last executing test programs:

12m13.083111127s ago: executing program 0 (id=1):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x200000, &(0x7f0000000340)={[{@block_validity}, {}, {@usrjquota}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=")
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a49007, 0x0)

12m12.628900692s ago: executing program 0 (id=8):
syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x81, 0x23d, &(0x7f0000001480)="$eJzs28FOE0Ecx/HfdluoFQExoiExMTExXqQKJKQn9QG8eDTxQLCQxqJGvEBIlJfwbrx58hFI9D08erA9cDMh6ZrZnabd7tLdxS3V+v0kdIed+c/8W5jpzlIE4L/10H905KjslzzPe3dT0tPHkn4s+edujDVDAKPi2WPH63G7dQAmnNs5a+Sz5HVi5hLLCPDXaj8y7/ZlHTnS9+ODzZb9KkeuFIqx1w/txU9BwZFaffEXMl6HLBU13x9fkXQxRQ7eR8c/3pY/fqV1bDI/2JxJOW77MIivKJy/5gcantgXLBJf8I93bqmkvvhZSXOS381lSQuSrkjTpu1VFVQIjT9lv+vFXw9OHKZ8GgAAAAAADGV2n8t/FC0tJ3bgym59I8w+eKvRrN/LNnB3+6ySjb9/WoMEUzZ+ZVijwU1/TPxq/8mfs6e0dnrFUnCYtvEn3qvm85Q5A3kpZJv/kduC5jf6KKGDYC4uxNa5kflfSp+NvSO41fiQKQZAYHdv/8VGs1l/k2fhwbA2UtYOzYqQc4bxhc+moF/Bjf4Rj5VUKMRUmcX2rB12/yCTd6rvldzGS9FmkgrFfF/nr3IG52kxNIm+2J9thp6fxFVNKTRPQ9xzXpgAjFz17c7r6u7e/t3GzsZ2fbv+cm29VltfW12pVf3LcvPozY07SwCj0Hv3j6nM+iEeAAAAAAAAAAAAAAAwFouSrvmlb50MYXwyAAAAAPgHncc/RY37OQIAAAAAAAAAAAAAMOl+BwAA///QdDQ9")
lchown(&(0x7f00000012c0)='./file0\x00', 0x0, 0x0)

12m11.358845883s ago: executing program 0 (id=12):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x3200092, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$eJzs3U1vHVf9B/DfffD1Q/9NreqvKkQs0hRKS2meEyhPTVmwgAVIKGsSuW4VSAElAdEqIo4shNgAWyQWsOmGRd9IXwPiBRDJZpUFZdDY5zjj62tfW4nvXPt8PpIz85sz43smX4/vvZ6ZewIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiO9990cXOhFx41dpwWLE/0UvohsxX9eno565ltfvR8TJ2GiOlyKiNxtRb7/xzwsRlyPi0xMRa+v3l+rFF/fZjyvn79357Pvf+cfv/rh68ifv/vjj4fYf/v+lT37/IGLxB2998tmDZ7PvAAAAUIqqqqpOept/Kr2/77bdKQBgIvLzf5Xk5Wq1Wq1+pvUfupN4vD//ZWvBlO2/ekrqpmq0B80iIlaa29SvGcaejp8dtwIAMFEr8bjtLtAi+RetHxHPtd0JYKp12u4Ah2Jt/f5SJ+XbaT4fnN5sz3+n3Jb/Smfr/o7dpuMMX2MyqZ+v1ejFi7v0Z37vTY/lX7Fy/t3h/G9stg/Seoed/6Tslv9g89an4uT8e8P5D9mW/58i4sjm3x2Zf6ly/v2D5L/SO8LHv/wBAAAAADj+8t//F1s+/zupk6t7nf89PaE+AAAAAAAAAMCz9rTj/20x/h8AAABMrfq9eu2vJ54s2+2z2Orl1zsRzw+tDxQm3Syz0HY/AAAAAAAAAAAAAKAk/c1reK93ImYi4vmFhaqq6q+m4fqgnnb7o670/YeStf1LHgAANn16Yuhe/k7EXERcT+XMwsJCVc3NL1QL1fxsfj07mJ2r5hvva/O0XjY72McL4v6gqr/ZXGO7pnHvl8e1D3+/+rEGVW8fHZuMlsIGgGTz2WjNM9IxU1UvRNuvcjgaHP/Hj+Of/Wj75xQAAAA4fFVVVZ30cd6n0vh+3bY7BQBMwlx+/h8+L6BWq9Vqtfr41U3VaA+aRUSsNLepXzMYjh8AjpiVeNx2F2iR/IvWj4iTbXcCmGqdtjvAoVhbv7/USfl2ms8HaXz3fC3ItvxXOhvb5e1HTccZvsZkUj9fq9GLF3fpz0sT6sM0yfl3h/O/sdk+SOsddv6Tslv+9X4uttCftuX8e8P5Dzk++XdH5l+qnH//QPn35A8AAAAAAFMs//1/0fnfvMsAAAAAAAAAcOSsrd9fyve95vP/nx+xXqc55/7PYyPn39l3/u7/PU5y/t3h/IcuyOk15h+98yT/f6/fX/r43r8+l6dTn/9Mb1A/9kyn2+una36qmffiVtyO5Ti/Y/16nYcRqf3CjvaZbdtfHNN+aUf7oG6fz+1nYyl+Hrfj3a322TEXRs2Naa/GtOf8e47/IuX8+42vOv+F1N4ZmtYePezuOO6b01GPc+3v/3k1H13Xr/1254EwIavR29q3pnr/zrTQn43/k+cG8cu7y3fO/vrmvXt3LkSabFt6MdLkGcv5z6SvnP9rr2y259/7zeP10cPBgfOfFqvR3zX/Vxrz9f6+PuG+tSHnP0hfOf/8DDT6+D/K+e9+/L/RQn8AAAAAAAAAAAAAAABgL1VVbdwiei0irqb7f9q6NxMAmKz8/F8leblarVar1erjVzdVo73dLGJu+zb1a4bfjPpmAMA0+29E/LPtTtAa+Rcsf95fPf1C250BJuruhx/99Obt28t37h5su8XD6hAAAAAAAAAAcGB5/M/TjfGfN64DGho3etv4r+/E6akb//PxyFsadljtDnobY52nHXo59h7/+8y29p3jf/fHPN7MXo2D8f2dHdM+N6Z93P9Kzv/llHHO/1TasZLGf32thf60Led/Jo31nPP/0tB6zfyrvx3l/Lvb8j9374NfnLv74Udv3vrg5vvL7y//7ML5q5cvXbl86cqVc+/dur18fvPf0d9sz4P7aMj557GvXQdalpx/zlz+Zcn5fzHV8i9Lzv/VVMu/LDn//HpP/mXJ+ef3PvIvS87/9VTLvyw5/y+nWv5lyfm/kWr5lyXn/5VUy78sOf83Uy3/suT8z6Za/mXJ+Z9LtfzLkvPPZ7jkX5acf76yQf5lyflfTLX8y5Lzv5Rq+Zcl53851fIvS87/SqrlX5ac/9VUy78sOf+vplr+Zcn5fy3V8i9Lzv+tVMu/LDn/r6da/mXJ+X8j1fIvS87/m6mWf1ly/t9K9Vb+vXb7xWTk/L+dasd/WXL+b6da/mV58vn/ZsyYMZNn2v7NBAAAAAAAAAAAAAAM28/1wPGUlxO3vY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2Lu7GLnO+n7gz756nYTEfxJCCCFxnBcMcbLr18QEg3n9p6GlaSC0FGgS7HVi8Ju8NiQINZsmbUEgNVJ7ARelgChCaqtECKlUoihSkdq7cgXNDWolLiIVqhBBVSrCVmfO8zw7Mzs7s+vsy5lzPh8U/7w7Z2aePXNmdr9rvnMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADaXf+O2T8dCSEU/7X+2BbCJcXft4bDxYfzBzZ7hQAAAMDL9VLrz7+9LH/i8Aqu1LbNP1/7r99aWFhYCB998flf//nCQr5gewhjW0JoXZb8yy9/sdC+TfREmBoZbft4dMDdjw24fHzA5RMDLp8ccPmWAZdPDbh8yQ5YYmv5+5jWjd3Y+uu2cpeGK8JE67Ibe1zriZEto6PpdzktI63rLEwcC8fDiTAbZpZcZ6T1vxC+c31xX3eFdF+jbfd1TQjhhZ99+khaw0jcxzeGjjtraX/sfvq2sP3Fn336yNfP/eQ1vebA3bBkpSHs3FGs88kQFn9dFUbClrxP0jpH29Z5TY91jnWsc6R1veLv3et8YYXrTF/3VFzn9/us85r4uUduCCHMh2W36fZEGA0Xdd1r3t9T5RFR3EbxUL4yjK/qOLm+73EyMl9sU1znxzd0Hifdx2Ta/9fHfTK+zBraH46fPj65ZL9f0HGytbzlKhyrxW3fU9zp1FT7r1Y7jtVim0/ftPwx0POx63EM5GO57RjYMegYGJ0cax0Do4tr3tFxDOxecp3RMNK6r+dv6n8MTJ87eWZ67tFP3Xr85IMPzT40e2r3zIF9e/fv27t///Sx4ydmZ8o/V7dLh8hFYTQfgzvia006Bl/ftW37IbnwlTV6HsTXoSo8D4qv/f03Fwu6ZDQsc4wX2zy58+U/D/L3/bbnwXjb86Dna2qP58H4Cp4HxTYv7FzZ98zxtv96rWFdXgtbaxqpxPfD4j4//IblXwuviev6zBtX+/1wbMkxkL6skfjcKz6Tf96buiPul6XHxdXFBRdPhvNzs2dve+TBc+fO7g5xbIjL2x6r7uPloravKSw5XkZXfbwc/ptf3Xx1j89vi/tq6pb+j1Wxzb5d/R+r1qt75/6cDOX+7PjsnhDHGtvo/dnru1mxP3OW6LM/i22evPXl/yyYc0nb69/EoNe/sYnx8vVvLO+NiY7Xv6UPzVhrZSG8cOvKXv8m4n8b/fp3RUVe/4p99eHbljkGJsr1FNt8Znq1x8B439e/G+Iciet5Q0wMU225/9ety+fLw7TtsRx43IyPT8TjZjzdY+dxs3fJdYpbK+5758yFHTc7b+h8rDp+bqnhcVPsq7+Y6f/aUWzz7O6X/9qxNf217bVjctAxMDE2Wax3Ih8E5evdwtZ0DNwWjoTT4UQ4mq9TPMrFfe3as7JjYDL+t9GvHVdV5Bgo9tUX9iweA1M9Ht9im+/tXdufnXbGz5TbTHT87NT9+4XlMv/V44u3173b1vKxGo/rfOcP3ps/1ytDFNv8ZN9qc0b//XRL/MzF6eK2/dT9/FnumD4aNmY/XRXXeWJ//99NFdtccWCFx9PhEMJzu59r/b4r/n73m+d/8K2O3/v2+p3yc7ufu3v63h+uZv0AAFy4X7f+nJ8sf9Zs+xfrlfz7PwAAADAUUu4fjTOT/wEAAKA2Uu4fizOT/wEAAKA2Uu4fjzNrSP5/+I6DT7/0WMjvBrgQpcvTbrjnLeV2qeM9Hz/evrCo+Pzbvzbx9GcfW9l9j4YQfnX3a3tu//Bb0rpKZ9I639T5+SWuum5F9//AfYvbtb9/wgsHy9tPX89KD4PUVf7O9J7W7W5/dHdrPnt3aM175z/zRHn75cdp++f3ltv/ZXzTksPHRjquvzOu58Y4t8f3lLnn8OJ+KGa63tPXXPtPl39g8f7S9UZ2XNr6Mr/wh+XtpveIeurycvv0dS+3/n/83DeeLrZ/5Kbe639stPf6n4+3++M4f3mo3L59n3+2bf1/HNef7i9d77avfrfn+p95dbn9M/G4+HKc3et/25+97qVej1e6n8N3ltdL9z/z3/ta10u3l26/e/1Tj+3u2B/dt//si+XtHPrEz8fat0+fT/eTPHBn5/E9Eh/fjh55COEbfxI69nN4c3m9f+haf7q9M3f2Xv8tXes8M3Jd6/qLX8+2jq/rS3+9p+fXm9Zz+O+2dXw9T70r7r8Xp79X3O7z98bjMV7+v98vb6/7vUyfeVfn603a/svbyudtur3prvU/1bX++euKfTd4/Xe9WK7/mbdu6Vj/4XfH4+mucg5a/0N/dVnH9b/y9fLxOPvJXadOz50/frRtr7Y/j7dMbb3o4ktecell8bW0++P7T597ePbs9pntMyFsH8K3DFzv9X81zv8qx3zbRdvW5h7SK0553H3+PeX3rdf/ovz4qZ+X84H4eKbvj1/64kTH8dr9uM+/tZx91r8ib4zrWKlXf+4/rlvRhs9/5Dvn//6PftL9c0H6es68aqr19X3h+itbl408W17e/Xo1yL+/qvN5/aPxmdb8dtyvC/GdmXdcWd5f9+2n9yb5/PvK52/6SS5dP3S9n8i2sc6vY8n6J1e3/h/Fn2O+e1Xn6186Pr79WNe7OW8LI8US5uPrQ5gvL09bpf39+Reu7Hl/6X14wvxrVrPMZc09Ojd94vip849Mn5udOzc99+in7j95+vypc/e33rv0/o8Nuv7i8/ui1vP76OyBfaH1bD9djnXWWv8rNm/9Z+47cvT2mZuPzh578Pyxc/edmT370JG5uSOzR+dufvDYsdlPDrr+8aOHdu85uPf2PbseOn700B0HD+49uOv4qdPFMspFDXBg5uO7Tp29v3WVuUP7Du7ev3/fzK6Tp4/OHrp9ZmbX+UHXb31v2lVc+xO7zs6eePDc8ZOzu+aOf2r20O6DBw7sGfjujyfPHJvbPn32/Knp83OzZ6fLr2X7udani+99g65PM8ydjq93XUbiT+cfvOVAfn/cwtceX/amyk26vrv/NL4XVPr+NujjlPsn4swakv8BAACgCVLuj2/8v3iB/A8AAAC1kXL/ljgz+R8AAABqI+X+MvlP5dO/NyX/r1X//3H9/xb9f/3/oP+f6f/r/4fN7f+vqR/+XP8/NKH/v8r16/9XoP+/ietvXP+/6xu2/j8rUbX+f8z9YWsI/v0fAAAAairl/ovizOR/AAAAqI2U+y+OM5P/AQAAoDZS7r8kzqwh+d/5//X/9f/79f/Ttvr/Qf+/Cv3/G/9T/38J/X/9/6D/f8E2uz8/7OuvYP9/q/P/UzVV6/+n3P+KOLOG5H8AAABogpT7L40zk/8BAACgNlLuvyzOTP4HAACA2ki5f1ucWUPyv/6//v+g/v+vFhYWmtv/d/7/dvr/m97/d/7/HvT/9f+D/v8FW1F/fmT5A1P/v3L9//U9/38X/X9Womr9/5T7/1+cWUPyPwAAADRByv2vjDOT/wEAAKA2Uu6/PM5M/gcAAIDaSLn/ijizhuT/Zvb/fxxC0P8Pzv+v/9+1Tv3/Te//jwX9/1XT/9f/D/r/F2yz+/PDvn79f/1/Bqta/z/l/lfFmTUk/wMAAEATpNx/ZZyZ/A8AAAC1kXL/q+PM5H8AAACojZT7r4oza0j+b2b/3/n/9f9L+v+d66xv/3+y7/or1P+vz/n/ty7+Vf9f/78f/X/9/2Fefw36/yP6/6y3qvX/U+5/TZxZQ/I/AAAANEHK/VfHmcn/AAAAUBsp9782zkz+BwAAgNpIuf+aOLOhz/+jK9pK/38t+v+Lx43+v/5/0P/PqtP/779+/f/1NVz9/+W/d+r/l/T/O61d/39+cQH6/0Oz/hr0/53/n3VXtf5/yv2vizMb+vwPAAAAJCn3XxtnJv8DAABAbaTcf12c2Wry/8IK/w/vAAAAwKZIuX97nFlD/v1f/9/5//X/9f/1//X/19Nw9f+Xp/9f0v/v5Pz/+v/6//r/9LfB/f+LB/X/U+6/Ps6sIfkfAAAAmiDl/h1xZvI/AAAA1EbK/TfEmcn/AAAAUBsp998YZ9aQ/K//r/+v/6//39H/v7b9nvT/9f9fPv1//f9+9P/1/4d5/fr/+v8MtsH9/4Efp9x/U5xZQ/I/AAAANEHK/TfHmcn/AAAAUBsp978+zkz+BwAAgNpIuX9nnFlD8v+K+/8jIQT9/2Xp//dev/7/Ovf/x5z/P+j/V57+v/5/P/r/+v/DvH79f/1/Bqta/z/l/jfEmTUk/wMAAEATpNz/xjgz+R8AAABqI+X+W+LM5H8AAACojZT7d8WZNST/O/+//n9F+v9bgv5/Nc7/X9P+/9s/VE79/42n/6//34/+f237/90v7eti3fv/X/xg3+s3rv8/2fmh/j8rUbX+f8r9t8aZNST/AwAAQBOk3H9bnJn8DwAAALWRcv90nJn8DwAAAENpvMfnUu6fiTNrSP7f0P5/1wOg/6//H5z/X//f+f/1/18m/X/9/zCs/f+xWvf/nf+/jv3/Lvr/rETV+v8p9++OM2tI/gcAAIAmSLl/T5yZ/A8AAAC1kXL/3jgz+R8AAABqI+X+fXFmDcn/zv+v/6//r/+v/6//v570/1fV/1/hd9BF+v+loez/1/v8//r/+v/6/w002uNzVev/p9y/P86sIfkfAAAAmiDl/gNxZvI/AAAA1EbK/bfHmcn/AAAAUBsp998RZ9aQ/K//r/+v/6//r/+v/7+e9P+bd/7/Xv3P5ej/6/8P8/r1//X/Gaxq/f+U+w/GmTUk/wMAAEATpNz/pjgz+R8AAABqI+X+O+PMeub//1nV/ycMAAAA2Dj9emgp9785zqwh//6v/1/3/v/ClmHu/18at9H/1/8P+v9D0v9f+gKs/9+8/v9q1q//r/8/zOvX/9f/Z7Cq9f9T7j8UZ9aQ/A8AAABNkHL/W+LM5H8AAACojZT73xpnJv8DAABAbaTcfzjOrCH5X/+/7v3/tT3//xXO/6//r/+v/79K+v/6//3o/w9n/z/+2KL/X6H+f3EM6f9TRVXr/6fc/7Y4s4bkfwAAAGiClPvfHmcm/wMAAEBtpNz/jjgz+R8AAABqI+X+d8aZNST/6//r/1f5/P/6/xvQ/08lTv1//f91ov+/bv3/1kuh/n9J///C9OzPTwbn/x/C/r/z/1NVVev/p9z/rjizhuR/AAAAaIKU+98dZyb/AwAAQG2k3P//48zkfwAAAKiNlPvvijNrSP7X/9f/r0P//3H9f+f/1/+vLP1/5//vR/+/gv3/DezPD/v69f/1/xmsav3/lPt/I86sIfkfAAAAmiDl/rvjzOR/AAAAqI2U+98TZyb/AwAAwJCZXPaSlPt/M86sIflf/39j+v+j+fb1/53/X/9f/1//fy3p/+v/B/3/C7bZ/flhX7/+v/4/g1Wt/59y/2/FmTUk/wMAAEATpNz/3jgz+R8AAABqI+X+344zk/8BAACgNlLuvyfOrIb5v1epcK37/93X76dJ/X/n/9f/D/r/+v9te1X/f+3o/+v/B/3/C7bZ/flhX7/+v/4/g1Wt/59y/+/EmdUw/wMAAEBTpdx/b5yZ/A8AAAC1kXL/++LM5H8AAACojZT73x9n1pD87/z/+v9D1v8faS9y6v/r/wf9/8rT/9f/70f/X/9/mNev/6//z2BV6/+n3H9fnFlD8j8AAAA0Qcr9H4gzk/8BAACgNlLu/904M/kfAAAAaiPl/t+LM2tI/tf/76T/X/n+v/P/6//r/w8Z/f+l/f/iNWwt+///9uTKt9f/7/w69P/1//X/9f9ZX1Xr/6fc/8E4s4bkfwAAAGiClPt/P85M/gcAAIDaSLn/Q3Fm8j8AAADURsr9H44za0j+1/93/n/9f/1//X/9//Wk/+/8//1cSP9/S9v1q9n/36L/r/+v/6//T3yFrlr/P+X+j8SZNST/AwAAQBOk3P8HcWaryf/ja70qAAAAYC2l3H9/nJl//wcAAIDaSLn/gTizhuT/Nej/jwb9f/1//f+ex4P+v/6//r/+v/5/f87/r/8/zOvX/9f/Z7Cq9f9T7n8wzuxw590AAAAAwyvl/o/GmTXk3/8BAACgCVLuPxJnJv8DAABAbaTcfzTOrCH53/n/K9f/v+elhQX9f/3/fDv6//r/+v/96f/r/wf9/ws29+g3xvT/9f/1/1lPVev/p9w/G2fWkPwPAAAATZBy/7E4M/kfAAAAaiPl/ofizOR/AAAAqI2U+x+OM2tI/tf/r1z/3/n/9f87bmcd+//f/2bXOvX/9f/Xg/6//n8/+v+b3f93/n/9f/1/1lfV+v8p9x+PM2tI/gcAAIAmSLn/Y3Fm8j8AAADURsr9H48zk/8BAACgNlLuPxFn1pD8r/+v/6//39j+v/P/R/r/60v/X/+/H/1//f9hXr/+v/4/g1Wt/59y/8k4s4bkfwAAAGiClPtPxZnJ/wAAAFAbKfefjjOT/wEAAOD/2LvPJcvqqo/jZwaGGep5KG/BW/CNb70Er8EqL8Ccw2DGiDnnnMWEigFzxKyYMWcUM6hVWEyvtWZ66D7ndE+fPnv/1+fzglUTGHb3tJS/mvqyh5G7/wFxS5P9r/8/WP9/Yp828HD9/2n9v/5f/6//1/9fIv3/MfX/8bWt/99N/6//1//r/1lum/3/iT1+PHf/A+OWJvsfAAAAOsjd/6C4xf4HAACAYeTuf3DcYv8DAADAMHL3PyRuabL/j6//v/xu3zPH/n8/3v+/9/Pr//X/+n/9v/5/kP4/6P930//r/wfp/08vjqL/z/+Dpv/nAtvs//f6du7+h8YtTfY/AAAAdJC7/2Fxi/0PAAAAw8jd//C4xf4HAACAYeTuf0Tc0mT/T+z9/1Vz6P/1/wv9v/7/os+n/l//vxf9v/5/of8/tG3383N//oH6f+//Z2Om1v/n7n9k3NJk/wMAAEAHufsfFbfY/wAAADCM3P2PjlvsfwAAABhG7v7HxC1N9v/E+v/zz6X/b9D/31KfP/3/Dv1//L7q//X/B6D/1/8v9P+Htu1+fu7Pr//X/7Pa1Pr/3P2PjVua7H8AAADoIHf/4+IW+x8AAACGkbv/8XGL/Q8AAADDyN1/Nm7Za/+fPq6nOj76f/2/9//r//X/x9X/n63Pqv7/6Oj/9f8L/f+hbbufn/vz6//1/6w2tf4/d//VcYs//wcAAIBh5O5/Qtxi/wMAAMAwcvc/MW6x/wEAAGAYufufFLc02f/6f/2//l//f3z9/+nm/f/5z6r+/+jo//X/C/3/oW27n5/78+v/9f+sNrX+P3f/k+OWJvsfAAAAOsjd/5S4xf4HAACAYeTuf2rcYv8DAADAMHL3Py1uabL/9f/6f/2//t/7//X/m6T/1/8vo//X/8/5+fX/+n9W23j/f99rzt11+//c/dfELU32PwAAAHSQu//pcYv9DwAAAMPI3f+MuMX+BwAAgGHk7n9m3NJk/+v/9f/n+/87T4zW/y+u3/l5+n/9/7Ln1/9vlv5f/7+M/l//P+fn1//r/1lt4/3/it7/4m/n7n9W3NJk/wMAAEAHufufHbfY/wAAADCM3P3PiVvsfwAAABhG7v5r45Ym+1//r//3/n/9v/5f/79J+n/9/3kX/69d/6//n/fzL+v/77PG8+v/6WBq/X/u/ufGLU32PwAAAHSQu/95cYv9DwAAAMPI3f/8uMX+BwAAgGHk7n9B3NJk/+v/9f/6f/3/7v7/ZMv+/67v0/9vhv5f/7+M/l//P+fn9/5//T+rTa3/z93/wrilyf4HAACADnL3vyhusf8BAABgGLn7Xxy32P8AAAAwjNz9L4lbmux//b/+X/+v/7+k9/9fdu558t+es+3/vf9/c/T/+v9l9P/6/zk//8b6/2vvfde/MPX/DGFq/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAAMPI3f/yuMX+BwAAgDnbFWLl7n9F3NJk/9+9/99d4ur/1zNo/3/niYX+X/9/3sjv/9f/b47+X/+/zLr9/0L/Xx+L/n86z+/9//p/Vpta/5+7/5VxS5P9DwAAAB3k7n9V3GL/AwAAwDBy9786brH/AQAAYBi5+18TtzTZ/97/P4n+vyqWifX/3v+v/9/1cen/9f+Hof/X/y/j/f/6/zk/v/5f/89qU+v/c/e/Nm5psv8BAACgg9z9r4tb7H8AAAAYRu7+18ct9j8AAAAMI3f/G+KWJvv/CPr/ywfv/0+t87EM+v5//b/+f9fHpf/X/x+G/l//v4z+f+/+/8w+/zz9/7SeX/+v/2e1qfX/ufvfGLc02f8AAADQQe7+N8Ut9j8AAAAMI3f/m+MW+x8AAACGkbv/LXFLk/2/X/9/2//t/Lj3/69H/7/38+v/9f/6f/2//l//v4z+3/v/5/z8+n/9P6tNrf/P3f/WuKXJ/gcAAIAOcve/LW6x/wEAAGAYufvfHrfY/wAAADCM3P3viFua7P8jeP//Rf3/PfX/ffv/+O6z+v+4E+3/r8hfR/+/Q/+/Wfp//f8y+n/9/+ye/8T5ryj9v/6f1abW/+fuf2fc0mT/AwAAQAe5+98Vt9j/AAAAMIzc/e+OW+x/AAAAGEbu/vfELU32/9H3/97/37j/P9z7/0/q/5P3/8fvq/5f/38A+v8D9/83X7HOT9T/r0X/37D/v4D+X//PalPr/3P3Xxe3NNn/AAAA0EHu/vfGLfY/AAAADCN3//viFvsfAAAAhpG7//1xS5P9r//X/2+9//f+/6L/j99X/b/+/wBG7v9vX+O5vP9/h/7/cDbSz185Sv9/auU/X/+v/2e1qfX/ufs/ELc02f8AAADQQe7+D8Yt9j8AAAAMI3f/9XGL/Q8AAADDyN3/obilyf7X/+v/9f+T7/+vu/jrTf+v/58T/f/k3v+v/595/3/O9vv/6+K3xvv/J9H/x3ec1f8zPVPr/3P3fzhuabL/AQAAoIPc/R+JW+x/AAAAGEbu/hviFvsfAAAAhpG7/6NxS5P9r/+fe/9/v1vjCTr0/5cvevb/3v8fV/+v/9+L/l//v2jW/0/+/f/6f+//1/9zgan1/7n7Pxa3NNn/AAAA0EHu/o/HLfY/AAAADCN3/yfiFvsfAAAAhpG7/8a4pcn+1//Pvf/3/n/9v/5f/z9t+n/9/zL6f/3/nJ+/c/9/Qv/PmqbW/+fu/2Tc0mT/AwAAQAe5+z8Vt9j/AAAAMIzc/Z+OW+x/AAAAGEbu/s/ELU32v/5f/6//1/9fcv9/tf5/of/fl/5f/7+M/l//P+fn79z/L/T/rGlq/X/u/s/GLU32PwAAAHSQu/9zcYv9DwAAAMPI3f/5uMX+BwAAgGHk7v9C3HCvq7b3SEfr1D7fH725/n/y/X9+Ker/9f9lcv2/9/+fo//fm/5f/7+M/l//P+fn1//r/1ltav1/7v4vxi3+/B8AAACGkbv/S3GL/Q8AAADDyN1/Y9xi/wMAAMAwvnzur2cWX4lbmux//f/k+3/v/9f/6//j6v/1/3vR/+v/6791pP8/sG3383N/fv2//p/Vptb/5+6/KW5psv8BAACgg9z9X41b7H8AAAAYRu7+r8Ut9j8AAAAMI3f/1+OWJvtf/3/Q/v/0nr+e/j8+Cfr/Xb++/l//r//X/0+p/z8zav/v/f+Htu1+fu7Pr//X/7Pa1Pr/3P3fiFua7H8AAADoIHf/N+MW+x8AAACGkbv/W3GL/Q8AAADDyN3/7bilyf7X/3v/v/f/6//1//r/TdL/T6f/X+j/9f8X2XY/P/fn1//r/1ltav1/7v7vxC1N9j8AAAB0kLv/u3GL/Q8AAADDyN1/c9xi/wMAAMAwcvd/L25psv9H7v+X/TT9/w79v/5/Men+/+Suz6f+X/+/F/2//n+h/z+0bffzc39+/b/+n9Wm1v/n7v9+3NJk/wMAAEAHuft/ELfY/wAAADCM3P0/jFvsfwAAABhG7v4fxS1N9v/I/f8yR93/n4qr/1+3/7/p//Nzp/8///fp/+P31fv/9f8HoP/X/y/0/4e27X5+7s+v/9f/s9qW+v9Ti336/9z9P45bmux/AAAA6CB3/0/iFvsfAAAAhpG7/5a4xf4HAACAYeTu/2ncMs7+v/8NS35Q/+/9/97/r//X/+v/N0n/r/9fRv+v/5/z8+v/9f+sNrX3/+fu/1ncMs7+BwAAgPZy9/88brH/AQAAYBi5+38Rt9j/AAAAMIzc/b+MW5rsf/2//l//36r/v2yh/9f/HzP9v/5/Gf2//n/Oz6//1/+z2tT6/9z9v4pbmux/AAAA6CB3/6/jFvsfAAAAhpG7/zdxi/0PAAAAw8jd/9u4pcn+1//r//X/rfp/7//X/x87/b/+fxn9v/5/zs+v/9f/s9rU+v/c/b+LW5rsfwAAAOggd//v4xb7HwAAAIaRu/8PcYv9DwAAAMPI3f/HuKXJ/tf/6//1/1Pt/3e+BvX/+n/9/3L6f/3/Qv9/aNvu5+f+/J36/9N7/P36f9Yxtf4/d/+tcUuT/Q8AAAAd5O7/U9xi/wMAAMAwcvf/OW6x/wEAAGAYuftvi1ua7P/59P9X6//1/+v3/6dH6P+9/1//r/9fh/7/0vr/M/v9RP3/Wo6+/7/q3F/1//N4/rH7/ytXfvz6f9Yxtf4/d/9f4pYm+x8AAAA6yN3/17jF/gcAAIBh5O7/W9xi/wMAAMAwcvf/PW7ZZ/+fPJanOj7z6f+9/386/f+p+rgn2/8P8f5//b/+X/+/Dv2/9/8v5tn/72q7vf9/ns+/vP+/x8z7/93v/9+L/p91TK3/z93/j7jFn/8DAADAMHL3/zNusf8BAABgGLn7/xW32P8AAAAwjNz9t8ctTfa//l//P+T7//X/+n/9/2S07P/z626j/f/Ou7n1/ztm2P/v8/5//f+cnn+G7/+/48JvLO//L9P/cySm1v/n7r8jbmmy/wEAAKCD3P3/jlvsfwAAABhG7v7/xC32PwAAAAwjd/9/45Ym+1//r//X/+v/9f/6/01q2f97///a9P/6/zk//wz7/128/5/jMLX+P3f//wIAAP//1d0Z6g==")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0)
fsync(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)
truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r3, r4, 0x0, 0x20fffe82)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000001400), 0x1, 0x7b0, &(0x7f0000001c00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
creat(&(0x7f0000000000)='./file1\x00', 0xb8)

