014][   T21] smsc95xx: probe of 2-1:0.67 failed with error -71
[  128.642803][   T21] usb 2-1: USB disconnect, device number 4
[  128.830412][   T13] usb 4-1: config 0 has no interfaces?
[  128.839374][   T13] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  128.921115][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.848570][   T13] usb 4-1: config 0 descriptor??
[  130.145532][ T4856] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0)
[  131.985424][   T23] usb 4-1: USB disconnect, device number 4
[  133.768037][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  133.774419][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  134.068056][ T4878] comedi comedi2: dt2814: I/O port conflict (0xcf7,2)
[  135.831408][ T4887] sctp: failed to load transform for md5: -2
[  136.245620][ T4909] ubi31: attaching mtd0
[  136.257938][ T4909] ubi31: scanning is finished
[  136.262894][ T4909] ubi31: empty MTD device detected
[  136.906656][    T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  137.148963][ T4909] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  137.456682][    T7] usb 5-1: Using ep0 maxpacket: 32
[  137.527380][ T4918] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  137.606768][    T7] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  137.635613][    T7] usb 5-1: config 0 has no interface number 0
[  137.688563][    T7] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  137.725864][    T7] usb 5-1: config 0 interface 85 has no altsetting 0
[  138.221080][ T4924] ptrace attach of "./syz-executor exec"[4925] was attempted by "./syz-executor exec"[4924]
[  139.170406][    T7] usb 5-1: string descriptor 0 read error: -71
[  139.184796][    T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  139.243758][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.283154][    T7] usb 5-1: config 0 descriptor??
[  139.346901][    T7] usb 5-1: can't set config #0, error -71
[  139.463009][    T7] usb 5-1: USB disconnect, device number 2
[  142.986916][ T4580] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  143.266736][ T4580] usb 4-1: Using ep0 maxpacket: 32
[  143.786890][ T4580] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  143.807915][ T4580] usb 4-1: config 0 has no interface number 0
[  143.814062][ T4580] usb 4-1: config 0 interface 184 has no altsetting 0
[  144.036901][ T4580] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  144.084976][ T4580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.145897][ T4580] usb 4-1: Product: syz
[  144.169211][ T4580] usb 4-1: Manufacturer: syz
[  144.203637][ T4580] usb 4-1: SerialNumber: syz
[  144.246167][ T4580] usb 4-1: config 0 descriptor??
[  144.327250][ T4580] smsc75xx v1.0.0
[  145.083898][ T4580] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  145.114193][ T4580] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  145.201009][ T4989] netlink: 277 bytes leftover after parsing attributes in process `syz.2.191'.
[  146.626687][ T4580] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  146.767035][ T4580] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  146.777672][ T4580] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  146.791448][ T4580] smsc75xx: probe of 4-1:0.184 failed with error -71
[  146.800940][ T4580] usb 4-1: USB disconnect, device number 5
[  148.889911][   T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  149.176624][   T21] usb 4-1: Using ep0 maxpacket: 16
[  150.606783][   T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.860393][   T21] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  150.870503][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.882588][   T21] usb 4-1: config 0 descriptor??
[  150.928496][   T21] pegasus_notetaker 4-1:0.0: Invalid number of endpoints
[  150.946035][   T21] pegasus_notetaker: probe of 4-1:0.0 failed with error -22
[  151.296645][   T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  152.200193][ T5062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.201'.
[  153.550428][    T7] usb 4-1: USB disconnect, device number 6
[  153.557103][   T21] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  153.665186][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.700769][   T21] usb 3-1: Product: syz
[  153.711067][   T21] usb 3-1: Manufacturer: syz
[  153.721273][   T21] usb 3-1: SerialNumber: syz
[  154.256982][   T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  155.390018][   T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  155.417200][   T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  155.437508][   T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  155.489830][   T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  155.506696][    T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  155.507584][   T21] lan78xx: probe of 3-1:1.0 failed with error -71
[  155.966525][   T21] usb 3-1: USB disconnect, device number 2
[  156.237044][    T7] usb 4-1: Using ep0 maxpacket: 32
[  156.392612][   T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  156.536732][    T7] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db
[  156.558946][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.603827][    T7] usb 4-1: Product: syz
[  156.620836][    T7] usb 4-1: Manufacturer: syz
[  156.643147][    T7] usb 4-1: SerialNumber: syz
[  156.681204][    T7] usb 4-1: config 0 descriptor??
[  156.739921][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'.
[  156.906776][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.556474][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.275743][    T7] kaweth 4-1:0.0: Firmware present in device.
[  158.357499][   T21] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  158.502140][   T21] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  158.514905][   T21] usb 3-1: Manufacturer: syz
[  158.550974][   T21] usb 3-1: config 0 descriptor??
[  158.587081][   T21] usb 3-1: can't set config #0, error -71
[  158.609979][   T21] usb 3-1: USB disconnect, device number 3
[  159.266854][    T7] kaweth 4-1:0.0: Error reading configuration (-71), no net device created
[  159.275998][    T7] kaweth: probe of 4-1:0.0 failed with error -5
[  159.314772][    T7] usb 4-1: USB disconnect, device number 7
[  163.352452][ T5173] ieee802154 phy0 wpan0: encryption failed: -22
[  164.755887][ T5187] misc userio: Invalid payload size
[  164.762794][ T5187] misc userio: No port type given on /dev/userio
[  164.778197][ T5187] netlink: 56 bytes leftover after parsing attributes in process `syz.1.231'.
[  165.517355][ T5190] ptrace attach of "./syz-executor exec"[5192] was attempted by "./syz-executor exec"[5190]
[  176.143861][ T5252] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  183.543335][ T5301] netlink: 173 bytes leftover after parsing attributes in process `syz.0.261'.
[  184.814007][ T5322] device gre0 entered promiscuous mode
[  186.483611][ T4238] Bluetooth: hci0: command 0x0406 tx timeout
[  187.416629][ T4238] Bluetooth: hci2: command 0x0406 tx timeout
[  187.424643][ T4238] Bluetooth: hci3: command 0x0406 tx timeout
[  189.825827][ T5373] ieee802154 phy0 wpan0: encryption failed: -22
[  194.361015][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  194.368648][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  195.045921][ T5407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.287'.
[  196.009198][ T5412] 9pnet: Insufficient options for proto=fd
[  198.640393][ T5457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.301'.
[  200.813164][ T5475] 9pnet: Insufficient options for proto=fd
[  205.626603][ T1111] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  205.816708][ T4259] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  205.883134][ T1111] usb 4-1: Using ep0 maxpacket: 8
[  206.006810][ T1111] usb 4-1: config 0 has no interfaces?
[  206.124082][ T4259] usb 2-1: Using ep0 maxpacket: 16
[  206.168447][ T1111] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=c5.0b
[  206.198647][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.224698][ T1111] usb 4-1: Product: syz
[  206.229708][ T1111] usb 4-1: Manufacturer: syz
[  206.234578][ T1111] usb 4-1: SerialNumber: syz
[  206.258534][ T1111] usb 4-1: config 0 descriptor??
[  206.272498][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.332307][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.350581][ T4259] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  206.375417][ T4259] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  206.388343][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.402351][ T4259] usb 2-1: config 0 descriptor??
[  206.606836][ T4580] usb 4-1: USB disconnect, device number 8
[  208.080179][ T4259] microsoft 0003:045E:07DA.0004: invalid report_count 1157393372
[  208.112598][ T4259] microsoft 0003:045E:07DA.0004: item 0 4 1 9 parsing failed
[  208.124674][ T4259] microsoft 0003:045E:07DA.0004: parse failed
[  208.135898][ T4259] microsoft: probe of 0003:045E:07DA.0004 failed with error -22
[  208.258339][ T4259] usb 2-1: USB disconnect, device number 5
[  214.431522][ T5588] netlink: 52 bytes leftover after parsing attributes in process `syz.3.338'.
[  217.821206][ T5618] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  218.642192][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'.
[  220.482030][ T5626] syz.0.348 (5626) used greatest stack depth: 21104 bytes left
[  221.310563][ T5648] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  223.446719][ T5662] ptrace attach of "./syz-executor exec"[5666] was attempted by "./syz-executor exec"[5662]
[  228.582729][ T5698] ieee802154 phy0 wpan0: encryption failed: -22
[  233.024900][ T5720] device syzkaller0 entered promiscuous mode
[  233.107220][ T1108] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  233.566873][ T5734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'.
[  233.587065][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  233.816737][ T1108] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  233.886079][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.970492][ T1108] usb 5-1: Product: syz
[  234.014130][ T1108] usb 5-1: Manufacturer: syz
[  234.051575][ T1108] usb 5-1: SerialNumber: syz
[  234.115728][ T1108] usb 5-1: config 0 descriptor??
[  234.206845][ T5722] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  234.307849][ T1108] powermate: probe of 5-1:0.0 failed with error -22
[  234.462665][ T5740] netlink: 32 bytes leftover after parsing attributes in process `syz.0.384'.
[  234.488568][ T5740] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  234.498636][ T5740] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  234.508390][ T5740] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  234.517257][ T5740] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  234.530678][ T5740] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.540034][ T5740] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.548988][ T5740] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.558257][ T5740] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.694078][ T5741] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  234.703088][ T5741] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  234.712279][ T5741] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  234.722566][ T5741] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  234.961157][ T5741] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.971074][ T5741] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.980496][ T5741] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.989510][ T5741] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  235.299614][ T5744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.385'.
[  236.201378][    T7] usb 5-1: USB disconnect, device number 3
[  236.456902][ T5754] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  238.266747][    T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  238.706180][ T5786] device syzkaller0 entered promiscuous mode
[  238.806910][    T7] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  238.844071][    T7] usb 2-1: config 0 interface 0 has no altsetting 0
[  239.026905][    T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  239.081686][    T7] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  239.092947][    T7] usb 2-1: Product: syz
[  239.098275][    T7] usb 2-1: Manufacturer: syz
[  239.312030][    T7] usb 2-1: SerialNumber: syz
[  239.594690][    T7] usb 2-1: config 0 descriptor??
[  239.682447][ T5798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.402'.
[  239.925095][    T7] usb 2-1: selecting invalid altsetting 0
[  240.648800][    T7] usb 2-1: USB disconnect, device number 6
[  240.791891][ T5802] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.404' sets config #1
[  241.074937][ T5813] device gre0 entered promiscuous mode
[  241.307093][ T4312] udevd[4312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.716515][ T5867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.422'.
[  255.125688][ T4231] hid-generic FFF7:0000:FFFFF9CB.0005: item fetching failed at offset 0/2
[  255.155403][ T4231] hid-generic: probe of FFF7:0000:FFFFF9CB.0005 failed with error -22
[  255.827483][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  255.835213][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  256.853635][ T5931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.441'.
