last executing test programs: 2m13.030864336s ago: executing program 3 (id=59): openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xffffffff80000001) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) setitimer(0x2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000700)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x8}, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000740), 0x40000000000017d, 0x888) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) 2m11.144973656s ago: executing program 3 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x2000000000000216, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000070100"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000400000000000000000000000850000007b00000095"], 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000009c0)={r3}, 0xc) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}}, 0x48040) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000140)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000001c0)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000002c0), 0x651, 0x0) (async) socket$isdn(0x22, 0x3, 0x4) recvmmsg(r6, &(0x7f0000000300), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) (async) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) sendmmsg$unix(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="a1", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) (async) connect$unix(r1, &(0x7f00000004c0)=@file={0x1, './sys\x00'}, 0x6e) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000090a010400000000000000000100000208000a400000000008000640ffffff000900010073797a3000000000080005400000000c0900020073797a3200000000080003400000008c38000980340002800c0001800800014000000009"], 0xc0}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) 2m9.835882721s ago: executing program 3 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f00000000c0)='hpfs\x00', 0x800c01, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount(0x0, &(0x7f0000000140)='./debug/tracing/options/context-info\x00', 0x0, 0x8000, 0x0) fchdir(r0) close(0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000180)="5400000013000100"/24, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/tracing/options/context-info\x00', 0x800, 0x0) 2m9.659079495s ago: executing program 3 (id=70): r0 = socket(0x26, 0x80805, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000003340), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000003400)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x1c, r1, 0x800, 0x70bd26, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4040080) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e22, 0x7, @local, 0x8}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b405000000000000611070000000000066000000050000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x366, 0x10, &(0x7f0000000580), 0x2b2}, 0x48) shutdown(0xffffffffffffffff, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$msr(r4, &(0x7f0000002e40)=""/212, 0xd4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000003300)={0x8, 0x0, &(0x7f0000003240)=[{&(0x7f0000002f40)=""/31, 0x1f}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)=""/115, 0x73}, {&(0x7f0000003040)=""/20, 0x14}, {&(0x7f0000003080)=""/210, 0xd2}, {&(0x7f0000003180)=""/151, 0x97}], &(0x7f00000032c0)=[0x7, 0x424], 0x6}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff17fc08000340000001300c000b400000000000000006400000000c0a010100004000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180040001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet_sctp(r0, &(0x7f0000003440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x37) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000005c80)='.\x00', 0xffffffffffffff9c, &(0x7f0000005cc0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000005d00)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000005d40)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000005d80)='./bus\x00', &(0x7f0000005dc0), 0x0, &(0x7f0000005e00)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000005e40)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000005e80)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000005ec0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000005f00)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005f40)='./file0\x00', 0x50) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) fchdir(r5) mount(0x0, 0x0, 0x0, 0x80, 0x0) 2m9.327204774s ago: executing program 3 (id=72): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x120485a, &(0x7f0000000b40)=ANY=[], 0x1, 0x2e7, &(0x7f0000000280)="$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") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000340)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000010200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c004}, 0x880) timer_create(0x0, 0x0, &(0x7f00000016c0)) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x3, 0x7, 0x6, 0x282b, 0x20103, 0x200, {0x200004, 0x10005c62, 0x203, 0x1000000003, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x80000001, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000600)=0x3, 0x8, 0x3) sendfile(r1, r1, &(0x7f0000000100)=0xa0, 0x80000000) unlink(&(0x7f0000000900)='./file1\x00') 2m7.193400971s ago: executing program 3 (id=77): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000240)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000540)=""/199) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @rand_addr=0x64010102}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)="30313a38303a653293046dac127c74bd3a30303a30980240f8fac0c0e9af815a5aaf68a8d33af07537bdbcb0df675342f0c10432", 0x34) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r7, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000340)=0x1) writev(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)='}m', 0x2}], 0x1) 2m6.416036252s ago: executing program 32 (id=77): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000240)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000540)=""/199) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @rand_addr=0x64010102}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)="30313a38303a653293046dac127c74bd3a30303a30980240f8fac0c0e9af815a5aaf68a8d33af07537bdbcb0df675342f0c10432", 0x34) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r7, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000340)=0x1) writev(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)='}m', 0x2}], 0x1) 1m59.445168638s ago: executing program 1 (id=110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newsa={0x144, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x9, 0xa, 0x400000000000, 0x0, 0x0, 0x3}, {0x4010, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x0, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @extra_flags={0x8, 0x18, 0x3}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f0000000800)={0x5, 0xd2, 0xb4, &(0x7f0000000640)=""/210, &(0x7f0000000740)=""/180, 0x2, '\x00', {0xfffffffc, 0x7, 0x984}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x48, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000b00)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000b80)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000900), 0x2, 0x143102) writev(r5, &(0x7f0000000940)=[{&(0x7f0000000980)="94", 0xf000}, {0x0}], 0x2) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000009c0)={0x0, 0xec0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x18, 0x1414, 0x1, 0x0, 0x2, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x6}]}, 0x18}}, 0x4010010) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000340)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r9) 1m58.422401806s ago: executing program 1 (id=101): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x120485a, &(0x7f0000000b40)=ANY=[], 0x1, 0x2e7, &(0x7f0000000280)="$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") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000340)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000010200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c004}, 0x880) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) timer_create(0x0, 0x0, &(0x7f00000016c0)) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x3, 0x7, 0x6, 0x282b, 0x20103, 0x200, {0x200004, 0x10005c62, 0x203, 0x1000000003, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x80000001, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000600)=0x3, 0x8, 0x3) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f0000000640)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000700)={&(0x7f0000000740)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e313c8e8136b75e6ef241da56575274d9bd095641", 0x3c}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000005c0), 0x2d, 0x20040040) recvfrom$unix(r4, 0x0, 0x0, 0x40010020, 0x0, 0x0) unlink(&(0x7f0000000900)='./file1\x00') 1m49.767637547s ago: executing program 1 (id=121): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='4', 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1000000f7) add_key$user(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000500)=""/69, 0x45, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x30, r3, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 1m48.241913788s ago: executing program 1 (id=123): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000ac0)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x16481, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nodiscard}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@grpquota}, {}, {@usrquota}, {@errors_remount}, {@grpquota}, {@errors_remount}]}, 0x25, 0x61b6, &(0x7f0000000b00)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") setxattr$system_posix_acl(&(0x7f0000006cc0)='.\x00', &(0x7f0000006d00)='system.posix_acl_access\x00', &(0x7f0000006d40)={{}, {0x1, 0x2}, [], {}, [], {}, {0x20, 0x4}}, 0x24, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000006d80)='.\x00', 0xffffffab) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000300)=0x474c, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x4b) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000640)=0x40081f4, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000680)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x800001d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) 1m47.086290229s ago: executing program 1 (id=143): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200010, &(0x7f0000000d40)=ANY=[], 0x0, 0x67d, &(0x7f00000001c0)="$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") (fail_nth: 1) 1m44.933590536s ago: executing program 1 (id=140): r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) close_range(r0, 0xffffffffffffffff, 0xff0f) 1m44.086512039s ago: executing program 33 (id=140): r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) close_range(r0, 0xffffffffffffffff, 0xff0f) 1m27.059693814s ago: executing program 5 (id=253): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYRES16], 0x1, 0xc5f, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file2\x00', 0x105042, 0x0) write$binfmt_format(r1, &(0x7f0000001000)='1\x00', 0x2400) 1m26.313206754s ago: executing program 5 (id=247): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='4', 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1000000f7) r4 = add_key$user(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r3, r4, r3}, &(0x7f0000000500)=""/69, 0x45, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x30, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 1m25.175442044s ago: executing program 5 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="19000000040000000400000066"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000100000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000002b704000000000000850000003300000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000d00)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x3c) (fail_nth: 4) 1m23.693547074s ago: executing program 5 (id=258): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@delqdisc={0x38, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1400c, &(0x7f0000000c00)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000180)="$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") mount$bind(0x0, 0x0, 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x6, 0x11, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='GPL\x00', 0x5, 0xd2, &(0x7f0000000940)=""/210, 0x0, 0x5}, 0x94) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x4b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x80402, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x27) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x14}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x20090) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000c40), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000c80)={0x1, @raw_data="a73fb05f3771f0834853563488b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000bc0)) r8 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) capset(0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) chmod(0x0, 0x1258bab1c8332e9a) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000a40)={0x2, &(0x7f0000000a80)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c25e66fdbe"], 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000009000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000640400000a000100ecf1e3f0949500000800040080000000"], 0x5c}}, 0x8000) 1m20.432087541s ago: executing program 5 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000300)={0x14, {{0x29, 0x0, 0x34000000, @private2={0xfc, 0x2, '\x00', 0x80}}}}, 0x88) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000a00)={r5, &(0x7f0000000b00), &(0x7f0000000b40)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff000001000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 1m19.868959676s ago: executing program 5 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x6, 0xb, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000ff0f00000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004000000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f00000005c0), &(0x7f0000000680)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r3, 0x5, 0xe, 0x0, &(0x7f0000002000)="011b4d1bb4b79c6141932645ab1a", 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 1m19.635333962s ago: executing program 34 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x6, 0xb, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000ff0f00000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004000000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f00000005c0), &(0x7f0000000680)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r3, 0x5, 0xe, 0x0, &(0x7f0000002000)="011b4d1bb4b79c6141932645ab1a", 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 2.151656683s ago: executing program 4 (id=1314): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e0008"], 0x1c) 1.937976818s ago: executing program 0 (id=1318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x4000009, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x3, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x80485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x4, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000ec0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f00)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000f40)={&(0x7f0000000f80)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="80", 0x1}], 0x1}, 0x4) 1.781331973s ago: executing program 4 (id=1321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) 1.659464696s ago: executing program 0 (id=1323): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='10', 0x2) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) 1.609735147s ago: executing program 4 (id=1324): socket$igmp(0x2, 0x3, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000480)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.527287589s ago: executing program 0 (id=1327): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0xa, 0x1, 0xff) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) write(r0, &(0x7f0000000600)='27', 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000b80)) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x3, 0x0, &(0x7f0000001000)='syzkaller\x00'}, 0x94) r5 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001040)={0x0, @in6={{0xa, 0x4e60, 0x1, @empty, 0x5}}, 0x2, 0x6, 0xffff1896, 0x3, 0x20, 0xffffffa9, 0x4c}, 0x9c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001100), 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r4, 0x1f4, 0x6, 0x0, &(0x7f00000011c0)="ff412f66b083", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) open_by_handle_at(r6, 0x0, 0x200c81) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) 1.527204449s ago: executing program 7 (id=1328): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0x1) 1.439651202s ago: executing program 4 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000013c0)='./sys\x00', &(0x7f0000001400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r0, &(0x7f0000001480)='0', 0x1) 1.279858066s ago: executing program 0 (id=1332): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e0008"], 0x1c) 1.279702196s ago: executing program 4 (id=1333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000004c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000540)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000580)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.14229029s ago: executing program 7 (id=1336): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002b007000ffdbdf25040000002c000180060005004e200000060005004e2300000500020006000000060005104e210000080006000a00000004000180"], 0x44}, 0x1, 0x0, 0x0, 0x20040811}, 0x800) 1.009661483s ago: executing program 7 (id=1337): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.008508074s ago: executing program 6 (id=1347): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000004c0)={r0, r0, 0x6, 0x3, &(0x7f0000000580)="b0fdd7", 0x9, 0x74, 0x10cf, 0x5500, 0x43, 0x0, 0x8, 'syz0\x00'}) 903.587856ms ago: executing program 4 (id=1338): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x1000017, 0x5, 0x6, 0x3, 0x7, "9d3900"}) 902.416546ms ago: executing program 0 (id=1339): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 845.664187ms ago: executing program 2 (id=1340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001a80)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_VERSION(r0, 0xc0046209, &(0x7f0000001ac0)) 681.696532ms ago: executing program 2 (id=1341): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 677.207542ms ago: executing program 6 (id=1352): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e0008"], 0x1c) 656.855672ms ago: executing program 7 (id=1342): mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000013c0)='./sys\x00', &(0x7f0000001400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r0, &(0x7f0000001480)='0', 0x1) 593.542154ms ago: executing program 2 (id=1343): socket$igmp(0x2, 0x3, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000480)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 437.262209ms ago: executing program 2 (id=1344): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xa20, 0x8000c65) 387.60578ms ago: executing program 6 (id=1345): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x6375, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000580)={0x20000000, 0x1, 0xffffffffffffffff}) 278.445133ms ago: executing program 2 (id=1346): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syslog(0x4, &(0x7f0000000100)=""/19, 0xb12288e90d7c8384) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[0x100000, 0xe000, 0xd000, 0x40000], 0x5, 0x82, 0xff5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 278.363253ms ago: executing program 7 (id=1348): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e22, 0xac, @empty, 0x8000}, r2, 0x8}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 274.662662ms ago: executing program 6 (id=1349): capset(0x0, &(0x7f0000000080)={0x200000, 0x200000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 157.728296ms ago: executing program 6 (id=1350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000280)=0x3000) 157.377636ms ago: executing program 7 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x4000009, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x3, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x80485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x4, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000ec0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f00)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000f40)={&(0x7f0000000f80)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="80", 0x1}], 0x1}, 0x4) 79.302808ms ago: executing program 6 (id=1353): r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0x2bf}, &(0x7f0000000100), 0x0, &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_clone(0x29420cd2a56fb3d, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x4b4a, 0x100000600081009) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x0, 0x37c109a92a17dee7}, 0xc000800) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f00000006c0)=0xa, 0x1959cc36) connect$inet6(r4, &(0x7f0000000700)={0xa, 0x0, 0x80000001, @loopback}, 0x1c) shutdown(r3, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000740)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x18}, 0xa) 123.62µs ago: executing program 0 (id=1354): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 0s ago: executing program 2 (id=1355): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): SK> [ 139.329360][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.343657][ T6005] tmpfs: Unknown parameter 'quota' [ 142.494229][ T6019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.673316][ T1324] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 142.908774][ T6095] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 142.938761][ T6100] 9pnet_virtio: no channels available for device syz [ 142.962813][ T4265] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 143.059135][ T1324] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 143.368312][ T6065] ceph: No mds server is up or the cluster is laggy [ 143.469383][ T1324] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 143.476845][ T1324] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 143.500540][ T1324] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 143.537918][ T1324] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 143.554721][ T1324] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 143.573006][ T1324] usb 5-1: config 168 interface 0 has no altsetting 0 [ 143.673520][ T1324] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 143.687837][ T1324] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 143.699782][ T1324] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 143.706739][ T6151] program syz.7.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.719143][ T1324] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 143.730918][ T1324] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 143.764346][ T1324] usb 5-1: config 168 interface 0 has no altsetting 0 [ 143.884403][ T1324] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 143.892710][ T1324] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 143.911873][ T1324] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 143.938229][ T1324] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 143.955773][ T4212] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 143.963527][ T1324] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 143.983200][ T1324] usb 5-1: config 168 interface 0 has no altsetting 0 [ 144.079823][ T26] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 144.167351][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.438'. [ 144.178108][ T6178] device hsr_slave_0 left promiscuous mode [ 144.195529][ T6178] device hsr_slave_1 left promiscuous mode [ 144.224386][ T4212] usb 3-1: Using ep0 maxpacket: 16 [ 144.279320][ T1324] usb 5-1: string descriptor 0 read error: -22 [ 144.291706][ T1324] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 144.303718][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.329089][ T26] usb 8-1: Using ep0 maxpacket: 8 [ 144.405367][ T1324] adutux 5-1:168.0: interrupt endpoints not found [ 144.413527][ T6188] FAULT_INJECTION: forcing a failure. [ 144.413527][ T6188] name failslab, interval 1, probability 0, space 0, times 0 [ 144.446697][ T6188] CPU: 1 PID: 6188 Comm: syz.6.431 Not tainted syzkaller #0 [ 144.453998][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.464052][ T6188] Call Trace: [ 144.467329][ T6188] [ 144.470260][ T6188] dump_stack_lvl+0x188/0x250 [ 144.474953][ T6188] ? show_regs_print_info+0x20/0x20 [ 144.480167][ T6188] ? load_image+0x410/0x410 [ 144.484684][ T6188] ? __might_sleep+0xf0/0xf0 [ 144.489281][ T6188] ? __lock_acquire+0x7d40/0x7d40 [ 144.494318][ T6188] should_fail+0x383/0x4b0 [ 144.498749][ T6188] should_failslab+0x5/0x20 [ 144.503259][ T6188] slab_pre_alloc_hook+0x51/0xc0 [ 144.508202][ T6188] kmem_cache_alloc_node+0x47/0x2c0 [ 144.513782][ T6188] ? alloc_unbound_pwq+0x8a4/0xdf0 [ 144.518908][ T6188] alloc_unbound_pwq+0x8a4/0xdf0 [ 144.523862][ T6188] apply_wqattrs_prepare+0x382/0xad0 [ 144.529185][ T6188] apply_workqueue_attrs+0xd0/0x170 [ 144.534394][ T6188] alloc_workqueue+0xe9f/0x1450 [ 144.539267][ T6188] ? mutex_unlock+0x10/0x10 [ 144.543778][ T6188] ? ceph_get_tree+0x35e/0x1290 [ 144.548641][ T6188] ? apply_workqueue_attrs+0x170/0x170 [ 144.554105][ T6188] ? __ceph_monc_want_map+0x101/0x460 [ 144.559492][ T6188] ceph_get_tree+0x38e/0x1290 [ 144.564177][ T6188] ? bpf_lsm_capable+0x5/0x10 [ 144.568860][ T6188] ? security_capable+0x85/0xb0 [ 144.573730][ T6188] vfs_get_tree+0x88/0x270 [ 144.578160][ T6188] do_new_mount+0x247/0xa40 [ 144.582681][ T6188] __se_sys_mount+0x2e3/0x3d0 [ 144.587370][ T6188] ? __x64_sys_mount+0xc0/0xc0 [ 144.592147][ T6188] ? lockdep_hardirqs_on+0x94/0x140 [ 144.597351][ T6188] ? __x64_sys_mount+0x1c/0xc0 [ 144.602125][ T6188] do_syscall_64+0x4c/0xa0 [ 144.606551][ T6188] ? clear_bhb_loop+0x30/0x80 [ 144.611230][ T6188] ? clear_bhb_loop+0x30/0x80 [ 144.616213][ T6188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.617314][ T1324] usb 5-1: USB disconnect, device number 12 [ 144.622110][ T6188] RIP: 0033:0x7fec053d8559 [ 144.622168][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.652022][ T6188] RSP: 002b:00007fec03630028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.660440][ T6188] RAX: ffffffffffffffda RBX: 00007fec0565ffa0 RCX: 00007fec053d8559 [ 144.668418][ T6188] RDX: 0000200000000880 RSI: 0000200000000840 RDI: 0000200000000800 [ 144.676391][ T6188] RBP: 00007fec0546fab8 R08: 0000000000000000 R09: 0000000000000000 [ 144.684365][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.692334][ T6188] R13: 00007fec05660038 R14: 00007fec0565ffa0 R15: 00007ffc25c0ceb8 [ 144.700318][ T6188] [ 144.715906][ T26] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 144.725263][ T26] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 144.729412][ T4212] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 144.742890][ T26] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 144.758058][ T26] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 144.772103][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.779102][ T26] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 144.789187][ T4212] usb 3-1: Product: syz [ 144.803688][ T4212] usb 3-1: Manufacturer: syz [ 144.818685][ T4212] usb 3-1: SerialNumber: syz [ 144.819033][ T26] usb 8-1: config 168 interface 0 has no altsetting 0 [ 144.919247][ T26] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 144.926664][ T26] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 144.964486][ T26] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 144.986272][ T26] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 144.988208][ T6221] netlink: 104 bytes leftover after parsing attributes in process `syz.0.440'. [ 145.017935][ T26] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 145.047032][ T26] usb 8-1: config 168 interface 0 has no altsetting 0 [ 145.056813][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 145.067984][ T6226] device hsr_slave_0 left promiscuous mode [ 145.081440][ T6226] device hsr_slave_1 left promiscuous mode [ 145.094735][ T4212] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 145.127424][ T4212] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.138150][ T4212] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 145.140760][ T26] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 145.147114][ T4212] usb 3-1: media controller created [ 145.158710][ T26] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 145.176685][ T26] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 145.181904][ T4212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.194693][ T26] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 145.207702][ T26] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 145.233262][ T26] usb 8-1: config 168 interface 0 has no altsetting 0 [ 145.319211][ T4212] zl10353_read_register: readreg error (reg=127, ret==-71) [ 145.415439][ T4212] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 145.451802][ T4212] usb 3-1: USB disconnect, device number 2 [ 145.479169][ T26] usb 8-1: string descriptor 0 read error: -22 [ 145.485830][ T26] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 145.515471][ T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.593662][ T26] adutux 8-1:168.0: interrupt endpoints not found [ 145.812204][ T6268] UBIFS error (pid: 6268): cannot open "/dev/sg0", error -22 [ 145.843522][ T4191] usb 8-1: USB disconnect, device number 2 [ 145.857549][ T6266] ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall. [ 145.945616][ T6270] FAULT_INJECTION: forcing a failure. [ 145.945616][ T6270] name failslab, interval 1, probability 0, space 0, times 0 [ 145.975136][ T6270] CPU: 0 PID: 6270 Comm: syz.4.452 Not tainted syzkaller #0 [ 145.982420][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.992459][ T6270] Call Trace: [ 145.995737][ T6270] [ 145.998668][ T6270] dump_stack_lvl+0x188/0x250 [ 146.003357][ T6270] ? show_regs_print_info+0x20/0x20 [ 146.008563][ T6270] ? load_image+0x410/0x410 [ 146.013080][ T6270] ? __might_sleep+0xf0/0xf0 [ 146.017675][ T6270] ? __lock_acquire+0x7d40/0x7d40 [ 146.022713][ T6270] should_fail+0x383/0x4b0 [ 146.027144][ T6270] should_failslab+0x5/0x20 [ 146.031648][ T6270] slab_pre_alloc_hook+0x51/0xc0 [ 146.036608][ T6270] kmem_cache_alloc_trace+0x47/0x290 [ 146.041875][ T6270] ? apply_wqattrs_prepare+0x175/0xad0 [ 146.047323][ T6270] apply_wqattrs_prepare+0x175/0xad0 [ 146.052589][ T6270] ? mutex_lock_io_nested+0x60/0x60 [ 146.057773][ T6270] apply_workqueue_attrs+0xd0/0x170 [ 146.062957][ T6270] alloc_workqueue+0xe9f/0x1450 [ 146.067827][ T6270] ? mutex_unlock+0x10/0x10 [ 146.072341][ T6270] ? ceph_get_tree+0x35e/0x1290 [ 146.077201][ T6270] ? apply_workqueue_attrs+0x170/0x170 [ 146.082665][ T6270] ? __ceph_monc_want_map+0x101/0x460 [ 146.088054][ T6270] ceph_get_tree+0x38e/0x1290 [ 146.092738][ T6270] ? bpf_lsm_capable+0x5/0x10 [ 146.097428][ T6270] ? security_capable+0x85/0xb0 [ 146.102294][ T6270] vfs_get_tree+0x88/0x270 [ 146.106725][ T6270] do_new_mount+0x247/0xa40 [ 146.111243][ T6270] __se_sys_mount+0x2e3/0x3d0 [ 146.115939][ T6270] ? __x64_sys_mount+0xc0/0xc0 [ 146.120715][ T6270] ? lockdep_hardirqs_on+0x94/0x140 [ 146.125917][ T6270] ? __x64_sys_mount+0x1c/0xc0 [ 146.130687][ T6270] do_syscall_64+0x4c/0xa0 [ 146.135105][ T6270] ? clear_bhb_loop+0x30/0x80 [ 146.139785][ T6270] ? clear_bhb_loop+0x30/0x80 [ 146.144473][ T6270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.150371][ T6270] RIP: 0033:0x7f3205088559 [ 146.154786][ T6270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.174389][ T6270] RSP: 002b:00007f32032e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.182810][ T6270] RAX: ffffffffffffffda RBX: 00007f320530ffa0 RCX: 00007f3205088559 [ 146.190786][ T6270] RDX: 0000200000000880 RSI: 0000200000000840 RDI: 0000200000000800 [ 146.198759][ T6270] RBP: 00007f320511fab8 R08: 0000000000000000 R09: 0000000000000000 [ 146.206729][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.214705][ T6270] R13: 00007f3205310038 R14: 00007f320530ffa0 R15: 00007ffd4c705818 [ 146.222693][ T6270] [ 146.444942][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 146.469590][ T6303] FAULT_INJECTION: forcing a failure. [ 146.469590][ T6303] name failslab, interval 1, probability 0, space 0, times 0 [ 146.489064][ T6309] device hsr_slave_0 left promiscuous mode [ 146.500652][ T6309] device hsr_slave_1 left promiscuous mode [ 146.508075][ T6303] CPU: 1 PID: 6303 Comm: syz.2.469 Not tainted syzkaller #0 [ 146.515370][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.525422][ T6303] Call Trace: [ 146.528703][ T6303] [ 146.531636][ T6303] dump_stack_lvl+0x188/0x250 [ 146.536324][ T6303] ? show_regs_print_info+0x20/0x20 [ 146.541536][ T6303] ? load_image+0x410/0x410 [ 146.546049][ T6303] ? __lock_acquire+0x7d40/0x7d40 [ 146.551089][ T6303] should_fail+0x383/0x4b0 [ 146.555516][ T6303] should_failslab+0x5/0x20 [ 146.560021][ T6303] slab_pre_alloc_hook+0x51/0xc0 [ 146.564969][ T6303] kmem_cache_alloc_trace+0x47/0x290 [ 146.570259][ T6303] ? ceph_mdsc_init+0x53/0x920 [ 146.575025][ T6303] ? __rwlock_init+0x140/0x140 [ 146.579798][ T6303] ceph_mdsc_init+0x53/0x920 [ 146.584410][ T6303] ceph_get_tree+0x54b/0x1290 [ 146.589090][ T6303] ? bpf_lsm_capable+0x5/0x10 [ 146.593777][ T6303] ? security_capable+0x85/0xb0 [ 146.598636][ T6303] vfs_get_tree+0x88/0x270 [ 146.603063][ T6303] do_new_mount+0x247/0xa40 [ 146.607582][ T6303] __se_sys_mount+0x2e3/0x3d0 [ 146.612273][ T6303] ? __x64_sys_mount+0xc0/0xc0 [ 146.617044][ T6303] ? lockdep_hardirqs_on+0x94/0x140 [ 146.622245][ T6303] ? __x64_sys_mount+0x1c/0xc0 [ 146.627018][ T6303] do_syscall_64+0x4c/0xa0 [ 146.631441][ T6303] ? clear_bhb_loop+0x30/0x80 [ 146.636126][ T6303] ? clear_bhb_loop+0x30/0x80 [ 146.640812][ T6303] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.646712][ T6303] RIP: 0033:0x7f41d82d6559 [ 146.651142][ T6303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.670750][ T6303] RSP: 002b:00007f41d652e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.679172][ T6303] RAX: ffffffffffffffda RBX: 00007f41d855dfa0 RCX: 00007f41d82d6559 [ 146.687148][ T6303] RDX: 0000200000000880 RSI: 0000200000000840 RDI: 0000200000000800 [ 146.695120][ T6303] RBP: 00007f41d836dab8 R08: 0000000000000000 R09: 