12m11.089784322s ago: executing program 32 (id=12):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x3200092, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0)
fsync(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)
truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r3, r4, 0x0, 0x20fffe82)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000001400), 0x1, 0x7b0, &(0x7f0000001c00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
creat(&(0x7f0000000000)='./file1\x00', 0xb8)

8m30.147203087s ago: executing program 4 (id=952):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8m28.392836824s ago: executing program 4 (id=955):
r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x81}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x3, 0x0, 0x0)

8m24.998355445s ago: executing program 4 (id=963):
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054)
lseek(0xffffffffffffffff, 0x7d, 0x1)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)

8m23.038529738s ago: executing program 4 (id=971):
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)

8m22.05710056s ago: executing program 4 (id=976):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x28, 0x2, 0x3}, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x7a)
socket$inet_mptcp(0x2, 0x1, 0x106)
landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0)
fsopen(0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x10)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000127000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2})
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00')
read$FUSE(r2, &(0x7f00000004c0)={0x2020}, 0x2020)

8m9.699086653s ago: executing program 4 (id=997):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000ac0), 0x40001de, 0x10002, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
writev(r0, &(0x7f0000002040)=[{&(0x7f0000000b40)="02bf386f0220c0b8f0b71aa8715057bc56cf4083b600a9fa2085f8497bc76bc7ab703e184d52f2b41a6320a5116ba5d533fd3fbf375a0c241a213d9f10652681a10fdd28bb2c9cbf58867087f85cb1b5b64a94057d14e7eedc2c5c5d5771670c2abedb2939f3073cc677ad954d46ea12152529d5a86912d7d354ec5032ce37cc3122eafacb621dd6b7c8282692e11e33d06c78227ebba6c164c7f8f9a16268a88edce3206fdecae66acfcb3c540af6691ea4b733d3934bc579257bdb12cc683d1b93b3f932", 0xc5}], 0x1)

7m53.81996052s ago: executing program 33 (id=997):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000ac0), 0x40001de, 0x10002, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
writev(r0, &(0x7f0000002040)=[{&(0x7f0000000b40)="02bf386f0220c0b8f0b71aa8715057bc56cf4083b600a9fa2085f8497bc76bc7ab703e184d52f2b41a6320a5116ba5d533fd3fbf375a0c241a213d9f10652681a10fdd28bb2c9cbf58867087f85cb1b5b64a94057d14e7eedc2c5c5d5771670c2abedb2939f3073cc677ad954d46ea12152529d5a86912d7d354ec5032ce37cc3122eafacb621dd6b7c8282692e11e33d06c78227ebba6c164c7f8f9a16268a88edce3206fdecae66acfcb3c540af6691ea4b733d3934bc579257bdb12cc683d1b93b3f932", 0xc5}], 0x1)

7m4.546041214s ago: executing program 2 (id=1208):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb}, 0x94)
r0 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)

7m3.203362108s ago: executing program 2 (id=1219):
syz_open_procfs(0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000506010100000000000000000300000a050001000700000005000100070000000500010007cf532fb251610000000900da7873797a3200000000090003007379"], 0x44}, 0x1, 0x0, 0x0, 0xc040}, 0x4048810)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendto$unix(r2, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0)
recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
r4 = signalfd4(r2, &(0x7f0000000100)={[0x5]}, 0x8, 0x80800)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000600)={0x0, r4, 0x3, 0x0, 0x7, 0xfffffffffffffffd})
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, &(0x7f00000023c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44014}, 0x5)
r6 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f00000101c0)={0x0, 0x1, 0x6, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"})