[  263.987698][ T5986] sp0: Synchronizing with TNC
[  264.274089][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.459'.
[  266.845352][ T6005] autofs4:pid:6005:autofs_fill_super: called with bogus options
[  270.498161][ T6045] device syzkaller0 entered promiscuous mode
[  271.015076][ T6050] tipc: Started in network mode
[  271.021060][ T6050] tipc: Node identity 82ebea51851b, cluster identity 4711
[  271.036965][ T6050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.133588][ T6051] tipc: Resetting bearer <eth:syzkaller0>
[  271.453424][ T6051] tipc: Disabling bearer <eth:syzkaller0>
[  271.690043][ T6063] autofs4:pid:6063:autofs_fill_super: called with bogus options
[  273.233782][ T6092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.483'.
[  273.516611][ T1108] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  275.729267][ T6126] netlink: 'syz.1.489': attribute type 3 has an invalid length.
[  275.739437][ T6126] netlink: 'syz.1.489': attribute type 3 has an invalid length.
[  276.486854][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short
[  277.189169][ T1108] usb 3-1: unable to read config index 0 descriptor/start: -71
[  277.868675][ T1108] usb 3-1: can't read configurations, error -71
[  279.268348][ T6145] ptrace attach of ""[6144] was attempted by "./syz-executor exec"[6145]
[  279.706326][ T6151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.497'.
[  279.754830][ T6151] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  279.764023][ T6151] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  279.772960][ T6151] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  279.781964][ T6151] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  279.794742][ T6151] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.804696][ T6151] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.813788][ T6151] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.823060][ T6151] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.865949][ T6153] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  279.875245][ T6153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  279.885210][ T6153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  279.894893][ T6153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  280.014735][ T6153] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.024424][ T6153] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.033917][ T6153] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.043171][ T6153] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  281.706294][ T6181] netlink: 'syz.4.501': attribute type 3 has an invalid length.
[  281.715343][ T6181] netlink: 'syz.4.501': attribute type 3 has an invalid length.
[  283.476574][ T5881] Bluetooth: hci4: command 0x0406 tx timeout
[  284.953473][ T6200] ptrace attach of ""[6204] was attempted by "./syz-executor exec"[6200]
[  284.971382][ T6183] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  292.166688][ T6284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.528'.
[  292.201168][ T6284] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  292.210461][ T6284] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  292.219923][ T6284] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  292.229544][ T6284] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.069150][ T6284] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.079246][ T6284] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.089530][ T6284] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.100138][ T6284] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.269844][ T6286] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.279989][ T6286] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.289747][ T6286] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.299957][ T6286] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.408453][ T6286] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.418006][ T6286] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.427572][ T6286] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.437163][ T6286] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.824144][ T6295] device syzkaller0 entered promiscuous mode
[  294.696331][ T6309] ptrace attach of "./syz-executor exec"[6312] was attempted by "./syz-executor exec"[6309]
[  304.219687][ T6373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.550'.
[  304.358483][ T6375] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  304.367555][ T6375] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  304.377139][ T6375] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  304.385962][ T6375] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  304.583261][ T6375] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.592736][ T6375] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.602088][ T6375] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.611371][ T6375] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.610660][ T6373] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  305.619791][ T6373] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  305.629578][ T6373] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  305.638860][ T6373] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  305.761387][ T6373] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.771031][ T6373] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.780375][ T6373] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.789772][ T6373] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.800775][ T5881] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  306.297200][ T5881] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  306.406204][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.632644][ T5881] usb 5-1: config 0 descriptor??
[  306.842446][ T5881] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  307.466617][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  308.907166][ T5881] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  308.927860][ T5881] usb 5-1: media controller created
[  308.950468][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  308.980058][ T5881] gp8psk_fe: Frontend attached
[  308.996392][ T5881] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  309.007775][ T5881] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  309.326869][ T5881] gp8psk: usb in 138 operation failed.
[  309.332946][ T5881] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  309.459272][ T5881] gp8psk: found Genpix USB device pID = 203 (hex)
[  310.398333][ T5881] usb 5-1: USB disconnect, device number 4
[  311.311858][ T5881] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  313.603786][ T4258] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  313.926483][ T4258] usb 3-1: Using ep0 maxpacket: 8
[  314.076824][ T4258] usb 3-1: config 0 has an invalid interface number: 176 but max is 0
[  314.102156][ T4258] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.183294][ T4258] usb 3-1: config 0 has no interface number 0
[  314.233522][ T4258] usb 3-1: config 0 interface 176 altsetting 56 endpoint 0x8 has invalid wMaxPacketSize 0
[  314.315752][ T4258] usb 3-1: config 0 interface 176 altsetting 56 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  314.419458][ T4258] usb 3-1: config 0 interface 176 has no altsetting 0
[  314.556695][ T4258] usb 3-1: string descriptor 0 read error: -71
[  314.569252][ T4258] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=68.dc
[  314.698869][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.803065][ T4258] usb 3-1: config 0 descriptor??
[  314.869754][ T4258] usb 3-1: can't set config #0, error -71
[  314.933773][ T4258] usb 3-1: USB disconnect, device number 6
[  315.729831][ T6474] netlink: 'syz.3.578': attribute type 4 has an invalid length.
[  315.756832][ T6474] netlink: 152 bytes leftover after parsing attributes in process `syz.3.578'.
[  316.338242][ T6477] fuse: Bad value for 'fd'
[  316.445852][ T6474] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  317.264706][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  317.264851][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  317.283666][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'.
[  318.059458][ T6474] syz.3.578 (6474) used greatest stack depth: 20240 bytes left
[  318.585978][ T6507] sp0: Synchronizing with TNC
[  318.634939][ T6507] netlink: 15 bytes leftover after parsing attributes in process `syz.4.582'.
[  318.674024][    C1] vkms_vblank_simulate: vblank timer overrun
[  318.703065][ T6507] netlink: 15 bytes leftover after parsing attributes in process `syz.4.582'.
[  318.725783][    C1] vkms_vblank_simulate: vblank timer overrun
[  318.796939][ T6507] netlink: 15 bytes leftover after parsing attributes in process `syz.4.582'.
[  318.826795][    C1] vkms_vblank_simulate: vblank timer overrun
[  318.855486][ T6507] netlink: 15 bytes leftover after parsing attributes in process `syz.4.582'.
[  318.892834][    C1] vkms_vblank_simulate: vblank timer overrun
[  318.913730][ T6507] netlink: 15 bytes leftover after parsing attributes in process `syz.4.582'.
[  318.946937][    C1] vkms_vblank_simulate: vblank timer overrun
[  318.976071][    C1] vkms_vblank_simulate: vblank timer overrun
[  319.003662][ T6507] netlink: 15 bytes leftover after parsing attributes in process `syz.4.582'.
[  319.026599][    C1] vkms_vblank_simulate: vblank timer overrun
[  319.197108][ T6507] device gre0 left promiscuous mode
[  319.218681][ T6507] netlink: 15 bytes leftover after parsing attributes in process `syz.4.582'.
[  319.254353][    C1] vkms_vblank_simulate: vblank timer overrun
[  319.274864][    C1] vkms_vblank_simulate: vblank timer overrun
[  319.302268][ T6507] netlink: 15 bytes leftover after parsing attributes in process `syz.4.582'.
[  319.354156][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  319.429683][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  319.454724][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  319.475894][    C1] vkms_vblank_simulate: vblank timer overrun
[  321.946777][ T4293] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  321.969332][ T6539] device syzkaller0 entered promiscuous mode
[  322.216650][ T4293] usb 2-1: Using ep0 maxpacket: 8
[  322.374315][ T6546] __nla_validate_parse: 138 callbacks suppressed
[  322.374332][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.596'.
[  322.392382][ T4293] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  322.414909][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.499425][ T4293] pvrusb2: Hardware description: Terratec Grabster AV400
[  322.521900][ T4293] pvrusb2: **********
[  322.534413][ T4293] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  322.563881][ T4293] pvrusb2: Important functionality might not be entirely working.
[  322.578091][ T4293] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  322.599216][ T4293] pvrusb2: **********
[  323.309664][ T2425] pvrusb2: Invalid write control endpoint
[  324.870274][ T4230] usb 2-1: USB disconnect, device number 7
[  324.973708][ T2425] pvrusb2: Invalid write control endpoint
[  324.993442][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  325.122833][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  325.171653][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  325.261974][ T2425] pvrusb2: Device being rendered inoperable
[  325.295701][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  325.519245][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  326.508613][ T2425] pvrusb2: Attached sub-driver cx25840
[  326.515059][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  326.556867][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  327.167680][ T6590] device syzkaller0 entered promiscuous mode
[  327.823611][ T6603] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  327.836957][ T6603] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  329.115470][ T6605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.612'.
[  334.791521][ T6658] binder: 6656:6658 ioctl 4018620d 0 returned -22
[  334.955217][ T6666] xt_hashlimit: size too large, truncated to 1048576
[  335.437217][ T6665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'.
[  336.909132][ T6681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.637'.
[  337.962373][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'.
[  341.085889][ T6711] device syzkaller0 entered promiscuous mode
[  341.101565][ T6712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.646'.
[  341.273633][ T5501] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  343.522616][ T6731] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0)
[  343.798805][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.654'.
[  344.365481][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'.
[  344.636588][ T5501] usb 4-1: unable to get BOS descriptor or descriptor too short
[  345.137637][ T5501] usb 4-1: unable to read config index 0 descriptor/start: -71
[  345.155138][ T5501] usb 4-1: can't read configurations, error -71
[  345.193715][ T6743] ieee802154 phy0 wpan0: encryption failed: -22
[  346.568586][   T26] audit: type=1800 audit(1771069899.624:5): pid=6750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.645" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  346.568906][ T6750] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  346.599454][ T6750] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  346.609495][ T6750] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  346.739809][ T6750] syz.2.645 (6750) used greatest stack depth: 19696 bytes left
[  347.153551][ T6762] device syzkaller0 entered promiscuous mode
[  347.293594][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'.
[  351.648790][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'.
[  352.259240][ T6133] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  352.636838][ T6133] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  352.672689][ T6133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.717610][ T6133] usb 4-1: config 0 descriptor??
[  352.774334][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.673'.
[  352.788085][ T6133] cp210x 4-1:0.0: cp210x converter detected
[  353.957284][ T6133] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  353.965473][ T6133] cp210x 4-1:0.0: querying part number failed
[  353.976724][ T6133] usb 4-1: cp210x converter now attached to ttyUSB0
[  353.987140][ T6133] usb 4-1: USB disconnect, device number 11
[  354.013742][ T6133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  354.068685][ T6133] cp210x 4-1:0.0: device disconnected
[  354.327033][ T6817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'.
[  355.881957][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'.