0000000000000000 [ 146.703091][ T6303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.711060][ T6303] R13: 00007f41d855e038 R14: 00007f41d855dfa0 R15: 00007ffd3799e0d8 [ 146.719050][ T6303] [ 146.879799][ T4212] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 146.923824][ T6344] netlink: 'syz.0.473': attribute type 12 has an invalid length. [ 147.071428][ T6340] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 147.089678][ T6340] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 147.342546][ T4212] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 147.365885][ T4212] usb 7-1: can't read configurations, error -71 [ 147.816822][ T6387] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.484'. [ 148.473149][ T6404] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.516708][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 148.576441][ T6412] FAULT_INJECTION: forcing a failure. [ 148.576441][ T6412] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.589747][ T6412] CPU: 0 PID: 6412 Comm: syz.6.487 Not tainted syzkaller #0 [ 148.597035][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.607091][ T6412] Call Trace: [ 148.610374][ T6412] [ 148.613473][ T6412] dump_stack_lvl+0x188/0x250 [ 148.618154][ T6412] ? show_regs_print_info+0x20/0x20 [ 148.623352][ T6412] ? load_image+0x410/0x410 [ 148.627859][ T6412] ? mark_lock+0x94/0x320 [ 148.632191][ T6412] should_fail+0x383/0x4b0 [ 148.636614][ T6412] prepare_alloc_pages+0x1e3/0x5b0 [ 148.641737][ T6412] __alloc_pages+0x11b/0x480 [ 148.646334][ T6412] ? zone_statistics+0x170/0x170 [ 148.651282][ T6412] ? rcu_lock_acquire+0x30/0x30 [ 148.656134][ T6412] ? alloc_pages+0x452/0x560 [ 148.660731][ T6412] __get_free_pages+0x8/0x30 [ 148.665322][ T6412] __tlb_remove_page_size+0x1f2/0x3f0 [ 148.670698][ T6412] unmap_page_range+0xfcf/0x2410 [ 148.675664][ T6412] unmap_vmas+0x131/0x250 [ 148.680002][ T6412] ? unmap_page_range+0x2410/0x2410 [ 148.685204][ T6412] ? __mutex_lock_common+0x435/0x2400 [ 148.690579][ T6412] ? exit_mm_release+0x16/0x30 [ 148.695356][ T6412] exit_mmap+0x3b9/0x640 [ 148.699608][ T6412] ? vm_brk+0x20/0x20 [ 148.703607][ T6412] ? uprobe_clear_state+0x2f6/0x460 [ 148.708810][ T6412] __mmput+0x115/0x390 [ 148.713268][ T6412] exit_mm+0x632/0x7b0 [ 148.717337][ T6412] ? perf_pmu_migrate_context+0xb70/0xb70 [ 148.723065][ T6412] ? do_exit+0x2110/0x2110 [ 148.727481][ T6412] ? __ia32_sys_timer_delete+0x40/0x40 [ 148.732938][ T6412] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 148.738400][ T6412] ? tty_audit_exit+0x149/0x1f0 [ 148.743253][ T6412] do_exit+0x5b8/0x2110 [ 148.747426][ T6412] ? put_task_struct+0x80/0x80 [ 148.752188][ T6412] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.758180][ T6412] ? _raw_spin_lock_irq+0xb7/0xf0 [ 148.763213][ T6412] do_group_exit+0x12c/0x2f0 [ 148.767803][ T6412] ? lockdep_hardirqs_on+0x94/0x140 [ 148.773005][ T6412] get_signal+0x7eb/0x12e0 [ 148.777435][ T6412] arch_do_signal_or_restart+0xe6/0x12a0 [ 148.783072][ T6412] ? media_device_ioctl+0x3f3/0x490 [ 148.788284][ T6412] ? futex_exit_release+0x1c0/0x1c0 [ 148.793484][ T6412] ? get_sigframe_size+0x10/0x10 [ 148.798421][ T6412] ? __context_tracking_exit+0x4c/0x80 [ 148.803889][ T6412] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.809874][ T6412] ? exit_to_user_mode_loop+0x3b/0x130 [ 148.815593][ T6412] exit_to_user_mode_loop+0x9e/0x130 [ 148.820881][ T6412] exit_to_user_mode_prepare+0xee/0x180 [ 148.826427][ T6412] syscall_exit_to_user_mode+0x16/0x40 [ 148.831885][ T6412] do_syscall_64+0x58/0xa0 [ 148.836300][ T6412] ? clear_bhb_loop+0x30/0x80 [ 148.840977][ T6412] ? clear_bhb_loop+0x30/0x80 [ 148.845658][ T6412] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.851549][ T6412] RIP: 0033:0x7fec053d8559 [ 148.855959][ T6412] Code: Unable to access opcode bytes at RIP 0x7fec053d852f. [ 148.863316][ T6412] RSP: 002b:00007fec036300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.871729][ T6412] RAX: 0000000000000001 RBX: 00007fec0565ffa8 RCX: 00007fec053d8559 [ 148.879697][ T6412] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fec0565ffac [ 148.887672][ T6412] RBP: 00007fec0565ffa0 R08: 0020087c3312b0b5 R09: 0000000000000000 [ 148.895641][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.903613][ T6412] R13: 00007fec05660038 R14: 00007ffc25c0cdd0 R15: 00007ffc25c0ceb8 [ 148.911598][ T6412] [ 148.915891][ T6407] device hsr_slave_0 left promiscuous mode [ 148.942660][ T6407] device hsr_slave_1 left promiscuous mode [ 149.027323][ T6418] dummy0 speed is unknown, defaulting to 1000 [ 149.045513][ T6418] dummy0 speed is unknown, defaulting to 1000 [ 149.071499][ T6418] dummy0 speed is unknown, defaulting to 1000 [ 149.333221][ T4265] dummy0 speed is unknown, defaulting to 1000 [ 149.332788][ T6418] infiniband syz0: set active [ 149.375399][ T6418] infiniband syz0: added dummy0 [ 149.501706][ T6418] RDS/IB: syz0: added [ 149.538784][ T6418] smc: adding ib device syz0 with port count 1 [ 149.564392][ T6418] smc: ib device syz0 port 1 has pnetid [ 149.591299][ T4265] dummy0 speed is unknown, defaulting to 1000 [ 149.598196][ T6418] dummy0 speed is unknown, defaulting to 1000 [ 149.910948][ T6418] dummy0 speed is unknown, defaulting to 1000 [ 150.206201][ T6418] dummy0 speed is unknown, defaulting to 1000 [ 150.276259][ T6449] nvme_tcp: malformed address passed: 1:8009 [ 150.467829][ T6418] dummy0 speed is unknown, defaulting to 1000 [ 150.518749][ T4312] asus 0005:0B05:8502.0001: No inputs registered, leaving [ 150.538399][ T4312] asus 0005:0B05:8502.0001: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 150.735099][ T6465] fido_id[6465]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.756466][ T6473] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 150.858898][ T6418] dummy0 speed is unknown, defaulting to 1000 [ 150.890634][ T6486] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 151.016917][ T6497] process 'syz.6.513' launched './file2' with NULL argv: empty string added [ 151.247976][ T6516] jffs2: notice: (6516) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.431658][ T6534] FAULT_INJECTION: forcing a failure. [ 151.431658][ T6534] name fail_futex, interval 1, probability 0, space 0, times 1 [ 151.480415][ T6534] CPU: 0 PID: 6534 Comm: syz.4.525 Not tainted syzkaller #0 [ 151.487726][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.497781][ T6534] Call Trace: [ 151.501061][ T6534] [ 151.503988][ T6534] dump_stack_lvl+0x188/0x250 [ 151.508672][ T6534] ? show_regs_print_info+0x20/0x20 [ 151.513881][ T6534] ? load_image+0x410/0x410 [ 151.518391][ T6534] ? cgroup_rstat_updated+0xce/0x350 [ 151.523683][ T6534] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 151.529678][ T6534] should_fail+0x383/0x4b0 [ 151.534102][ T6534] get_futex_key+0x1a1/0x12d0 [ 151.538789][ T6534] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.544781][ T6534] ? futex_wait_restart+0x250/0x250 [ 151.549987][ T6534] ? lock_chain_count+0x20/0x20 [ 151.554840][ T6534] ? tracing_record_taskinfo+0x210/0x210 [ 151.555909][ T6542] jffs2: notice: (6542) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.560474][ T6534] futex_wait_setup+0x4b/0x520 [ 151.560501][ T6534] ? lockdep_hardirqs_on+0x94/0x140 [ 151.560524][ T6534] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 151.560556][ T6534] futex_wait+0x22f/0x680 [ 151.560579][ T6534] ? __lock_acquire+0x13b3/0x7d40 [ 151.601990][ T6534] ? do_futex+0x12b0/0x12b0 [ 151.606517][ T6534] ? verify_lock_unused+0x140/0x140 [ 151.611726][ T6534] ? verify_lock_unused+0x140/0x140 [ 151.616929][ T6534] ? fd_install+0x2b1/0x4c0 [ 151.621436][ T6534] ? __anon_inode_getfd+0x35c/0x3d0 [ 151.626642][ T6534] do_futex+0xdc2/0x12b0 [ 151.630896][ T6534] ? bpf_lsm_bpf_map+0x5/0x10 [ 151.635596][ T6534] ? futex_exit_release+0x1c0/0x1c0 [ 151.640802][ T6534] ? __context_tracking_exit+0x4c/0x80 [ 151.646268][ T6534] __se_sys_futex+0x389/0x420 [ 151.650952][ T6534] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.656940][ T6534] ? __x64_sys_futex+0xf0/0xf0 [ 151.661713][ T6534] ? __x64_sys_futex+0x1d/0xf0 [ 151.666482][ T6534] do_syscall_64+0x4c/0xa0 [ 151.670902][ T6534] ? clear_bhb_loop+0x30/0x80 [ 151.675585][ T6534] ? clear_bhb_loop+0x30/0x80 [ 151.680271][ T6534] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.686168][ T6534] RIP: 0033:0x7f3205088559 [ 151.690581][ T6534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.710187][ T6534] RSP: 002b:00007f32032e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.718607][ T6534] RAX: ffffffffffffffda RBX: 00007f320530ffa8 RCX: 00007f3205088559 [ 151.726580][ T6534] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f320530ffa8 [ 151.734555][ T6534] RBP: 00007f320530ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 151.742530][ T6534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.750495][ T6534] R13: 00007f3205310038 R14: 00007ffd4c705730 R15: 00007ffd4c705818 [ 151.758456][ T6534] [ 151.761479][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.932843][ T6577] FAULT_INJECTION: forcing a failure. [ 151.932843][ T6577] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.946672][ T6577] CPU: 1 PID: 6577 Comm: syz.6.540 Not tainted syzkaller #0 [ 151.953969][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.964023][ T6577] Call Trace: [ 151.967299][ T6577] [ 151.970233][ T6577] dump_stack_lvl+0x188/0x250 [ 151.974917][ T6577] ? show_regs_print_info+0x20/0x20 [ 151.980125][ T6577] ? load_image+0x410/0x410 [ 151.984640][ T6577] should_fail+0x383/0x4b0 [ 151.989061][ T6577] prepare_alloc_pages+0x1e3/0x5b0 [ 151.994179][ T6577] __alloc_pages+0x11b/0x480 [ 151.998772][ T6577] ? zone_statistics+0x170/0x170 [ 152.003716][ T6577] ? rcu_lock_acquire+0x30/0x30 [ 152.007813][ T6578] UBIFS error (pid: 6578): cannot open "ubi0:test", error -19 [ 152.008572][ T6577] ? alloc_pages+0x452/0x560 [ 152.020605][ T6577] __get_free_pages+0x8/0x30 [ 152.025199][ T6577] __tlb_remove_page_size+0x1f2/0x3f0 [ 152.030574][ T6577] unmap_page_range+0xfcf/0x2410 [ 152.035545][ T6577] unmap_vmas+0x131/0x250 [ 152.039881][ T6577] ? unmap_page_range+0x2410/0x2410 [ 152.045089][ T6577] ? __mutex_lock_common+0x435/0x2400 [ 152.050468][ T6577] ? exit_mm_release+0x16/0x30 [ 152.055245][ T6577] exit_mmap+0x3b9/0x640 [ 152.059496][ T6577] ? vm_brk+0x20/0x20 [ 152.063500][ T6577] ? uprobe_clear_state+0x2f6/0x460 [ 152.068710][ T6577] __mmput+0x115/0x390 [ 152.072781][ T6577] exit_mm+0x632/0x7b0 [ 152.076847][ T6577] ? perf_pmu_migrate_context+0xb70/0xb70 [ 152.082573][ T6577] ? do_exit+0x2110/0x2110 [ 152.086990][ T6577] ? __ia32_sys_timer_delete+0x40/0x40 [ 152.092450][ T6577] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 152.097912][ T6577] ? tty_audit_exit+0x149/0x1f0 [ 152.102781][ T6577] do_exit+0x5b8/0x2110 [ 152.106945][ T6577] ? put_task_struct+0x80/0x80 [ 152.111709][ T6577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.117697][ T6577] ? _raw_spin_lock_irq+0xb7/0xf0 [ 152.122729][ T6577] do_group_exit+0x12c/0x2f0 [ 152.127315][ T6577] ? lockdep_hardirqs_on+0x94/0x140 [ 152.132518][ T6577] get_signal+0x7eb/0x12e0 [ 152.136958][ T6577] arch_do_signal_or_restart+0xe6/0x12a0 [ 152.142604][ T6577] ? futex_exit_release+0x1c0/0x1c0 [ 152.147808][ T6577] ? get_sigframe_size+0x10/0x10 [ 152.152753][ T6577] ? __context_tracking_exit+0x4c/0x80 [ 152.158227][ T6577] ? exit_to_user_mode_loop+0x3b/0x130 [ 152.163691][ T6577] exit_to_user_mode_loop+0x9e/0x130 [ 152.168982][ T6577] exit_to_user_mode_prepare+0xee/0x180 [ 152.174529][ T6577] syscall_exit_to_user_mode+0x16/0x40 [ 152.179987][ T6577] do_syscall_64+0x58/0xa0 [ 152.184400][ T6577] ? clear_bhb_loop+0x30/0x80 [ 152.189071][ T6577] ? clear_bhb_loop+0x30/0x80 [ 152.193754][ T6577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.199648][ T6577] RIP: 0033:0x7fec053d8559 [ 152.204064][ T6577] Code: Unable to access opcode bytes at RIP 0x7fec053d852f. [ 152.211420][ T6577] RSP: 002b:00007fec036300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.219835][ T6577] RAX: 0000000000000001 RBX: 00007fec0565ffa8 RCX: 00007fec053d8559 [ 152.227804][ T6577] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fec0565ffac [ 152.235776][ T6577] RBP: 00007fec0565ffa0 R08: 0034e50fec1e9a04 R09: 0000000000000000 [ 152.243747][ T6577] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 152.251718][ T6577] R13: 00007fec05660038 R14: 00007ffc25c0cdd0 R15: 00007ffc25c0ceb8 [ 152.259707][ T6577] [ 152.849178][ T6623] device syzkaller0 entered promiscuous mode [ 153.269144][ T1324] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 153.321130][ T6664] jffs2: notice: (6664) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.465145][ T6678] tipc: Started in network mode [ 153.489224][ T6678] tipc: Node identity 4, cluster identity 4711 [ 153.495394][ T6678] tipc: Node number set to 4 [ 153.529426][ T1324] usb 7-1: Using ep0 maxpacket: 8 [ 153.669190][ T1324] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 153.696248][ T1324] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.726793][ T1324] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.748682][ T1324] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.776979][ T1324] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.804746][ T1324] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.820656][ T1324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.926824][ T6718] autofs4:pid:6718:autofs_fill_super: called with bogus options [ 154.072960][ T6730] overlayfs: unrecognized mount option "verity=require" or missing value [ 154.089352][ T1324] usb 7-1: usb_control_msg returned -32 [ 154.095554][ T1324] usbtmc 7-1:16.0: can't read capabilities [ 154.106410][ T6721] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 154.136415][ T6721] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 154.203972][ T6728] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 154.224480][ T6728] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 154.489010][ T4264] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.541382][ T6749] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 154.552955][ T6749] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 154.569291][ T6749] raw: 017ff00000001000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 154.580994][ T6749] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 154.590251][ T6749] page dumped because: unmovable page [ 154.595978][ T6749] page_owner info is not present (never set?) [ 154.666349][ T6763] ip_tables: iptables: counters copy to user failed while replacing table [ 154.764827][ T6760] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 154.777475][ T6760] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 154.862427][ T4264] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 154.877883][ T4264] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 154.914019][ T4264] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.937071][ T4264] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 154.946891][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.999352][ T6743] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 155.014246][ T6743] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 155.045526][ T4264] pl2303 3-1:1.0: pl2303 converter detected [ 155.061469][ T6781] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 155.078101][ T4264] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 155.089467][ T6781] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.199259][ T4264] Bluetooth: hci0: command 0x1407 tx timeout [ 155.224945][ T6790] hub 8-0:1.0: USB hub found [ 155.243574][ T6790] hub 8-0:1.0: 1 port detected [ 155.389434][ T6743] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 155.429158][ T6743] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 155.469062][ T6743] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 155.520315][ T6743] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 155.559448][ T6743] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 155.601818][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 155.683863][ T6819] CIFS: Attempting to mount \\127.0.0.1\share [ 155.700247][ T6819] CIFS: VFS: No username specified [ 155.856275][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 155.863340][ T6741] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 155.887725][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.623'. [ 155.939693][ T6741] pl2303 ttyUSB0: error sending break = -32 [ 155.952947][ T21] usb 3-1: USB disconnect, device number 3 [ 155.997405][ T21] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 156.026389][ T21] pl2303 3-1:1.0: device disconnected [ 156.093954][ T4312] usb 7-1: USB disconnect, device number 6 [ 156.122804][ T6844] netlink: 'syz.7.629': attribute type 1 has an invalid length. [ 156.139172][ T6844] netlink: 'syz.7.629': attribute type 2 has an invalid length. [ 156.251222][ T6846] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 156.265572][ T6846] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 156.275393][ T6850] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 156.299068][ T6850] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 156.309150][ T4264] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 156.489021][ T1324] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 156.508341][ T6855] Bluetooth: hci0: unsupported parameter 