7m1.818785054s ago: executing program 2 (id=1226):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2140, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x9, 0xc, 0x9, 0x2, 0x0, 0x70bd29, 0x25dfdbfd}, 0x10}}, 0x40000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x9, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0xff, 0x7, 0xe4, 0x4, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x9, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0x2, 0x4, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x8, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x92, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x800003fc, 0x4000006, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1d], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0xb, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x5, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x5, 0x3, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000002c0)=0x550)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xb, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x385584689564a4db}, 0x44054)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6m58.797474112s ago: executing program 2 (id=1233):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

6m58.756492793s ago: executing program 2 (id=1234):
arch_prctl$ARCH_GET_GS(0x1004, 0xfffffffffffffffe)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x1, 0x4, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20)

6m57.854476933s ago: executing program 2 (id=1238):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
socket$inet6(0xa, 0x1, 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

6m42.57485049s ago: executing program 34 (id=1238):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
socket$inet6(0xa, 0x1, 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

12.108155236s ago: executing program 1 (id=2285):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c)
r1 = dup2(r0, r0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x23, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x5, 0x7]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10)
write(r3, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$GTP_CMD_GETPDP(r1, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000008380), 0x400000000000174, 0x4008890)

10.935115024s ago: executing program 1 (id=2291):
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8)
r2 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_persistent(0x16, r1, r2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mlockall(0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
munlockall()
bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48)

10.307970544s ago: executing program 1 (id=2292):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0)
close(r3)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40050)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0))
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)

10.095192452s ago: executing program 6 (id=2293):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17810000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x4028001}, 0x8000002)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

9.21472647s ago: executing program 1 (id=2295):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009)
socket$inet6(0xa, 0x3, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', &(0x7f0000000540), 0x1000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

9.21033944s ago: executing program 6 (id=2297):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004", @ANYRES32=0x1, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32], 0x50)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x406, 0x3}, &(0x7f0000000340), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16, @ANYBLOB="000426bd7000fbdbdf251400000008000300", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4060040)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x6, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x81}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r5, 0x218)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000440000/0x3000)=nil, 0x3000, 0x12)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
clock_gettime(0x6, &(0x7f0000000180))
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)

8.773340965s ago: executing program 5 (id=2298):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2140, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000340)={0x0, 0x80}}, 0x24000000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x9, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0xff, 0x7, 0xe4, 0x4, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x9, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0x2, 0x4, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x8, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x92, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x800003fc, 0x4000006, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1d], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0xb, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x5, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x5, 0x3, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000002c0)=0x550)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xb, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x385584689564a4db}, 0x44054)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

7.728050159s ago: executing program 3 (id=2300):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000240)={0x1fa40000, 0x5, 0x5})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x400)
close_range(r3, 0xffffffffffffffff, 0x0)

6.707691922s ago: executing program 1 (id=2301):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x40, 0xe, 0x16, "f2f2c8593841d996d18cce3721f75a2f0947a658dde9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\a(\x00'], 0x0, 0x0})

6.691076593s ago: executing program 3 (id=2302):
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8)
r2 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_persistent(0x16, r1, r2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mlockall(0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
munlockall()
bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48)

6.567237096s ago: executing program 7 (id=2303):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000007c0)=[@in={0x2, 0x4e20, @multicast2}], 0x10)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)
connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88)
close(r5)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

6.566928216s ago: executing program 6 (id=2304):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2140, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x9, 0xc, 0x9, 0x2, 0x0, 0x70bd29, 0x25dfdbfd}, 0x10}}, 0x40000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x9, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0xff, 0x7, 0xe4, 0x4, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x9, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0x2, 0x4, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x8, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x92, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x800003fc, 0x4000006, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1d], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0xb, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x5, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x5, 0x3, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000002c0)=0x550)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x385584689564a4db}, 0x44054)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5.562085019s ago: executing program 7 (id=2305):
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe)
setfsgid(0xee00)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='s\x8e2\xc5O\xc5', 0x0, 0x0)
ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]})
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)=ANY=[@ANYRES8=r2], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_tcp_buf(r6, 0x6, 0xb, &(0x7f0000001440)=""/134, &(0x7f0000001500)=0x86)
pipe2(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000b00), 0x91)
vmsplice(r7, &(0x7f0000001400)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, 0xa)

5.292692228s ago: executing program 6 (id=2306):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

4.59749194s ago: executing program 6 (id=2307):
landlock_create_ruleset(0x0, 0x0, 0x3)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)

4.59637301s ago: executing program 7 (id=2308):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x6b9f, 0x4)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={<r1=>0x0, 0x0, 0x8000}, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0x9, 0x6}, &(0x7f0000000240)=0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r5 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r7, 0x5, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)={0x30, r8, 0x1, 0x70b929, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40)

3.530675125s ago: executing program 1 (id=2309):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
r1 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e04114098af000000190902120001000000000904"], 0x0)
close_range(r1, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000000))
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfYno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])
ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f00000000c0))
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}})

3.503145036s ago: executing program 3 (id=2310):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000008, 0x50, 0xffffffffffffffff, 0x4000)
syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000000c0)={0x1fffffff800, 0x10000002000002, 0x7})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x7, 0x4)
syz_open_dev$radio(&(0x7f0000019140), 0x1, 0x2)
r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"})

3.500557876s ago: executing program 7 (id=2311):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010"], 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x2003)
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000340)=0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))

3.457607047s ago: executing program 5 (id=2312):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000240)={0x1fa40000, 0x5, 0x5})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x400)
close_range(r3, 0xffffffffffffffff, 0x0)

2.44965182s ago: executing program 3 (id=2313):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3})
socket$inet6(0xa, 0x80001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000))
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000006)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000})

2.440777861s ago: executing program 5 (id=2314):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1.675072256s ago: executing program 3 (id=2315):
kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5", 0x7c, 0x5, 0xff}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0", 0xe6, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8", 0x9}, {&(0x7f0000000280)}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.156486062s ago: executing program 5 (id=2316):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0)
io_uring_setup(0x7d98, 0x0)
open(0x0, 0x345142, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x804)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x87)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00')
read$eventfd(r4, &(0x7f0000000100), 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0xea5bc50b6199d77e)

240.188262ms ago: executing program 5 (id=2317):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108)

164.371895ms ago: executing program 7 (id=2318):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

163.822005ms ago: executing program 6 (id=2319):
syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000388a80e008100450008060104600900000000000000aaaa57800000000000"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9084)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x7fffffff)

103.267447ms ago: executing program 5 (id=2320):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

96.886587ms ago: executing program 7 (id=2321):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x6b9f, 0x4)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={<r1=>0x0, 0x0, 0x8000}, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0x9, 0x6}, &(0x7f0000000240)=0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r5 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r7, 0x5, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)={0x30, r8, 0x1, 0x70b929, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40)

0s ago: executing program 3 (id=2322):
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8)
r1 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_persistent(0x16, r0, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, r4, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mlockall(0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
munlockall()
bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48)

kernel console output (not intermixed with test programs):