[  356.624453][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.684'.
[  356.797536][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.684'.
[  356.828806][ T6847] ieee802154 phy0 wpan0: encryption failed: -22
[  357.060712][ T6851] ubi31: attaching mtd0
[  357.071465][ T6851] ubi31: scanning is finished
[  357.800237][ T6851] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  357.808389][ T6851] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  357.816042][ T6851] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  357.823298][ T6851] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  357.831608][ T6851] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  357.838785][ T6851] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  357.846979][ T6851] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2495893881
[  357.857274][ T6851] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  357.886332][ T6853] ubi31: background thread "ubi_bgt31d" started, PID 6853
[  357.904297][ T6854] device syzkaller0 entered promiscuous mode
[  358.082088][ T6859] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  358.150766][ T6859] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  358.440695][ T6867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.689'.
[  360.953209][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'.
[  361.676843][ T6891] ieee802154 phy0 wpan0: encryption failed: -22
[  363.514647][ T6902] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  365.256586][ T4259] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  365.506581][ T4259] usb 1-1: Using ep0 maxpacket: 8
[  365.626767][ T4259] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  366.092737][ T4259] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  366.102173][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.134822][ T4259] usb 1-1: Product: syz
[  366.171143][ T4259] usb 1-1: Manufacturer: syz
[  366.202967][ T4259] usb 1-1: SerialNumber: syz
[  366.266110][ T4259] usb 1-1: config 0 descriptor??
[  366.376317][ T4259] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  366.397807][ T4259] usb 1-1: setting power ON
[  366.519741][ T4259] dvb-usb: bulk message failed: -22 (2/0)
[  366.567290][ T4259] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  366.595521][ T6911] dvb-usb: bulk message failed: -22 (3/0)
[  366.625056][ T6936] ieee802154 phy0 wpan0: encryption failed: -22
[  366.820424][ T6911] dvb-usb: bulk message failed: -22 (4/0)
[  366.827743][ T6911] cxusb: i2c read failed
[  366.837619][ T4259] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  366.865940][ T4259] usb 1-1: media controller created
[  366.903632][ T4259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  366.966643][ T4259] usb 1-1: selecting invalid altsetting 6
[  366.974429][ T4259] usb 1-1: digital interface selection failed (-22)
[  366.985784][ T4259] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  367.116956][ T4259] usb 1-1: setting power OFF
[  367.133371][ T4259] dvb-usb: bulk message failed: -22 (2/0)
[  367.146559][   T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  367.222147][ T4259] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  367.285338][ T4259] (NULL device *): no alternate interface
[  367.368524][ T4259] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  367.417745][   T13] usb 2-1: Using ep0 maxpacket: 8
[  367.453116][ T4259] usb 1-1: USB disconnect, device number 3
[  367.508549][ T5881] hid-generic FFF7:0000:FFFFF9CB.0006: item fetching failed at offset 0/2
[  367.537816][ T5881] hid-generic: probe of FFF7:0000:FFFFF9CB.0006 failed with error -22
[  367.696603][   T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  368.200153][   T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  368.337357][   T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  368.349243][   T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  368.364606][   T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  368.375391][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.474730][ T6955] ubi: mtd0 is already attached to ubi31
[  369.222118][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.719'.
[  369.373142][   T13] usb 2-1: GET_CAPABILITIES returned 0
[  369.379453][   T13] usbtmc 2-1:16.0: can't read capabilities
[  369.674043][   T13] usb 2-1: USB disconnect, device number 8
[  370.555344][ T6979] ieee802154 phy0 wpan0: encryption failed: -22
[  371.082809][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.728'.
[  373.692702][ T7007] ubi: mtd0 is already attached to ubi31
[  375.347895][ T1111] hid-generic FFF7:0000:FFFFF9CB.0007: item fetching failed at offset 0/2
[  375.403462][ T1111] hid-generic: probe of FFF7:0000:FFFFF9CB.0007 failed with error -22
[  376.909803][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.743'.
[  377.858567][ T7044] netlink: 'syz.3.744': attribute type 3 has an invalid length.
[  377.866735][ T7044] netlink: 'syz.3.744': attribute type 3 has an invalid length.
[  378.678380][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  378.685002][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  378.918375][ T7051] ubi: mtd0 is already attached to ubi31
[  379.551752][ T4231] hid-generic FFF7:0000:FFFFF9CB.0008: item fetching failed at offset 0/2
[  379.565123][ T4231] hid-generic: probe of FFF7:0000:FFFFF9CB.0008 failed with error -22
[  384.129213][ T7096] Bluetooth: hci0: unsupported parameter 255
[  384.136145][ T7096] Bluetooth: hci0: unsupported parameter 255
[  384.635627][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.762'.
[  384.807198][ T7102] ubi: mtd0 is already attached to ubi31
[  389.515840][ T7147] Bluetooth: hci0: unsupported parameter 255
[  389.589621][ T7147] Bluetooth: hci0: unsupported parameter 255
[  390.060216][ T7159] ubi: mtd0 is already attached to ubi31
[  390.762243][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'.
[  391.857821][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'.
[  395.523148][ T7183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.782'.
[  395.667424][ T7185] Bluetooth: hci0: unsupported parameter 255
[  395.694744][ T7185] Bluetooth: hci0: unsupported parameter 255
[  396.689113][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.790'.
[  397.655570][ T7206] xt_CT: You must specify a L4 protocol and not use inversions on it
[  397.864991][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.791'.
[  398.050404][ T7218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.795'.
[  399.513122][ T7223] Bluetooth: hci0: invalid len left 7, exp >= 50
[  400.471542][ T7239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.803'.
[  401.366173][ T5881] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  401.534828][ T7253] input: syz1 as /devices/virtual/input/input6
[  401.656035][ T7258] Bluetooth: hci0: invalid len left 7, exp >= 50
[  401.813100][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  402.498312][ T5881] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  402.609111][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.883872][ T5881] usb 5-1: Product: syz
[  403.953140][ T7280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.816'.
[  404.003828][ T5881] usb 5-1: Manufacturer: syz
[  404.088641][ T5881] usb 5-1: SerialNumber: syz
[  404.125517][ T5881] usb 5-1: config 0 descriptor??
[  404.169239][ T5881] usb 5-1: can't set config #0, error -71
[  404.385949][ T5881] usb 5-1: USB disconnect, device number 5
[  404.648179][ T7287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.821'.
[  405.410728][ T7304] Bluetooth: hci0: invalid len left 7, exp >= 50
[  407.894716][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'.
[  409.305542][ T7323] xt_CT: You must specify a L4 protocol and not use inversions on it
[  409.926188][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'.
[  413.565954][ T7363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.843'.
[  413.897908][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[  417.258360][ T7393] netlink: 'syz.0.850': attribute type 7 has an invalid length.
[  417.266723][ T7393] netlink: 'syz.0.850': attribute type 8 has an invalid length.
[  421.641656][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[  421.705106][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'.
[  423.078407][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.848'.
[  423.610583][ T7440] device syzkaller0 entered promiscuous mode
[  423.670977][ T7443] ubi: mtd0 is already attached to ubi31
[  426.613940][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.870'.
[  426.797627][ T7479] netlink: 32 bytes leftover after parsing attributes in process `syz.0.873'.
[  427.554452][ T7479] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  427.563846][ T7479] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  427.573073][ T7479] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  427.581901][ T7479] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  427.602977][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'.
[  427.765271][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.875'.
[  428.770082][ T7479] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.779794][ T7479] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.789674][ T7479] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.798884][ T7479] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.767541][ T7480] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  429.776604][ T7480] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  429.785465][ T7480] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  429.794264][ T7480] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  429.830120][ T7480] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.839463][ T7480] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.848621][ T7480] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.858135][ T7480] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  430.292576][ T7501] ubi: mtd0 is already attached to ubi31
[  431.696437][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.879'.
[  431.710404][ T7514] fuse: root generation should be zero
[  432.107158][ T7520] netlink: 'syz.1.882': attribute type 3 has an invalid length.
[  432.115601][ T7520] netlink: 'syz.1.882': attribute type 3 has an invalid length.
[  433.626495][ T7539] ptrace attach of "./syz-executor exec"[7540] was attempted by "./syz-executor exec"[7539]
[  435.278009][ T7551] ubi: mtd0 is already attached to ubi31
[  436.415586][ T7556] netlink: 52 bytes leftover after parsing attributes in process `syz.2.893'.
[  436.869523][ T7546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.890'.
[  436.905827][ T7555] device syzkaller0 entered promiscuous mode
[  436.936239][ T7546] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  436.945171][ T7546] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  436.954119][ T7546] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  436.963306][ T7546] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  437.071453][ T7546] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  437.081702][ T7546] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  437.091077][ T7546] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  437.100284][ T7546] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  437.189055][ T7549] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  437.198813][ T7549] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  437.208034][ T7549] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  437.217098][ T7549] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  437.254605][ T7549] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  437.263837][ T7549] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  437.273144][ T7549] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  437.283069][ T7549] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  438.018172][ T4238] hid-generic FFF7:0000:FFFFF9CB.0009: item fetching failed at offset 0/2
[  438.046823][ T4238] hid-generic: probe of FFF7:0000:FFFFF9CB.0009 failed with error -22
[  439.733858][ T4258] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  439.986455][ T4258] usb 3-1: Using ep0 maxpacket: 32
[  440.118372][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  440.125158][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  440.168412][ T4258] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  440.554531][ T4258] usb 3-1: config 0 has no interface number 0
[  440.572308][ T4258] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  440.757637][ T4258] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  440.759912][ T7590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.901'.
[  440.796290][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.847068][ T4258] usb 3-1: Product: syz
[  440.862898][ T4258] usb 3-1: Manufacturer: syz
[  440.977939][ T4258] usb 3-1: SerialNumber: syz
[  441.231251][ T4258] usb 3-1: config 0 descriptor??
[  441.866597][ T4258] usb 3-1: can't set config #0, error -71
[  441.876651][ T4258] usb 3-1: USB disconnect, device number 7
[  442.135906][ T7605] ubi: mtd0 is already attached to ubi31
[  443.111729][ T7608] device syzkaller0 entered promiscuous mode
[  445.157036][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'.
[  448.105987][ T7655] device gre0 entered promiscuous mode
[  449.091709][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.919'.
[  449.304799][ T7663] device syzkaller0 entered promiscuous mode
[  450.285095][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'.
[  452.708840][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.928'.
[  457.436458][ T7714] ptrace attach of "./syz-executor exec"[7716] was attempted by "./syz-executor exec"[7714]
[  458.517830][ T7726] autofs4:pid:7726:autofs_fill_super: called with bogus options
[  458.598608][ T7726] overlayfs: missing 'lowerdir'
[  459.809741][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.944'.