5161 [ 156.529101][ T6855] Bluetooth: hci0: unsupported parameter 8192 [ 156.535477][ T6855] Bluetooth: hci0: unsupported parameter 5161 [ 156.554485][ T6855] Bluetooth: hci0: unsupported parameter 8192 [ 156.625554][ T9] bond0: (slave bond_slave_0): interface is now down [ 156.634919][ T9] bond0: (slave bond_slave_1): interface is now down [ 156.648647][ T9] bond0: now running without any active interface! [ 156.661106][ T6863] FAULT_INJECTION: forcing a failure. [ 156.661106][ T6863] name failslab, interval 1, probability 0, space 0, times 0 [ 156.679508][ T4264] usb 5-1: config 0 has no interfaces? [ 156.692247][ T6863] CPU: 1 PID: 6863 Comm: syz.2.635 Not tainted syzkaller #0 [ 156.699541][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.709599][ T6863] Call Trace: [ 156.712874][ T6863] [ 156.715797][ T6863] dump_stack_lvl+0x188/0x250 [ 156.720480][ T6863] ? show_regs_print_info+0x20/0x20 [ 156.725685][ T6863] ? load_image+0x410/0x410 [ 156.730194][ T6863] ? __might_sleep+0xf0/0xf0 [ 156.734793][ T6863] ? __lock_acquire+0x7d40/0x7d40 [ 156.739828][ T6863] should_fail+0x383/0x4b0 [ 156.744258][ T6863] should_failslab+0x5/0x20 [ 156.748765][ T6863] slab_pre_alloc_hook+0x51/0xc0 [ 156.753712][ T6863] __kmalloc+0x6b/0x340 [ 156.757871][ T6863] ? kobject_get_path+0xae/0x210 [ 156.762814][ T6863] kobject_get_path+0xae/0x210 [ 156.767583][ T6863] kobject_uevent_env+0x28b/0x890 [ 156.772617][ T6863] device_add+0xac2/0x1050 [ 156.777039][ T6863] input_register_device+0xa03/0x10c0 [ 156.782417][ T6863] ? input_ff_create+0x264/0x2f0 [ 156.787363][ T6863] uinput_create_device+0x53e/0x680 [ 156.792576][ T6863] uinput_ioctl_handler+0x7a0/0x13d0 [ 156.797871][ T6863] ? uinput_release+0x50/0x50 [ 156.802575][ T6863] ? bpf_lsm_file_ioctl+0x5/0x10 [ 156.804032][ T1324] usb 8-1: Using ep0 maxpacket: 16 [ 156.807508][ T6863] ? security_file_ioctl+0x7c/0xa0 [ 156.817706][ T6863] ? uinput_poll+0x120/0x120 [ 156.822303][ T6863] __se_sys_ioctl+0xfa/0x170 [ 156.826898][ T6863] do_syscall_64+0x4c/0xa0 [ 156.831321][ T6863] ? clear_bhb_loop+0x30/0x80 [ 156.836000][ T6863] ? clear_bhb_loop+0x30/0x80 [ 156.840689][ T6863] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.846591][ T6863] RIP: 0033:0x7f41d82d6559 [ 156.851017][ T6863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.870624][ T6863] RSP: 002b:00007f41d652e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.879039][ T6863] RAX: ffffffffffffffda RBX: 00007f41d855dfa0 RCX: 00007f41d82d6559 [ 156.887011][ T6863] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 156.894978][ T6863] RBP: 00007f41d836dab8 R08: 0000000000000000 R09: 0000000000000000 [ 156.902951][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.910921][ T6863] R13: 00007f41d855e038 R14: 00007f41d855dfa0 R15: 00007ffd3799e0d8 [ 156.918904][ T6863] [ 156.932697][ T6863] input: syz0 as /devices/virtual/input/input6 [ 156.994158][ T1324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.011423][ T1324] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 157.038994][ T1324] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.061810][ T4264] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.069612][ T1324] usb 8-1: config 0 descriptor?? [ 157.081225][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.108673][ T4264] usb 5-1: Product: syz [ 157.122628][ T4264] usb 5-1: Manufacturer: syz [ 157.127519][ T1324] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input7 [ 157.143805][ T4264] usb 5-1: SerialNumber: syz [ 157.176701][ T4264] usb 5-1: config 0 descriptor?? [ 157.379270][ T3544] bcm5974 8-1:0.0: could not read from device [ 157.410877][ T1324] usb 8-1: USB disconnect, device number 3 [ 157.419305][ T6849] bcm5974 8-1:0.0: could not read from device [ 157.440509][ T4212] usb 5-1: USB disconnect, device number 13 [ 158.239379][ T6916] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 158.268141][ T6916] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 158.353836][ T6922] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 158.435350][ T6922] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 159.090108][ T6999] program syz.6.665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.146076][ T7002] Cannot find del_set index 0 as target [ 159.804163][ T4212] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 159.972903][ T7057] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 160.199106][ T4312] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 160.250978][ T4212] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.267865][ T4212] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 160.277275][ T4212] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 160.286393][ T4212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.320817][ T4212] usb 7-1: config 0 descriptor?? [ 160.374889][ T4212] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 160.384774][ T4212] dvb-usb: bulk message failed: -22 (3/0) [ 160.416114][ T4212] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 160.449174][ T4312] usb 5-1: Using ep0 maxpacket: 8 [ 160.450199][ T4212] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 160.479008][ T4212] usb 7-1: media controller created [ 160.485016][ T4212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.516082][ T4212] dvb-usb: bulk message failed: -22 (6/0) [ 160.529144][ T4212] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 160.569348][ T4312] usb 5-1: config 0 has no interfaces? [ 160.577171][ T4312] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 160.580965][ T4212] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8 [ 160.603147][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.622883][ T4312] usb 5-1: config 0 descriptor?? [ 160.646673][ T4212] dvb-usb: schedule remote query interval to 150 msecs. [ 160.672958][ T4212] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 160.706682][ T4212] usb 7-1: USB disconnect, device number 7 [ 160.738201][ T4212] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 160.868307][ T4312] usb 5-1: USB disconnect, device number 14 [ 161.271850][ T7104] program syz.6.697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.442082][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'. [ 161.819148][ T4265] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 161.939042][ T4264] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 162.109213][ T4265] usb 8-1: Using ep0 maxpacket: 16 [ 162.179003][ T4264] usb 5-1: Using ep0 maxpacket: 8 [ 162.259134][ T4265] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 162.267423][ T4265] usb 8-1: config 0 has no interface number 0 [ 162.280716][ T4265] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.307234][ T4264] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 162.312222][ T4265] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 162.318495][ T4264] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 162.348034][ T4264] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.363233][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.399366][ T7172] ip_tables: iptables: counters copy to user failed while replacing table [ 162.459237][ T4265] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 162.468471][ T4265] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 162.485038][ T4265] usb 8-1: Product: syz [ 162.490423][ T4265] usb 8-1: SerialNumber: syz [ 162.505447][ T4265] usb 8-1: config 0 descriptor?? [ 162.544704][ T7184] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 162.561756][ T4265] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 162.573554][ T4265] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input9 [ 162.625114][ T7188] autofs4:pid:7188:validate_dev_ioctl: invalid path supplied for cmd(0xc0189377) [ 162.796206][ T4312] usb 8-1: USB disconnect, device number 4 [ 162.809287][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.817050][ T4312] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 162.865719][ T7145] udc-core: couldn't find an available UDC or it's busy [ 162.877852][ T7145] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.888001][ T4265] usb 5-1: USB disconnect, device number 15 [ 163.304250][ T7218] Illegal XDP return value 4294967274, expect packet loss! [ 163.414405][ T7145] FAULT_INJECTION: forcing a failure. [ 163.414405][ T7145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.427827][ T7145] CPU: 0 PID: 7145 Comm: syz.4.717 Not tainted syzkaller #0 [ 163.435118][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.443447][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 163.445165][ T7145] Call Trace: [ 163.445174][ T7145] [ 163.460088][ T7145] dump_stack_lvl+0x188/0x250 [ 163.464769][ T7145] ? show_regs_print_info+0x20/0x20 [ 163.469971][ T7145] ? load_image+0x410/0x410 [ 163.474490][ T7145] should_fail+0x383/0x4b0 [ 163.478917][ T7145] prepare_alloc_pages+0x1e3/0x5b0 [ 163.484040][ T7145] __alloc_pages+0x11b/0x480 [ 163.488640][ T7145] ? zone_statistics+0x170/0x170 [ 163.493584][ T7145] ? rcu_lock_acquire+0x30/0x30 [ 163.498449][ T7145] ? alloc_pages+0x452/0x560 [ 163.503045][ T7145] __get_free_pages+0x8/0x30 [ 163.507632][ T7145] __tlb_remove_page_size+0x1f2/0x3f0 [ 163.513014][ T7145] unmap_page_range+0xfcf/0x2410 [ 163.517458][ T7234] udc dummy_udc.0: failed to start g1: -19 [ 163.517973][ T7145] unmap_vmas+0x131/0x250 [ 163.517997][ T7145] ? unmap_page_range+0x2410/0x2410 [ 163.518013][ T7145] ? __mutex_lock_common+0x435/0x2400 [ 163.518032][ T7145] ? exit_mm_release+0x16/0x30 [ 163.543675][ T7145] exit_mmap+0x3b9/0x640 [ 163.547902][ T7145] ? vm_brk+0x20/0x20 [ 163.551884][ T7145] ? uprobe_clear_state+0x2f6/0x460 [ 163.557095][ T7145] __mmput+0x115/0x390 [ 163.561208][ T7145] exit_mm+0x632/0x7b0 [ 163.565277][ T7145] ? perf_pmu_migrate_context+0xb70/0xb70 [ 163.571006][ T7145] ? do_exit+0x2110/0x2110 [ 163.575426][ T7145] ? __ia32_sys_timer_delete+0x40/0x40 [ 163.580887][ T7145] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 163.586356][ T7145] ? tty_audit_exit+0x149/0x1f0 [ 163.591214][ T7145] do_exit+0x5b8/0x2110 [ 163.595378][ T7145] ? put_task_struct+0x80/0x80 [ 163.600140][ T7145] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 163.606127][ T7145] ? _raw_spin_lock_irq+0xb7/0xf0 [ 163.611141][ T7145] do_group_exit+0x12c/0x2f0 [ 163.615727][ T7145] ? lockdep_hardirqs_on+0x94/0x140 [ 163.620931][ T7145] get_signal+0x7eb/0x12e0 [ 163.625350][ T7145] arch_do_signal_or_restart+0xe6/0x12a0 [ 163.630987][ T7145] ? futex_exit_release+0x1c0/0x1c0 [ 163.636179][ T7145] ? get_sigframe_size+0x10/0x10 [ 163.641113][ T7145] ? __context_tracking_exit+0x4c/0x80 [ 163.646555][ T7145] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 163.652522][ T7145] ? exit_to_user_mode_loop+0x3b/0x130 [ 163.657969][ T7145] exit_to_user_mode_loop+0x9e/0x130 [ 163.663252][ T7145] exit_to_user_mode_prepare+0xee/0x180 [ 163.668774][ T7145] syscall_exit_to_user_mode+0x16/0x40 [ 163.674209][ T7145] do_syscall_64+0x58/0xa0 [ 163.678605][ T7145] ? clear_bhb_loop+0x30/0x80 [ 163.683277][ T7145] ? clear_bhb_loop+0x30/0x80 [ 163.687948][ T7145] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.693838][ T7145] RIP: 0033:0x7f3205088559 [ 163.698234][ T7145] Code: Unable to access opcode bytes at RIP 0x7f320508852f. [ 163.705585][ T7145] RSP: 002b:00007f32032e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 163.713979][ T7145] RAX: fffffffffffffe00 RBX: 00007f320530ffa8 RCX: 00007f3205088559 [ 163.721948][ T7145] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f320530ffa8 [ 163.729917][ T7145] RBP: 00007f320530ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 163.737888][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.745860][ T7145] R13: 00007f3205310038 R14: 00007ffd4c705730 R15: 00007ffd4c705818 [ 163.753846][ T7145] [ 163.756933][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.797263][ T7230] device syz_tun left promiscuous mode [ 163.877200][ T7248] FAULT_INJECTION: forcing a failure. [ 163.877200][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.915258][ T7248] CPU: 0 PID: 7248 Comm: syz.4.759 Not tainted syzkaller #0 [ 163.922574][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.932629][ T7248] Call Trace: [ 163.935906][ T7248] [ 163.938834][ T7248] dump_stack_lvl+0x188/0x250 [ 163.943521][ T7248] ? show_regs_print_info+0x20/0x20 [ 163.948737][ T7248] ? load_image+0x410/0x410 [ 163.953252][ T7248] ? __lock_acquire+0x7d40/0x7d40 [ 163.953652][ T7255] jffs2: notice: (7255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.958284][ T7248] should_fail+0x383/0x4b0 [ 163.958315][ T7248] _copy_from_user+0x2e/0x170 [ 163.958336][ T7248] sctp_setsockopt+0x191/0xf80 [ 163.988419][ T7248] ? sock_common_recvmsg+0x1c0/0x1c0 [ 163.993705][ T7248] __sys_setsockopt+0x2bf/0x3d0 [ 163.998540][ T7248] __x64_sys_setsockopt+0xb1/0xc0 [ 164.003548][ T7248] do_syscall_64+0x4c/0xa0 [ 164.007955][ T7248] ? clear_bhb_loop+0x30/0x80 [ 164.012615][ T7248] ? clear_bhb_loop+0x30/0x80 [ 164.017278][ T7248] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.023156][ T7248] RIP: 0033:0x7f3205088559 [ 164.027557][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.047145][ T7248] RSP: 002b:00007f32032e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.055543][ T7248] RAX: ffffffffffffffda RBX: 00007f320530ffa0 RCX: 00007f3205088559 [ 164.063499][ T7248] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000004 [ 164.071449][ T7248] RBP: 00007f320511fab8 R08: 0000000000000009 R09: 0000000000000000 [ 164.079402][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.087359][ T7248] R13: 00007f3205310038 R14: 00007f320530ffa0 R15: 00007ffd4c705818 [ 164.095324][ T7248] [ 164.098387][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.214043][ T7268] smc: net device lo applied user defined pnetid SYZ0 [ 164.496181][ T2304] nvmet: connect request for invalid subsystem t! [ 164.523289][ T7289] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 164.668638][ T7303] jffs2: notice: (7303) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 165.334296][ T4265] nvmet: connect request for invalid subsystem t! [ 165.349075][ T7364] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 165.369038][ T4191] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 165.513042][ T7382] jffs2: notice: (7382) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 165.570986][ T2304] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 165.614405][ T4191] usb 7-1: Using ep0 maxpacket: 16 [ 165.721140][ T7398] device vlan2 entered promiscuous mode [ 165.727054][ T7398] device hsr_slave_1 entered promiscuous mode [ 165.739192][ T4191] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 165.765095][ T4191] usb 7-1: config 0 has no interface number 0 [ 165.793885][ T4191] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.816285][ T4191] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.824111][ T7407] ip_tables: iptables: counters copy to user failed while replacing table [ 165.850742][ T2304] usb 8-1: Using ep0 maxpacket: 8 [ 165.954260][ T4191] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 165.979055][ T4191] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 165.989377][ T2304] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.005834][ T2304] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 166.029115][ T4191] usb 7-1: Product: syz [ 166.033282][ T4191] usb 7-1: SerialNumber: syz [ 166.036630][ T2304] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.056907][ T4191] usb 7-1: config 0 descriptor?? [ 166.071577][ T2304] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 166.100697][ T2304] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.111274][ T4191] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 166.118894][ T4191] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input10 [ 166.170629][ T2304] hub 8-1:1.0: bad descriptor, ignoring hub [ 166.183983][ T2304] hub: probe of 8-1:1.0 failed with error -5 [ 166.209361][ T2304] cdc_wdm 8-1:1.0: skipping garbage [ 166.229088][ T2304] cdc_wdm 8-1:1.0: skipping garbage [ 166.253474][ T2304] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 166.268155][ T2304] cdc_wdm 8-1:1.0: Unknown control protocol [ 166.348380][ T7435] jffs2: notice: (7435) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 166.456700][ T21] usb 7-1: USB disconnect, device number 8 [ 166.462687][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.462738][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 166.518370][ T21] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 167.100236][ T21] nvmet: connect request for invalid subsystem t! [ 167.116581][ T7493] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 167.484649][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 167.533325][ T7531] jffs2: notice: (7531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.777301][ T7553] overlayfs: failed to clone lowerpath [ 168.019176][ T4265] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.249388][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 168.276952][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 168.300570][ T4265] usb 3-1: Using ep0 maxpacket: 16 [ 168.356700][ T1324] usb 8-1: USB disconnect, device number 5 [ 168.449269][ T4265] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 168.460533][ T4265] usb 3-1: config 0 has no interface number 