 number 2 using dummy_hcd
[  175.289572][ T4230] usb 3-1: Using ep0 maxpacket: 32
[  175.780927][ T4786] Bluetooth: hci1: command 0x0406 tx timeout
[  175.839538][ T4786] Bluetooth: hci0: command 0x0406 tx timeout
[  175.857800][ T4786] Bluetooth: hci2: command 0x0406 tx timeout
[  175.866165][ T4786] Bluetooth: hci3: command 0x0406 tx timeout
[  175.909802][ T4230] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  175.912390][ T5252] attempt to access beyond end of device
[  175.912390][ T5252] loop5: rw=1, want=1041, limit=128
[  175.917991][ T4230] usb 3-1: config 0 has no interface number 0
[  175.918028][ T4230] usb 3-1: config 0 interface 184 has no altsetting 0
[  176.037183][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.539'.
[  176.097937][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'.
[  176.129649][ T4230] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  176.131256][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.541'.
[  176.138757][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.205226][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'.
[  176.214988][ T6360] loop5: detected capacity change from 0 to 512
[  176.235075][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.541'.
[  176.239536][ T4230] usb 3-1: Product: syz
[  176.248137][ T4230] usb 3-1: Manufacturer: syz
[  176.263928][ T4230] usb 3-1: SerialNumber: syz
[  176.283645][ T4230] usb 3-1: config 0 descriptor??
[  176.340592][ T4230] smsc75xx v1.0.0
[  176.344573][ T6360] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  176.370770][ T6360] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  177.047206][ T6376] loop3: detected capacity change from 0 to 512
[  178.308019][ T4230] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  178.348451][ T4230] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  178.364171][ T4230] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  178.375645][ T4230] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  178.386507][ T4230] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  178.392423][ T6378] loop1: detected capacity change from 0 to 32768
[  178.457041][ T4230] smsc75xx: probe of 3-1:0.184 failed with error -71
[  178.482819][ T6392] loop4: detected capacity change from 0 to 128
[  180.632682][ T6407] binder: 6402:6407 unknown command 1074553619
[  180.661634][ T4230] usb 3-1: USB disconnect, device number 2
[  180.674401][ T6407] binder: 6402:6407 ioctl c0306201 200000000140 returned -22
[  180.762715][ T4506] Bluetooth: hci4: command 0x0406 tx timeout
[  180.822553][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.555'.
[  181.135202][ T6417] loop5: detected capacity change from 0 to 512
[  181.259571][ T4288] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  181.284901][ T6417] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  181.309915][ T6417] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.789819][ T4288] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[  181.830267][ T4288] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  181.853686][ T4288] usb 3-1: config 0 interface 0 has no altsetting 0
[  181.895750][ T4288] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00
[  181.918514][ T4288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.949199][ T4288] usb 3-1: config 0 descriptor??
[  182.038609][ T6431] kvm: pic: non byte read
[  182.077898][ T6431] kvm: pic: non byte read
[  182.092835][ T6431] kvm: pic: non byte read
[  182.343174][ T6429] loop1: detected capacity change from 0 to 32768
[  182.599976][ T4228] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  182.659691][ T4288] usb 3-1: string descriptor 0 read error: -71
[  182.980171][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.080946][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.331570][ T4288] uclogic 0003:5543:0081.0005: failed retrieving string descriptor #200: -71
[  183.340819][ T4288] uclogic 0003:5543:0081.0005: failed retrieving pen parameters: -71
[  183.348898][ T4288] uclogic 0003:5543:0081.0005: failed probing pen v2 parameters: -71
[  183.357675][ T4288] uclogic 0003:5543:0081.0005: failed probing parameters: -71
[  183.365761][ T4288] uclogic: probe of 0003:5543:0081.0005 failed with error -71
[  183.370583][ T4228] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  183.377151][ T4288] usb 3-1: USB disconnect, device number 3
[  183.799517][ T4228] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  183.967210][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.988339][ T4228] usb 6-1: config 0 descriptor??
[  184.078757][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'.
[  184.471951][ T4228] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  184.512327][ T4228] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  184.621463][ T6464] loop1: detected capacity change from 0 to 512
[  185.632904][ T6478] loop1: detected capacity change from 0 to 32768
[  185.841909][ T1109] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  186.279612][ T1109] usb 5-1: config 0 has no interfaces?
[  186.739560][ T1109] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  186.748628][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.761895][ T1109] usb 5-1: config 0 descriptor??
[  186.783664][ T4506] usb 6-1: USB disconnect, device number 2
[  186.800880][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.581'.
[  187.145360][ T4230] usb 5-1: USB disconnect, device number 5
[  187.539798][ T1109] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  187.849541][ T1109] usb 4-1: Using ep0 maxpacket: 8
[  187.886828][ T6508] loop4: detected capacity change from 0 to 512
[  187.899666][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'.
[  187.908543][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'.
[  187.918865][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'.
[  187.928360][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'.
[  187.999640][ T1109] usb 4-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.017179][ T1109] usb 4-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  188.031184][ T1109] usb 4-1: config 0 interface 0 has no altsetting 0
[  188.037885][ T1109] usb 4-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00
[  188.048375][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.085227][ T1109] usb 4-1: config 0 descriptor??
[  188.951494][ T1109] wacom 0003:056A:0336.0007: unknown main item tag 0x2
[  188.958403][ T1109] wacom 0003:056A:0336.0007: unknown main item tag 0x0
[  189.062858][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.595'.
[  189.304910][ T1109] wacom 0003:056A:0336.0007: unknown main item tag 0x0
[  189.312315][ T1109] wacom 0003:056A:0336.0007: unknown main item tag 0x0
[  189.319209][ T1109] wacom 0003:056A:0336.0007: unknown main item tag 0x0
[  189.326447][ T1109] wacom 0003:056A:0336.0007: unknown main item tag 0x0
[  189.341357][ T1109] wacom 0003:056A:0336.0007: hidraw0: USB HID v0.04 Device [HID 056a:0336] on usb-dummy_hcd.3-1/input0
[  189.356895][ T1109] usb 4-1: USB disconnect, device number 3
[  189.406803][ T6520] loop5: detected capacity change from 0 to 32768
[  189.559614][ T6520] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  189.608106][ T6520] BTRFS info (device loop5): setting nodatasum
[  189.700540][ T6520] BTRFS info (device loop5): force zlib compression, level 3
[  189.839073][ T6520] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  190.035921][ T6520] BTRFS info (device loop5): use lzo compression, level 0
[  190.178280][ T6520] BTRFS info (device loop5): turning on flush-on-commit
[  190.310006][ T6520] BTRFS info (device loop5): enabling auto defrag
[  190.352110][ T6520] BTRFS info (device loop5): max_inline at 4096
[  190.353549][ T6545] loop3: detected capacity change from 0 to 512
[  190.358395][ T6520] BTRFS info (device loop5): using free space tree
[  190.358414][ T6520] BTRFS info (device loop5): has skinny extents
[  190.458806][ T6548] fido_id[6548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  190.484624][ T4231] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  190.740172][ T4231] usb 3-1: Using ep0 maxpacket: 8
[  190.849195][ T6520] BTRFS info (device loop5): enabling ssd optimizations
[  190.871489][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  190.900238][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  190.903094][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'.
[  190.934731][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  191.000292][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'.
[  191.011605][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'.
[  191.049854][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'.
[  191.144078][ T4231] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  191.155817][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.176668][ T4231] usb 3-1: Product: syz
[  191.186579][ T4231] usb 3-1: Manufacturer: syz
[  191.194280][ T4231] usb 3-1: SerialNumber: syz
[  191.221469][ T4231] usb 3-1: config 0 descriptor??
[  191.246395][ T6542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  191.340547][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'.
[  191.513759][ T6589] usb 3-1: USB disconnect, device number 4
[  191.829429][ T6606] loop5: detected capacity change from 0 to 512
[  191.858547][ T6606] EXT4-fs (loop5): Ignoring removed nobh option
[  191.899776][ T6606] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  191.939744][ T4230] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  192.116946][ T6606] EXT4-fs (loop5): 1 truncate cleaned up
[  192.173721][ T6606] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  192.196486][ T4230] usb 5-1: Using ep0 maxpacket: 8
[  192.320482][ T4230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  192.453868][ T4230] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  192.599052][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.812344][ T4230] usb 5-1: config 0 descriptor??
[  192.977725][ T6622] usb usb7: usbfs: process 6622 (syz.2.617) did not claim interface 56 before use
[  193.062210][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'.
[  193.079141][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'.
[  193.100325][ T6588] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  193.114364][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'.
[  193.123974][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'.
[  193.137795][ T6629] loop5: detected capacity change from 0 to 512
[  193.156958][ T6629] EXT4-fs (loop5): Ignoring removed nobh option
[  193.163931][ T6629] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  193.184166][ T6629] EXT4-fs (loop5): 1 truncate cleaned up
[  193.191617][ T6629] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  193.291021][ T4230] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x1
[  193.301518][ T4230] greenasia 0003:0E8F:0012.0008: hidraw0: USB HID v0.09 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0
[  193.313006][ T4230] greenasia 0003:0E8F:0012.0008: no inputs found
[  193.349635][ T6588] usb 4-1: Using ep0 maxpacket: 32
[  193.469684][ T6588] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  193.478133][ T6588] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  193.486827][ T6588] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  193.496293][ T6588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  193.510682][ T6588] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  193.514915][ T4230] usb 5-1: USB disconnect, device number 6
[  193.520717][ T6588] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  193.520759][ T6588] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  193.548913][ T6588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.561390][ T6588] usb 4-1: config 0 descriptor??
[  193.580166][ T6616] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  193.830681][ T6588] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  193.889143][ T6639] loop1: detected capacity change from 0 to 512
[  194.046410][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.052762][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.097538][ T4506] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  194.157300][ T6589] usb 4-1: USB disconnect, device number 4
[  194.223846][ T6589] usblp0: removed
[  194.359509][ T4506] usb 3-1: Using ep0 maxpacket: 16
[  194.493497][ T4506] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.513914][ T4506] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.544993][ T4506] usb 3-1: config 0 interface 0 has no altsetting 0
[  194.551973][ T4506] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  194.570583][ T4506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.580215][ T4290] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  194.591393][ T4506] usb 3-1: config 0 descriptor??
[  194.600734][ T6651] process 'syz.4.627' launched './file1' with NULL argv: empty string added
[  194.778268][ T6656] loop4: detected capacity change from 0 to 512
[  194.859752][ T4290] usb 6-1: Using ep0 maxpacket: 16
[  194.959591][ T6589] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  194.999721][ T4290] usb 6-1: config 0 interface 0 has no altsetting 0
[  195.007547][ T4290] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00
[  195.017167][ T4290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.028449][ T4290] usb 6-1: config 0 descriptor??
[  195.133960][ T4506] hid (null): unknown global tag 0xe
[  195.142383][ T4506] hid (null): invalid report_count 1432730018
[  195.216244][ T6589] usb 4-1: Using ep0 maxpacket: 32
[  195.254339][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'.
[  195.339659][ T6589] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  195.348121][ T6589] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  195.356848][ T6589] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  195.365956][ T6589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  195.377057][ T6589] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  195.387045][ T6589] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  195.400081][ T6589] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  195.409109][ T6589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.422116][ T6589] usb 4-1: config 0 descriptor??
[  195.440902][ T6654] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  195.684281][ T6589] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  195.730637][ T6644] udc-core: couldn't find an available UDC or it's busy
[  195.737601][ T6644] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  195.809750][ T4290] usb 6-1: string descriptor 0 read error: -71
[  195.844921][ T4290] uclogic 0003:5543:006E.000A: failed retrieving string descriptor #200: -71
[  195.857030][ T4290] uclogic 0003:5543:006E.000A: failed retrieving pen parameters: -71
[  195.867580][ T4290] uclogic 0003:5543:006E.000A: failed probing pen v2 parameters: -71
[  195.876471][ T4290] uclogic 0003:5543:006E.000A: failed probing parameters: -71
[  195.884352][ T4290] uclogic: probe of 0003:5543:006E.000A failed with error -71
[  195.894982][ T4290] usb 6-1: USB disconnect, device number 3
[  195.930211][ T4787] usb 4-1: USB disconnect, device number 5
[  195.938903][ T4787] usblp0: removed
[  196.149677][ T6589] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  196.306011][ T6671] loop5: detected capacity change from 0 to 512
[  196.325341][ T6671] EXT4-fs (loop5): Ignoring removed nobh option
[  196.331965][ T6671] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  196.354223][ T6671] EXT4-fs (loop5): 1 truncate cleaned up
[  196.360147][ T6671] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  196.509805][ T6589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.520377][ T6589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  196.532471][ T6589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.542727][ T6589] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  196.552084][ T6589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.568196][ T6589] usb 2-1: config 0 descriptor??
[  196.715669][ T4290] usb 3-1: USB disconnect, device number 5
[  196.885936][ T6692] loop3: detected capacity change from 0 to 512
[  196.912966][ T6694] __nla_validate_parse: 3 callbacks suppressed
[  196.912976][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'.
[  196.928957][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'.
[  196.938931][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'.
[  196.947778][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'.
[  197.049617][ T4787] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  197.051335][ T6589] hid-picolcd 0003:04D8:F002.000B: item fetching failed at offset 3/5
[  197.077267][ T6589] hid-picolcd 0003:04D8:F002.000B: device report parse failed
[  197.085997][ T6589] hid-picolcd: probe of 0003:04D8:F002.000B failed with error -22
[  197.290533][ T6586] usb 2-1: USB disconnect, device number 3
[  197.311677][ T4787] usb 5-1: Using ep0 maxpacket: 16
[  197.451503][ T4787] usb 5-1: config index 0 descriptor too short (expected 52, got 36)
[  197.469942][ T4787] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  197.480084][ T4787] usb 5-1: config 0 has no interface number 0
[  197.486245][ T4787] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  197.497644][ T4787] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  197.724230][ T4787] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  197.769865][ T4787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.777885][ T4787] usb 5-1: Product: syz
[  197.789517][ T4787] usb 5-1: Manufacturer: syz
[  197.800278][ T4787] usb 5-1: SerialNumber: syz
[  197.812227][ T4787] usb 5-1: config 0 descriptor??
[  197.849882][ T6690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  197.864501][ T6690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  198.103954][ T6690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  198.122463][ T6690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  198.447122][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.650'.
[  198.584805][ T4290] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  198.630669][ T6722] netlink: 24 bytes leftover after parsing attributes in process `syz.5.652'.
[  198.639805][ T4787] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  198.663689][ T4787] asix: probe of 5-1:0.251 failed with error -524
[  198.725807][ T6723] 9pnet: p9_fd_create_tcp (6723): problem connecting socket to 127.0.0.1
[  198.771057][ T6723] 9pnet: p9_fd_create_tcp (6723): problem connecting socket to 127.0.0.1
[  198.820320][ T6723] 9pnet: p9_fd_create_tcp (6723): problem connecting socket to 127.0.0.1
[  198.844196][ T6589] usb 5-1: USB disconnect, device number 7
[  198.985676][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'.
[  199.463972][ T6745] loop3: detected capacity change from 0 to 512
[  199.703502][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.5.662'.
[  199.872255][ T6761] loop5: detected capacity change from 0 to 512
[  199.986324][ T6761] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  200.006641][ T6761] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  200.995551][ T6785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.669'.
[  201.269624][ T4290] usb 2-1: unable to get BOS descriptor or descriptor too short
[  201.374648][ T4290] usb 2-1: unable to read config index 0 descriptor/start: -71
[  201.404704][ T4290] usb 2-1: can't read configurations, error -71
[  201.615857][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.675'.
[  202.469609][ T6809] loop2: detected capacity change from 0 to 512
[  202.538360][ T6812] loop1: detected capacity change from 0 to 512
[  202.781369][ T6817] loop5: detected capacity change from 0 to 512
[  203.169619][ T6586] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  203.404827][ T6817] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  203.467259][ T6817] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  203.503258][ T6586] usb 4-1: Using ep0 maxpacket: 8
[  203.619970][ T6586] usb 4-1: config 3 has an invalid interface number: 45 but max is 0
[  203.638374][ T6586] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  203.732008][ T6586] usb 4-1: config 3 has no interface number 0
[  203.762441][ T6586] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  203.820987][ T6586] usb 4-1: config 3 interface 45 has no altsetting 0
[  203.989830][ T6586] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  203.998918][ T6586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.007051][ T6589] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  204.016519][ T6586] usb 4-1: Product: syz
[  204.024297][ T6586] usb 4-1: Manufacturer: syz
[  204.032424][ T6586] usb 4-1: SerialNumber: syz
[  204.249768][ T6589] usb 5-1: Using ep0 maxpacket: 32
[  204.369911][ T6589] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  204.380181][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.5.689'.
[  204.390695][ T6589] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  204.409043][ T6589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.438631][ T6589] usb 5-1: config 0 descriptor??
[  204.459909][ T6826] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  204.480673][ T6589] hub 5-1:0.0: bad descriptor, ignoring hub
[  204.486641][ T6589] hub: probe of 5-1:0.0 failed with error -5
[  204.509603][ T6589] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  204.555909][ T6586] usb 4-1: USB disconnect, device number 6
[  205.059861][ T4506] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  205.362055][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  205.511030][ T4506] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  205.608065][ T4506] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  205.791095][ T4506] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  205.935641][ T6865] loop3: detected capacity change from 0 to 512
[  205.945804][ T4506] usb 2-1: config 0 interface 0 has no altsetting 0
[  205.970332][ T4506] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  206.015171][ T4506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.151454][ T4506] usb 2-1: config 0 descriptor??
[  206.360712][ T6853] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  206.566795][ T4290] usb 5-1: USB disconnect, device number 8
[  206.902844][ T4506] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[  206.932732][ T4506] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[  207.478315][ T6589] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  207.479213][ T4506] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[  207.498124][ T4506] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[  207.506152][ T4506] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[  207.513505][ T4506] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[  207.520800][ T4506] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[  207.541789][ T4506] samsung 0003:0419:0001.000C: hidraw0: USB HID v1.01 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0
[  207.574631][ T4506] usb 2-1: USB disconnect, device number 6
[  207.591553][ T6589] hid-generic 0000:0000:0000.000D: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  207.687836][ T6894] fido_id[6894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  208.574514][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.702'.
[  208.880827][ T4506] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  209.430125][ T4506] usb 2-1: unable to get BOS descriptor or descriptor too short
[  209.490345][ T4506] usb 2-1: not running at top speed; connect to a high speed hub
[  209.652724][ T4506] usb 2-1: config 74 has an invalid interface number: 193 but max is 0
[  209.669273][ T4506] usb 2-1: config 74 has an invalid descriptor of length 244, skipping remainder of the config
[  209.699587][ T4506] usb 2-1: config 74 has no interface number 0
[  209.731584][ T4506] usb 2-1: config 74 interface 193 altsetting 5 has an invalid endpoint with address 0x1F, skipping
[  209.799542][ T4506] usb 2-1: config 74 interface 193 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  209.838085][ T4506] usb 2-1: config 74 interface 193 has no altsetting 0
[  210.035951][ T4506] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=d3.89
[  210.186935][ T6923] loop3: detected capacity change from 0 to 512
[  210.456255][ T6589] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  211.119678][ T6589] usb 3-1: config 1 has an invalid interface number: 230 but max is 1
[  211.390324][ T6589] usb 3-1: config 1 has no interface number 0
[  211.439895][ T6589] usb 3-1: config 1 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  211.446521][ T4506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.454105][ T6589] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  211.471685][ T6589] usb 3-1: config 1 interface 230 has no altsetting 0
[  211.491813][ T4506] usb 2-1: Product: syz
[  211.498739][ T4506] usb 2-1: Manufacturer: syz
[  211.503724][ T4506] usb 2-1: SerialNumber: syz
[  211.590003][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.716'.
[  211.630787][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  211.665302][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.689065][ T6589] usb 3-1: Product: syz
[  211.702850][ T6589] usb 3-1: Manufacturer: syz
[  211.707343][ T4506] usb 2-1: bad CDC descriptors
[  211.707969][ T6589] usb 3-1: SerialNumber: syz