[  460.116788][ T4231] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  460.506654][ T4231] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  460.517618][ T4231] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[  460.527348][ T4231] usb 4-1: config 220 interface 0 has no altsetting 0
[  460.766862][ T4231] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  460.796716][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.826678][ T4231] usb 4-1: Product: syz
[  460.855809][ T4231] usb 4-1: Manufacturer: syz
[  460.881012][ T4231] usb 4-1: SerialNumber: syz
[  461.458379][ T4231] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  461.465155][ T4231] usb 4-1: No valid video chain found.
[  461.498214][ T4231] usb 4-1: USB disconnect, device number 12
[  461.798449][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'.
[  464.267820][ T5501] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  464.802502][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.956'.
[  465.926666][ T5501] usb 1-1: unable to get BOS descriptor or descriptor too short
[  466.146515][ T5501] usb 1-1: unable to read config index 0 descriptor/start: -71
[  466.166672][ T5501] usb 1-1: can't read configurations, error -71
[  466.225877][ T7824] device dummy0 entered promiscuous mode
[  466.245971][ T7824] device dummy0 left promiscuous mode
[  466.717181][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'.
[  469.030169][ T7855] ptrace attach of "./syz-executor exec"[7856] was attempted by "./syz-executor exec"[7855]
[  469.046735][ T5501] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  471.866557][ T5501] usb 2-1: unable to get BOS descriptor or descriptor too short
[  472.006697][ T5501] usb 2-1: unable to read config index 0 descriptor/start: -71
[  472.034137][ T5501] usb 2-1: can't read configurations, error -71
[  473.244462][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  474.661137][ T7894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.978'.
[  477.359876][ T7908] binder: 7907:7908 ioctl c0306201 2000000003c0 returned -14
[  480.819715][ T5501] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  480.898064][ T5501] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  481.073490][ T7935] ptrace attach of "./syz-executor exec"[7936] was attempted by "./syz-executor exec"[7935]
[  481.704283][ T7940] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  485.244818][ T7972] ieee802154 phy0 wpan0: encryption failed: -22
[  491.497058][ T8009] ptrace attach of "./syz-executor exec"[8010] was attempted by "./syz-executor exec"[8009]
[  492.958549][ T8023] ubi: mtd0 is already attached to ubi31
[  493.845518][ T8030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'.
[  497.113152][ T8075] ptrace attach of "./syz-executor exec"[8076] was attempted by "./syz-executor exec"[8075]
[  500.465086][   T26] audit: type=1326 audit(1771070053.514:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  501.005227][ T8111] ubi: mtd0 is already attached to ubi31
[  502.026226][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  502.041283][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  502.726908][   T26] audit: type=1326 audit(1771070053.514:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  502.836474][   T26] audit: type=1326 audit(1771070053.584:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  502.906996][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1034'.
[  503.025478][   T26] audit: type=1326 audit(1771070053.584:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  504.362567][   T26] audit: type=1326 audit(1771070053.584:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  504.385204][    C1] vkms_vblank_simulate: vblank timer overrun
[  504.506633][   T26] audit: type=1326 audit(1771070053.584:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  504.825352][   T26] audit: type=1326 audit(1771070053.594:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  504.852870][ T8146] netlink: 'syz.3.1041': attribute type 3 has an invalid length.
[  504.861311][ T8146] netlink: 'syz.3.1041': attribute type 3 has an invalid length.
[  504.940552][   T26] audit: type=1326 audit(1771070053.594:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  505.261083][   T26] audit: type=1326 audit(1771070053.594:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  505.284085][    C1] vkms_vblank_simulate: vblank timer overrun
[  506.070197][ T8157] ubi: mtd0 is already attached to ubi31
[  506.373471][   T26] audit: type=1326 audit(1771070053.594:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  506.534194][   T26] audit: type=1326 audit(1771070053.594:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  506.618015][   T26] audit: type=1326 audit(1771070053.594:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  506.644771][   T26] audit: type=1326 audit(1771070053.594:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  506.667363][    C1] vkms_vblank_simulate: vblank timer overrun
[  507.017376][   T26] audit: type=1326 audit(1771070053.594:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  508.165064][   T26] audit: type=1326 audit(1771070053.594:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  508.210628][   T26] audit: type=1326 audit(1771070053.594:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  508.263319][   T26] audit: type=1326 audit(1771070053.614:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  508.386443][   T26] audit: type=1326 audit(1771070053.614:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  509.234479][   T26] audit: type=1326 audit(1771070053.614:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2b7b0acf79 code=0x7ffc0000
[  509.410885][ T8178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1051'.
[  509.686541][ T1111] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  509.907754][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'.
[  511.356934][ T1111] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.381070][ T1111] usb 2-1: config 0 interface 0 has no altsetting 0
[  511.388397][ T1111] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  511.397826][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.419844][ T1111] usb 2-1: config 0 descriptor??
[  513.091388][ T1111] usbhid 2-1:0.0: can't add hid device: -71
[  513.207261][ T1111] usbhid: probe of 2-1:0.0 failed with error -71
[  513.231961][ T1111] usb 2-1: USB disconnect, device number 11
[  513.809983][ T8202] ptrace attach of "./syz-executor exec"[8203] was attempted by "./syz-executor exec"[8202]
[  513.826438][   T13] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  514.096442][   T13] usb 2-1: Using ep0 maxpacket: 8
[  515.136607][   T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  516.365019][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.426496][   T13] usb 2-1: can't set config #252, error -71
[  516.447359][   T13] usb 2-1: USB disconnect, device number 12
[  516.866470][ T4231] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  517.082473][ T4259] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  519.766487][ T4259] usb 1-1: unable to read config index 0 descriptor/start: -71
[  519.777503][ T4259] usb 1-1: can't read configurations, error -71
[  519.903462][ T8243] netlink: 'syz.4.1065': attribute type 10 has an invalid length.
[  519.948658][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1068'.
[  520.265916][ T8243] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  520.457758][ T4231] usb 3-1: unable to get BOS descriptor or descriptor too short
[  520.646537][ T4231] usb 3-1: unable to read config index 0 descriptor/start: -71
[  520.659578][ T4231] usb 3-1: can't read configurations, error -71
[  522.247082][ T8278] binder: 8277:8278 ioctl c0306201 2000000003c0 returned -14
[  522.916784][ T4315] wlan1: Trigger new scan to find an IBSS to join
[  525.258913][ T8308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1081'.
[  525.841933][ T8307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1082'.
[  526.916753][ T4310] wlan1: Trigger new scan to find an IBSS to join
[  529.027862][ T8320] ptrace attach of "./syz-executor exec"[8321] was attempted by "./syz-executor exec"[8320]
[  529.226943][ T4259] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  529.778044][ T4310] wlan1: Creating new IBSS network, BSSID 72:97:5b:69:28:a2
[  530.106542][ T4259] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  530.145028][ T4259] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  530.230492][ T4259] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  530.255230][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.056472][ T4259] usb 4-1: usb_control_msg returned -32
[  531.062103][ T4259] usbtmc 4-1:16.0: can't read capabilities
[  532.728639][ T4259] usb 4-1: USB disconnect, device number 13
[  533.489409][ T8335] syz.0.1089 (8335) used greatest stack depth: 18360 bytes left
[  533.739129][ T8352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'.
[  535.944300][ T8368] ubi: mtd0 is already attached to ubi31
[  538.822895][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'.
[  542.456429][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1113'.
[  543.088045][ T8433] ptrace attach of "./syz-executor exec"[8436] was attempted by "./syz-executor exec"[8433]
[  544.044705][ T5881] hid-generic FFF7:0000:FFFFF9CB.000B: item fetching failed at offset 0/1
[  544.352385][ T5881] hid-generic: probe of FFF7:0000:FFFFF9CB.000B failed with error -22
[  545.867898][ T8449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1118'.
[  545.920691][ T8451] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  545.929745][ T8451] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  545.939019][ T8451] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  545.948843][ T8451] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  546.132363][ T8459] ubi: mtd0 is already attached to ubi31
[  546.222853][ T8451] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  546.232192][ T8451] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  546.241169][ T8451] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  546.250422][ T8451] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  547.080172][ T8449] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  547.090635][ T8449] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  547.100149][ T8449] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  547.109899][ T8449] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  547.126058][ T8449] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  547.137175][ T8449] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  547.147559][ T8449] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  547.156743][ T8449] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  551.350208][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1129'.
[  554.235705][ T8522] netlink: 'syz.2.1133': attribute type 3 has an invalid length.
[  554.244031][ T8522] netlink: 'syz.2.1133': attribute type 3 has an invalid length.
[  559.252173][ T8555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1143'.
[  559.321481][ T8562] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  559.330758][ T8562] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  559.339624][ T8562] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  559.348786][ T8562] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  559.808331][ T4309] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  560.915390][ T8562] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  560.925018][ T8562] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  560.935073][ T8562] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  560.945074][ T8562] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.018573][ T8555] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  562.028127][ T8555] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  562.037131][ T8555] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  562.046086][ T8555] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  562.057408][ T8555] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.067160][ T8555] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.076446][ T8555] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.085737][ T8555] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.137648][ T8566] netlink: 'syz.4.1145': attribute type 3 has an invalid length.
[  562.146593][ T8566] netlink: 'syz.4.1145': attribute type 3 has an invalid length.
[  563.005741][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  563.012283][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  563.438008][ T8583] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  565.352178][ T8604] ubi: mtd0 is already attached to ubi31
[  567.173281][ T8607] ptrace attach of "./syz-executor exec"[8609] was attempted by "./syz-executor exec"[8607]
[  570.844572][ T8630] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  571.744465][ T8631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1158'.
[  573.498193][ T8644] ptrace attach of "./syz-executor exec"[8650] was attempted by "./syz-executor exec"[8644]
[  574.806601][ T4259] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  574.814411][ T4580] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  574.875266][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1172'.
[  576.046500][ T4259] usb 5-1: unable to get BOS descriptor or descriptor too short
[  576.676478][ T4580] usb 3-1: unable to get BOS descriptor or descriptor too short
[  576.756582][ T4259] usb 5-1: unable to read config index 0 descriptor/start: -71
[  576.806442][ T4580] usb 3-1: unable to read config index 0 descriptor/start: -71
[  576.934842][ T4259] usb 5-1: can't read configurations, error -71
[  576.942047][ T4580] usb 3-1: can't read configurations, error -71
[  577.054408][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1175'.
[  577.073102][ T8676] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  577.082407][ T8676] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  577.091410][ T8676] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  577.100202][ T8676] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  577.136655][ T8676] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  577.146081][ T8676] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  577.155032][ T8676] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  577.164307][ T8676] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  577.316050][ T8679] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  577.325692][ T8679] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  577.335389][ T8679] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  577.344353][ T8679] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  577.408066][ T8682] ubi: mtd0 is already attached to ubi31
[  577.799575][ T8684] ieee802154 phy0 wpan0: encryption failed: -22
[  578.304661][ T8679] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  578.314768][ T8679] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  578.323977][ T8679] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  578.333015][ T8679] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  578.343644][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'.