0 [ 168.472586][ T4265] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.495965][ T4265] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 168.567936][ T7624] binder: 7622:7624 ioctl 4018620d 0 returned -22 [ 168.583487][ T7624] binder: 7622:7624 ioctl c0306201 0 returned -14 [ 168.664451][ T4265] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 168.679216][ T21] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 168.683880][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 168.705363][ T4265] usb 3-1: Product: syz [ 168.715497][ T4265] usb 3-1: SerialNumber: syz [ 168.738544][ T4265] usb 3-1: config 0 descriptor?? [ 168.800769][ T4265] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 168.819441][ T4265] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input11 [ 168.874259][ T4191] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 168.919065][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 169.042399][ T21] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 169.042440][ T21] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.042462][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.042486][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.042509][ T21] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.042543][ T21] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.042566][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.237571][ T4265] usb 3-1: USB disconnect, device number 4 [ 169.243513][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.243536][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 169.249192][ T4191] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 169.273223][ T4265] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 169.304416][ T4191] usb 7-1: config 1 has no interface number 0 [ 169.470051][ T4191] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 169.486338][ T4191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.498258][ T4191] usb 7-1: Product: syz [ 169.504664][ T1324] usb 5-1: USB disconnect, device number 16 [ 169.508338][ T4191] usb 7-1: Manufacturer: syz [ 169.515549][ T4191] usb 7-1: SerialNumber: syz [ 169.849229][ T4191] usb 7-1: 3:1 : does not exist [ 169.854727][ T4191] usb 7-1: 3:2 : does not exist [ 169.907715][ T7716] 9pnet_virtio: no channels available for device syz [ 169.937585][ T4191] usb 7-1: USB disconnect, device number 9 [ 169.949247][ T7719] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 169.977714][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 169.996132][ T7719] CIFS mount error: No usable UNC path provided in device string! [ 169.996132][ T7719] [ 170.004388][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.007650][ T7719] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 170.079101][ T21] Bluetooth: hci0: command 0x0c20 tx timeout [ 170.143595][ T7729] 9pnet_virtio: no channels available for device syz [ 170.242188][ T7733] FAULT_INJECTION: forcing a failure. [ 170.242188][ T7733] name failslab, interval 1, probability 0, space 0, times 0 [ 170.356391][ T7733] CPU: 0 PID: 7733 Comm: syz.4.873 Not tainted syzkaller #0 [ 170.363708][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.373767][ T7733] Call Trace: [ 170.377047][ T7733] [ 170.379980][ T7733] dump_stack_lvl+0x188/0x250 [ 170.384671][ T7733] ? show_regs_print_info+0x20/0x20 [ 170.389875][ T7733] ? load_image+0x410/0x410 [ 170.394389][ T7733] ? __might_sleep+0xf0/0xf0 [ 170.399002][ T7733] ? __lock_acquire+0x7d40/0x7d40 [ 170.404039][ T7733] should_fail+0x383/0x4b0 [ 170.408466][ T7733] should_failslab+0x5/0x20 [ 170.412967][ T7733] slab_pre_alloc_hook+0x51/0xc0 [ 170.417912][ T7733] ? __kernfs_new_node+0xe3/0x6b0 [ 170.422943][ T7733] kmem_cache_alloc+0x3d/0x280 [ 170.427718][ T7733] __kernfs_new_node+0xe3/0x6b0 [ 170.432583][ T7733] ? __lock_acquire+0x7d40/0x7d40 [ 170.437613][ T7733] ? kernfs_new_node+0x250/0x250 [ 170.442555][ T7733] ? kernfs_activate+0x1eb/0x210 [ 170.447480][ T7733] kernfs_new_node+0x148/0x250 [ 170.452230][ T7733] __kernfs_create_file+0x47/0x2e0 [ 170.457328][ T7733] sysfs_add_file_mode_ns+0x2d2/0x390 [ 170.462688][ T7733] internal_create_group+0x492/0xd00 [ 170.467956][ T7733] ? kernfs_add_one+0x564/0x6c0 [ 170.472800][ T7733] ? sysfs_create_group+0x20/0x20 [ 170.477807][ T7733] ? sysfs_create_dir_ns+0x167/0x290 [ 170.483076][ T7733] ? sysfs_warn_dup+0xa0/0xa0 [ 170.487742][ T7733] sysfs_create_groups+0x55/0x120 [ 170.492758][ T7733] kobject_add_internal+0x6fb/0xcd0 [ 170.497943][ T7733] kobject_init_and_add+0x128/0x190 [ 170.503152][ T7733] ? kfree+0xef/0x2a0 [ 170.507117][ T7733] ? kobject_add+0x230/0x230 [ 170.511689][ T7733] ? kobject_uevent_env+0x36c/0x890 [ 170.516876][ T7733] net_rx_queue_update_kobjects+0x1b9/0x4b0 [ 170.522762][ T7733] netdev_register_kobject+0x231/0x320 [ 170.528211][ T7733] register_netdevice+0x10e8/0x1720 [ 170.533401][ T7733] ? netif_stacked_transfer_operstate+0x200/0x200 [ 170.539798][ T7733] ? xdp_rxq_info_reg+0xe0/0x2e0 [ 170.544722][ T7733] ? validate_linkmsg+0x3db/0x4c0 [ 170.549738][ T7733] ? bond_validate+0x150/0x150 [ 170.554487][ T7733] bond_newlink+0x33/0x80 [ 170.558800][ T7733] ? bond_validate+0x150/0x150 [ 170.563549][ T7733] rtnl_newlink+0x139e/0x1920 [ 170.568225][ T7733] ? rtnl_setlink+0x500/0x500 [ 170.572885][ T7733] ? mark_lock+0x94/0x320 [ 170.577202][ T7733] ? __lock_acquire+0x13b3/0x7d40 [ 170.582281][ T7733] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 170.587393][ T7733] ? rtnl_setlink+0x500/0x500 [ 170.592051][ T7733] rtnetlink_rcv_msg+0x7f1/0xf10 [ 170.596980][ T7733] ? lock_chain_count+0x20/0x20 [ 170.601818][ T7733] ? rtnetlink_bind+0x80/0x80 [ 170.606483][ T7733] ? __local_bh_enable_ip+0x136/0x1c0 [ 170.611837][ T7733] ? lockdep_hardirqs_on+0x94/0x140 [ 170.617022][ T7733] ? __local_bh_enable_ip+0x136/0x1c0 [ 170.622376][ T7733] ? _local_bh_enable+0xa0/0xa0 [ 170.627219][ T7733] ? __dev_queue_xmit+0x1b64/0x2e50 [ 170.632412][ T7733] ? dev_queue_xmit+0x20/0x20 [ 170.637073][ T7733] ? memcpy+0x3c/0x60 [ 170.641039][ T7733] ? __copy_skb_header+0x3ba/0x4f0 [ 170.646142][ T7733] netlink_rcv_skb+0x1e9/0x430 [ 170.650890][ T7733] ? rtnetlink_bind+0x80/0x80 [ 170.655553][ T7733] ? netlink_ack+0xb10/0xb10 [ 170.660138][ T7733] netlink_unicast+0x78f/0x940 [ 170.664895][ T7733] netlink_sendmsg+0x8ba/0xbe0 [ 170.669649][ T7733] ? netlink_getsockopt+0x570/0x570 [ 170.674829][ T7733] ? aa_sock_msg_perm+0x94/0x150 [ 170.679751][ T7733] ? apparmor_socket_sendmsg+0x88/0x230 [ 170.685278][ T7733] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 170.690545][ T7733] ? security_socket_sendmsg+0x7c/0xa0 [ 170.695990][ T7733] ? netlink_getsockopt+0x570/0x570 [ 170.701171][ T7733] ____sys_sendmsg+0x5be/0x8f0 [ 170.705924][ T7733] ? __sys_sendmsg_sock+0x30/0x30 [ 170.710937][ T7733] ? import_iovec+0x6f/0xa0 [ 170.715429][ T7733] ___sys_sendmsg+0x236/0x2e0 [ 170.720098][ T7733] ? __sys_sendmsg+0x290/0x290 [ 170.724874][ T7733] __se_sys_sendmsg+0x1b7/0x2a0 [ 170.729709][ T7733] ? __x64_sys_sendmsg+0x80/0x80 [ 170.734627][ T7733] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 170.740602][ T7733] ? lockdep_hardirqs_on+0x94/0x140 [ 170.745795][ T7733] do_syscall_64+0x4c/0xa0 [ 170.750194][ T7733] ? clear_bhb_loop+0x30/0x80 [ 170.754857][ T7733] ? clear_bhb_loop+0x30/0x80 [ 170.759518][ T7733] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.765394][ T7733] RIP: 0033:0x7f3205088559 [ 170.769792][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.789379][ T7733] RSP: 002b:00007f32032e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.797774][ T7733] RAX: ffffffffffffffda RBX: 00007f320530ffa0 RCX: 00007f3205088559 [ 170.805724][ T7733] RDX: 0000000000000054 RSI: 0000200000000300 RDI: 0000000000000004 [ 170.813678][ T7733] RBP: 00007f320511fab8 R08: 0000000000000000 R09: 0000000000000000 [ 170.821629][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.829581][ T7733] R13: 00007f3205310038 R14: 00007f320530ffa0 R15: 00007ffd4c705818 [ 170.837555][ T7733] [ 170.890456][ T7745] overlayfs: conflicting options: userxattr,redirect_dir=off [ 170.950586][ T7741] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 170.959662][ T7741] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 170.969939][ T7733] kobject_add_internal failed for rx-12 (error: -12 parent: queues) [ 170.999794][ T7733] bond1 (unregistered): Released all slaves [ 171.129106][ T21] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 171.349167][ T1324] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 171.379003][ T21] usb 7-1: Using ep0 maxpacket: 8 [ 171.500824][ T21] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 171.509804][ T21] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.519696][ T21] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.529479][ T21] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.539435][ T21] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.552400][ T21] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.561463][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.719095][ T1324] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 171.727125][ T1324] usb 8-1: config 0 has no interface number 0 [ 171.733334][ T1324] usb 8-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 171.869215][ T1324] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 171.878264][ T1324] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 171.886492][ T1324] usb 8-1: Product: syz [ 171.891287][ T1324] usb 8-1: SerialNumber: syz [ 171.899716][ T1324] usb 8-1: config 0 descriptor?? [ 171.941533][ T1324] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 172.039301][ T21] usb 7-1: USB disconnect, device number 10 [ 172.166023][ T4191] usb 8-1: USB disconnect, device number 6 [ 172.591912][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.882'. [ 172.829154][ T4265] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.079031][ T4265] usb 3-1: Using ep0 maxpacket: 8 [ 173.229091][ T4265] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.239930][ T4265] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.248826][ T4265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.260164][ T4265] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 173.269305][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.321518][ T4265] hub 3-1:1.0: bad descriptor, ignoring hub [ 173.327431][ T4265] hub: probe of 3-1:1.0 failed with error -5 [ 173.333934][ T4265] cdc_wdm 3-1:1.0: skipping garbage [ 173.339825][ T4265] cdc_wdm 3-1:1.0: skipping garbage [ 173.347216][ T4265] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 173.353244][ T4265] cdc_wdm 3-1:1.0: Unknown control protocol [ 173.618126][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.7.906'. [ 173.742434][ T7826] loop7: detected capacity change from 0 to 7 [ 173.753078][ T7082] Dev loop7: unable to read RDB block 7 [ 173.759433][ T7082] loop7: unable to read partition table [ 173.765185][ T7082] loop7: partition table beyond EOD, truncated [ 173.775676][ T7826] Dev loop7: unable to read RDB block 7 [ 173.784329][ T7826] loop7: unable to read partition table [ 173.790220][ T7826] loop7: partition table beyond EOD, truncated [ 173.799373][ T7826] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 174.009701][ T7844] ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall. [ 174.202904][ T7862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.221953][ T7862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.287880][ T7862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.309089][ T4191] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 174.669936][ T4191] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.680270][ T4191] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 174.690381][ T4191] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.819134][ T4191] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 174.828183][ T4191] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 174.836279][ T4191] usb 8-1: Product: syz [ 174.840455][ T4191] usb 8-1: Manufacturer: syz [ 174.859180][ T7846] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 174.880088][ T4191] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 174.891698][ T4191] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 175.087832][ T1324] usb 8-1: USB disconnect, device number 7 [ 175.103725][ T1324] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 175.113353][ T1324] garmin_gps 8-1:1.0: device disconnected [ 175.639379][ T4265] usb 3-1: USB disconnect, device number 5 [ 175.767091][ T7884] FAULT_INJECTION: forcing a failure. [ 175.767091][ T7884] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.769433][ T7888] FAULT_INJECTION: forcing a failure. [ 175.769433][ T7888] name failslab, interval 1, probability 0, space 0, times 0 [ 175.789325][ T7884] CPU: 0 PID: 7884 Comm: syz.6.936 Not tainted syzkaller #0 [ 175.800721][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.810778][ T7884] Call Trace: [ 175.814048][ T7884] [ 175.816968][ T7884] dump_stack_lvl+0x188/0x250 [ 175.821636][ T7884] ? show_regs_print_info+0x20/0x20 [ 175.826823][ T7884] ? load_image+0x410/0x410 [ 175.831321][ T7884] ? __lock_acquire+0x7d40/0x7d40 [ 175.836352][ T7884] ? do_user_addr_fault+0x69f/0xc90 [ 175.841560][ T7884] should_fail+0x383/0x4b0 [ 175.845979][ T7884] prepare_alloc_pages+0x1e3/0x5b0 [ 175.851093][ T7884] __alloc_pages+0x11b/0x480 [ 175.855683][ T7884] ? copy_page_from_iter+0x321/0x760 [ 175.860958][ T7884] ? zone_statistics+0x170/0x170 [ 175.865884][ T7884] ? copy_user_enhanced_fast_string+0xe/0x40 [ 175.871849][ T7884] ? copy_page_from_iter+0x499/0x760 [ 175.877119][ T7884] ? alloc_pages+0x452/0x560 [ 175.881696][ T7884] pipe_write+0x5cd/0x1b40 [ 175.886101][ T7884] ? pipe_write+0x1d1/0x1b40 [ 175.890687][ T7884] ? pipe_read+0x12d0/0x12d0 [ 175.895257][ T7884] ? fixup_exception+0xc41/0x1560 [ 175.900269][ T7884] ? end_current_label_crit_section+0x14b/0x170 [ 175.906499][ T7884] ? memset+0x1e/0x40 [ 175.910469][ T7884] ? iov_iter_init+0xb4/0x170 [ 175.915129][ T7884] vfs_write+0x748/0xd70 [ 175.919360][ T7884] ? file_end_write+0x250/0x250 [ 175.924198][ T7884] ? __fget_files+0x402/0x470 [ 175.928863][ T7884] ? __fdget_pos+0x1e2/0x370 [ 175.933431][ T7884] ? ksys_write+0x70/0x260 [ 175.937835][ T7884] ksys_write+0x153/0x260 [ 175.942147][ T7884] ? __ia32_sys_read+0x80/0x80 [ 175.946899][ T7884] ? lockdep_hardirqs_on+0x94/0x140 [ 175.952085][ T7884] do_syscall_64+0x4c/0xa0 [ 175.956484][ T7884] ? clear_bhb_loop+0x30/0x80 [ 175.961143][ T7884] ? clear_bhb_loop+0x30/0x80 [ 175.965811][ T7884] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.971688][ T7884] RIP: 0033:0x7fec053d8559 [ 175.976093][ T7884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.995685][ T7884] RSP: 002b:00007fec03630028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.004085][ T7884] RAX: ffffffffffffffda RBX: 00007fec0565ffa0 RCX: 00007fec053d8559 [ 176.012040][ T7884] RDX: 00000000560c89bb RSI: 0000200000000100 RDI: 0000000000000004 [ 176.019994][ T7884] RBP: 00007fec0546fab8 R08: 0000000000000000 R09: 0000000000000000 [ 176.027951][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.035902][ T7884] R13: 00007fec05660038 R14: 00007fec0565ffa0 R15: 00007ffc25c0ceb8 [ 176.043869][ T7884] [ 176.049310][ T4191] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 176.054198][ T7888] CPU: 0 PID: 7888 Comm: syz.4.939 Not tainted syzkaller #0 [ 176.064049][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.074121][ T7888] Call Trace: [ 176.074130][ T7888] [ 176.074138][ T7888] dump_stack_lvl+0x188/0x250 [ 176.074163][ T7888] ? show_regs_print_info+0x20/0x20 [ 176.074182][ T7888] ? load_image+0x410/0x410 [ 176.074200][ T7888] ? __might_sleep+0xf0/0xf0 [ 176.074220][ T7888] ? __lock_acquire+0x7d40/0x7d40 [ 176.074237][ T7888] ? __kasan_kmalloc+0xc6/0xe0 [ 176.074254][ T7888] ? watch_queue_init+0x4f/0x140 [ 176.074272][ T7888] ? create_pipe_files+0x331/0x6b0 [ 176.074290][ T7888] should_fail+0x383/0x4b0 [ 176.074315][ T7888] should_failslab+0x5/0x20 [ 176.074332][ T7888] slab_pre_alloc_hook+0x51/0xc0 [ 176.074349][ T7888] ? __d_alloc+0x27/0x6d0 [ 176.074365][ T7888] kmem_cache_alloc+0x3d/0x280 [ 176.074385][ T7888] __d_alloc+0x27/0x6d0 [ 176.074399][ T7888] ? d_alloc_pseudo+0xe/0x70 [ 176.074419][ T7888] d_alloc_pseudo+0x19/0x70 [ 176.074437][ T7888] alloc_file_pseudo+0xe0/0x200 [ 176.074457][ T7888] ? alloc_empty_file_noaccount+0x80/0x80 [ 176.074480][ T7888] ? __raw_spin_lock_init+0x41/0x100 [ 176.074504][ T7888] create_pipe_files+0x390/0x6b0 [ 176.074526][ T7888] __do_pipe_flags+0x46/0x1f0 [ 176.074544][ T7888] do_pipe2+0xa7/0x190 [ 176.074563][ T7888] ? pipe_fcntl+0x530/0x530 [ 176.074580][ T7888] ? lock_chain_count+0x20/0x20 [ 176.074600][ T7888] ? syscall_enter_from_user_mode+0x21/0x70 [ 176.074624][ T7888] __x64_sys_pipe2+0x56/0x60 [ 176.074640][ T7888] do_syscall_64+0x4c/0xa0 [ 176.074657][ T7888] ? clear_bhb_loop+0x30/0x80 [ 176.074677][ T7888] ? clear_bhb_loop+0x30/0x80 [ 176.074696][ T7888] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.074715][ T7888] RIP: 0033:0x7f3205088559 [ 176.074731][ T7888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.074756][ T7888] RSP: 002b:00007f32032e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 176.074775][ T7888] RAX: ffffffffffffffda RBX: 00007f320530ffa0 RCX: 00007f3205088559 [ 176.074788][ T7888] RDX: 0000000000000000 RSI: 0000000000080080 RDI: 0000000000000000 [ 176.074798][ T7888] RBP: 00007f320511fab8 R08: 0000000000000000 R09: 0000000000000000 [ 176.074810][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.074821][ T7888] R13: 00007f3205310038 R14: 00007f320530ffa0 R15: 00007ffd4c705818 [ 176.074846][ T7888] [ 176.289128][ T4191] usb 8-1: Using ep0 maxpacket: 8 [ 176.504390][ T4265] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 176.549180][ T4191] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 176.567904][ T4191] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.585026][ T4191] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.609653][ T4191] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.620317][ T4191] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.633511][ T4191] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.642651][ T4191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.789068][ T4265] usb 7-1: Using ep0 maxpacket: 8 [ 176.799023][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.939115][ T4265] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.949978][ T4265] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 176.958858][ T4265] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.970469][ T4265] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 176.979819][ T4265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.019043][ T1324] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 177.030635][ T4265] hub 7-1:1.0: bad descriptor, ignoring hub [ 177.036564][ T4265] hub: probe of 7-1:1.0 failed with error -5 [ 177.043118][ T4265] cdc_wdm 7-1:1.0: skipping garbage [ 177.048307][ T4265] cdc_wdm 7-1:1.0: skipping garbage [ 177.055071][ T4265] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 177.061264][ T4265] cdc_wdm 7-1:1.0: Unknown control protocol [ 177.149340][ T4265] usb 8-1: USB disconnect, device number 8 [ 177.159181][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.180044][ T21] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 177.195496][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 217, changing to 11 [ 177.207033][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 50233, setting to 1024 [ 177.226713][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 177.245988][ T21] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 177.255304][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.290463][ T7909] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 177.297471][ T7909] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 177.310801][ T21] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 177.326985][ T21] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 177.336626][ T21] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 177.345916][ T21] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 177.355065][ T21] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 177.362753][ T21] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 177.372239][ T21] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 177.389385][ T1324] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 177.403515][ T1324] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.413872][ T1324] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.579233][ T21] usb 7-1: USB disconnect, device number 11 [ 177.589137][ T1324] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.607399][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 177.616031][ T1324] usb 5-1: Product: syz [ 177.620544][ T1324] usb 5-1: Manufacturer: syz [ 177.625134][ T1324] usb 5-1: SerialNumber: syz [ 177.650096][ T1324] usb 5-1: config 0 descriptor?? [ 177.665779][ T4265] usb 3-1: USB disconnect, device number 6 [ 177.698553][ T1324] hub 5-1:0.0: bad descriptor, ignoring hub [ 177.714275][ T4265] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 177.737083][ T1324] hub: probe of 5-1:0.0 failed with error -5 [ 177.751057][ T1324] usb 5-1: selecting invalid altsetting 0 [ 177.767988][ T4265] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 177.805611][ T4265] keyspan 3-1:1.0: device disconnected [ 177.886657][ T7946] netlink: 40 bytes leftover after parsing attributes in process `syz.7.965'. [ 178.013518][ T7961] cgroup: No subsys list or none specified [ 178.023106][ T7961] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(3) [ 178.036389][ T7961] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(9) [ 178.226058][ T7967] using random self ethernet address [ 178.238802][ T7967] using random host ethernet address [ 178.249800][ T7967] udc dummy_udc.0: failed to start g1: -19 [ 178.353320][ T4191] usb 5-1: USB disconnect, device number 17 [ 178.463433][ T7980] FAULT_INJECTION: forcing a failure. [ 178.463433][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 178.526864][ T7980] CPU: 1 PID: 7980 Comm: syz.7.982 Not tainted syzkaller #0 [ 178.534175][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.544236][ T7980] Call Trace: [ 178.547515][ T7980] [ 178.550459][ T7980] dump_stack_lvl+0x188/0x250 [ 178.555166][ T7980] ? show_regs_print_info+0x20/0x20 [ 178.560377][ T7980] ? load_image+0x410/0x410 [ 178.564889][ T7980] ? __might_sleep+0xf0/0xf0 [ 178.569492][ T7980] should_fail+0x383/0x4b0 [ 178.573915][ T7980] should_failslab+0x5/0x20 [ 178.578410][ T7980] slab_pre_alloc_hook+0x51/0xc0 [ 178.583339][ T7980] ? zswap_frontswap_store+0x403/0x1530 [ 178.588879][ T7980] kmem_cache_alloc+0x3d/0x280 [ 178.593636][ T7980] zswap_frontswap_store+0x403/0x1530 [ 178.599003][ T7980] ? page_swapcount+0x224/0x300 [ 178.603839][ T7980] ? zswap_frontswap_init+0x100/0x100 [ 178.609196][ T7980] ? __rwlock_init+0x140/0x140 [ 178.613949][ T7980] ? _raw_spin_unlock+0x24/0x40 [ 178.618782][ T7980] ? page_swapcount+0x224/0x300 [ 178.623619][ T7980] __frontswap_store+0x331/0x4a0 [ 178.628545][ T7980] swap_writepage+0x5f/0xa0 [ 178.633036][ T7980] shrink_page_list+0x43a8/0x6de0 [ 178.638065][ T7980] ? reclaim_clean_pages_from_list+0xaf0/0xaf0 [ 178.644212][ T7980] ? verify_lock_unused+0x140/0x140 [ 178.649429][ T7980] reclaim_pages+0x712/0x990 [ 178.654016][ T7980] ? isolate_lru_page+0xbd0/0xbd0 [ 178.659032][ T7980] ? do_raw_spin_unlock+0x11d/0x230 [ 178.664215][ T7980] madvise_cold_or_pageout_pte_range+0x1680/0x1ea0 [ 178.670714][ T7980] ? rcu_lock_release+0x20/0x20 [ 178.675553][ T7980] walk_pgd_range+0xb28/0x1370 [ 178.680322][ T7980] __walk_page_range+0x136/0x590 [ 178.685244][ T7980] ? vmacache_find+0x53c/0x590 [ 178.689987][ T7980] ? vmacache_update+0xa0/0x100 [ 178.694824][ T7980] ? find_vma+0x1df/0x230 [ 178.699142][ T7980] walk_page_range+0x3a3/0x550 [ 178.703891][ T7980] ? local_lock_release+0x97/0x170 [ 178.708985][ T7980] ? page_mapped_in_vma+0x520/0x520 [ 178.714177][ T7980] do_madvise+0x16a6/0x2aa0 [ 178.718662][ T7980] ? mark_lock+0x94/0x320 [ 178.722977][ T7980] ? __lock_acquire+0x13b3/0x7d40 [ 178.727986][ T7980] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 178.733442][ T7980] ? verify_lock_unused+0x140/0x140 [ 178.738626][ T7980] ? verify_lock_unused+0x140/0x140 [ 178.743828][ T7980] ? __context_tracking_exit+0x4c/0x80 [ 178.749271][ T7980] ? __lock_acquire+0x7d40/0x7d40 [ 178.754287][ T7980] ? lock_chain_count+0x20/0x20 [ 178.759130][ T7980] __x64_sys_madvise+0xa2/0xb0 [ 178.763878][ T7980] do_syscall_64+0x4c/0xa0 [ 178.768276][ T7980] ? clear_bhb_loop+0x30/0x80 [ 178.772938][ T7980] ? clear_bhb_loop+0x30/0x80 [ 178.777602][ T7980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.783479][ T7980] RIP: 0033:0x7f6b110a7559 [ 178.787881][ T7980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.807476][ T7980] RSP: 002b:00007f6b0f2ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 178.815877][ T7980] RAX: ffffffffffffffda RBX: 00007f6b1132efa0 RCX: 00007f6b110a7559 [ 178.823831][ T7980] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 178.831784][ T7980] RBP: 00007f6b1113eab8 R08: 0000000000000000 R09: 0000000000000000 [ 178.839747][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.847699][ T7980] R13: 00007f6b1132f038 R14: 00007f6b1132efa0 R15: 00007ffc11ff3298 [ 178.855671][ T7980] [ 178.858782][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.869842][ T4264] Bluetooth: hci0: command 0x2016 tx timeout [ 178.875950][ T4191] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 179.362983][ T8005] Bluetooth: hci0: invalid len left 17, exp >= 20 [ 179.366861][ T4191] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 179.398387][ T4191] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 179.428828][ T4191] usb 5-1: config 0 interface 0 has no altsetting 0 [ 179.649227][ T4191] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 179.668990][ T4191] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 179.677459][ T8016] netlink: 'syz.0.994': attribute type 21 has an invalid length. [ 179.701572][ T4191] usb 5-1: Product: syz [ 179.705746][ T4191] usb 5-1: Manufacturer: syz [ 179.717576][ T4297] logitech-hidpp-device 0003:046D:C082.0002: Device not connected [ 179.750328][ T4191] usb 5-1: SerialNumber: syz [ 179.763316][ T4191] usb 5-1: config 0 descriptor?? [ 179.801612][ T4191] usb 5-1: can't set config #0, error -71 [ 179.832191][ T4191] usb 5-1: USB disconnect, device number 18 [ 179.961989][ T8034] kAFS: No cell specified [ 180.007333][ T8038] device syzkaller0 entered promiscuous mode [ 180.123023][ T8044] FAULT_INJECTION: forcing a failure. [ 180.123023][ T8044] name failslab, interval 1, probability 0, space 0, times 0 [ 180.217454][ T8044] CPU: 1 PID: 8044 Comm: syz.4.1004 Not tainted syzkaller #0 [ 180.224862][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.234920][ T8044] Call Trace: [ 180.238197][ T8044] [ 180.241131][ T8044] dump_stack_lvl+0x188/0x250 [ 180.245815][ T8044] ? show_regs_print_info+0x20/0x20 [ 180.251016][ T8044] ? load_image+0x410/0x410 [ 180.255551][ T8044] ? __might_sleep+0xf0/0xf0 [ 180.260147][ T8044] ? __lock_acquire+0x7d40/0x7d40 [ 180.265182][ T8044] should_fail+0x383/0x4b0 [ 180.269609][ T8044] should_failslab+0x5/0x20 [ 180.274114][ T8044] slab_pre_alloc_hook+0x51/0xc0 [ 180.279058][ T8044] __kmalloc_node+0x6d/0x3a0 [ 180.283654][ T8044] ? __vmalloc_node_range+0x2dd/0x8b0 [ 180.289047][ T8044] __vmalloc_node_range+0x2dd/0x8b0 [ 180.294254][ T8044] ? htable_create+0xf1/0x7f0 [ 180.298934][ T8044] vmalloc+0x75/0x80 [ 180.302832][ T8044] ? htable_create+0xf1/0x7f0 [ 180.307512][ T8044] htable_create+0xf1/0x7f0 [ 180.312026][ T8044] hashlimit_mt_check_common+0x6a7/0xa50 [ 180.317667][ T8044] hashlimit_mt_check_v1+0x1be/0x2d0 [ 180.322964][ T8044] xt_check_match+0x499/0xc50 [ 180.327652][ T8044] ? xt_check_proc_name+0x240/0x240 [ 180.332855][ T8044] ? pcpu_alloc+0x11e6/0x16d0 [ 180.337546][ T8044] ? xt_find_match+0x1e1/0x210 [ 180.342324][ T8044] translate_table+0x1481/0x1f60 [ 180.347286][ T8044] ? ipt_register_table+0x7b0/0x7b0 [ 180.352485][ T8044] ? __might_fault+0xb7/0x110 [ 180.357164][ T8044] ? __lock_acquire+0x7d40/0x7d40 [ 180.362205][ T8044] ? _copy_from_user+0x111/0x170 [ 180.367152][ T8044] do_ipt_set_ctl+0x963/0xd70 [ 180.371836][ T8044] ? nf_setsockopt+0x218/0x280 [ 180.376602][ T8044] ? ipt_unregister_table_exit+0x220/0x220 [ 180.382410][ T8044] ? __lock_acquire+0x7d40/0x7d40 [ 180.387438][ T8044] ? __mutex_lock_common+0x435/0x2400 [ 180.392835][ T8044] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 180.398475][ T8044] ? mutex_unlock+0x10/0x10 [ 180.402982][ T8044] ? __local_bh_enable_ip+0x136/0x1c0 [ 180.408361][ T8044] ? lockdep_hardirqs_on+0x94/0x140 [ 180.413571][ T8044] ? __local_bh_enable_ip+0x136/0x1c0 [ 180.418950][ T8044] nf_setsockopt+0x25f/0x280 [ 180.423550][ T8044] ip_setsockopt+0x29c3/0x31e0 [ 180.428324][ T8044] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 180.433694][ T8044] ? aa_sk_perm+0x7dc/0x910 [ 180.438204][ T8044] ? aa_af_perm+0x340/0x340 [ 180.442710][ T8044] ? __fget_files+0x402/0x470 [ 180.447392][ T8044] ? aa_sock_opt_perm+0x74/0x100 [ 180.452332][ T8044] ? sctp_setsockopt+0xd8/0xf80 [ 180.457184][ T8044] ? sock_common_recvmsg+0x1c0/0x1c0 [ 180.462472][ T8044] __sys_setsockopt+0x2bf/0x3d0 [ 180.467330][ T8044] __x64_sys_setsockopt+0xb1/0xc0 [ 180.472359][ T8044] do_syscall_64+0x4c/0xa0 [ 180.476775][ T8044] ? clear_bhb_loop+0x30/0x80 [ 180.481459][ T8044] ? clear_bhb_loop+0x30/0x80 [ 180.486137][ T8044] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.492029][ T8044] RIP: 0033:0x7f3205088559 [ 180.496452][ T8044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.516058][ T8044] RSP: 002b:00007f32032e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.524475][ T8044] RAX: ffffffffffffffda RBX: 00007f320530ffa0 RCX: 00007f3205088559 [ 180.532452][ T8044] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 180.540421][ T8044] RBP: 00007f320511fab8 R08: 00000000000005c0 R09: 0000000000000000 [ 180.548392][ T8044] R10: 0000200000001080 R11: 0000000000000246 R12: 0000000000000000 [ 180.556361][ T8044] R13: 00007f3205310038 R14: 00007f320530ffa0 R15: 00007ffd4c705818 [ 180.564347][ T8044] [ 180.729008][ T4312] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 180.738981][ T8054] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.824755][ T8061] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.879104][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 180.891074][ T4264] Bluetooth: hci0: command 0x0406 tx timeout [ 180.944368][ T8054] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.059530][ T8054] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.152119][ T4312] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.168386][ T4312] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 181.193818][ T4312] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 217, changing to 11 [ 181.218748][ T4312] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 50233, setting to 1024 [ 181.230800][ T4312] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 181.243958][ T4312] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 181.253264][ T4312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.291882][ T8054] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.302657][ T8048] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 181.310418][ T8048] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 181.330249][ T4312] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 181.337802][ T8091] device syzkaller0 entered promiscuous mode [ 181.340342][ T4312] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 181.351913][ T4312] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 181.360952][ T4312] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 181.371648][ T4312] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 181.379549][ T4312] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 181.388434][ T4312] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 181.500707][ T8054] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.525516][ T8054] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.548664][ T8054] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.572699][ T8054] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.861579][ T8108] FAULT_INJECTION: forcing a failure. [ 181.861579][ T8108] name fail_futex, interval 1, probability 0, space 0, times 0 [ 181.892335][ T8110] overlayfs: conflicting options: userxattr,redirect_dir=off [ 181.900154][ T4264] usb 8-1: USB disconnect, device number 9 [ 181.930125][ T8108] CPU: 0 PID: 8108 Comm: syz.2.1028 Not tainted syzkaller #0 [ 181.933293][ T4264] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 181.937519][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.956913][ T8108] Call Trace: [ 181.960194][ T8108] [ 181.963130][ T8108] dump_stack_lvl+0x188/0x250 [ 181.967811][ T8108] ? futex_wait_queue_me+0x16e/0x440 [ 181.971424][ T4264] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 181.973100][ T8108] ? show_regs_print_info+0x20/0x20 [ 181.987624][ T8108] ? load_image+0x410/0x410 [ 181.992134][ T8108] ? mark_lock+0x94/0x320 [ 181.992246][ T4264] keyspan 8-1:1.0: device disconnected [ 181.996466][ T8108] should_fail+0x383/0x4b0 [ 181.996495][ T8108] get_futex_key+0x1a1/0x12d0 [ 182.010981][ T8108] ? __lock_acquire+0x13b3/0x7d40 [ 182.016006][ T8108] ? futex_wait_restart+0x250/0x250 [ 182.021218][ T8108] futex_wake+0x101/0x540 [ 182.025558][ T8108] ? futex_wait+0x680/0x680 [ 182.030068][ T8108] ? verify_lock_unused+0x140/0x140 [ 182.035275][ T8108] ? verify_lock_unused+0x140/0x140 [ 182.040478][ T8108] do_futex+0xd83/0x12b0 [ 182.044728][ T8108] ? rcu_lock_release+0x9/0x20 [ 182.049501][ T8108] ? futex_exit_release+0x1c0/0x1c0 [ 182.054700][ T8108] ? __context_tracking_exit+0x4c/0x80 [ 182.060160][ T8108] __se_sys_futex+0x389/0x420 [ 182.064835][ T8108] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 182.070820][ T8108] ? __x64_sys_futex+0xf0/0xf0 [ 182.075591][ T8108] ? __x64_sys_futex+0x1d/0xf0 [ 182.080354][ T8108] do_syscall_64+0x4c/0xa0 [ 182.084770][ T8108] ? clear_bhb_loop+0x30/0x80 [ 182.089453][ T8108] ? clear_bhb_loop+0x30/0x80 [ 182.094133][ T8108] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.100025][ T8108] RIP: 0033:0x7f41d82d6559 [ 182.104433][ T8108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.124033][ T8108] RSP: 002b:00007f41d652e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.132448][ T8108] RAX: ffffffffffffffda RBX: 00007f41d855dfa8 