[  211.725673][ T4506] usb 2-1: bad CDC descriptors
[  211.731164][ T4506] cdc_acm 2-1:74.193: Zero length descriptor references
[  211.738297][ T4506] cdc_acm: probe of 2-1:74.193 failed with error -22
[  211.749676][ T4506] usb 2-1: USB disconnect, device number 7
[  211.764843][ T6589] cdc_mbim 3-1:1.230: skipping garbage
[  211.845863][ T6944] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  211.859712][ T6944] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  211.968970][ T6924] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  212.094692][ T4230] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  212.489701][ T4230] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.509721][ T4230] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  212.560485][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0
[  212.567162][ T4230] usb 5-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00
[  212.608924][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.640153][ T6924] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  212.651256][ T4230] usb 5-1: config 0 descriptor??
[  212.879888][ T6589] cdc_mbim 3-1:1.230: bind() failure
[  213.009944][ T6589] cdc_ncm: probe of 3-1:1.1 failed with error -71
[  213.045016][ T6589] cdc_mbim: probe of 3-1:1.1 failed with error -71
[  213.070388][ T6589] usbtest: probe of 3-1:1.1 failed with error -71
[  213.112119][ T6589] usb 3-1: USB disconnect, device number 6
[  213.338315][ T6969] loop3: detected capacity change from 0 to 512
[  213.379700][ T4230] usbhid 5-1:0.0: can't add hid device: -71
[  213.399664][ T4230] usbhid: probe of 5-1:0.0 failed with error -71
[  213.407702][ T4230] usb 5-1: USB disconnect, device number 9
[  213.899917][ T6974] loop6: detected capacity change from 0 to 7
[  215.644865][ T4513] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  215.920163][ T4513] usb 3-1: Using ep0 maxpacket: 32
[  216.100683][ T4513] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  216.148515][ T4513] usb 3-1: config 0 has no interface number 0
[  216.490447][ T4513] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  216.567400][ T4513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.599674][ T7008] Restarting kernel threads ... 
[  216.609729][ T4513] usb 3-1: Product: syz
[  216.618840][ T4513] usb 3-1: Manufacturer: syz
[  216.623899][ T7008] done.
[  216.659630][ T4513] usb 3-1: SerialNumber: syz
[  216.695655][ T4513] usb 3-1: config 0 descriptor??
[  216.766342][ T4513] smsc95xx v2.0.0
[  217.022311][ T7024] kvm: emulating exchange as write
[  217.189663][ T4513] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  217.219103][ T4513] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  217.949604][ T4513] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71
[  218.055549][ T4513] smsc95xx: probe of 3-1:0.67 failed with error -71
[  218.127371][ T4513] usb 3-1: USB disconnect, device number 7
[  218.230391][ T7046] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  218.320752][ T7042] APIC base relocation is unsupported by KVM
[  218.321618][ T7042] Disabled LAPIC found during irq injection
[  218.469620][ T6589] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  218.839532][ T4230] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  218.839710][ T6589] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.870957][ T6589] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  218.884500][ T6589] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  219.077568][ T6589] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  219.089679][ T4230] usb 3-1: Using ep0 maxpacket: 32
[  219.096670][ T6589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.113352][ T6589] usb 6-1: Product: syz
[  219.122178][ T6589] usb 6-1: Manufacturer: syz
[  219.126793][ T6589] usb 6-1: SerialNumber: syz
[  219.202634][ T6589] cdc_mbim 6-1:1.0: skipping garbage
[  219.211283][ T6589] usb 6-1: selecting invalid altsetting 1
[  219.219758][ T4230] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  219.228107][ T4230] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  219.244694][ T4230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  219.253929][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  219.270374][ T4230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  219.284731][ T4230] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  219.303863][ T4230] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  219.313146][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.328605][ T4230] usb 3-1: config 0 descriptor??
[  219.351529][ T7052] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  219.469109][ T6586] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  219.596301][ T4230] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  219.693008][ T7075] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  219.790889][ T1109] usb 3-1: USB disconnect, device number 8
[  219.810061][ T6586] usb 4-1: Using ep0 maxpacket: 16
[  219.822184][ T1109] usblp0: removed
[  219.869803][ T6589] cdc_mbim 6-1:1.0: SET_CRC_MODE failed
[  219.891075][ T6589] cdc_mbim 6-1:1.0: SET_NTB_FORMAT failed
[  219.917454][ T6589] usb 6-1: selecting invalid altsetting 1
[  219.926332][ T6589] cdc_mbim 6-1:1.0: bind() failure
[  219.948824][ T6589] usb 6-1: USB disconnect, device number 4
[  219.970928][ T6586] usb 4-1: unable to get BOS descriptor or descriptor too short
[  220.059817][ T6586] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  220.232404][ T6586] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  220.241765][ T6586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.253108][ T6586] usb 4-1: Product: syz
[  220.257613][ T6586] usb 4-1: Manufacturer: syz
[  220.263426][ T6586] usb 4-1: SerialNumber: syz
[  220.533310][ T6586] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  220.556876][ T6586] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  220.910796][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.5.770'.
[  220.980741][ T6586] usb 4-1: 2:1 : invalid Cluster Descriptor size
[  221.614642][ T6586] usb 4-1: USB disconnect, device number 7
[  221.761572][ T7112] loop4: detected capacity change from 0 to 128
[  222.447349][ T7130] input: syz0 as /devices/virtual/input/input11
[  222.475864][ T7130] input: failed to attach handler leds to device input11, error: -6
[  222.831066][ T7136] binder: BINDER_SET_CONTEXT_MGR already set
[  222.837076][ T7136] binder: 7135:7136 ioctl 4018620d 200000004a80 returned -16
[  223.168985][ T7126] loop1: detected capacity change from 0 to 32768
[  223.282950][ T7126] /dev/loop1: Can't open blockdev
[  224.489559][ T6586] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  224.769708][ T6586] usb 4-1: Using ep0 maxpacket: 32
[  224.909969][ T6586] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  224.927247][ T6586] usb 4-1: config 0 has no interface number 0
[  224.964561][ T6586] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  225.007629][ T6586] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  225.052490][ T7173] binder: BINDER_SET_CONTEXT_MGR already set
[  225.061085][ T6586] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  225.084608][ T7173] binder: 7172:7173 ioctl 4018620d 200000004a80 returned -16
[  225.097491][ T6586] usb 4-1: config 0 interface 196 has no altsetting 0
[  225.269879][ T6586] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  225.304321][ T6586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.344723][ T6586] usb 4-1: Product: syz
[  225.364601][ T6586] usb 4-1: Manufacturer: syz
[  225.393857][ T6586] usb 4-1: SerialNumber: syz
[  225.454932][ T6586] usb 4-1: config 0 descriptor??
[  225.499729][ T7154] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  225.939702][ T7193] loop2: detected capacity change from 0 to 512
[  225.999541][ T6586] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached
[  227.194000][ T7217] binder: 7216:7217 ioctl c0306201 2000000001c0 returned -14
[  227.229593][ T4604] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  227.589301][ T7233] loop2: detected capacity change from 0 to 512
[  227.599792][ T4604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  227.633259][ T4604] usb 6-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00
[  227.634288][ T7234] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer.
[  227.672108][ T4604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.721515][ T4604] usb 6-1: config 0 descriptor??
[  227.759772][ T7206] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  227.786465][ T3854] ipheth 4-1:0.196: ipheth_rx_submit: usb_submit_urb: -90
[  227.988655][ T6589] usb 4-1: USB disconnect, device number 8
[  228.112952][ T6589] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected
[  228.241328][ T4604] cypress 0003:04B4:ED81.000E: unknown main item tag 0x0
[  228.256363][ T4604] cypress 0003:04B4:ED81.000E: unknown main item tag 0x0
[  228.278077][ T4604] cypress 0003:04B4:ED81.000E: item fetching failed at offset 2/44
[  228.304648][ T4604] cypress 0003:04B4:ED81.000E: parse failed
[  228.325981][ T4604] cypress: probe of 0003:04B4:ED81.000E failed with error -22
[  228.442781][ T4506] usb 6-1: USB disconnect, device number 5
[  229.204317][ T7273] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  230.389134][ T7295] sg_write: data in/out 17181660/42 bytes for SCSI command 0x0-- guessing data in;
[  230.389134][ T7295]    program syz.3.820 not setting count and/or reply_len properly
[  230.441636][ T7297] loop1: detected capacity change from 0 to 512
[  230.596176][ T7305] fuse: Unknown parameter '184467440737095516150xffffffffffffffff0x0000000000000226'
[  231.029633][ T4513] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  232.999681][ T4513] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  233.013332][ T4513] usb 4-1: config 0 has no interface number 0
[  233.020728][ T4513] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.031997][ T4513] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.042471][ T4513] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  233.051601][ T4513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.114647][ T4513] usb 4-1: config 0 descriptor??
[  234.190160][ T4513] usbhid 4-1:0.1: can't add hid device: -71
[  234.199223][ T4513] usbhid: probe of 4-1:0.1 failed with error -71
[  234.272333][ T4513] usb 4-1: USB disconnect, device number 9
[  234.277198][ T7344] loop1: detected capacity change from 0 to 512
[  234.569536][ T6586] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  234.590138][ T7350] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  234.809701][ T6586] usb 6-1: Using ep0 maxpacket: 16
[  234.939852][ T6586] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  234.949640][ T6586] usb 6-1: config 0 has no interface number 0
[  234.994444][ T6586] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  235.856198][ T6586] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  236.050336][ T6586] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  236.085275][ T6586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.119355][ T6586] usb 6-1: Product: syz
[  236.141847][ T6586] usb 6-1: Manufacturer: syz
[  236.146741][ T6586] usb 6-1: SerialNumber: syz
[  236.174642][ T6586] usb 6-1: config 0 descriptor??
[  236.225912][ T7348] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  236.240592][ T7348] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  236.315475][ T6589] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  236.970042][ T7348] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  237.002704][ T7348] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  237.769887][ T6586] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  237.799598][ T6589] usb 4-1: Using ep0 maxpacket: 32
[  237.920040][ T6589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.978312][ T6589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.005581][ T6589] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  238.033177][ T6589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.072580][ T6589] usb 4-1: config 0 descriptor??
[  238.853224][ T6589] ft260 0003:0403:6030.000F: unknown main item tag 0x0
[  238.865870][ T6589] ft260 0003:0403:6030.000F: unknown main item tag 0x0
[  238.894330][ T6589] ft260 0003:0403:6030.000F: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0
[  238.973352][ T7387] PKCS7: Unknown OID: [4] 0.0
[  238.978316][ T7387] PKCS7: Only support pkcs7_signedData type
[  239.038272][ T7387] xt_policy: output policy not valid in PREROUTING and INPUT
[  239.547514][ T6586] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  239.560501][ T6586] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  239.570922][ T6586] asix: probe of 6-1:0.34 failed with error -71
[  239.653643][ T6586] usb 6-1: USB disconnect, device number 6
[  240.732956][ T7391] ODEBUG: Out of memory. ODEBUG disabled
[  240.837237][ T6589] ft260 0003:0403:6030.000F: chip code: 0000 0000
[  240.886677][ T6589] ft260 0003:0403:6030.000F: failed to retrieve system status
[  240.915316][ T7397] loop1: detected capacity change from 0 to 512
[  240.926680][ T6589] ft260: probe of 0003:0403:6030.000F failed with error -71
[  241.102237][ T6589] usb 4-1: USB disconnect, device number 10
[  241.209638][ T7409] netlink: 84 bytes leftover after parsing attributes in process `syz.5.854'.
[  241.349064][ T4228] libceph: connect (1)[c::]:6789 error -101
[  241.390177][ T4228] libceph: mon0 (1)[c::]:6789 connect error
[  241.403678][ T4228] libceph: connect (1)[c::]:6789 error -101
[  241.410605][ T4228] libceph: mon0 (1)[c::]:6789 connect error
[  241.690754][ T4228] libceph: connect (1)[c::]:6789 error -101
[  241.788346][ T4228] libceph: mon0 (1)[c::]:6789 connect error
[  241.806424][ T7404] ceph: No mds server is up or the cluster is laggy
[  241.859365][ T7412] fido_id[7412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  241.961120][ T1109] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  242.325015][ T1109] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[  242.334870][ T1109] usb 3-1: config 0 has no interface number 0
[  242.343341][ T1109] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  242.358987][ T4513] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  242.385401][ T1109] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  242.658080][ T1109] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  242.702979][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  242.780037][ T1109] usb 3-1: Manufacturer: syz
[  242.822238][ T1109] usb 3-1: SerialNumber: syz
[  242.941232][ T1109] usb 3-1: config 0 descriptor??
[  243.211718][ T4506] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  243.230116][ T4513] usb 2-1: too many configurations: 10, using maximum allowed: 8
threaded[  243.333014][ T7443] mmap: syz.3.871 (7443) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  243.345051][ T4513] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.361409][ T4513] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  243.369976][ T1109] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71
[  243.376511][ T4513] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  243.380683][ T1109] usbtouchscreen: probe of 3-1:0.214 failed with error -71
[  243.408051][ T1109] usb 3-1: USB disconnect, device number 9
[  243.479588][ T4506] usb 5-1: Using ep0 maxpacket: 8
[  243.484910][ T4513] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.541378][ T4513] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  243.625976][ T4513] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  243.640114][ T4506] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.685137][ T4506] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  243.758145][ T4506] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  243.839877][ T4513] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.857651][ T4506] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  243.892245][ T4513] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  243.964497][ T4513] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  244.121013][ T4506] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[  244.139792][ T4513] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.156688][ T4506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.179734][ T4513] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  244.217525][ T4506] usb 5-1: Product: syz
[  244.243537][ T4513] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  244.258227][ T4506] usb 5-1: Manufacturer: syz
[  244.288576][ T4506] usb 5-1: SerialNumber: syz
[  244.419816][ T4513] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.456104][ T4513] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  244.521199][ T4513] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  244.739971][ T4513] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.808299][ T4513] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  244.901726][ T4513] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  245.127838][ T7448] loop2: detected capacity change from 0 to 512
[  245.159942][ T4506] usb 5-1: incorrect wMaxPacketSize 0x0 for BADD profile
[  245.369951][ T4513] usb 2-1: unable to read config index 6 descriptor/start: -71
[  245.398327][ T4513] usb 2-1: can't read configurations, error -71
[  246.403466][ T4506] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  246.435288][ T4506] usb 5-1: USB disconnect, device number 10
[  247.463258][ T7463] befs: (nullb0): invalid magic header
[  248.540784][ T7466] loop3: detected capacity change from 0 to 128
[  250.711503][ T7471] loop2: detected capacity change from 0 to 4096
[  250.769484][ T4513] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  250.909744][ T7471] /dev/loop2: Can't open blockdev
[  251.316803][ T7475] xt_ecn: cannot match TCP bits for non-tcp packets
[  251.843946][ T7480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.883'.
[  251.858697][ T7482] loop3: detected capacity change from 0 to 512
[  252.050212][ T4513] usb 2-1: unable to get BOS descriptor or descriptor too short
[  252.120009][ T4513] usb 2-1: not running at top speed; connect to a high speed hub
[  252.209988][ T4513] usb 2-1: config 14 has an invalid interface number: 248 but max is 0
[  252.245026][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  252.367021][ T4513] usb 2-1: config 14 has no interface number 0
[  252.374133][ T4513] usb 2-1: config 14 interface 248 has no altsetting 0
[  252.839924][ T4513] usb 2-1: string descriptor 0 read error: -71
[  252.846737][ T4513] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=2a.97
[  252.889271][ T4513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.944351][ T4513] usb 2-1: can't set config #14, error -71
[  253.009006][ T4513] usb 2-1: USB disconnect, device number 9
[  253.589127][ T7502] loop1: detected capacity change from 0 to 512
[  253.859525][ T4513] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  254.219498][ T4513] usb 5-1: Using ep0 maxpacket: 32
[  255.491865][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.498210][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  255.529681][ T4513] usb 5-1: config 0 has an invalid interface number: 146 but max is 0
[  255.537892][ T4513] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.597704][ T4513] usb 5-1: config 0 has no interface number 0
[  255.609692][ T4513] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x1C, skipping
[  255.639531][ T4513] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping
[  255.663455][ T7517] loop2: detected capacity change from 0 to 4096
[  255.670001][ T4513] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping
[  255.801741][ T6586] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  255.889999][ T7517] /dev/loop2: Can't open blockdev
[  255.895685][ T4513] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  256.591946][ T4513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.604679][ T4513] usb 5-1: Product: syz
[  256.609166][ T4513] usb 5-1: Manufacturer: syz
[  256.613865][ T4513] usb 5-1: SerialNumber: syz
[  256.619598][ T6586] usb 2-1: Using ep0 maxpacket: 32
[  256.630353][ T4513] usb 5-1: config 0 descriptor??
[  256.669578][ T4513] usb 5-1: can't set config #0, error -71
[  256.686577][ T4513] usb 5-1: USB disconnect, device number 11
[  256.740870][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.898'.
[  256.759756][ T6586] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92
[  256.785414][ T6586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.916584][ T7527] loop5: detected capacity change from 0 to 512
[  257.257214][ T7527] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  257.402257][ T7527] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  257.641449][ T6586] gspca_main: nw80x-2.14.0 probing 055f:d001
[  259.323809][ T6586] gspca_nw80x: reg_r err -110
[  259.328596][ T6586] nw80x: probe of 2-1:16.0 failed with error -110
[  259.359838][ T6586] usb 2-1: USB disconnect, device number 10
[  260.805111][ T7556] loop1: detected capacity change from 0 to 128
[  260.986743][ T7564] loop2: detected capacity change from 0 to 512
[  261.186273][ T7568] netlink: 68 bytes leftover after parsing attributes in process `syz.3.907'.
[  262.145780][ T7576] loop1: detected capacity change from 0 to 4096
[  262.319535][ T7576] /dev/loop1: Can't open blockdev
[  262.825349][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'.
[  262.907777][ T7586] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  262.963609][ T4198] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  263.448865][ T7593] loop2: detected capacity change from 0 to 512
[  263.460732][ T7590] loop1: detected capacity change from 0 to 512
[  263.595355][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'.
[  265.776517][ T7614] loop1: detected capacity change from 0 to 512
[  266.930759][ T7615] loop2: detected capacity change from 0 to 128
[  269.279463][ T4506] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  269.612368][ T7620] loop4: detected capacity change from 0 to 4096
[  269.651745][ T7624] loop3: detected capacity change from 0 to 512
[  269.681668][ T7620] /dev/loop4: Can't open blockdev
[  271.025422][ T7656] loop4: detected capacity change from 0 to 512
[  272.340736][ T7659] loop5: detected capacity change from 0 to 128
[  273.649553][   T25] audit: type=1800 audit(1780370560.001:18): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.935" name="bus" dev="loop5" ino=1048654 res=0 errno=0
[  273.670072][    C0] vkms_vblank_simulate: vblank timer overrun
[  274.159581][ T7659] Trying to write to read-only block-device loop5
[  274.166800][ T7659] Trying to write to read-only block-device loop5
[  274.173250][ T7659] attempt to access beyond end of device
[  274.173250][ T7659] loop5: rw=2049, want=1041, limit=128
[  274.184660][ T7659] Trying to write to read-only block-device loop5
[  274.773163][ T4326] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  274.839503][ T4326] FAT-fs (loop5): Filesystem has been set read-only
[  274.863762][ T7671] loop3: detected capacity change from 0 to 512
[  274.870618][ T4326] Trying to write to read-only block-device loop5
[  274.887291][ T4326] Trying to write to read-only block-device loop5
[  274.887910][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  274.897384][ T4326] Trying to write to read-only block-device loop5
[  274.938431][ T4326] Trying to write to read-only block-device loop5
[  275.031331][ T7673] loop4: detected capacity change from 0 to 4096
[  275.070470][ T7674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  275.769607][ T7673] /dev/loop4: Can't open blockdev
[  277.222833][ T7698] netlink: 'syz.1.947': attribute type 10 has an invalid length.
[  277.230745][ T7698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.947'.
[  277.240571][ T7698] bridge0: port 3(dummy0) entered blocking state
[  277.247112][ T7698] bridge0: port 3(dummy0) entered disabled state
[  277.263506][ T7698] device dummy0 entered promiscuous mode
[  277.273575][ T7698] bridge0: port 3(dummy0) entered blocking state
[  277.280361][ T7698] bridge0: port 3(dummy0) entered forwarding state
[  277.756820][ T7699] netlink: 132 bytes leftover after parsing attributes in process `syz.5.948'.
[  277.779859][ T7699] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  277.788153][ T7699] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  277.796803][ T7699] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  278.032038][ T7675] syz.2.942 (7675): drop_caches: 2
[  280.779527][ T4230] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  280.810414][ T7725] loop5: detected capacity change from 0 to 512
[  281.722466][ T7733] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  281.904364][ T4230] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  282.259574][ T4230] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  282.409084][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  282.458562][ T4230] usb 5-1: SerialNumber: syz
[  283.870811][ T4230] cdc_ether: probe of 5-1:1.0 failed with error -71
[  283.937890][ T4230] usb 5-1: USB disconnect, device number 12
[  285.747946][ T7777] loop5: detected capacity change from 0 to 512
[  285.949740][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.971'.
[  285.959205][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.971'.
[  286.889541][ T4228] usb 2-1: new high-speed USB device number 11 using dummy_hcd