[  580.114750][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1181'.
[  580.566421][ T4259] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  583.082542][ T4259] usb 3-1: unable to get BOS descriptor or descriptor too short
[  583.547115][ T4259] usb 3-1: unable to read config index 0 descriptor/start: -71
[  583.555875][ T4259] usb 3-1: can't read configurations, error -71
[  583.622943][ T8748] ieee802154 phy0 wpan0: encryption failed: -22
[  584.357168][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'.
[  586.724449][ T8772] device syzkaller0 entered promiscuous mode
[  587.623995][ T8777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1196'.
[  587.675696][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1197'.
[  590.299674][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'.
[  590.416822][   T21] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  591.635418][   T21] usb 3-1: unable to get BOS descriptor or descriptor too short
[  591.650132][ T8827] ubi: mtd0 is already attached to ubi31
[  591.826400][ T4580] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  592.227265][ T4580] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  592.273607][ T4580] usb 2-1: config 0 has no interfaces?
[  592.421795][ T8831] device syzkaller0 entered promiscuous mode
[  592.467220][ T4580] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  592.513397][ T4580] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  592.596113][ T4580] usb 2-1: Product: syz
[  592.628526][ T4580] usb 2-1: SerialNumber: syz
[  592.663280][ T4580] usb 2-1: config 0 descriptor??
[  592.706551][   T21] usb 3-1: unable to read config index 0 descriptor/start: -71
[  592.714364][   T21] usb 3-1: can't read configurations, error -71
[  592.837159][ T5837] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  592.844710][ T8842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1211'.
[  593.337759][ T4315] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  593.548883][ T4580] usb 2-1: USB disconnect, device number 13
[  593.586537][ T5837] usb 5-1: Using ep0 maxpacket: 8
[  593.896533][ T5837] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  593.919074][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.930638][ T5837] usb 5-1: Product: syz
[  593.940880][ T5837] usb 5-1: Manufacturer: syz
[  593.945579][ T5837] usb 5-1: SerialNumber: syz
[  593.968985][ T5837] usb 5-1: config 0 descriptor??
[  594.018656][ T5837] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  594.378229][ T8854] ieee802154 phy0 wpan0: encryption failed: -22
[  595.072902][ T5837] gspca_sonixj: reg_r err -110
[  595.116806][ T5837] sonixj: probe of 5-1:0.0 failed with error -110
[  595.143031][  T300] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  596.350744][ T8869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1218'.
[  596.934924][ T8878] ubi: mtd0 is already attached to ubi31
[  598.259168][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'.
[  598.440185][   T13] usb 5-1: USB disconnect, device number 8
[  599.361841][ T8907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'.
[  600.149664][ T8916] ieee802154 phy0 wpan0: encryption failed: -22
[  603.277572][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'.
[  603.489428][ T8955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1235'.
[  603.911136][ T8966] ieee802154 phy0 wpan0: encryption failed: -22
[  607.125215][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1247'.
[  607.666856][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  607.666982][   T26] audit: type=1107 audit(1771070160.404:38): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¦Æ­Øz	ü‹ˆý’G:Žø¢Dø>ˆQ“·ÐšPn<Eå¸o¥éùmÑ"ÿ\¼ñÁ¹ÍhŒ‚¨õô'†ƒPMÕ/éûŠ‘ø«éwÜâµeYšIàíO^´­'
[  608.553663][ T9010] ieee802154 phy0 wpan0: encryption failed: -22
[  609.247075][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'.
[  612.048988][ T9031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1256'.
[  612.227069][ T9033] device gre0 entered promiscuous mode
[  613.990743][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1262'.
[  615.405037][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'.
[  617.262451][ T9078] device syzkaller0 entered promiscuous mode
[  617.717177][ T9089] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  617.726148][ T9089] overlayfs: overlapping lowerdir path
[  620.831486][ T9109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1276'.
[  621.074304][ T9118] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1278'.
[  621.097649][ T9118] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  621.107256][ T9118] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  621.116038][ T9118] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  621.124935][ T9118] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  621.136226][ T9118] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  621.146144][ T9118] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  621.155177][ T9118] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  621.164742][ T9118] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  621.207533][ T9119] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  621.216269][ T9119] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  621.225373][ T9119] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  621.234720][ T9119] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  621.287048][ T9119] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  621.296086][ T9119] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  621.305432][ T9119] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  621.314446][ T9119] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  621.571379][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'.
[  622.786085][ T9138] device syzkaller0 entered promiscuous mode
[  622.898946][ T5881] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  623.356831][   T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  623.356889][ T5837] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  624.445306][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  624.458746][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  624.956443][ T5881] usb 5-1: unable to get BOS descriptor or descriptor too short
[  625.086576][   T23] usb 1-1: Using ep0 maxpacket: 16
[  625.266588][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -71
[  625.466610][   T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  625.485678][ T5881] usb 5-1: can't read configurations, error -71
[  625.492954][ T5837] usb 2-1: unable to get BOS descriptor or descriptor too short
[  625.590003][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  625.590261][ T9171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1290'.
[  625.643220][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  625.684002][   T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  625.713681][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  625.727361][ T5837] usb 2-1: unable to read config index 0 descriptor/start: -71
[  625.737869][ T5837] usb 2-1: can't read configurations, error -71
[  625.866609][   T23] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  625.876234][   T23] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  625.910097][   T23] usb 1-1: Manufacturer: syz
[  625.944798][   T23] usb 1-1: config 0 descriptor??
[  625.996574][   T23] usb 1-1: can't set config #0, error -71
[  626.013379][   T23] usb 1-1: USB disconnect, device number 8
[  626.200466][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'.
[  626.656817][ T9180] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1294'.
[  626.719994][ T9180] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  626.729099][ T9180] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  626.737929][ T9180] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  626.747002][ T9180] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  626.792541][ T9180] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  626.801664][ T9180] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  626.810792][ T9180] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  626.819859][ T9180] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  626.864788][ T9182] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  626.874234][ T9182] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  626.883656][ T9182] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  626.893202][ T9182] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  626.914487][ T9182] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  626.923697][ T9182] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  626.932706][ T9182] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  626.941907][ T9182] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  627.494457][  T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  628.766380][   T13] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  631.716753][   T13] usb 2-1: unable to get BOS descriptor or descriptor too short
[  632.168333][ T9239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1304'.
[  632.230787][   T13] usb 2-1: unable to read config index 0 descriptor/start: -71
[  632.240520][   T13] usb 2-1: can't read configurations, error -71
[  632.951054][ T9260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1308'.
[  632.963459][ T9260] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  632.972689][ T9260] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  632.981443][ T9260] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  632.990398][ T9260] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  633.008809][ T9260] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  633.018029][ T9260] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  633.027336][ T9260] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  633.036208][ T9260] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  633.047616][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'.
[  633.998125][ T9265] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  634.007484][ T9265] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  634.016605][ T9265] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  634.025853][ T9265] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  634.124319][ T9265] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  634.134021][ T9265] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  634.143416][ T9265] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  634.152898][ T9265] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  634.374051][ T9273] ieee802154 phy0 wpan0: encryption failed: -22
[  635.691953][ T9286] capability: warning: `syz.1.1313' uses deprecated v2 capabilities in a way that may be insecure
[  635.890839][ T9288] netlink: set zone limit has 8 unknown bytes
[  637.116478][ T5837] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  637.679032][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1319'.
[  639.176607][ T5837] usb 3-1: unable to get BOS descriptor or descriptor too short
[  639.326653][ T5837] usb 3-1: unable to read config index 0 descriptor/start: -71
[  639.334635][ T5837] usb 3-1: can't read configurations, error -71
[  639.807263][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'.
[  640.296494][ T7709] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  644.112076][ T7709] usb 4-1: unable to get BOS descriptor or descriptor too short
[  644.311556][ T9341] tmpfs: Unknown parameter 'quota'
[  644.344208][ T9343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1329'.
[  644.406513][ T7709] usb 4-1: unable to read config index 0 descriptor/start: -71
[  644.418139][ T7709] usb 4-1: can't read configurations, error -71
[  644.606425][ T4238] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  644.704354][ T9350] ieee802154 phy0 wpan0: encryption failed: -22
[  645.475004][ T9349] device syzkaller0 entered promiscuous mode
[  646.176711][ T4238] usb 2-1: unable to get BOS descriptor or descriptor too short
[  646.328933][ T4238] usb 2-1: unable to read config index 0 descriptor/start: -71
[  646.416152][ T4238] usb 2-1: can't read configurations, error -71
[  646.911283][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1337'.
[  648.150858][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'.
[  649.174440][ T9415] device syzkaller0 entered promiscuous mode
[  651.093587][ T9438] erofs: (device nbd1): erofs_read_superblock: cannot find valid erofs superblock
[  651.247574][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1351'.
[  655.056398][ T7709] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  657.028076][ T9475] sctp: failed to load transform for md5: -2
[  657.536440][ T7709] usb 2-1: unable to get BOS descriptor or descriptor too short
[  657.741906][ T9507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1366'.
[  657.751418][ T7709] usb 2-1: unable to read config index 0 descriptor/start: -71
[  657.810511][ T9508] ieee802154 phy0 wpan0: encryption failed: -22
[  658.480429][ T7709] usb 2-1: can't read configurations, error -71
[  659.238651][  T300] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  662.932128][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'.
[  663.442961][ T9578] ubi: mtd0 is already attached to ubi31
[  664.126419][   T21] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  664.438389][   T21] usb 4-1: Using ep0 maxpacket: 16
[  664.826512][   T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  664.840113][   T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  664.851224][   T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  664.861586][   T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  664.902532][   T21] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  664.996970][ T9582] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  665.003906][ T9582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  665.044101][ T9582] vhci_hcd vhci_hcd.0: Device attached
[  665.076952][   T21] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  665.099958][   T21] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  665.116695][ T9608] vhci_hcd: connection closed
[  665.116714][   T21] usb 4-1: Manufacturer: syz
[  665.132936][ T4315] vhci_hcd: stop threads
[  665.141671][ T4315] vhci_hcd: release socket
[  665.151844][ T4315] vhci_hcd: disconnect device
[  665.307156][   T21] usb 4-1: config 0 descriptor??