syzkaller
syzkaller login: [  288.009488][ T4228] usb 2-1: Using ep0 maxpacket: 8
[  288.199672][ T4228] usb 2-1: unable to get BOS descriptor or descriptor too short
[  289.208706][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.986'.
[  289.223753][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.986'.
[  289.285360][ T4228] usb 2-1: string descriptor 0 read error: -71
[  289.309730][ T4228] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40
[  289.318812][ T7830] loop3: detected capacity change from 0 to 512
[  289.329877][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.877386][ T4228] usb 2-1: can't set config #1, error -71
[  289.912797][ T4228] usb 2-1: USB disconnect, device number 11
[  298.249552][ T4230] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  298.559553][ T4230] usb 6-1: Using ep0 maxpacket: 16
[  299.219837][ T4230] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  299.251090][ T7872] qnx4: no qnx4 filesystem (no root dir).
[  299.264978][ T4230] usb 6-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  299.299500][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.308508][ T7876] loop1: detected capacity change from 0 to 512
[  299.340060][ T4230] usb 6-1: config 0 descriptor??
[  301.329545][ T4230] usbhid 6-1:0.0: can't add hid device: -71
[  301.335554][ T4230] usbhid: probe of 6-1:0.0 failed with error -71
[  301.366805][ T4230] usb 6-1: USB disconnect, device number 7
[  302.164677][ T7894] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  303.493305][ T7905] syz.1.1008 uses obsolete (PF_INET,SOCK_PACKET)
[  304.627535][ T7914] loop2: detected capacity change from 0 to 7
[  304.645784][ T4178] Dev loop2: unable to read RDB block 7
[  304.657211][ T4178]  loop2: unable to read partition table
[  304.694312][ T4178] loop2: partition table beyond EOD, truncated
[  304.739850][ T7916] loop5: detected capacity change from 0 to 512
[  304.754163][ T7914] Dev loop2: unable to read RDB block 7
[  304.790342][ T7914]  loop2: unable to read partition table
[  304.811590][ T7914] loop2: partition table beyond EOD, truncated
[  304.829858][ T7914] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  306.184560][ T7926] loop1: detected capacity change from 0 to 512
[  306.601975][ T7930] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  311.518910][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1019'.
[  311.593503][ T6588] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  311.674379][ T7975] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1019'.
[  312.656984][ T7980] loop3: detected capacity change from 0 to 512
[  312.748786][ T6588] usb 3-1: config index 0 descriptor too short (expected 8228, got 36)
[  312.762347][ T6588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.772667][ T6588] usb 3-1: config 0 has no interfaces?
[  312.778298][ T6588] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  312.797654][ T6588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.824487][ T6588] usb 3-1: config 0 descriptor??
[  313.629514][ T6588] usb 3-1: string descriptor 0 read error: -71
[  313.646982][ T6588] usb 3-1: USB disconnect, device number 10
[  315.709471][ T1109] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  315.768380][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'.
[  315.785417][ T8032] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.805764][ T8034] loop3: detected capacity change from 0 to 512
[  315.864365][ T8032] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  316.409527][ T1109] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  316.539550][ T6588] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  316.589587][ T1109] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  316.609273][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.629491][ T1109] usb 2-1: Product: syz
[  316.633681][ T1109] usb 2-1: Manufacturer: syz
[  316.642030][ T8028] chnl_net:caif_netlink_parms(): no params data found
[  316.648822][ T1109] usb 2-1: SerialNumber: syz
[  316.698412][ T1109] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  316.929972][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  316.936313][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  316.950046][ T6588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.102363][ T6588] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  317.357683][ T1109] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  317.372447][ T6588] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  317.579553][ T6588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.588070][ T1109] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  317.649559][ T6588] usb 3-1: config 0 descriptor??
[  317.655255][ T1109] usb 2-1: media controller created
[  317.676429][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.692914][ T1109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  317.711448][ T6588] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  317.718602][ T6588] dvb-usb: bulk message failed: -22 (3/0)
[  317.727818][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.739337][ T6588] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  317.759234][ T6586] Bluetooth: hci5: command 0x0409 tx timeout
[  317.769725][ T6588] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  317.779112][ T6588] usb 3-1: media controller created
[  317.792418][ T6588] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  317.833388][ T6588] dvb-usb: bulk message failed: -22 (6/0)
[  317.847208][ T8028] device bridge_slave_0 entered promiscuous mode
[  317.855445][ T6588] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  317.916726][ T8032] udc-core: couldn't find an available UDC or it's busy
[  317.918106][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.926953][ T8032] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  317.962492][ T6588] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13
[  318.141244][ T8063] udc-core: couldn't find an available UDC or it's busy
[  318.148217][ T8063] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  318.173929][ T6588] dvb-usb: schedule remote query interval to 150 msecs.
[  318.195978][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.266996][ T6588] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  318.281747][ T8028] device bridge_slave_1 entered promiscuous mode
[  318.422016][ T6588] dvb-usb: bulk message failed: -22 (1/0)
[  318.440361][ T6588] dvb-usb: error while querying for an remote control event.
[  318.516636][ T8028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.539906][ T1109] usb 2-1: USB disconnect, device number 12
[  318.586600][ T8028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.600384][ T6588] usb 3-1: USB disconnect, device number 11
[  318.733652][ T6588] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  318.755313][ T8028] team0: Port device team_slave_0 added
[  318.806297][ T8028] team0: Port device team_slave_1 added
[  318.912526][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.941655][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.089614][ T8028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.168189][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.198563][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.232663][ T8074] loop1: detected capacity change from 0 to 512
[  319.367984][ T8028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.837487][ T8028] device hsr_slave_0 entered promiscuous mode
[  319.879555][ T1109] Bluetooth: hci5: command 0x041b tx timeout
[  319.918778][ T8028] device hsr_slave_1 entered promiscuous mode
[  319.977884][ T8028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  319.998526][ T8028] Cannot create hsr debugfs directory
[  321.959662][ T1109] Bluetooth: hci5: command 0x040f tx timeout
[  322.292374][ T4188] syz-executor (4188) used greatest stack depth: 21104 bytes left
[  322.333426][ T5252] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.454393][ T5252] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.558321][ T5252] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.568888][ T5252] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.580160][ T6586] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  323.303179][ T5252] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  323.323052][ T8106] loop5: detected capacity change from 0 to 512
[  323.334513][ T5252] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.435423][ T5252] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  323.446854][ T5252] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.589466][ T4513] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  323.679846][ T6586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.690902][ T6586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.703135][ T6586] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  323.713999][ T6586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.745202][ T6586] usb 2-1: config 0 descriptor??
[  324.084627][ T6588] Bluetooth: hci5: command 0x0419 tx timeout
[  324.265137][ T6586] hid-steam 0003:28DE:1142.0010: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  324.309517][ T4513] usb 3-1: Using ep0 maxpacket: 8
[  324.310476][ T8028] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  324.324303][ T8028] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  324.417390][ T8028] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  324.449814][ T4513] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  324.464239][ T6586] usb 2-1: USB disconnect, device number 13
[  324.490622][ T4513] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  324.513650][ T8028] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  324.554346][ T4513] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  324.626853][ T8113] fido_id[8113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  324.779322][ T4513] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  324.822951][ T4513] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  324.823113][ T8028] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.869510][ T4513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.211059][ T4513] hub 3-1:1.0: bad descriptor, ignoring hub
[  325.232517][ T4513] hub: probe of 3-1:1.0 failed with error -5
[  325.238953][ T4513] cdc_wdm 3-1:1.0: skipping garbage
[  325.252502][ T4513] cdc_wdm 3-1:1.0: skipping garbage
[  325.267828][ T4513] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  325.278203][ T8129] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  325.285745][ T4513] cdc_wdm 3-1:1.0: Unknown control protocol
[  325.336801][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  325.380491][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  325.389650][ T8129] VFS: Can't find a romfs filesystem on dev nullb0.
[  325.389650][ T8129] 
[  325.404971][ T8122] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  325.998409][ T8028] 8021q: adding VLAN 0 to HW filter on device team0
[  326.015567][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  326.054966][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  326.089834][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.096930][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.288797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  326.395255][ T8143] trusted_key: encrypted_key: insufficient parameters specified
[  326.416617][ T8143] trusted_key: encrypted_key: insufficient parameters specified
[  327.161617][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  327.209158][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  327.233236][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.240356][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.273747][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  327.286996][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  327.343558][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  327.393647][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  327.466869][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  327.477299][ T4506] usb 3-1: USB disconnect, device number 12
[  328.674762][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  328.683651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  329.199504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  329.254394][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  329.290163][ T8028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  329.348069][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  329.460084][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  329.560940][ T8170] PKCS7: Unknown OID: [4] 0.0
[  329.565697][ T8170] PKCS7: Only support pkcs7_signedData type
[  329.597914][ T8170] xt_policy: output policy not valid in PREROUTING and INPUT
[  330.354493][ T8174] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  330.435722][ T8176] sch_tbf: burst 12 is lower than device lo mtu (65550) !
[  330.618240][ T5252] device hsr_slave_0 left promiscuous mode
[  330.655852][ T5252] device hsr_slave_1 left promiscuous mode
[  330.663647][ T5252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.697417][ T5252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.744973][ T5252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.787517][ T5252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.826687][ T5252] device bridge_slave_1 left promiscuous mode
[  330.863447][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.951631][ T5252] device bridge_slave_0 left promiscuous mode
[  330.982353][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.010470][ T5252] device veth1_macvtap left promiscuous mode
[  331.027561][ T5252] device veth0_macvtap left promiscuous mode
[  331.037654][ T5252] device veth1_vlan left promiscuous mode
[  331.054078][ T5252] device veth0_vlan left promiscuous mode
[  333.321114][ T5252] team0 (unregistering): Port device team_slave_1 removed
[  333.365975][ T5252] team0 (unregistering): Port device team_slave_0 removed
[  333.579794][ T8227] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14
[  333.607440][ T5252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.667086][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1100'.
[  333.731283][ T5252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.747242][ T5252] bond0 (unregistering): Released all slaves
[  335.057133][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  335.087192][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  335.135960][ T8028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.432971][ T6588] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  336.226852][ T6588] usb 4-1: Using ep0 maxpacket: 8
[  336.278947][ T8288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1112'.
[  336.333619][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  336.352289][ T6588] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  336.372689][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  336.381345][ T6588] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  336.400604][ T4506] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  336.403005][ T6588] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  336.428463][ T6588] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  336.444514][ T6588] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  336.469059][ T6588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.528531][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  336.547006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  336.568738][ T8028] device veth0_vlan entered promiscuous mode
[  336.607284][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  336.629088][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  336.659510][ T4506] usb 3-1: Using ep0 maxpacket: 16
[  336.669263][ T8028] device veth1_vlan entered promiscuous mode
[  336.741060][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  336.755615][ T6588] usb 4-1: GET_CAPABILITIES returned 0
[  336.761646][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  336.762256][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  336.810485][ T4506] usb 3-1: config 0 has no interfaces?
[  336.827123][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  336.990477][ T4506] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  337.036001][ T4506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.058942][ T4506] usb 3-1: Product: syz
[  337.065515][ T6588] usbtmc 4-1:16.0: can't read capabilities
[  337.066017][ T4506] usb 3-1: Manufacturer: syz
[  337.090741][ T8028] device veth0_macvtap entered promiscuous mode
[  337.099489][ T4506] usb 3-1: SerialNumber: syz
[  337.102749][ T8028] device veth1_macvtap entered promiscuous mode
[  337.106152][ T4506] usb 3-1: config 0 descriptor??
[  337.196477][ T6588] usb 4-1: USB disconnect, device number 12
[  337.240240][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.276412][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.288777][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.305083][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.315583][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.331860][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.344168][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.358072][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.384528][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.417509][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  337.426519][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  337.464093][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  337.475488][ T4231] usb 3-1: USB disconnect, device number 13
[  337.489712][ T4228] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  337.541385][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  337.607187][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.647908][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.737173][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.756648][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.768393][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.809963][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.820157][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.849442][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.901124][ T4228] usb 6-1: Using ep0 maxpacket: 32
[  337.907816][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.920782][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  337.955653][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  338.136319][ T8028] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.260089][ T4228] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  338.332312][ T8028] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.365394][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.530026][ T4228] usb 6-1: Product: syz
[  338.553308][ T8028] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.633187][ T4228] usb 6-1: Manufacturer: syz
[  338.735762][ T4228] usb 6-1: SerialNumber: syz
[  338.752337][ T8028] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.196996][ T4228] usb 6-1: config 0 descriptor??
[  340.024885][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.053436][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.549558][ T4228] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  340.557851][ T4228] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  340.578372][ T8360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1124'.
[  340.633464][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  340.658098][ T4700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.683833][ T4700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.736502][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  340.790081][ T4228] peak_usb: probe of 6-1:0.0 failed with error -71
[  340.806960][ T4228] usb 6-1: USB disconnect, device number 8
[  341.395674][ T8361] autofs4:pid:8361:autofs_fill_super: called with bogus options
[  341.570953][ T8394] netlink: 392 bytes leftover after parsing attributes in process `syz.2.1132'.
[  343.084737][ T8407] loop5: detected capacity change from 0 to 512
[  345.180030][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1142'.
[  345.805746][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'.
[  346.848937][ T8477] loop2: detected capacity change from 0 to 512
[  347.256080][ T8496] PKCS7: Unknown OID: [4] 0.0
[  347.260948][ T8496] PKCS7: Only support pkcs7_signedData type
[  347.336143][ T8497] xt_policy: output policy not valid in PREROUTING and INPUT
[  348.391014][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'.
[  350.210070][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'.
[  350.221908][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'.
[  350.231236][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'.
[  350.241404][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'.
[  350.250626][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'.
[  351.931867][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1164'.
[  352.204158][ T8549] loop1: detected capacity change from 0 to 512
[  352.594042][ T8560] PKCS7: Unknown OID: [4] 0.0
[  352.598811][ T8560] PKCS7: Only support pkcs7_signedData type
[  352.627443][ T8560] xt_policy: output policy not valid in PREROUTING and INPUT
[  354.081550][ T8562] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0)
[  354.591270][ T8592] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.778933][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.063750][ T8620] loop6: detected capacity change from 0 to 512
[  356.113838][ T8620] EXT4-fs (loop6): Ignoring removed nobh option
[  356.168591][ T8624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1183'.
[  356.389490][ T8620] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  356.461606][ T8620] EXT4-fs (loop6): 1 truncate cleaned up
[  356.470462][ T8620] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  357.069492][ T6588] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  357.369622][ T6588] usb 6-1: Using ep0 maxpacket: 8
[  358.619624][ T6588] usb 6-1: unable to get BOS descriptor or descriptor too short
[  360.706153][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1196'.
[  360.937770][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1196'.
[  361.062130][ T6588] usb 6-1: unable to read config index 0 descriptor/start: -71
[  362.330390][ T6588] usb 6-1: can't read configurations, error -71
[  362.433383][ T8699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1201'.
[  362.440738][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1199'.
[  364.569186][ T8729] misc userio: The device must be registered before sending interrupts
[  364.653011][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802bc78800: rx timeout, send abort
[  365.163020][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802bc78800: abort rx timeout. Force session deactivation
[  365.709219][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1219'.
[  366.184779][ T8769] PKCS7: Unknown OID: [4] 0.0
[  366.189618][ T8769] PKCS7: Only support pkcs7_signedData type
[  366.206504][ T8769] xt_policy: output policy not valid in PREROUTING and INPUT
[  368.411031][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1228'.
[  368.422982][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1228'.
[  369.820278][ T8803] loop3: detected capacity change from 0 to 512
[  370.010484][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1233'.
[  370.554738][ T8829] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1236'.
[  371.398554][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1240'.
[  371.435324][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1240'.
[  371.937346][ T8869] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  372.055614][ T8869] overlayfs: failed to look up (tracing) for ino (-66)
[  373.996876][   T25] audit: type=1804 audit(1780370660.411:19): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1244" name="bus" dev="ramfs" ino=52884 res=1 errno=0
[  374.121668][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1245'.
[  374.200820][ T8886] loop6: detected capacity change from 0 to 512
[  374.263379][ T8886] EXT4-fs (loop6): Ignoring removed nobh option
[  374.310211][ T8886] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  374.438889][ T8886] EXT4-fs (loop6): 1 truncate cleaned up
[  374.445552][ T8886] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  374.589142][ T8900] binder_alloc: 8897: pid 8897 spamming oneway? 2 buffers allocated for a total size of 5120
[  375.602302][ T8914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1254'.
[  375.612122][ T8914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1254'.
[  378.176272][ T8942] loop5: detected capacity change from 0 to 512
[  378.372620][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.379002][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  380.850834][ T8975] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1268'.
[  381.002247][ T8975] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1268'.
[  381.460358][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1267'.
[  383.327239][ T9019] loop6: detected capacity change from 0 to 512
[  383.503457][ T9019] EXT4-fs (loop6): Ignoring removed nobh option
[  383.619216][ T9019] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  384.446740][ T9019] EXT4-fs (loop6): 1 truncate cleaned up
[  384.459397][ T9019] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  388.080067][ T9057] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1283'.
[  389.452444][ T9061] chnl_net:caif_netlink_parms(): no params data found
[  390.157162][ T9088] loop1: detected capacity change from 0 to 512
[  390.732839][ T4509] Bluetooth: hci0: command 0x0409 tx timeout
[  391.470326][ T9061] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.477436][ T9061] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.576243][ T9061] device bridge_slave_0 entered promiscuous mode
[  391.693077][ T9061] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.735214][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.776910][ T9061] device bridge_slave_1 entered promiscuous mode
[  392.024678][ T9061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.105664][ T9061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.449239][ T9061] team0: Port device team_slave_0 added
[  392.488443][ T9061] team0: Port device team_slave_1 added
[  392.602303][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  392.663172][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.759575][ T4231] Bluetooth: hci0: command 0x041b tx timeout