[  666.036455][   T21] rc_core: IR keymap rc-hauppauge not found
[  666.044997][   T21] Registered IR keymap rc-empty
[  666.070340][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  666.136483][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  666.186885][   T21] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  666.246696][   T21] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8
[  666.350147][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  666.397982][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  666.436660][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  666.488138][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  666.537049][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  666.596508][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  666.646605][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  666.676836][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  667.210546][ T9632] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  667.287501][ T9632] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  667.616798][ T9632] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  667.625607][ T9632] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  667.637020][ T9632] overlayfs: d_ino too big (313, ino=9223372036854777451, xinobits=3)
[  667.647642][ T9632] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  667.658221][ T9632] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  667.669182][ T9632] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  667.679189][ T9632] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  667.689360][ T9632] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  667.699796][ T9632] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3)
[  667.713204][ T9632] overlayfs: d_ino too big (kernel, ino=4611686018427389040, xinobits=3)
[  668.191272][ T9631] block device autoloading is deprecated and will be removed.
[  668.206502][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  668.247349][   T21] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  668.307812][   T21] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  668.332692][ T9638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'.
[  668.345840][   T21] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  668.439402][   T21] usb 4-1: USB disconnect, device number 16
[  672.135464][ T9664] hfsplus: unable to find HFS+ superblock
[  672.589317][ T1108] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  672.956810][   T21] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  672.996551][ T1108] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  673.037734][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.115673][ T1108] usb 1-1: config 0 descriptor??
[  673.326816][   T21] usb 5-1: config 7 has an invalid interface number: 101 but max is 0
[  673.336452][   T21] usb 5-1: config 7 has no interface number 0
[  673.516777][   T21] usb 5-1: New USB device found, idVendor=fed9, idProduct=ac1d, bcdDevice= 6.1d
[  673.537278][   T21] usb 5-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3
[  673.551135][   T21] usb 5-1: Product: syz
[  673.555566][   T21] usb 5-1: Manufacturer: syz
[  673.560991][   T21] usb 5-1: SerialNumber: syz
[  673.984720][ T9668] udc-core: couldn't find an available UDC or it's busy
[  674.029885][ T9668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  674.126955][ T1108] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  674.148471][ T1108] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  674.276462][ T1108] [drm:udl_init] *ERROR* Selecting channel failed
[  674.326204][ T1108] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  674.334323][ T1108] [drm] Initialized udl on minor 2
[  674.356677][ T1108] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  674.383555][ T1108] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  674.481871][ T1108] usb 1-1: USB disconnect, device number 9
[  674.499901][   T21] usb 5-1: USB disconnect, device number 11
[  674.522179][ T4259] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  674.565931][ T4259] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  674.582226][ T4259] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  675.228139][ T9715] ubi: mtd0 is already attached to ubi31
[  677.648973][ T9724] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  677.786657][ T9724] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  678.123598][ T9721] ovl_remap_lower_ino: 8 callbacks suppressed
[  678.123611][ T9721] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  678.138559][ T9721] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  678.146949][ T9721] overlayfs: d_ino too big (277, ino=9223372036854777258, xinobits=3)
[  678.155522][ T9721] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  678.164787][ T9721] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  678.173877][ T9721] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  678.182465][ T9721] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  678.191888][ T9721] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  678.200449][ T9721] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3)
[  678.209204][ T9721] overlayfs: d_ino too big (kernel, ino=4611686018427389040, xinobits=3)
[  682.556362][   T21] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  684.113946][ T9760] overlayfs: empty lowerdir
[  684.836548][   T21] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  685.705243][   T21] usb 2-1: config 0 has no interface number 0
[  685.712091][   T21] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  685.721725][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.742548][   T21] usb 2-1: config 0 descriptor??
[  685.773589][   T21] usb 2-1: can't set config #0, error -71
[  685.878031][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  685.884460][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  687.286810][   T21] usb 2-1: USB disconnect, device number 22
[  688.474855][ T9801] tipc: Started in network mode
[  688.480315][ T9801] tipc: Node identity 4, cluster identity 4711
[  688.486860][ T9801] tipc: Node number set to 4
[  689.989978][ T9813] ubi: mtd0 is already attached to ubi31
[  690.288832][ T4309] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  691.310708][ T9825] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  691.399560][ T9828] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  691.452736][ T9825] ovl_remap_lower_ino: 8 callbacks suppressed
[  691.452754][ T9825] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  691.505285][ T9825] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  693.046405][   T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  693.246383][   T21] usb 1-1: device descriptor read/64, error -71
[  695.827801][ T9854] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  700.455632][ T9883] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  700.508251][ T9886] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  703.302986][ T9907] device syzkaller0 entered promiscuous mode
[  703.549443][ T9913] ieee802154 phy0 wpan0: encryption failed: -22
[  705.674764][ T9922] loop2: detected capacity change from 0 to 4096
[  706.296574][ T9929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1466'.
[  706.324728][ T9922] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  706.389608][ T9922] UDF-fs: Scanning with blocksize 512 failed
[  707.036344][ T9922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  708.094657][ T9939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1472'.
[  708.305668][ T9947] device syzkaller0 entered promiscuous mode
[  709.828828][ T9960] loop4: detected capacity change from 0 to 2048
[  709.913403][ T9967] program syz.2.1481 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  710.921148][ T9969] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  711.938208][ T9960] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  712.026502][ T9960] Remounting filesystem read-only
[  712.098389][ T9960] NILFS (loop4): error -2 truncating bmap (ino=16)
[  712.828821][ T4192] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  713.668373][ T9994] tmpfs: Unknown parameter 'usrquota'
[  713.771058][ T9994] batman_adv: batadv0: Adding interface: gretap1
[  713.777779][ T9994] batman_adv: batadv0: Interface activated: gretap1
[  715.487063][T10001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1491'.
[  715.986183][T10004] loop2: detected capacity change from 0 to 256
[  716.046994][T10004] exfat: Deprecated parameter 'utf8'
[  716.069825][T10004] exfat: Deprecated parameter 'namecase'
[  716.098399][T10004] exfat: Deprecated parameter 'namecase'
[  716.104312][T10004] exfat: Deprecated parameter 'utf8'
[  716.191782][T10004] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  717.592878][T10020] netlink: 'syz.1.1495': attribute type 2 has an invalid length.
[  719.066364][ T6447] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  719.199760][T10025] netlink: 'syz.4.1498': attribute type 3 has an invalid length.
[  719.526769][ T6447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  719.954751][ T6447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  719.992635][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  720.000022][ T6447] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  720.030601][ T6447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.073158][ T6447] usb 2-1: config 0 descriptor??
[  720.157253][T10028] 8021q: adding VLAN 0 to HW filter on device bond0
[  720.210882][T10028] bond0: (slave rose0): Enslaving as an active interface with an up link
[  720.327713][ T6447] usb 2-1: USB disconnect, device number 23
[  720.392346][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  720.400562][T10031] loop2: detected capacity change from 0 to 1024
[  720.655277][T10031] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  721.429467][T10058] loop2: detected capacity change from 0 to 1764
[  722.091060][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1507'.
[  722.930954][ T4310] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  724.149292][T10073] loop2: detected capacity change from 0 to 256
[  724.521315][ T4315] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  726.687735][T10105] netlink: 'syz.3.1516': attribute type 4 has an invalid length.
[  726.846994][T10094] chnl_net:caif_netlink_parms(): no params data found
[  727.089610][T10115] capability: warning: `syz.3.1518' uses 32-bit capabilities (legacy support in use)
[  727.804027][T10124] loop3: detected capacity change from 0 to 512
[  727.892790][T10094] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.934554][T10094] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.009037][T10124] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  728.042756][T10094] device bridge_slave_0 entered promiscuous mode
[  728.114398][T10094] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.122028][ T1108] Bluetooth: hci5: command 0x0409 tx timeout
[  728.216577][T10124] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  728.219258][T10094] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.389452][T10094] device bridge_slave_1 entered promiscuous mode
[  728.641532][T10094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  728.706074][T10094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  729.689412][T10094] team0: Port device team_slave_0 added
[  729.861317][T10094] team0: Port device team_slave_1 added
[  730.178541][T10094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  730.196395][ T5501] Bluetooth: hci5: command 0x041b tx timeout
[  730.227713][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  730.373503][T10094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  730.456790][T10094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  730.533243][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  730.857093][T10094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  730.858070][T10095] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  730.879431][T10095] CPU: 0 PID: 10095 Comm: kworker/u5:0 Not tainted syzkaller #0
[  730.887268][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  730.897681][T10095] Workqueue: hci0 hci_rx_work
[  730.902748][T10095] Call Trace:
[  730.906050][T10095]  <TASK>
[  730.909043][T10095]  dump_stack_lvl+0x188/0x250
[  730.913769][T10095]  ? show_regs_print_info+0x20/0x20
[  730.919076][T10095]  ? load_image+0x400/0x400
[  730.923678][T10095]  sysfs_create_dir_ns+0x26a/0x290
[  730.928901][T10095]  ? sysfs_warn_dup+0xa0/0xa0
[  730.933579][T10095]  ? process_one_work+0x85f/0x1010
[  730.938872][T10095]  ? do_raw_spin_unlock+0x11d/0x230
[  730.944324][T10095]  kobject_add_internal+0x6e0/0xd90
[  730.949684][T10095]  kobject_add+0x160/0x230
[  730.954206][T10095]  ? kobject_init+0x1d0/0x1d0
[  730.959263][T10095]  ? klist_children_get+0x50/0x50
[  730.964576][T10095]  ? get_device_parent+0x121/0x3f0
[  730.970107][T10095]  device_add+0x483/0xfb0
[  730.974450][T10095]  hci_conn_add_sysfs+0xd1/0x1e0
[  730.979454][T10095]  le_conn_complete_evt+0xc48/0x15c0
[  730.984925][T10095]  ? cs_le_create_conn+0x5e0/0x5e0
[  730.990101][T10095]  ? __mutex_trylock_common+0x155/0x260
[  730.995701][T10095]  hci_le_meta_evt+0x285/0x3c90
[  731.000661][T10095]  ? hci_event_packet+0x37b/0x1370
[  731.005788][T10095]  ? __lock_acquire+0x7d10/0x7d10
[  731.011050][T10095]  ? hci_remote_host_features_evt+0x280/0x280
[  731.017239][T10095]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  731.022927][T10095]  ? mark_lock+0x94/0x320
[  731.027378][T10095]  ? mutex_unlock+0x10/0x10
[  731.031918][T10095]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  731.038161][T10095]  ? lock_chain_count+0x20/0x20
[  731.043159][T10095]  ? __rwlock_init+0x140/0x140
[  731.047986][T10095]  hci_event_packet+0xe48/0x1370
[  731.052940][T10095]  ? lockdep_hardirqs_on+0x94/0x140
[  731.058453][T10095]  ? rcu_lock_release+0x20/0x20
[  731.063591][T10095]  ? hci_send_to_monitor+0x9c/0x4a0
[  731.068899][T10095]  hci_rx_work+0x255/0xa10
[  731.073446][T10095]  process_one_work+0x85f/0x1010
[  731.078386][T10095]  ? worker_detach_from_pool+0x240/0x240
[  731.084008][T10095]  ? lockdep_hardirqs_off+0x70/0x100
[  731.089289][T10095]  ? _raw_spin_lock_irq+0xb7/0xf0
[  731.094332][T10095]  ? _raw_spin_lock_irqsave+0x100/0x100
[  731.099972][T10095]  ? wq_worker_running+0x97/0x170
[  731.105203][T10095]  worker_thread+0xaa6/0x1290
[  731.109983][T10095]  ? lockdep_hardirqs_on+0x94/0x140
[  731.115446][T10095]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  731.121398][T10095]  kthread+0x436/0x520
[  731.125667][T10095]  ? rcu_lock_release+0x20/0x20
[  731.130714][T10095]  ? kthread_blkcg+0xd0/0xd0
[  731.135561][T10095]  ret_from_fork+0x1f/0x30
[  731.140147][T10095]  </TASK>
[  731.146693][T10095] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  731.162483][T10095] Bluetooth: hci0: failed to register connection device
[  731.746553][ T1108] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  732.011456][T10094] device hsr_slave_0 entered promiscuous mode
[  732.024224][T10094] device hsr_slave_1 entered promiscuous mode
[  732.032432][T10094] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  732.056500][T10094] Cannot create hsr debugfs directory
[  732.265312][  T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.276508][ T4245] Bluetooth: hci5: command 0x040f tx timeout
[  732.822584][  T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.237688][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short
[  733.322443][  T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.356565][ T1108] usb 3-1: unable to read config index 0 descriptor/start: -71
[  733.382548][ T1108] usb 3-1: can't read configurations, error -71
[  733.444425][  T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.356829][ T4245] Bluetooth: hci5: command 0x0419 tx timeout
[  734.764060][T10189] loop3: detected capacity change from 0 to 128
[  735.090309][  T144] tipc: Left network mode
[  735.159767][T10198] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  735.825420][T10094] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  736.060768][T10094] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  736.083861][T10094] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  736.981561][T10214] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  737.412624][T10094] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  737.735145][ T5881] Bluetooth: hci0: command 0x0406 tx timeout
[  738.017708][T10227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1538'.
[  738.938754][ T1108] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  741.404418][T10094] 8021q: adding VLAN 0 to HW filter on device bond0
[  741.420475][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  741.437899][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  741.446036][T10239] loop2: detected capacity change from 0 to 32768
[  741.451418][T10094] 8021q: adding VLAN 0 to HW filter on device team0
[  741.554760][T10239] 
[  741.554760][T10239]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  741.554760][T10239] 
[  741.665214][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  741.667820][T10239] ERROR: (device loop2): dbReAlloc: the block is outside the filesystem
[  741.667820][T10239] 
[  741.690633][T10239] ERROR: (device loop2): remounting filesystem as read-only
[  741.698728][T10239] jfs_mkdir: dtInsert returned -EIO
[  741.704402][T10239] ERROR: (device loop2): jfs_mkdir: 
[  741.704402][T10239] 
[  741.715241][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  741.745572][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.752836][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  741.803020][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  741.837910][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  741.867019][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.874258][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  741.893521][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  741.904505][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  741.980681][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  742.069375][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  742.222461][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  742.263970][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  742.407187][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short
[  742.460058][T10094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  742.470490][T10094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  742.577999][ T1108] usb 5-1: unable to read config index 0 descriptor/start: -71
[  742.613867][ T1108] usb 5-1: can't read configurations, error -71
[  742.871239][T10276] kthread_run failed with err -4
[  742.903315][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  742.942949][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  742.960853][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  742.984446][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  743.007730][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  743.021013][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  743.033727][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  743.212218][  T144] device hsr_slave_0 left promiscuous mode
[  743.247754][  T144] device hsr_slave_1 left promiscuous mode
[  743.268607][T10290] loop2: detected capacity change from 0 to 2048
[  743.306944][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  743.314725][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  743.371494][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  743.424237][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  743.449735][  T144] device bridge_slave_1 left promiscuous mode
[  743.450982][T10292] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  743.468256][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.528428][  T144] device bridge_slave_0 left promiscuous mode
[  743.558418][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.632716][  T144] device veth1_macvtap left promiscuous mode
[  743.652619][  T144] device veth0_macvtap left promiscuous mode
[  743.675008][  T144] device veth1_vlan left promiscuous mode
[  743.713558][  T144] device veth0_vlan left promiscuous mode
[  745.665128][T10307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1554'.
[  746.019277][  T144] team0 (unregistering): Port device team_slave_1 removed
[  746.047973][  T144] team0 (unregistering): Port device team_slave_0 removed
[  746.085206][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  746.167381][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  746.533509][  T144] bond0 (unregistering): Released all slaves
[  746.774623][T10323] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  747.327937][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  747.334686][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  747.548133][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  747.558245][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  747.632816][T10094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.412921][T10331] device syzkaller0 entered promiscuous mode
[  749.478242][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  749.513700][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  749.614504][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  749.653254][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  749.680289][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  749.707622][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  749.727507][T10094] device veth0_vlan entered promiscuous mode
[  749.772738][T10094] device veth1_vlan entered promiscuous mode
[  749.908184][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  749.953738][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  750.016853][T10094] device veth0_macvtap entered promiscuous mode
[  750.049558][T10372] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  750.780299][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  750.799223][T10094] device veth1_macvtap entered promiscuous mode
[  751.027218][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  751.068442][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.189464][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  751.200563][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.210828][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  751.222270][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.232398][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  751.243548][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.280415][T10094] batman_adv: batadv0: Interface activated: batadv_slave_0
[  751.365170][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  751.387236][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  751.542860][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  751.663034][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.792064][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  751.934236][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.065411][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  752.194122][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.268539][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  752.340669][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.417514][T10094] batman_adv: batadv0: Interface activated: batadv_slave_1
[  752.508326][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  752.553740][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  752.622681][T10094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  752.670581][T10094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  752.706148][T10094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  752.764618][T10094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  753.089747][ T4599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  753.116387][ T4599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.178443][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  753.212779][ T4599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  753.236897][ T4599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.275459][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  753.803157][T10404] netlink: 'syz.5.1511': attribute type 3 has an invalid length.
[  754.105793][T10406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  756.520197][T10425] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  757.326743][ T4472] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  758.361276][ T4472] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  758.729003][T10440] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  759.689986][T10446] loop5: detected capacity change from 0 to 256
[  759.807315][T10446] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  759.954988][T10450] netlink: 'syz.2.1581': attribute type 3 has an invalid length.
[  761.046913][T10459] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  764.786485][ T4258] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  765.353418][T10493] device syzkaller0 entered promiscuous mode
[  766.376464][ T4258] usb 5-1: unable to get BOS descriptor or descriptor too short
[  766.716489][ T4258] usb 5-1: unable to read config index 0 descriptor/start: -71
[  766.811826][ T4258] usb 5-1: can't read configurations, error -71
[  769.169795][T10503] loop4: detected capacity change from 0 to 32768
[  769.220834][T10503] 
[  769.220834][T10503]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  769.220834][T10503] 
[  769.262682][T10503] read_mapping_page failed!
[  769.284074][T10503] ERROR: (device loop4): txCommit: 
[  769.284074][T10503] 
[  769.315674][T10540] read_mapping_page failed!
[  769.331553][T10540] ERROR: (device loop4): txCommit: 
[  769.331553][T10540] 
[  769.348624][T10503] ==================================================================
[  769.357280][T10503] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xd74/0x1270
[  769.365035][T10503] Read of size 4 at addr ffff88805e9db70c by task syz.4.1592/10503
[  769.373102][T10503] 
[  769.375425][T10503] CPU: 1 PID: 10503 Comm: syz.4.1592 Not tainted syzkaller #0
[  769.382972][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  769.393220][T10503] Call Trace:
[  769.396628][T10503]  <TASK>
[  769.399579][T10503]  dump_stack_lvl+0x188/0x250
[  769.404294][T10503]  ? show_regs_print_info+0x20/0x20
[  769.409893][T10503]  ? _printk+0xda/0x130
[  769.414092][T10503]  ? load_image+0x400/0x400
[  769.418767][T10503]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  769.424260][T10503]  print_address_description+0x60/0x2d0
[  769.429835][T10503]  ? dtInsertEntry+0xd74/0x1270
[  769.434797][T10503]  kasan_report+0xdf/0x130
[  769.439310][T10503]  ? dtInsertEntry+0xd74/0x1270
[  769.444277][T10503]  dtInsertEntry+0xd74/0x1270
[  769.449296][T10503]  dtSplitPage+0x2501/0x3200
[  769.453982][T10503]  dtInsert+0xff4/0x5830