[  392.787598][ T9061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.861133][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  392.868215][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.894124][    C0] vkms_vblank_simulate: vblank timer overrun
[  393.181041][ T9061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.448504][ T9061] device hsr_slave_0 entered promiscuous mode
[  393.455745][ T9061] device hsr_slave_1 entered promiscuous mode
[  393.463308][ T9061] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  393.479421][ T9061] Cannot create hsr debugfs directory
[  394.839571][ T4604] Bluetooth: hci0: command 0x040f tx timeout
[  394.866317][ T9143] netlink: 'syz.6.1297': attribute type 13 has an invalid length.
[  395.841542][ T9061] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  395.852445][ T9061] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  395.862700][ T9061] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  395.873945][ T9061] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  396.384037][ T9061] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.426607][ T9061] 8021q: adding VLAN 0 to HW filter on device team0
[  396.494525][ T9061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  396.534367][ T9061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  396.553127][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  396.588612][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  396.633945][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  396.661121][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  396.710136][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.717249][ T5252] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.743358][ T9185] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  396.765754][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  396.774548][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  396.791746][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.798849][ T5252] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.872999][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  396.881926][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  396.891963][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  397.026162][ T6589] Bluetooth: hci0: command 0x0419 tx timeout
[  397.048468][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  397.083779][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  397.092621][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  397.101180][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  397.113024][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  397.121627][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  397.130039][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  397.138947][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  397.157264][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  397.185299][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  397.387655][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  397.399808][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  397.524310][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.242093][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1311'.
[  398.386602][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  398.410461][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  398.491385][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  398.520756][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  398.595538][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  398.610090][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  398.658593][ T9061] device veth0_vlan entered promiscuous mode
[  398.685709][ T9061] device veth1_vlan entered promiscuous mode
[  398.709638][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  398.763198][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  398.868781][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  398.904122][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  398.956998][ T9061] device veth0_macvtap entered promiscuous mode
[  399.003637][ T9061] device veth1_macvtap entered promiscuous mode
[  399.118164][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.148269][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.158154][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.168689][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.178618][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.189076][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.199150][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.295664][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.332727][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.379320][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.444607][ T9061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.577091][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  399.628801][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  399.756589][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  399.869476][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  400.023022][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  400.114759][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.214166][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  400.300487][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.380514][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  400.482526][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.561466][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  400.647303][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.737877][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  400.839328][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.965672][ T9061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.044477][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  401.095519][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  401.249275][ T9061] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.346600][ T9061] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.483241][ T9061] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.599091][ T9061] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.684719][ T5402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.693132][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.982838][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.336687][ T5402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.363341][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  404.397535][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  404.436543][   T25] audit: type=1800 audit(1780370690.851:20): pid=9253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1322" name="bus" dev="ramfs" ino=54786 res=0 errno=0
[  404.674321][ T9267] netlink: 'syz.7.1280': attribute type 5 has an invalid length.
[  404.686124][ T9267] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  404.695000][ T9267] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  404.703763][ T9267] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  404.712519][ T9267] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  405.018084][ T9267] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.024291][ T9273] loop3: detected capacity change from 0 to 512
[  405.027128][ T9267] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.042155][ T9267] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.051045][ T9267] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.105825][ T9271] netlink: 'syz.7.1280': attribute type 5 has an invalid length.
[  405.158481][ T9271] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  405.167357][ T9271] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  405.176109][ T9271] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  405.184857][ T9271] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  405.208091][ T9271] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.217022][ T9271] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.225920][ T9271] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.234816][ T9271] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  407.799427][ T4604] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  408.061114][ T4604] usb 8-1: Using ep0 maxpacket: 32
[  408.194607][ T4604] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  408.221585][ T4604] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  408.399687][ T4604] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  408.419430][ T4604] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.428476][ T4604] usb 8-1: Product: syz
[  408.434002][ T4604] usb 8-1: Manufacturer: syz
[  408.440205][ T4604] usb 8-1: SerialNumber: syz
[  408.454812][ T4604] usb 8-1: config 0 descriptor??
[  410.243904][ T4604] usb 8-1: USB disconnect, device number 2
[  410.263357][ T9324] loop3: detected capacity change from 0 to 512
[  414.534606][ T9376] loop1: detected capacity change from 0 to 512
[  414.639941][ T9386] loop2: detected capacity change from 0 to 7
[  414.694901][ T9386] Dev loop2: unable to read RDB block 7
[  414.710746][ T9386]  loop2: AHDI p1 p2 p3
[  414.725187][ T9386] loop2: partition table partially beyond EOD, truncated
[  414.741208][ T9386] loop2: p1 start 1634624559 is beyond EOD, truncated
[  414.757081][ T9386] loop2: p2 start 1702059890 is beyond EOD, truncated
[  416.369539][ T4506] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  417.484542][ T4506] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  417.492842][ T4506] usb 2-1: config 0 has no interface number 0
[  417.498948][ T4506] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.513907][ T4506] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.524146][ T4506] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  417.535057][ T4506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.553153][ T4506] usb 2-1: config 0 descriptor??
[  417.852481][ T6588] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  418.297753][ T4506] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0011/input/input15
[  418.508162][ T4506] holtek_kbd 0003:04D9:A055.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1
[  418.735287][ T4506] usb 2-1: USB disconnect, device number 14
[  418.842159][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1372'.
[  418.909960][ T6588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  419.036911][ T6588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  419.197675][ T6588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  419.517803][ T9438] fido_id[9438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  419.569517][ T6588] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  419.578621][ T6588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.597270][ T9443] loop3: detected capacity change from 0 to 7
[  419.605460][ T6588] usb 4-1: Product: syz
[  419.625138][ T6588] usb 4-1: Manufacturer: syz
[  419.634480][ T9443] Dev loop3: unable to read RDB block 7
[  419.655587][ T6588] usb 4-1: SerialNumber: syz
[  419.660727][ T9443]  loop3: unable to read partition table
[  419.670046][ T9443] loop3: partition table beyond EOD, truncated
[  419.684972][ T6588] usb 4-1: config 0 descriptor??
[  419.693764][ T9443] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  420.005587][ T6588] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  420.630239][ T6588] usb 4-1: USB disconnect, device number 13
[  420.767116][ T9446] netlink: 'syz.1.1375': attribute type 11 has an invalid length.
[  424.309999][ T9482] binder_alloc: 9480: binder_alloc_buf, no vma
[  425.790492][ T9488] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  425.838756][ T9488] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  426.539725][ T4506] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  426.829497][ T4506] usb 8-1: Using ep0 maxpacket: 32
[  427.005619][ T4506] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  427.219577][ T4506] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  427.228637][ T4506] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  427.257253][ T4506] usb 8-1: Product: syz
[  427.267302][ T4506] usb 8-1: Manufacturer: syz
[  427.283528][ T4506] usb 8-1: SerialNumber: syz
[  427.309278][ T4506] usb 8-1: config 0 descriptor??
[  427.339670][ T9498] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  427.370156][ T4506] hub 8-1:0.0: bad descriptor, ignoring hub
[  427.377430][ T4506] hub: probe of 8-1:0.0 failed with error -5
[  427.770151][ T4506] usb 8-1: USB disconnect, device number 3
[  428.259603][ T4506] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  428.679791][ T4506] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  428.773975][ T9530] loop5: detected capacity change from 0 to 512
[  428.889942][ T4506] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  429.288006][ T4506] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  429.317846][ T4506] usb 8-1: Product: syz
[  429.330738][ T4506] usb 8-1: Manufacturer: syz
[  429.338857][ T4506] usb 8-1: SerialNumber: syz
[  429.372384][ T4506] usb 8-1: config 0 descriptor??
[  429.422048][ T4506] usb 8-1: can't set config #0, error -71
[  429.484992][ T4506] usb 8-1: USB disconnect, device number 4
[  430.460197][ T4506] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  430.476884][ T1092] block nbd6: Attempted send on invalid socket
[  430.483773][ T1092] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  430.496909][ T9556] exFAT-fs (nbd6): unable to read boot sector
[  430.503028][ T9556] exFAT-fs (nbd6): failed to read boot sector
[  430.509110][ T9556] exFAT-fs (nbd6): failed to recognize exfat type
[  431.925317][ T4506] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  431.960961][ T4506] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  432.673611][ T4506] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  432.713540][ T9574] loop1: detected capacity change from 0 to 512
[  432.881629][ T4506] usb 8-1: string descriptor 0 read error: -71
[  432.899039][ T4506] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  432.908926][ T4506] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.919633][ T4506] usb 8-1: config 0 descriptor??
[  433.002014][ T9585] PKCS7: Unknown OID: [4] 0.0
[  433.007062][ T9585] PKCS7: Only support pkcs7_signedData type
[  433.630105][ T4506] usb 8-1: can't set config #0, error -71
[  433.680087][ T4506] usb 8-1: USB disconnect, device number 5
[  438.220570][ T6589] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  439.279476][ T4787] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  439.439518][ T6589] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.145350][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.151708][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  440.187620][ T6589] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  440.203706][ T6589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.218158][ T6589] usb 4-1: config 0 descriptor??
[  440.271732][ T6589] pwc: Askey VC010 type 2 USB webcam detected.
[  440.329870][ T4787] usb 2-1: config index 0 descriptor too short (expected 8228, got 36)
[  440.338249][ T4787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.593032][ T4787] usb 2-1: config 0 has no interfaces?
[  440.744197][ T4787] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  441.027483][ T4787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.203158][ T4787] usb 2-1: config 0 descriptor??
[  441.469722][ T4787] usb 2-1: can't set config #0, error -71
[  441.528054][ T4787] usb 2-1: USB disconnect, device number 15
[  442.240954][ T6589] pwc: recv_control_msg error -32 req 02 val 2b00
[  442.279546][ T6589] pwc: recv_control_msg error -32 req 02 val 2700
[  442.290053][ T9638] loop1: detected capacity change from 0 to 512
[  442.359620][ T6589] pwc: recv_control_msg error -32 req 02 val 2c00
[  442.399456][ T6589] pwc: recv_control_msg error -32 req 04 val 1000
[  442.449434][ T6589] pwc: recv_control_msg error -32 req 04 val 1300
[  442.497265][ T6589] pwc: recv_control_msg error -32 req 04 val 1400
[  442.549437][ T6589] pwc: recv_control_msg error -32 req 02 val 2000
[  442.809578][ T6589] pwc: recv_control_msg error -71 req 04 val 1500
[  442.859637][ T6589] pwc: recv_control_msg error -71 req 02 val 2500
[  442.973065][ T6589] pwc: recv_control_msg error -71 req 02 val 2400
[  443.099633][ T6589] pwc: recv_control_msg error -71 req 02 val 2600
[  443.199646][ T6589] pwc: recv_control_msg error -71 req 02 val 2900
[  443.295292][ T6589] pwc: recv_control_msg error -71 req 02 val 2800
[  443.399463][ T6589] pwc: recv_control_msg error -71 req 04 val 1100
[  443.543512][ T6589] pwc: recv_control_msg error -71 req 04 val 1200
[  443.560067][ T6589] pwc: Registered as video103.
[  443.572246][ T6589] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16
[  443.596170][ T6589] usb 4-1: USB disconnect, device number 14
[  447.729801][ T4506] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  447.873720][ T9693] loop3: detected capacity change from 0 to 512
[  448.219558][ T4506] usb 6-1: config index 0 descriptor too short (expected 8228, got 36)
[  448.774704][ T4506] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  448.786355][ T4506] usb 6-1: config 0 has no interfaces?
[  448.792547][ T4506] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  448.801891][ T4506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.832157][ T4506] usb 6-1: config 0 descriptor??
[  449.419453][ T4506] usb 6-1: string descriptor 0 read error: -71
[  449.446653][ T4506] usb 6-1: USB disconnect, device number 11
[  453.461585][ T9737] loop1: detected capacity change from 0 to 512
[  453.727884][ T9744] PKCS7: Unknown OID: [4] 0.0
[  453.732800][ T9744] PKCS7: Only support pkcs7_signedData type
[  455.576928][ T9759] loop7: detected capacity change from 0 to 512
[  456.487497][ T9759] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  456.509426][ T4231] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  456.656044][ T9759] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  457.359848][ T4231] usb 4-1: config index 0 descriptor too short (expected 8228, got 36)
[  457.490269][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  457.624845][ T4231] usb 4-1: config 0 has no interfaces?
[  457.707427][ T4231] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  457.798361][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.956503][ T4231] usb 4-1: config 0 descriptor??
[  458.659444][ T4231] usb 4-1: string descriptor 0 read error: -71
[  458.672064][ T4231] usb 4-1: USB disconnect, device number 15
[  460.480876][ T9786] netlink: 'syz.3.1476': attribute type 2 has an invalid length.
[  460.692042][ T9788] loop3: detected capacity change from 0 to 512
[  462.221475][ T9804] loop3: detected capacity change from 0 to 512
[  466.173444][ T9832] loop3: detected capacity change from 0 to 512
[  467.292679][ T9843] loop3: detected capacity change from 0 to 512
[  467.397250][ T9848] loop7: detected capacity change from 0 to 512
[  467.479374][ T4228] Bluetooth: hci5: command 0x0406 tx timeout
[  469.005454][ T9848] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  469.017074][ T9848] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  470.249664][ T9881] loop6: detected capacity change from 0 to 512
[  470.534450][ T9881] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  470.575104][ T9881] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  475.389585][ T9918] loop3: detected capacity change from 0 to 512
[  475.803998][ T9923] netlink: 'syz.5.1513': attribute type 2 has an invalid length.
[  475.887964][ T9925] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  475.896986][ T9925] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  475.905767][ T9925] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  475.914723][ T9925] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  475.935343][ T9925] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  475.944533][ T9925] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  475.953534][ T9925] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  475.962442][ T9925] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.024899][ T9926] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  476.033828][ T9926] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  476.042584][ T9926] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  476.051309][ T9926] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  476.124432][ T9926] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.133692][ T9926] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.142615][ T9926] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.151505][ T9926] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.737417][ T9944] loop3: detected capacity change from 0 to 512
[  477.822013][ T9950] PKCS7: Unknown OID: [4] 0.0
[  477.826702][ T9950] PKCS7: Only support pkcs7_signedData type
[  477.834635][ T9950] xt_policy: output policy not valid in PREROUTING and INPUT
[  482.421617][ T9986] loop7: detected capacity change from 0 to 512
[  482.526053][ T9986] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  482.537803][ T9986] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  484.745558][T10013] loop5: detected capacity change from 0 to 512
[  486.724908][T10043] PKCS7: Unknown OID: [4] 0.0
[  486.729714][T10043] PKCS7: Only support pkcs7_signedData type
[  486.737396][T10043] xt_policy: output policy not valid in PREROUTING and INPUT
[  486.806350][T10047] loop1: detected capacity change from 0 to 512
[  490.118427][T10083] loop1: detected capacity change from 0 to 512
[  493.840130][T10138] loop1: detected capacity change from 0 to 512
[  496.159897][ T4288] kworker/dying (4288) used greatest stack depth: 20496 bytes left
[  498.424245][T10187] loop6: detected capacity change from 0 to 512
[  498.672405][T10187] EXT4-fs (loop6): Ignoring removed nobh option
[  498.689170][T10187] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  498.748107][T10187] EXT4-fs (loop6): 1 truncate cleaned up
[  498.820152][T10187] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  499.023670][T10193] loop3: detected capacity change from 0 to 512
[  500.283270][T10203] netlink: 'syz.7.1578': attribute type 2 has an invalid length.
[  501.309875][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.316197][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  501.859507][ T4608] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  502.289584][ T4608] usb 4-1: config index 0 descriptor too short (expected 8228, got 36)
[  502.303175][ T4608] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  502.334300][ T4608] usb 4-1: config 0 has no interfaces?
[  502.351618][ T4608] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  502.384988][ T4608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.417081][ T4608] usb 4-1: config 0 descriptor??
[  502.709540][ T4608] usb 4-1: string descriptor 0 read error: -71
[  502.728840][ T4608] usb 4-1: USB disconnect, device number 16
[  504.616578][T10232] loop3: detected capacity change from 0 to 512
[  505.700196][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1588'.
[  505.965830][T10247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1588'.
[  510.266983][T10285] loop1: detected capacity change from 0 to 512
[  511.620336][T10300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1604'.
[  511.729649][T10301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1604'.
[  513.559600][ T4231] Bluetooth: hci0: command 0x0406 tx timeout
[  517.746761][T10336] loop3: detected capacity change from 0 to 512
[  517.974878][T10344] PKCS7: Unknown OID: [4] 0.0
[  517.979708][T10344] PKCS7: Only support pkcs7_signedData type
[  517.990412][T10344] xt_policy: output policy not valid in PREROUTING and INPUT
[  519.940753][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1623'.
[  519.961887][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1623'.
[  522.874069][T10388] loop7: detected capacity change from 0 to 512
[  523.040965][T10388] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  523.059546][T10388] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  525.219421][ T4290] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  526.169455][ T4290] usb 8-1: config index 0 descriptor too short (expected 8228, got 36)
[  526.209677][ T4290] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  526.234294][ T4290] usb 8-1: config 0 has no interfaces?
[  526.252563][ T4290] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  526.426610][ T4290] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.370130][T10439] PKCS7: Unknown OID: [4] 0.0
[  529.374906][T10439] PKCS7: Only support pkcs7_signedData type
[  529.394888][T10439] xt_policy: output policy not valid in PREROUTING and INPUT
[  529.504603][ T4290] usb 8-1: config 0 descriptor??
[  529.529496][ T4290] usb 8-1: can't set config #0, error -71
[  529.589811][ T4290] usb 8-1: USB disconnect, device number 6
[  531.861032][T10476] loop1: detected capacity change from 0 to 512
[  534.761826][ T6589] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  534.798215][T10509] PKCS7: Unknown OID: [4] 0.0
[  534.803003][T10509] PKCS7: Only support pkcs7_signedData type
[  534.810697][T10509] xt_policy: output policy not valid in PREROUTING and INPUT
[  536.391204][ T6589] usb 2-1: config index 0 descriptor too short (expected 8228, got 36)
[  537.165500][ T6589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.185519][T10526] loop5: detected capacity change from 0 to 512
[  537.210672][ T6589] usb 2-1: config 0 has no interfaces?
[  537.240317][ T6589] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  537.282624][ T6589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.320885][ T6589] usb 2-1: config 0 descriptor??
[  537.470776][ T6589] usb 2-1: can't set config #0, error -71
[  537.484391][ T6589] usb 2-1: USB disconnect, device number 16
[  542.075313][T10581] loop1: detected capacity change from 0 to 512
[  544.759543][T10621] PKCS7: Unknown OID: [4] 0.0
[  544.764278][T10621] PKCS7: Only support pkcs7_signedData type
[  545.502532][T10621] xt_policy: output policy not valid in PREROUTING and INPUT
[  547.707761][T10649] loop6: detected capacity change from 0 to 512
[  547.707761][T10650] loop5: detected capacity change from 0 to 512
[  547.871006][T10649] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  547.909450][T10649] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  551.078555][T10696] loop7: detected capacity change from 0 to 512
[  551.082127][T10698] loop3: detected capacity change from 0 to 512
[  552.317377][T10696] EXT4-fs (loop7): Ignoring removed nobh option
[  552.384401][T10696] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  552.456287][T10696] EXT4-fs (loop7): 1 truncate cleaned up
[  552.593948][T10696] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  556.122298][T10744] loop5: detected capacity change from 0 to 512
[  556.237906][T10749] loop7: detected capacity change from 0 to 512
[  556.349733][T10749] EXT4-fs (loop7): Ignoring removed nobh option
[  556.369494][T10749] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  556.798498][T10749] EXT4-fs (loop7): 1 truncate cleaned up
[  556.818820][T10749] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  559.370059][ T4231] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  559.799682][ T4231] usb 8-1: config index 0 descriptor too short (expected 8228, got 36)
[  559.813787][ T4231] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.890318][ T4231] usb 8-1: config 0 has no interfaces?
[  559.901461][ T4231] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  559.941557][ T4231] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.203598][T10802] PKCS7: Unknown OID: [4] 0.0
[  560.208347][T10802] PKCS7: Only support pkcs7_signedData type
[  560.216288][T10802] xt_policy: output policy not valid in PREROUTING and INPUT
[  560.285073][ T4231] usb 8-1: config 0 descriptor??
[  561.539387][ T4231] usb 8-1: string descriptor 0 read error: -71
[  561.563292][ T4231] usb 8-1: USB disconnect, device number 7
[  563.132150][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  563.140679][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  563.845332][T10833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1741'.
[  566.096343][T10855] PKCS7: Unknown OID: [4] 0.0
[  566.101173][T10855] PKCS7: Only support pkcs7_signedData type
[  566.108236][T10855] xt_policy: output policy not valid in PREROUTING and INPUT
[  566.644857][T10859] loop3: detected capacity change from 0 to 512
[  568.928706][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1751'.
[  574.644707][T10909] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  577.228807][T10911] netlink: 'syz.7.1758': attribute type 11 has an invalid length.
[  586.671902][T11023] loop6: detected capacity change from 0 to 512
[  586.732507][T11019] device syzkaller0 entered promiscuous mode
[  586.779199][T11023] EXT4-fs (loop6): Ignoring removed nobh option
[  586.792519][T11023] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  586.832293][T11023] EXT4-fs (loop6): 1 truncate cleaned up
[  586.838204][T11023] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  586.997555][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1794'.
[  587.007603][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1794'.
[  591.737174][T11091] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1812'.
[  592.976528][T11098] loop7: detected capacity change from 0 to 512
[  593.078407][T11098] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  593.103676][T11098] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  594.341643][T11128] loop3: detected capacity change from 0 to 512
[  594.902992][T11135] loop7: detected capacity change from 0 to 512
[  594.961775][T11135] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  594.983339][T11135] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  595.033383][T11140] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1825'.
[  596.177413][T11153] loop5: detected capacity change from 0 to 512
[  598.328199][T11181] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1837'.
[  598.629113][T11187] loop6: detected capacity change from 0 to 512
[  598.633712][T11189] loop3: detected capacity change from 0 to 512
[  599.254679][T11187] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  599.385677][T11187] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  600.726425][T11205] trusted_key: encrypted_key: insufficient parameters specified
[  601.074785][T11206] trusted_key: encrypted_key: insufficient parameters specified
[  601.211477][T11212] loop3: detected capacity change from 0 to 512
[  601.368497][T11218] Cannot find add_set index 0 as target
[  604.608530][T11249] loop6: detected capacity change from 0 to 512
[  604.641903][T11249] EXT4-fs (loop6): Ignoring removed nobh option
[  604.648310][T11249] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  604.859032][T11249] EXT4-fs (loop6): 1 truncate cleaned up
[  604.874421][T11249] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  605.633217][T11263] loop7: detected capacity change from 0 to 512
[  607.397596][T11263] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  607.480281][T11263] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  609.640920][T11311] loop5: detected capacity change from 0 to 512
[  609.763256][T11310] PKCS7: Unknown OID: [4] 0.0
[  609.767973][T11310] PKCS7: Only support pkcs7_signedData type
[  609.775781][T11310] xt_policy: output policy not valid in PREROUTING and INPUT
[  612.098854][T11336] loop1: detected capacity change from 0 to 512
[  612.831447][ T4290] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  615.268055][T11355] PKCS7: Unknown OID: [4] 0.0
[  615.272813][T11355] PKCS7: Only support pkcs7_signedData type
[  615.280978][T11355] xt_policy: output policy not valid in PREROUTING and INPUT
[  616.581478][T11373] loop3: detected capacity change from 0 to 512
[  616.832103][T11390] loop6: detected capacity change from 0 to 512
[  616.936683][T11390] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  616.957836][T11390] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  618.371281][T11412] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  618.991822][T11417] xt_policy: output policy not valid in PREROUTING and INPUT
[  621.123164][T11442] loop1: detected capacity change from 0 to 512
[  621.526776][T11453] loop6: detected capacity change from 0 to 512
[  621.620630][T11453] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  621.640613][T11453] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  623.550199][T11479] PKCS7: Unknown OID: [4] 0.0
[  623.554907][T11479] PKCS7: Only support pkcs7_signedData type
[  623.562793][T11479] xt_policy: output policy not valid in PREROUTING and INPUT
[  624.291439][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  624.291552][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  626.003833][T11499] loop7: detected capacity change from 0 to 512
[  628.545231][T11499] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  628.717533][T11499] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  629.434137][T11516] PKCS7: Unknown OID: [4] 0.0
[  629.438843][T11516] PKCS7: Only support pkcs7_signedData type
[  629.446562][T11516] xt_policy: output policy not valid in PREROUTING and INPUT
[  631.805308][T11534] loop1: detected capacity change from 0 to 512
[  633.802810][T11561] PKCS7: Unknown OID: [4] 0.0
[  633.807604][T11561] PKCS7: Only support pkcs7_signedData type
[  633.819652][T11561] xt_policy: output policy not valid in PREROUTING and INPUT
[  634.540128][T11563] loop3: detected capacity change from 0 to 512
[  634.556806][T11559] netlink: 'syz.7.1929': attribute type 10 has an invalid length.
[  634.564652][T11559] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1929'.
[  634.573716][T11559] bridge0: port 3(dummy0) entered blocking state
[  634.580058][T11559] bridge0: port 3(dummy0) entered disabled state
[  634.587031][T11559] device dummy0 entered promiscuous mode
[  634.592892][T11559] bridge0: port 3(dummy0) entered blocking state
[  634.599208][T11559] bridge0: port 3(dummy0) entered forwarding state
[  637.505827][T11592] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  638.760972][T11607] loop3: detected capacity change from 0 to 512
[  639.719453][ T6589] Bluetooth: hci6: command 0x1003 tx timeout
[  639.726314][ T4198] Bluetooth: hci6: sending frame failed (-49)
[  640.787945][T11635] PKCS7: Unknown OID: [4] 0.0
[  640.792843][T11635] PKCS7: Only support pkcs7_signedData type
[  640.804075][T11635] xt_policy: output policy not valid in PREROUTING and INPUT
[  641.638901][T11643] loop1: detected capacity change from 0 to 512
[  641.844717][ T4604] Bluetooth: hci6: command 0x1001 tx timeout
[  641.852864][ T4198] Bluetooth: hci6: sending frame failed (-49)
[  643.163549][T11652] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1946'.
[  643.993950][ T6588] Bluetooth: hci6: command 0x1009 tx timeout
[  644.093361][T11658] loop1: detected capacity change from 0 to 512
[  645.229313][ T6588] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  645.370592][T11682] loop7: detected capacity change from 0 to 512
[  645.489201][T11684] overlayfs: missing 'lowerdir'
[  645.499423][T11682] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  645.512059][T11682] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  645.769416][ T6588] usb 2-1: config index 0 descriptor too short (expected 8228, got 36)
[  645.881725][ T6588] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  645.900471][ T6588] usb 2-1: config 0 has no interfaces?
[  645.906081][ T6588] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  645.921643][ T6588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.935573][ T6588] usb 2-1: config 0 descriptor??
[  646.769818][ T6588] usb 2-1: string descriptor 0 read error: -71
[  646.780034][ T6588] usb 2-1: USB disconnect, device number 17
[  646.956116][T11707] loop5: detected capacity change from 0 to 512
[  647.009672][ T4787] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  647.223225][T11711] sctp: [Deprecated]: syz.7.1966 (pid 11711) Use of int in max_burst socket option deprecated.
[  647.223225][T11711] Use struct sctp_assoc_value instead
[  648.273981][ T4787] usb 4-1: unable to get BOS descriptor or descriptor too short
[  648.709289][ T4608] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  648.839506][ T4787] usb 4-1: unable to read config index 0 descriptor/start: -71
[  648.849204][ T4787] usb 4-1: can't read configurations, error -71
[  648.924311][T11742] netlink: 'syz.7.1977': attribute type 10 has an invalid length.
[  648.932314][T11742] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1977'.
[  649.329836][ T4608] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  649.368153][ T4608] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  649.479661][ T4608] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  649.919025][ T4608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  649.945235][ T4608] usb 6-1: SerialNumber: syz
[  650.082814][T11761] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  650.220204][T11763] loop7: detected capacity change from 0 to 512
[  650.251897][ T4608] usb 6-1: 0:2 : does not exist
[  650.282929][T11763] EXT4-fs (loop7): Ignoring removed nobh option
[  650.303975][ T4608] usb 6-1: USB disconnect, device number 13
[  650.339493][T11763] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  650.414891][T11763] EXT4-fs (loop7): 1 truncate cleaned up
[  650.433652][T11763] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  651.500172][T11779] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1988'.
[  652.510262][T11786] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  652.592111][T11786] overlayfs: failed to look up (tracing) for ino (-66)
[  653.779194][T11797] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  656.683363][ T4506] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  657.070069][ T4506] usb 2-1: config index 0 descriptor too short (expected 8228, got 36)
[  657.088705][ T4506] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.103650][ T4506] usb 2-1: config 0 has no interfaces?
[  657.109681][ T4506] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  657.144649][ T4506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.166358][ T4506] usb 2-1: config 0 descriptor??
[  657.879390][ T4506] usb 2-1: string descriptor 0 read error: -71
[  657.908020][ T4506] usb 2-1: USB disconnect, device number 18
[  660.164493][T11858] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  662.130072][T11884] PKCS7: Unknown OID: [4] 0.0
[  662.134792][T11884] PKCS7: Only support pkcs7_signedData type
[  662.304830][T11884] xt_policy: output policy not valid in PREROUTING and INPUT
[  662.514710][T11893] loop7: detected capacity change from 0 to 512
[  663.297997][ T4787] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  663.309595][T11893] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  663.338407][T11893] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  664.068324][ T4787] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  664.108218][ T4787] usb 6-1: config 0 has no interfaces?
[  664.135636][ T4787] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  664.469786][ T4787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.985551][ T4787] usb 6-1: config 0 descriptor??
[  666.209478][ T4787] usb 6-1: can't set config #0, error -71
[  666.232808][ T4787] usb 6-1: USB disconnect, device number 14
[  667.985463][T11943] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  668.106784][T11950] loop1: detected capacity change from 0 to 512
[  669.851272][T11959] PKCS7: Unknown OID: [4] 0.0
[  669.855981][T11959] PKCS7: Only support pkcs7_signedData type
[  669.863766][T11959] xt_policy: output policy not valid in PREROUTING and INPUT
[  670.037028][T11971] PKCS7: Unknown OID: [4] 0.0
[  670.041843][T11971] PKCS7: Only support pkcs7_signedData type
[  670.050944][T11971] xt_policy: output policy not valid in PREROUTING and INPUT
[  674.286785][T12021] PKCS7: Unknown OID: [4] 0.0
[  674.291581][T12021] PKCS7: Only support pkcs7_signedData type
[  674.303155][T12021] xt_policy: output policy not valid in PREROUTING and INPUT
[  675.775138][T12035] PKCS7: Unknown OID: [4] 0.0
[  675.779872][T12035] PKCS7: Only support pkcs7_signedData type
[  675.791104][T12035] xt_policy: output policy not valid in PREROUTING and INPUT
[  676.019739][T12037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  676.042067][T12037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  676.227147][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  676.277294][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  678.339268][ T4787] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  678.709485][ T4787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  678.744113][ T4787] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  678.796932][ T4787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.905074][ T4787] usb 2-1: config 0 descriptor??
[  679.971686][ T4787] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  680.190837][ T4604] usb 2-1: USB disconnect, device number 19
[  682.743443][T12105] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  684.061783][T12123] PKCS7: Unknown OID: [4] 0.0
[  684.066492][T12123] PKCS7: Only support pkcs7_signedData type
[  684.074345][T12123] xt_policy: output policy not valid in PREROUTING and INPUT
[  686.120821][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  686.127095][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  688.599407][ T6588] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  689.113320][ T6588] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  689.133741][ T6588] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  689.176058][ T6588] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  690.037391][ T6588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.053979][ T6588] usb 2-1: config 0 descriptor??
[  690.111605][ T6588] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  691.299441][ T4787] usb 2-1: USB disconnect, device number 20
[  693.736459][T12193] PKCS7: Unknown OID: [4] 0.0
[  693.741205][T12193] PKCS7: Only support pkcs7_signedData type
[  693.748795][T12193] xt_policy: output policy not valid in PREROUTING and INPUT
[  699.569327][ T4506] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  699.919335][ T4506] usb 2-1: Using ep0 maxpacket: 32
[  700.106711][ T4506] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  700.199304][ T4506] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  700.389468][ T4506] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  700.408776][ T4506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.449335][ T4506] usb 2-1: Product: syz
[  700.453525][ T4506] usb 2-1: Manufacturer: syz
[  700.458119][ T4506] usb 2-1: SerialNumber: syz
[  701.690223][ T4506] usb 2-1: config 0 descriptor??
[  703.380237][ T4506] usb 2-1: USB disconnect, device number 21
[  713.807506][T12324] netlink: 'syz.7.2145': attribute type 2 has an invalid length.
[  715.497617][T12333] device syzkaller0 entered promiscuous mode
[  717.963991][ T4231] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  719.339509][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  719.361998][ T4231] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  719.418924][ T4231] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  719.459036][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.488703][ T4231] usb 4-1: config 0 descriptor??
[  720.639306][ T4231] usb 4-1: can't set config #0, error -71
[  720.820003][ T4231] usb 4-1: USB disconnect, device number 19
[  722.954631][T12382] device syzkaller0 entered promiscuous mode
[  722.969339][ T4604] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  723.225710][T12386] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  724.551319][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2166'.
[  726.339928][T12412] comedi comedi0: Minor 9 could not be opened
[  737.242801][T12487] comedi comedi0: Minor 9 could not be opened
[  742.890408][T12539] PKCS7: Unknown OID: [4] 0.0
[  742.895154][T12539] PKCS7: Only support pkcs7_signedData type
[  742.906569][T12539] xt_policy: output policy not valid in PREROUTING and INPUT
[  743.575143][T12547] overlayfs: overlapping lowerdir path
[  743.935807][T12550] comedi comedi0: Minor 9 could not be opened
[  747.039640][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  747.045984][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  749.926384][T12589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2221'.
[  756.008941][T12629] syz.7.2231 sent an empty control message without MSG_MORE.
[  756.107787][T12631] PKCS7: Unknown OID: [4] 0.0
[  756.112678][T12631] PKCS7: Only support pkcs7_signedData type
[  756.122863][T12631] xt_policy: output policy not valid in PREROUTING and INPUT
[  757.773616][T12641] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2234'.
[  764.303170][T12689] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2248'.
[  764.843272][T12699] PKCS7: Unknown OID: [4] 0.0
[  764.847983][T12699] PKCS7: Only support pkcs7_signedData type
[  764.855593][T12699] xt_policy: output policy not valid in PREROUTING and INPUT
[  766.618933][   T25] audit: type=1326 audit(1780371053.031:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.3.2258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3590ae59 code=0x7ffc0000
[  766.701293][   T25] audit: type=1326 audit(1780371053.081:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.3.2258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f5b3590ae59 code=0x7ffc0000
[  766.789607][T12720] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  766.913484][   T25] audit: type=1326 audit(1780371053.081:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.3.2258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3590ae59 code=0x7ffc0000
[  767.437273][   T25] audit: type=1326 audit(1780371053.081:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.3.2258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5b3590ae59 code=0x7ffc0000
[  768.179143][T12715] tipc: Started in network mode
[  768.217799][T12715] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  768.254880][   T25] audit: type=1326 audit(1780371053.081:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.3.2258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3590ae59 code=0x7ffc0000
[  768.301796][T12730] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2262'.
[  768.317647][T12730] comedi comedi0: Minor 9 could not be opened
[  768.335581][T12715] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  768.712449][T12715] tipc: Enabled bearer <udp:syz0>, priority 10
[  768.771185][   T25] audit: type=1326 audit(1780371053.081:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.3.2258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b3590ae59 code=0x7ffc0000
Stopping sshd: stopped /usr/sbin/sshd (pid 3951)
OK
[  769.203297][   T25] audit: type=1326 audit(1780371053.081:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.3.2258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3590ae59 code=0x7ffc0000
[  769.279108][   T25] audit: type=1326 audit(1780371053.081:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.3.2258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3590ae59 code=0x7ffc0000
Stopping crond: [  769.343419][   T25] audit: type=1326 audit(1780371053.111:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.3.2258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b3590ae59 code=0x7ffc0000
stopped /usr/sbin/crond (pid 3928)
OK
[  770.174568][ T6589] tipc: Node number set to 1
[  770.190202][   T25] audit: type=1326 audit(1780371053.111:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.3.2258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3590ae59 code=0x7ffc0000
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 3853)
Stopping network: [  771.735956][T12780] overlayfs: "xino" feature enabled using 3 upper inode bits.
OK
[  773.149294][ T6589] usb 4-1: new high-speed USB device number 20 using dummy_hcd
Stopping iptables: OK
[  773.419989][ T6589] usb 4-1: Using ep0 maxpacket: 32
Stopping system message bus: [  773.571629][ T6589] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  774.062276][ T6589] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  774.132774][ T6589] usb 4-1: config 0 interface 0 has no altsetting 0
[  774.339545][ T6589] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  774.357534][ T6589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.391390][ T6589] usb 4-1: Product: syz
[  774.406174][ T6589] usb 4-1: Manufacturer: syz
[  774.426415][ T6589] usb 4-1: SerialNumber: syz
[  774.456107][ T6589] usb 4-1: config 0 descriptor??
done
[  776.629313][ T4604] usb 4-1: USB disconnect, device number 20
Stopping klogd: OK
Stopping acpid: [  778.677958][T12898] device vlan2 entered promiscuous mode
[  779.409018][T12898] device batadv0 entered promiscuous mode
OK
Stopping syslogd: stopped /sbin/syslogd (pid 3543)
OK
[  782.429335][ T6589] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  782.679496][ T6589] usb 2-1: Using ep0 maxpacket: 32
[  782.819797][ T6589] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  782.876862][ T6589] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  783.118938][ T6589] usb 2-1: config 0 interface 0 has no altsetting 0
[  783.459349][ T6589] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  783.468413][ T6589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
umount: can't remount debugfs read-only
[  783.534538][T12949] PKCS7: Unknown OID: [4] 0.0
[  783.539349][T12949] PKCS7: Only support pkcs7_signedData type
[  783.550919][T12949] xt_policy: output policy not valid in PREROUTING and INPUT
[  784.169496][ T6589] usb 2-1: Product: syz
[  784.174060][ T6589] usb 2-1: Manufacturer: syz
[  784.183043][ T6589] usb 2-1: SerialNumber: syz
[  784.189266][ T6589] usb 2-1: config 0 descriptor??
[  785.209081][ T4787] usb 2-1: USB disconnect, device number 22
[  786.649345][ T4787] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  786.929344][ T4787] usb 2-1: too many configurations: 25, using maximum allowed: 8
[  787.569503][ T4787] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[  787.589220][ T4787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.632543][ T4787] usb 2-1: config 0 descriptor??
[  787.687613][ T4787] pwc: Creative Labs Webcam Pro Ex detected.
[  787.704071][ T4787] pwc: Warning: more than 1 configuration available.
[  788.534200][T12967] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  788.559286][ T4787] pwc: Failed to set LED on/off time (-71)
[  788.579267][ T4787] pwc: send_video_command error -71
[  788.584490][ T4787] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  788.622469][ T4787] Philips webcam: probe of 2-1:0.0 failed with error -71
[  788.650710][ T4787] usb 2-1: USB disconnect, device number 23
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[  788.959236][ T4786] usb 6-1: new high-speed USB device number 16 using dummy_hcd
Connection to 10.128.0.212 closed by remote host.
[  789.625057][  T144] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.786063][  T144] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.837180][  T144] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.857828][ T4189] syz-executor (4189) used greatest stack depth: 20112 bytes left
[  789.903698][  T144] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Sent SIGKILL to all processes
Requesting system poweroff
[  790.614223][  T144] device hsr_slave_0 left promiscuous mode
[  790.621512][  T144] device hsr_slave_1 left promiscuous mode
[  790.627799][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  790.635616][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  790.643192][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  790.650740][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  790.658158][  T144] device bridge_slave_1 left promiscuous mode
[  790.664997][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  790.673781][  T144] device bridge_slave_0 left promiscuous mode
[  790.680101][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.692700][  T144] device veth1_macvtap left promiscuous mode
[  790.698779][  T144] device veth0_macvtap left promiscuous mode
[  790.704883][  T144] device veth1_vlan left promiscuous mode
[  790.710810][  T144] device veth0_vlan left promiscuous mode
[  790.835469][  T144] team0 (unregistering): Port device team_slave_1 removed
[  790.849090][  T144] team0 (unregistering): Port device team_slave_0 removed
[  790.861871][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  790.874329][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  790.928937][  T144] bond0 (unregistering): Released all slaves
[  791.085702][T13004] kvm: exiting hardware virtualization
[  791.098746][T13004] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  791.109210][T13004] ACPI: PM: Preparing to enter system sleep state S5
[  791.117628][T13004] reboot: Power down
serialport: VM disconnected.