[  769.458264][T10503]  ? lockdep_hardirqs_on+0x94/0x140
[  769.463716][T10503]  ? slab_free_freelist_hook+0xea/0x170
[  769.469496][T10503]  ? UniStrupr+0x2e0/0x2e0
[  769.473944][T10503]  ? dtSearch+0x1c6b/0x2050
[  769.478470][T10503]  ? __rwlock_init+0x140/0x140
[  769.483304][T10503]  jfs_symlink+0x8b2/0xfb0
[  769.487777][T10503]  ? jfs_unlink+0xa00/0xa00
[  769.492341][T10503]  ? make_kgid+0x660/0x660
[  769.496841][T10503]  ? apparmor_path_symlink+0x1ac/0x230
[  769.502416][T10503]  ? lookup_one_qstr_excl+0x11c/0x240
[  769.508132][T10503]  ? generic_permission+0x230/0x510
[  769.513367][T10503]  ? inode_permission+0xef/0x480
[  769.518736][T10503]  ? bpf_lsm_inode_symlink+0x5/0x10
[  769.524180][T10503]  ? security_inode_symlink+0xb2/0x100
[  769.529981][T10503]  vfs_symlink+0x247/0x3d0
[  769.534438][T10503]  do_symlinkat+0x1ab/0x6b0
[  769.539047][T10503]  ? vfs_symlink+0x3d0/0x3d0
[  769.543794][T10503]  ? getname_flags+0x1fe/0x500
[  769.548881][T10503]  __x64_sys_symlink+0x7a/0x90
[  769.553764][T10503]  do_syscall_64+0x4c/0xa0
[  769.558320][T10503]  ? clear_bhb_loop+0x30/0x80
[  769.563095][T10503]  ? clear_bhb_loop+0x30/0x80
[  769.567793][T10503]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  769.573786][T10503] RIP: 0033:0x7fef24cd8f79
[  769.578314][T10503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  769.598361][T10503] RSP: 002b:00007fef22f33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  769.606966][T10503] RAX: ffffffffffffffda RBX: 00007fef24f52fa0 RCX: 00007fef24cd8f79
[  769.615121][T10503] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000100
[  769.623098][T10503] RBP: 00007fef24d6f7e0 R08: 0000000000000000 R09: 0000000000000000
[  769.631077][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  769.639326][T10503] R13: 00007fef24f53038 R14: 00007fef24f52fa0 R15: 00007ffc7d344d08
[  769.647651][T10503]  </TASK>
[  769.650763][T10503] 
[  769.653076][T10503] Allocated by task 10503:
[  769.657476][T10503]  __kasan_slab_alloc+0x9c/0xd0
[  769.662495][T10503]  slab_post_alloc_hook+0x4c/0x380
[  769.667797][T10503]  kmem_cache_alloc+0x100/0x290
[  769.672638][T10503]  jfs_alloc_inode+0x17/0x50
[  769.677251][T10503]  iget_locked+0x191/0x820
[  769.681692][T10503]  jfs_iget+0x20/0x3f0
[  769.685838][T10503]  jfs_lookup+0x21d/0x420
[  769.690171][T10503]  __lookup_slow+0x29d/0x410
[  769.694839][T10503]  lookup_slow+0x53/0x70
[  769.699164][T10503]  walk_component+0x319/0x460
[  769.704005][T10503]  path_lookupat+0x169/0x440
[  769.708623][T10503]  filename_lookup+0x214/0x540
[  769.713555][T10503]  user_path_at_empty+0x40/0x190
[  769.718633][T10503]  __se_sys_chdir+0x98/0x280
[  769.723452][T10503]  do_syscall_64+0x4c/0xa0
[  769.727953][T10503]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  769.733956][T10503] 
[  769.736363][T10503] Last potentially related work creation:
[  769.742150][T10503]  kasan_save_stack+0x35/0x60
[  769.746928][T10503]  kasan_record_aux_stack+0xb8/0x100
[  769.752397][T10503]  call_rcu+0x189/0x950
[  769.756614][T10503]  evict+0x834/0x8d0
[  769.760782][T10503]  evict_inodes+0x60c/0x6a0
[  769.765427][T10503]  generic_shutdown_super+0x93/0x300
[  769.770728][T10503]  kill_block_super+0x7c/0xe0
[  769.775636][T10503]  deactivate_locked_super+0x93/0xf0
[  769.780915][T10503]  cleanup_mnt+0x42d/0x4e0
[  769.785623][T10503]  task_work_run+0x125/0x1a0
[  769.790213][T10503]  exit_to_user_mode_loop+0x10f/0x130
[  769.795622][T10503]  exit_to_user_mode_prepare+0xee/0x180
[  769.801286][T10503]  syscall_exit_to_user_mode+0x16/0x40
[  769.807049][T10503]  do_syscall_64+0x58/0xa0
[  769.811482][T10503]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  769.817445][T10503] 
[  769.820048][T10503] The buggy address belongs to the object at ffff88805e9dae40
[  769.820048][T10503]  which belongs to the cache jfs_ip of size 2240
[  769.834592][T10503] The buggy address is located 12 bytes to the right of
[  769.834592][T10503]  2240-byte region [ffff88805e9dae40, ffff88805e9db700)
[  769.848664][T10503] The buggy address belongs to the page:
[  769.854424][T10503] page:ffffea00017a7600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e9d8
[  769.865139][T10503] head:ffffea00017a7600 order:3 compound_mapcount:0 compound_pincount:0
[  769.873819][T10503] memcg:ffff88805c4f6c01
[  769.878089][T10503] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  769.886161][T10503] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017ae9780
[  769.894849][T10503] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88805c4f6c01
[  769.903421][T10503] page dumped because: kasan: bad access detected
[  769.909998][T10503] page_owner tracks the page as allocated
[  769.915830][T10503] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 10239, ts 741521226558, free_ts 355697932953
[  769.937891][T10503]  get_page_from_freelist+0x1bbd/0x1ca0
[  769.943599][T10503]  __alloc_pages+0x1ee/0x480
[  769.948289][T10503]  new_slab+0xc0/0x4b0
[  769.952390][T10503]  ___slab_alloc+0x80a/0xdd0
[  769.957171][T10503]  kmem_cache_alloc+0x195/0x290
[  769.962024][T10503]  jfs_alloc_inode+0x17/0x50
[  769.966634][T10503]  new_inode_pseudo+0x5f/0x210
[  769.971447][T10503]  new_inode+0x25/0x1c0
[  769.975961][T10503]  jfs_fill_super+0x398/0xb00
[  769.980648][T10503]  mount_bdev+0x287/0x3c0
[  769.984990][T10503]  legacy_get_tree+0xe6/0x180
[  769.990000][T10503]  vfs_get_tree+0x88/0x270
[  769.994598][T10503]  do_new_mount+0x24a/0xa40
[  769.999409][T10503]  __se_sys_mount+0x2e3/0x3d0
[  770.004105][T10503]  do_syscall_64+0x4c/0xa0
[  770.008732][T10503]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  770.014739][T10503] page last free stack trace:
[  770.019435][T10503]  free_unref_page_prepare+0x637/0x6c0
[  770.024985][T10503]  free_unref_page+0x8f/0x2a0
[  770.029754][T10503]  __unfreeze_partials+0x1a5/0x200
[  770.034864][T10503]  put_cpu_partial+0x12d/0x190
[  770.039797][T10503]  qlist_free_all+0x35/0x90
[  770.044381][T10503]  kasan_quarantine_reduce+0x150/0x160
[  770.049927][T10503]  __kasan_slab_alloc+0x2f/0xd0
[  770.054775][T10503]  slab_post_alloc_hook+0x4c/0x380
[  770.059878][T10503]  __kmalloc+0x127/0x330
[  770.064223][T10503]  tomoyo_realpath_from_path+0x118/0x610
[  770.070031][T10503]  tomoyo_path_perm+0x23f/0x5d0
[  770.075289][T10503]  security_inode_getattr+0xcf/0x120
[  770.080619][T10503]  vfs_getattr+0x26/0x3a0
[  770.085051][T10503]  __x64_sys_newfstat+0x137/0x210
[  770.090265][T10503]  do_syscall_64+0x4c/0xa0
[  770.094677][T10503]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  770.100611][T10503] 
[  770.102926][T10503] Memory state around the buggy address:
[  770.108659][T10503]  ffff88805e9db600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  770.116721][T10503]  ffff88805e9db680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  770.125164][T10503] >ffff88805e9db700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  770.133643][T10503]                       ^
[  770.138328][T10503]  ffff88805e9db780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  770.146395][T10503]  ffff88805e9db800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  770.154723][T10503] ==================================================================
[  770.162963][T10503] Disabling lock debugging due to kernel taint
[  770.203699][T10503] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  770.211333][T10503] CPU: 1 PID: 10503 Comm: syz.4.1592 Tainted: G    B             syzkaller #0
[  770.220605][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  770.230954][T10503] Call Trace:
[  770.234376][T10503]  <TASK>
[  770.237393][T10503]  dump_stack_lvl+0x188/0x250
[  770.242440][T10503]  ? show_regs_print_info+0x20/0x20
[  770.247659][T10503]  ? load_image+0x400/0x400
[  770.252282][T10503]  panic+0x2e5/0x810
[  770.256211][T10503]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  770.262807][T10503]  ? bpf_jit_dump+0xd0/0xd0
[  770.267353][T10503]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  770.273420][T10503]  ? _raw_spin_unlock+0x40/0x40
[  770.278374][T10503]  ? dtInsertEntry+0xd74/0x1270
[  770.283487][T10503]  check_panic_on_warn+0x80/0xa0
[  770.288471][T10503]  ? dtInsertEntry+0xd74/0x1270
[  770.293438][T10503]  end_report+0x6d/0xf0
[  770.297776][T10503]  kasan_report+0x102/0x130
[  770.302554][T10503]  ? dtInsertEntry+0xd74/0x1270
[  770.307433][T10503]  dtInsertEntry+0xd74/0x1270
[  770.312144][T10503]  dtSplitPage+0x2501/0x3200
[  770.317074][T10503]  dtInsert+0xff4/0x5830
[  770.321340][T10503]  ? lockdep_hardirqs_on+0x94/0x140
[  770.326730][T10503]  ? slab_free_freelist_hook+0xea/0x170
[  770.332385][T10503]  ? UniStrupr+0x2e0/0x2e0
[  770.336899][T10503]  ? dtSearch+0x1c6b/0x2050
[  770.341403][T10503]  ? __rwlock_init+0x140/0x140
[  770.346280][T10503]  jfs_symlink+0x8b2/0xfb0
[  770.350988][T10503]  ? jfs_unlink+0xa00/0xa00
[  770.355691][T10503]  ? make_kgid+0x660/0x660
[  770.360134][T10503]  ? apparmor_path_symlink+0x1ac/0x230
[  770.365781][T10503]  ? lookup_one_qstr_excl+0x11c/0x240
[  770.371237][T10503]  ? generic_permission+0x230/0x510
[  770.376519][T10503]  ? inode_permission+0xef/0x480
[  770.381764][T10503]  ? bpf_lsm_inode_symlink+0x5/0x10
[  770.387049][T10503]  ? security_inode_symlink+0xb2/0x100
[  770.392762][T10503]  vfs_symlink+0x247/0x3d0
[  770.397348][T10503]  do_symlinkat+0x1ab/0x6b0
[  770.401942][T10503]  ? vfs_symlink+0x3d0/0x3d0
[  770.406712][T10503]  ? getname_flags+0x1fe/0x500
[  770.411613][T10503]  __x64_sys_symlink+0x7a/0x90
[  770.416389][T10503]  do_syscall_64+0x4c/0xa0
[  770.421030][T10503]  ? clear_bhb_loop+0x30/0x80
[  770.425798][T10503]  ? clear_bhb_loop+0x30/0x80
[  770.430656][T10503]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  770.436831][T10503] RIP: 0033:0x7fef24cd8f79
[  770.441249][T10503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  770.461442][T10503] RSP: 002b:00007fef22f33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  770.470104][T10503] RAX: ffffffffffffffda RBX: 00007fef24f52fa0 RCX: 00007fef24cd8f79
[  770.478183][T10503] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000100
[  770.486420][T10503] RBP: 00007fef24d6f7e0 R08: 0000000000000000 R09: 0000000000000000
[  770.494583][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  770.502572][T10503] R13: 00007fef24f53038 R14: 00007fef24f52fa0 R15: 00007ffc7d344d08
[  770.511127][T10503]  </TASK>
[  770.514731][T10503] Kernel Offset: disabled
[  770.519164][T10503] Rebooting in 86400 seconds..