RCX: 00007f41d82d6559 [ 182.140420][ T8108] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f41d855dfac [ 182.148391][ T8108] RBP: 00007f41d855dfa0 R08: 00310834a625c016 R09: 0000000000000000 [ 182.156361][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.164325][ T8108] R13: 00007f41d855e038 R14: 00007ffd3799dff0 R15: 00007ffd3799e0d8 [ 182.172305][ T8108] [ 182.512426][ T8121] nvmet: transport type 0 not supported [ 182.683883][ T8132] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 182.703327][ T8132] pit: kvm: requested 159238 ns i8254 timer period limited to 200000 ns [ 183.613312][ T1324] hid-generic 0003:0001:0001.0003: No inputs registered, leaving [ 183.654808][ T1324] hid-generic 0003:0001:0001.0003: hidraw0: USB HID v0.01 Mouse [syz1] on syz0 [ 183.714291][ T1324] asus 0005:0B05:8502.0004: No inputs registered, leaving [ 183.765729][ T1324] asus 0005:0B05:8502.0004: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 183.839097][ T8155] fido_id[8155]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.879083][ T8166] device syzkaller0 entered promiscuous mode [ 183.997966][ T8172] fido_id[8172]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.001384][ T8178] jffs2: notice: (8178) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 184.059347][ T2304] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 184.989166][ T2304] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.004204][ T2304] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 185.019609][ T2304] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 217, changing to 11 [ 185.056789][ T2304] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 50233, setting to 1024 [ 185.079595][ T2304] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 185.094671][ T8201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1063'. [ 185.102910][ T2304] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 185.135569][ T2304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.259344][ T8161] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.279412][ T8161] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.290338][ T4264] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 185.304516][ T4264] Bluetooth: hci0: Injecting HCI hardware error event [ 185.312024][ T2304] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 185.323544][ T8210] input: syz0 as /devices/virtual/input/input14 [ 185.335515][ T4201] Bluetooth: hci0: hardware error 0x00 [ 185.344050][ T2304] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 185.379130][ T2304] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 185.429890][ T2304] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 185.463284][ T2304] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 185.495444][ T8219] device syzkaller0 entered promiscuous mode [ 185.518559][ T2304] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 185.559766][ T2304] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 185.810327][ T2304] usb 7-1: USB disconnect, device number 12 [ 185.829883][ T2304] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 185.860723][ T2304] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 185.874713][ T2304] keyspan 7-1:1.0: device disconnected [ 187.216567][ T8265] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(10) [ 187.283247][ T4194] Bluetooth: min 6 > max 0 [ 187.294993][ T8269] FAULT_INJECTION: forcing a failure. [ 187.294993][ T8269] name failslab, interval 1, probability 0, space 0, times 0 [ 187.314907][ T8269] CPU: 1 PID: 8269 Comm: syz.6.1089 Not tainted syzkaller #0 [ 187.322301][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.332353][ T8269] Call Trace: [ 187.335628][ T8269] [ 187.338555][ T8269] dump_stack_lvl+0x188/0x250 [ 187.343235][ T8269] ? show_regs_print_info+0x20/0x20 [ 187.348435][ T8269] ? load_image+0x410/0x410 [ 187.352945][ T8269] ? __might_sleep+0xf0/0xf0 [ 187.357536][ T8269] ? __lock_acquire+0x7d40/0x7d40 [ 187.362569][ T8269] should_fail+0x383/0x4b0 [ 187.366993][ T8269] should_failslab+0x5/0x20 [ 187.371496][ T8269] slab_pre_alloc_hook+0x51/0xc0 [ 187.376432][ T8269] ? sockfs_init_fs_context+0xa0/0xa0 [ 187.381805][ T8269] ? sock_alloc_inode+0x17/0xb0 [ 187.386655][ T8269] kmem_cache_alloc+0x3d/0x280 [ 187.391420][ T8269] ? sockfs_init_fs_context+0xa0/0xa0 [ 187.396808][ T8269] sock_alloc_inode+0x17/0xb0 [ 187.401486][ T8269] ? sockfs_init_fs_context+0xa0/0xa0 [ 187.406859][ T8269] new_inode_pseudo+0x5f/0x210 [ 187.411627][ T8269] __sock_create+0x128/0x910 [ 187.416226][ T8269] inet_ctl_sock_create+0x9f/0x1f0 [ 187.421344][ T8269] ? inet_gro_complete+0x570/0x570 [ 187.426453][ T8269] ? ndisc_net_init+0x12c/0x250 [ 187.431313][ T8269] ? fib6_info_release+0xa0/0xa0 [ 187.436253][ T8269] ? fib_default_rule_add+0x1fa/0x390 [ 187.441628][ T8269] igmp6_net_init+0x18a/0x3f0 [ 187.446321][ T8269] ops_init+0x360/0x5f0 [ 187.450491][ T8269] setup_net+0x39e/0xa10 [ 187.454738][ T8269] ? copy_net_ns+0x5b0/0x5b0 [ 187.459332][ T8269] ? copy_net_ns+0x324/0x5b0 [ 187.463920][ T8269] ? down_read_killable+0x1ce/0x340 [ 187.469118][ T8269] copy_net_ns+0x33e/0x5b0 [ 187.473543][ T8269] create_new_namespaces+0x3ce/0x700 [ 187.478846][ T8269] unshare_nsproxy_namespaces+0x116/0x160 [ 187.484566][ T8269] ksys_unshare+0x4f6/0x8e0 [ 187.489072][ T8269] ? __lock_acquire+0x7d40/0x7d40 [ 187.494103][ T8269] ? sighand_ctor+0x40/0x40 [ 187.498601][ T8269] ? lock_chain_count+0x20/0x20 [ 187.503454][ T8269] ? syscall_enter_from_user_mode+0x21/0x70 [ 187.509360][ T8269] __x64_sys_unshare+0x34/0x40 [ 187.514110][ T8269] do_syscall_64+0x4c/0xa0 [ 187.518509][ T8269] ? clear_bhb_loop+0x30/0x80 [ 187.523169][ T8269] ? clear_bhb_loop+0x30/0x80 [ 187.527831][ T8269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.533708][ T8269] RIP: 0033:0x7fec053d8559 [ 187.538105][ T8269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.557691][ T8269] RSP: 002b:00007fec03630028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 187.566086][ T8269] RAX: ffffffffffffffda RBX: 00007fec0565ffa0 RCX: 00007fec053d8559 [ 187.574047][ T8269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 187.582003][ T8269] RBP: 00007fec0546fab8 R08: 0000000000000000 R09: 0000000000000000 [ 187.589966][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.597921][ T8269] R13: 00007fec05660038 R14: 00007fec0565ffa0 R15: 00007ffc25c0ceb8 [ 187.605883][ T8269] [ 187.608942][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.654667][ T8269] socket: no more sockets [ 187.659249][ T8269] Failed to initialize the IGMP6 autojoin socket (err -23) [ 189.494148][ T8335] device syzkaller0 entered promiscuous mode [ 191.095134][ T8373] device syzkaller0 entered promiscuous mode [ 192.007918][ T8400] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.029876][ T21] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 192.113072][ T8400] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.190416][ T8400] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.268523][ T8400] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.424560][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.440582][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 192.460353][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 192.480256][ T21] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 192.496470][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.587742][ T8410] device syzkaller0 entered promiscuous mode [ 193.476163][ T21] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 193.483539][ T21] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 193.491743][ T21] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 193.504620][ T21] cxacru: probe of 5-1:1.0 failed with error -71 [ 193.515003][ T21] usb 5-1: USB disconnect, device number 19 [ 193.676679][ T8424] FAULT_INJECTION: forcing a failure. [ 193.676679][ T8424] name failslab, interval 1, probability 0, space 0, times 0 [ 193.727801][ T8424] CPU: 0 PID: 8424 Comm: syz.6.1150 Not tainted syzkaller #0 [ 193.735203][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.745257][ T8424] Call Trace: [ 193.748537][ T8424] [ 193.751469][ T8424] dump_stack_lvl+0x188/0x250 [ 193.756161][ T8424] ? show_regs_print_info+0x20/0x20 [ 193.761364][ T8424] ? load_image+0x410/0x410 [ 193.765873][ T8424] ? __lock_acquire+0x7d40/0x7d40 [ 193.770911][ T8424] should_fail+0x383/0x4b0 [ 193.775335][ T8424] should_failslab+0x5/0x20 [ 193.779839][ T8424] slab_pre_alloc_hook+0x51/0xc0 [ 193.784788][ T8424] ? __alloc_file+0x25/0x240 [ 193.789392][ T8424] kmem_cache_alloc+0x3d/0x280 [ 193.794163][ T8424] __alloc_file+0x25/0x240 [ 193.798592][ T8424] alloc_empty_file+0x90/0x180 [ 193.803364][ T8424] alloc_file+0x5c/0x510 [ 193.807609][ T8424] ? do_raw_spin_unlock+0x11d/0x230 [ 193.812819][ T8424] alloc_file_pseudo+0x180/0x200 [ 193.817763][ T8424] ? alloc_empty_file_noaccount+0x80/0x80 [ 193.823489][ T8424] ? _raw_spin_unlock+0x24/0x40 [ 193.828358][ T8424] __anon_inode_getfd+0x26b/0x3d0 [ 193.833400][ T8424] ? anon_inode_getfd+0x40/0x40 [ 193.838261][ T8424] ? __init_waitqueue_head+0xa4/0x140 [ 193.843645][ T8424] __se_sys_fanotify_init+0x68c/0x7b0 [ 193.849027][ T8424] do_syscall_64+0x4c/0xa0 [ 193.853455][ T8424] ? clear_bhb_loop+0x30/0x80 [ 193.858137][ T8424] ? clear_bhb_loop+0x30/0x80 [ 193.862820][ T8424] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.868715][ T8424] RIP: 0033:0x7fec053d8559 [ 193.873133][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.892739][ T8424] RSP: 002b:00007fec03630028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 193.901159][ T8424] RAX: ffffffffffffffda RBX: 00007fec0565ffa0 RCX: 00007fec053d8559 [ 193.909135][ T8424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000f00 [ 193.917105][ T8424] RBP: 00007fec0546fab8 R08: 0000000000000000 R09: 0000000000000000 [ 193.925082][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.933059][ T8424] R13: 00007fec05660038 R14: 00007fec0565ffa0 R15: 00007ffc25c0ceb8 [ 193.941054][ T8424] [ 193.952366][ T8429] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.019085][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.029985][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.036720][ T8436] device syzkaller0 entered promiscuous mode [ 194.096178][ T8429] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.190076][ T8429] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.249864][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 194.297585][ T8429] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.689085][ T4264] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 194.732532][ T8462] block nbd2: NBD_DISCONNECT [ 195.077158][ T8483] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 195.085303][ T8483] netlink: 'syz.0.1175': attribute type 2 has an invalid length. [ 195.099398][ T4264] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.126432][ T4264] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 195.147168][ T4264] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 195.167239][ T4264] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 195.180175][ T4264] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.689132][ T4264] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 195.697598][ T4264] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 195.709633][ T4264] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 195.718476][ T4264] cxacru: probe of 8-1:1.0 failed with error -71 [ 195.757353][ T4264] usb 8-1: USB disconnect, device number 10 [ 195.826992][ T8534] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.944775][ T8534] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.029943][ T8534] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.121477][ T8534] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.429124][ T4264] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 196.709032][ T4264] usb 7-1: Using ep0 maxpacket: 8 [ 196.845679][ T4312] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 196.873782][ T4264] usb 7-1: config 0 has no interfaces? [ 197.059551][ T4264] usb 7-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 197.078054][ T4264] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.104783][ T4264] usb 7-1: Product: syz [ 197.114887][ T4264] usb 7-1: Manufacturer: syz [ 197.132874][ T4264] usb 7-1: SerialNumber: syz [ 197.157106][ T4264] usb 7-1: config 0 descriptor?? [ 197.250573][ T4312] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 197.274956][ T4312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.424727][ T8582] device syzkaller0 entered promiscuous mode [ 197.432702][ T4264] usb 7-1: USB disconnect, device number 13 [ 197.464638][ T4312] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.478368][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.505000][ T4312] usb 3-1: Product: syz [ 197.518526][ T4312] usb 3-1: Manufacturer: syz [ 197.533588][ T4312] usb 3-1: SerialNumber: syz [ 197.554504][ T4312] usb 3-1: config 0 descriptor?? [ 197.599514][ T8564] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 197.665909][ T4312] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 197.707175][ T8419] udevd[8419]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.891126][ T4191] usb 3-1: USB disconnect, device number 7 [ 197.925985][ T8588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.106196][ T8626] FAULT_INJECTION: forcing a failure. [ 199.106196][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 199.166540][ T8633] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.184954][ T8626] CPU: 1 PID: 8626 Comm: syz.7.1227 Not tainted syzkaller #0 [ 199.192352][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.202410][ T8626] Call Trace: [ 199.205690][ T8626] [ 199.208624][ T8626] dump_stack_lvl+0x188/0x250 [ 199.213314][ T8626] ? show_regs_print_info+0x20/0x20 [ 199.218521][ T8626] ? load_image+0x410/0x410 [ 199.223031][ T8626] ? __might_sleep+0xf0/0xf0 [ 199.227628][ T8626] ? __lock_acquire+0x7d40/0x7d40 [ 199.232669][ T8626] ? rcu_lock_acquire+0x30/0x30 [ 199.237531][ T8626] should_fail+0x383/0x4b0 [ 199.241960][ T8626] should_failslab+0x5/0x20 [ 199.246477][ T8626] slab_pre_alloc_hook+0x51/0xc0 [ 199.251423][ T8626] ? security_inode_alloc+0x30/0x110 [ 199.256712][ T8626] kmem_cache_alloc+0x3d/0x280 [ 199.261487][ T8626] security_inode_alloc+0x30/0x110 [ 199.266609][ T8626] inode_init_always+0x8e5/0xc90 [ 199.271565][ T8626] new_inode_pseudo+0x8e/0x210 [ 199.276336][ T8626] new_inode+0x25/0x1d0 [ 199.280495][ T8626] ? resv_map_alloc+0x1a6/0x2a0 [ 199.285351][ T8626] hugetlbfs_get_inode+0x78/0x510 [ 199.290391][ T8626] hugetlb_file_setup+0x38d/0x6f0 [ 199.295431][ T8626] newseg+0x43a/0xbe0 [ 199.299433][ T8626] ? ksys_shmget+0x140/0x140 [ 199.304023][ T8626] ? do_futex+0xdc2/0x12b0 [ 199.308447][ T8626] ipcget+0x18d/0xc50 [ 199.312446][ T8626] ? __context_tracking_exit+0x4c/0x80 [ 199.317914][ T8626] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 199.323548][ T8626] ? __lock_acquire+0x7d40/0x7d40 [ 199.328581][ T8626] __x64_sys_shmget+0x13d/0x180 [ 199.333436][ T8626] ? lock_chain_count+0x20/0x20 [ 199.338299][ T8626] ? shm_more_checks+0x80/0x80 [ 199.343074][ T8626] ? lockdep_hardirqs_on+0x94/0x140 [ 199.348283][ T8626] do_syscall_64+0x4c/0xa0 [ 199.352706][ T8626] ? clear_bhb_loop+0x30/0x80 [ 199.357387][ T8626] ? clear_bhb_loop+0x30/0x80 [ 199.362071][ T8626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.367969][ T8626] RIP: 0033:0x7f6b110a7559 [ 199.372388][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.391998][ T8626] RSP: 002b:00007f6b0f2ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 199.400419][ T8626] RAX: ffffffffffffffda RBX: 00007f6b1132efa0 RCX: 00007f6b110a7559 [ 199.408394][ T8626] RDX: 0000000000000800 RSI: 000000000000c000 RDI: 0000000000000000 [ 199.416368][ T8626] RBP: 00007f6b1113eab8 R08: 0000000000000000 R09: 0000000000000000 [ 199.424340][ T8626] R10: 000020000013c000 R11: 0000000000000246 R12: 0000000000000000 [ 199.432316][ T8626] R13: 00007f6b1132f038 R14: 00007f6b1132efa0 R15: 00007ffc11ff3298 [ 199.440305][ T8626] [ 199.874212][ T4312] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 200.294556][ T4312] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.313269][ T4312] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 200.345352][ T4312] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 200.368839][ T4312] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 200.388861][ T4312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.824340][ T4264] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 200.889227][ T4312] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 200.895944][ T4312] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 200.919760][ T4312] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 200.946419][ T4312] cxacru: probe of 7-1:1.0 failed with error -71 [ 200.999573][ T4312] usb 7-1: USB disconnect, device number 14 [ 201.244312][ T4264] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.340300][ T8690] FAULT_INJECTION: forcing a failure. [ 201.340300][ T8690] name failslab, interval 1, probability 0, space 0, times 0 [ 201.385242][ T8690] CPU: 0 PID: 8690 Comm: syz.2.1248 Not tainted syzkaller #0 [ 201.392632][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.402691][ T8690] Call Trace: [ 201.405974][ T8690] [ 201.408907][ T8690] dump_stack_lvl+0x188/0x250 [ 201.413599][ T8690] ? show_regs_print_info+0x20/0x20 [ 201.418809][ T8690] ? load_image+0x410/0x410 [ 201.423323][ T8690] ? __might_sleep+0xf0/0xf0 [ 201.427920][ T8690] ? __lock_acquire+0x7d40/0x7d40 [ 201.432956][ T8690] ? rcu_lock_acquire+0x30/0x30 [ 201.437825][ T8690] should_fail+0x383/0x4b0 [ 201.442256][ T8690] should_failslab+0x5/0x20 [ 201.446764][ T8690] slab_pre_alloc_hook+0x51/0xc0 [ 201.447745][ T4264] usb 8-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 201.451702][ T8690] ? security_inode_alloc+0x30/0x110 [ 201.466006][ T8690] kmem_cache_alloc+0x3d/0x280 [ 201.470779][ T8690] security_inode_alloc+0x30/0x110 [ 201.475894][ T8690] inode_init_always+0x8e5/0xc90 [ 201.478965][ T4264] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 201.480842][ T8690] new_inode_pseudo+0x8e/0x210 [ 201.480872][ T8690] new_inode+0x25/0x1d0 [ 201.497712][ T8690] ? resv_map_alloc+0x1a6/0x2a0 [ 201.502573][ T8690] hugetlbfs_get_inode+0x78/0x510 [ 201.507611][ T8690] hugetlb_file_setup+0x38d/0x6f0 [ 201.512647][ T8690] newseg+0x43a/0xbe0 [ 201.513451][ T4264] usb 8-1: Product: syz [ 201.516636][ T8690] ? ksys_shmget+0x140/0x140 [ 201.525330][ T8690] ? do_futex+0xdc2/0x12b0 [ 201.529758][ T8690] ipcget+0x18d/0xc50 [ 201.533757][ T8690] ? __context_tracking_exit+0x4c/0x80 [ 201.537864][ T4264] usb 8-1: Manufacturer: syz [ 201.539389][ T8690] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 201.539413][ T8690] ? __lock_acquire+0x7d40/0x7d40 [ 201.539441][ T8690] __x64_sys_shmget+0x13d/0x180 [ 201.539460][ T8690] ? lock_chain_count+0x20/0x20 [ 201.539479][ T8690] ? shm_more_checks+0x80/0x80 [ 201.539507][ T8690] ? lockdep_hardirqs_on+0x94/0x140 [ 201.539532][ T8690] do_syscall_64+0x4c/0xa0 [ 201.539550][ T8690] ? clear_bhb_loop+0x30/0x80 [ 201.539568][ T8690] ? clear_bhb_loop+0x30/0x80 [ 201.539588][ T8690] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.539608][ T8690] RIP: 0033:0x7f41d82d6559 [ 201.539625][ T8690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.539640][ T8690] RSP: 002b:00007f41d652e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 201.626460][ T8690] RAX: ffffffffffffffda RBX: 00007f41d855dfa0 RCX: 00007f41d82d6559 [ 201.634434][ T8690] RDX: 0000000000000800 RSI: 000000000000c000 RDI: 0000000000000000 [ 201.642410][ T8690] RBP: 00007f41d836dab8 R08: 0000000000000000 R09: 0000000000000000 [ 201.650293][ T4264] navman 8-1:1.0: navman converter detected [ 201.650382][ T8690] R10: 000020000013c000 R11: 0000000000000246 R12: 0000000000000000 [ 201.664219][ T8690] R13: 00007f41d855e038 R14: 00007f41d855dfa0 R15: 00007ffd3799e0d8 [ 201.672211][ T8690] [ 201.677830][ T4264] usb 8-1: navman converter now attached to ttyUSB0 [ 201.882234][ T4264] usb 8-1: USB disconnect, device number 11 [ 201.920019][ T4264] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 201.957680][ T4264] navman 8-1:1.0: device disconnected [ 202.465447][ T8744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.679158][ T1324] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.954338][ T8777] 9pnet_virtio: no channels available for device syz [ 203.049266][ T1324] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.071669][ T1324] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 203.090672][ T1324] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 203.119806][ T1324] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 203.144418][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.158171][ T8784] autofs4:pid:8784:autofs_fill_super: called with bogus options [ 203.168428][ T8786] FAULT_INJECTION: forcing a failure. [ 203.168428][ T8786] name failslab, interval 1, probability 0, space 0, times 0 [ 203.201812][ T8786] CPU: 0 PID: 8786 Comm: syz.6.1273 Not tainted syzkaller #0 [ 203.209200][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.219255][ T8786] Call Trace: [ 203.222532][ T8786] [ 203.225459][ T8786] dump_stack_lvl+0x188/0x250 [ 203.230146][ T8786] ? show_regs_print_info+0x20/0x20 [ 203.235351][ T8786] ? load_image+0x410/0x410 [ 203.239868][ T8786] ? __might_sleep+0xf0/0xf0 [ 203.244465][ T8786] ? __lock_acquire+0x7d40/0x7d40 [ 203.249504][ T8786] ? rcu_lock_acquire+0x30/0x30 [ 203.254366][ T8786] should_fail+0x383/0x4b0 [ 203.258795][ T8786] should_failslab+0x5/0x20 [ 203.263303][ T8786] slab_pre_alloc_hook+0x51/0xc0 [ 203.268246][ T8786] ? security_inode_alloc+0x30/0x110 [ 203.273540][ T8786] kmem_cache_alloc+0x3d/0x280 [ 203.278317][ T8786] security_inode_alloc+0x30/0x110 [ 203.283437][ T8786] inode_init_always+0x8e5/0xc90 [ 203.288386][ T8786] new_inode_pseudo+0x8e/0x210 [ 203.293169][ T8786] new_inode+0x25/0x1d0 [ 203.297331][ T8786] ? resv_map_alloc+0x1a6/0x2a0 [ 203.302189][ T8786] hugetlbfs_get_inode+0x78/0x510 [ 203.307229][ T8786] hugetlb_file_setup+0x38d/0x6f0 [ 203.312271][ T8786] newseg+0x43a/0xbe0 [ 203.316277][ T8786] ? ksys_shmget+0x140/0x140 [ 203.320873][ T8786] ? do_futex+0xdc2/0x12b0 [ 203.325307][ T8786] ipcget+0x18d/0xc50 [ 203.329309][ T8786] ? __context_tracking_exit+0x4c/0x80 [ 203.334775][ T8786] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 203.340420][ T8786] ? __lock_acquire+0x7d40/0x7d40 [ 203.345462][ T8786] __x64_sys_shmget+0x13d/0x180 [ 203.350320][ T8786] ? lock_chain_count+0x20/0x20 [ 203.355182][ T8786] ? shm_more_checks+0x80/0x80 [ 203.359957][ T8786] ? lockdep_hardirqs_on+0x94/0x140 [ 203.365166][ T8786] do_syscall_64+0x4c/0xa0 [ 203.369589][ T8786] ? clear_bhb_loop+0x30/0x80 [ 203.374273][ T8786] ? clear_bhb_loop+0x30/0x80 [ 203.378964][ T8786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.384866][ T8786] RIP: 0033:0x7fec053d8559 [ 203.389284][ T8786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.408907][ T8786] RSP: 002b:00007fec03630028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 203.417330][ T8786] RAX: ffffffffffffffda RBX: 00007fec0565ffa0 RCX: 00007fec053d8559 [ 203.425306][ T8786] RDX: 0000000000000800 RSI: 000000000000c000 RDI: 0000000000000000 [ 203.433277][ T8786] RBP: 00007fec0546fab8 R08: 0000000000000000 R09: 0000000000000000 [ 203.441248][ T8786] R10: 000020000013c000 R11: 0000000000000246 R12: 0000000000000000 [ 203.449221][ T8786] R13: 00007fec05660038 R14: 00007fec0565ffa0 R15: 00007ffc25c0ceb8 [ 203.457211][ T8786] [ 203.586738][ T8794] lo speed is unknown, defaulting to 1000 [ 203.609114][ T8794] lo speed is unknown, defaulting to 1000 [ 203.615270][ T8794] lo speed is unknown, defaulting to 1000 [ 203.635552][ T8794] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 203.727158][ T8794] lo speed is unknown, defaulting to 1000 [ 203.744077][ T8794] lo speed is unknown, defaulting to 1000 [ 203.822766][ T8794] lo speed is unknown, defaulting to 1000 [ 203.837062][ T8794] lo speed is unknown, defaulting to 1000 [ 203.853434][ T8794] lo speed is unknown, defaulting to 1000 [ 203.885457][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 203.919666][ T1324] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 203.929163][ T1324] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 203.957235][ T1324] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 203.989434][ T1324] cxacru: probe of 3-1:1.0 failed with error -71 [ 204.028475][ T1324] usb 3-1: USB disconnect, device number 8 [ 204.167408][ T8815] device syzkaller0 entered promiscuous mode [ 204.232669][ T8824] overlayfs: failed to clone lowerpath [ 204.410182][ T4264] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 204.427137][ T4264] Bluetooth: hci4: Injecting HCI hardware error event [ 204.443082][ T4201] Bluetooth: hci4: hardware error 0x00 [ 204.474503][ T8830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.372228][ T8902] FAULT_INJECTION: forcing a failure. [ 205.372228][ T8902] name failslab, interval 1, probability 0, space 0, times 0 [ 205.404775][ T8902] CPU: 1 PID: 8902 Comm: syz.4.1302 Not tainted syzkaller #0 [ 205.412179][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.414631][ T8905] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 205.422232][ T8902] Call Trace: [ 205.422242][ T8902] [ 205.422249][ T8902] dump_stack_lvl+0x188/0x250 [ 205.422276][ T8902] ? show_regs_print_info+0x20/0x20 [ 205.422295][ T8902] ? load_image+0x410/0x410 [ 205.422316][ T8902] ? __might_sleep+0xf0/0xf0 [ 205.422335][ T8902] ? __lock_acquire+0x7d40/0x7d40 [ 205.422355][ T8902] ? rcu_lock_acquire+0x30/0x30 [ 205.464483][ T8905] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 205.465066][ T8902] should_fail+0x383/0x4b0 [ 205.465097][ T8902] should_failslab+0x5/0x20 [ 205.483037][ T8902] slab_pre_alloc_hook+0x51/0xc0 [ 205.487985][ T8902] ? security_inode_alloc+0x30/0x110 [ 205.493280][ T8902] kmem_cache_alloc+0x3d/0x280 [ 205.498056][ T8902] security_inode_alloc+0x30/0x110 [ 205.503177][ T8902] inode_init_always+0x8e5/0xc90 [ 205.508125][ T8902] new_inode_pseudo+0x8e/0x210 [ 205.512901][ T8902] new_inode+0x25/0x1d0 [ 205.517067][ T8902] ? resv_map_alloc+0x1a6/0x2a0 [ 205.521925][ T8902] hugetlbfs_get_inode+0x78/0x510 [ 205.526964][ T8902] hugetlb_file_setup+0x38d/0x6f0 [ 205.531994][ T8902] newseg+0x43a/0xbe0 [ 205.535992][ T8902] ? ksys_shmget+0x140/0x140 [ 205.540585][ T8902] ? do_futex+0xdc2/0x12b0 [ 205.545015][ T8902] ipcget+0x18d/0xc50 [ 205.549011][ T8902] ? __context_tracking_exit+0x4c/0x80 [ 205.554464][ T8902] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 205.560089][ T8902] ? __lock_acquire+0x7d40/0x7d40 [ 205.565109][ T8902] __x64_sys_shmget+0x13d/0x180 [ 205.569948][ T8902] ? lock_chain_count+0x20/0x20 [ 205.574789][ T8902] ? shm_more_checks+0x80/0x80 [ 205.579539][ T8902] ? lockdep_hardirqs_on+0x94/0x140 [ 205.584726][ T8902] do_syscall_64+0x4c/0xa0 [ 205.589130][ T8902] ? clear_bhb_loop+0x30/0x80 [ 205.593790][ T8902] ? clear_bhb_loop+0x30/0x80 [ 205.598455][ T8902] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.604335][ T8902] RIP: 0033:0x7f3205088559 [ 205.608750][ T8902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.628338][ T8902] RSP: 002b:00007f32032e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 205.636739][ T8902] RAX: ffffffffffffffda RBX: 00007f320530ffa0 RCX: 00007f3205088559 [ 205.644694][ T8902] RDX: 0000000000000800 RSI: 000000000000c000 RDI: 0000000000000000 [ 205.652647][ T8902] RBP: 00007f320511fab8 R08: 0000000000000000 R09: 0000000000000000 [ 205.660601][ T8902] R10: 000020000013c000 R11: 0000000000000246 R12: 0000000000000000 [ 205.668564][ T8902] R13: 00007f3205310038 R14: 00007f320530ffa0 R15: 00007ffd4c705818 [ 205.676538][ T8902] [ 206.265367][ T8947] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 206.295487][ T8947] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 206.760349][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 206.810543][ T8995] device syzkaller0 entered promiscuous mode [ 206.904351][ T9001] device syzkaller0 entered promiscuous mode [ 207.054321][ T9018] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15 [ 207.439502][ T4264] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 207.849360][ T4264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 207.873406][ T4264] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 207.907372][ T4264] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 207.934068][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.967772][ T9074] device syzkaller0 entered promiscuous mode [ 207.981903][ T9076] [ 207.984238][ T9076] ====================================================== [ 207.991247][ T9076] WARNING: possible circular locking dependency detected [ 207.998263][ T9076] syzkaller #0 Not tainted [ 208.002667][ T9076] ------------------------------------------------------ [ 208.009676][ T9076] syz.6.1353/9076 is trying to acquire lock: [ 208.015646][ T9076] ffff888028210478 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20 [ 208.024701][ T9076] [ 208.024701][ T9076] but task is already holding lock: [ 208.032057][ T9076] ffffffff8e3b4048 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 208.041019][ T9076] [ 208.041019][ T9076] which lock already depends on the new lock. [ 208.041019][ T9076] [ 208.051411][ T9076] [ 208.051411][ T9076] the existing dependency chain (in reverse order) is: [ 208.060412][ T9076] [ 208.060412][ T9076] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 208.067798][ T9076] __mutex_lock_common+0x1e5/0x2400 [ 208.073515][ T9076] mutex_lock_nested+0x17/0x20 [ 208.078802][ T9076] rfcomm_security_cfm+0x95/0x780 [ 208.084347][ T9076] hci_key_refresh_complete_evt+0x44f/0x880 [ 208.090758][ T9076] hci_event_packet+0x5d6/0x1310 [ 208.096215][ T9076] hci_rx_work+0x255/0xa10 [ 208.101155][ T9076] process_one_work+0x867/0xff0 [ 208.106524][ T9076] worker_thread+0xad7/0x12a0 [ 208.111720][ T9076] kthread+0x42e/0x520 [ 208.116310][ T9076] ret_from_fork+0x1f/0x30 [ 208.121247][ T9076] [ 208.121247][ T9076] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 208.128972][ T9076] __mutex_lock_common+0x1e5/0x2400 [ 208.134689][ T9076] mutex_lock_nested+0x17/0x20 [ 208.139966][ T9076] hci_remote_features_evt+0x5d9/0xa10 [ 208.145945][ T9076] hci_event_packet+0x600/0x1310 [ 208.151397][ T9076] hci_rx_work+0x255/0xa10 [ 208.156333][ T9076] process_one_work+0x867/0xff0 [ 208.161687][ T9076] worker_thread+0xad7/0x12a0 [ 208.166864][ T9076] kthread+0x42e/0x520 [ 208.171431][ T9076] ret_from_fork+0x1f/0x30 [ 208.176345][ T9076] [ 208.176345][ T9076] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 208.183613][ T9076] __lock_acquire+0x38f7/0x7d40 [ 208.188963][ T9076] lock_acquire+0x19f/0x400 [ 208.193961][ T9076] __mutex_lock_common+0x1e5/0x2400 [ 208.199657][ T9076] mutex_lock_nested+0x17/0x20 [ 208.204934][ T9076] l2cap_chan_connect+0xfb/0xe20 [ 208.210385][ T9076] l2cap_sock_connect+0x5a3/0x770 [ 208.215905][ T9076] kernel_connect+0x11c/0x180 [ 208.221085][ T9076] rfcomm_dlc_open+0x600/0x10c0 [ 208.226431][ T9076] rfcomm_sock_connect+0x2e9/0x600 [ 208.232036][ T9076] __sys_connect+0x3cb/0x450 [ 208.237124][ T9076] __x64_sys_connect+0x76/0x80 [ 208.242401][ T9076] do_syscall_64+0x4c/0xa0 [ 208.247314][ T9076] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.253710][ T9076] [ 208.253710][ T9076] other info that might help us debug this: [ 208.253710][ T9076] [ 208.263912][ T9076] Chain exists of: [ 208.263912][ T9076] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 208.263912][ T9076] [ 208.276388][ T9076] Possible unsafe locking scenario: [ 208.276388][ T9076] [ 208.283840][ T9076] CPU0 CPU1 [ 208.289182][ T9076] ---- ---- [ 208.294525][ T9076] lock(rfcomm_mutex); [ 208.298666][ T9076] lock(hci_cb_list_lock); [ 208.305658][ T9076] lock(rfcomm_mutex); [ 208.312306][ T9076] lock(&hdev->lock); [ 208.316347][ T9076] [ 208.316347][ T9076] *** DEADLOCK *** [ 208.316347][ T9076] [ 208.324460][ T9076] 1 lock held by syz.6.1353/9076: [ 208.329454][ T9076] #0: ffffffff8e3b4048 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 208.338814][ T9076] [ 208.338814][ T9076] stack backtrace: [ 208.344679][ T9076] CPU: 1 PID: 9076 Comm: syz.6.1353 Not tainted syzkaller #0 [ 208.352036][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.362063][ T9076] Call Trace: [ 208.365327][ T9076] [ 208.368234][ T9076] dump_stack_lvl+0x188/0x250 [ 208.372886][ T9076] ? load_image+0x410/0x410 [ 208.377364][ T9076] ? show_regs_print_info+0x20/0x20 [ 208.382541][ T9076] ? print_circular_bug+0x12b/0x1a0 [ 208.387719][ T9076] check_noncircular+0x2f8/0x400 [ 208.392636][ T9076] ? print_deadlock_bug+0x5d0/0x5d0 [ 208.397810][ T9076] ? lockdep_lock+0xf1/0x1f0 [ 208.402378][ T9076] ? check_noncircular+0x186/0x400 [ 208.407464][ T9076] ? mark_lock+0x94/0x320 [ 208.411767][ T9076] ? _find_first_zero_bit+0xd1/0xf0 [ 208.416945][ T9076] __lock_acquire+0x38f7/0x7d40 [ 208.421776][ T9076] ? verify_lock_unused+0x140/0x140 [ 208.426953][ T9076] ? __lock_acquire+0x13b3/0x7d40 [ 208.431952][ T9076] ? verify_lock_unused+0x140/0x140 [ 208.437126][ T9076] lock_acquire+0x19f/0x400 [ 208.441604][ T9076] ? l2cap_chan_connect+0xfb/0xe20 [ 208.446692][ T9076] ? __might_sleep+0xf0/0xf0 [ 208.451259][ T9076] ? read_lock_is_recursive+0x10/0x10 [ 208.456609][ T9076] __mutex_lock_common+0x1e5/0x2400 [ 208.461783][ T9076] ? l2cap_chan_connect+0xfb/0xe20 [ 208.466880][ T9076] ? reacquire_held_locks+0x31b/0x5c0 [ 208.472225][ T9076] ? release_sock+0x2b/0x1b0 [ 208.476789][ T9076] ? l2cap_chan_connect+0xfb/0xe20 [ 208.481987][ T9076] ? do_raw_read_unlock+0x39/0x70 [ 208.487007][ T9076] ? _raw_read_unlock+0x24/0x40 [ 208.491840][ T9076] ? mutex_lock_io_nested+0x60/0x60 [ 208.497017][ T9076] ? mark_lock+0x94/0x320 [ 208.501331][ T9076] mutex_lock_nested+0x17/0x20 [ 208.506086][ T9076] l2cap_chan_connect+0xfb/0xe20 [ 208.511002][ T9076] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 208.516962][ T9076] ? l2cap_chan_busy+0x90/0x90 [ 208.521700][ T9076] ? __local_bh_enable_ip+0x136/0x1c0 [ 208.527047][ T9076] ? _local_bh_enable+0xa0/0xa0 [ 208.531873][ T9076] l2cap_sock_connect+0x5a3/0x770 [ 208.536873][ T9076] ? do_syscall_64+0x4c/0xa0 [ 208.541439][ T9076] ? l2cap_sock_bind+0x870/0x870 [ 208.546353][ T9076] ? kernel_connect+0xd2/0x180 [ 208.551097][ T9076] kernel_connect+0x11c/0x180 [ 208.555752][ T9076] ? kernel_accept+0x420/0x420 [ 208.560501][ T9076] ? rfcomm_dlc_open+0x5c4/0x10c0 [ 208.565521][ T9076] rfcomm_dlc_open+0x600/0x10c0 [ 208.570358][ T9076] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 208.576315][ T9076] ? rfcomm_dlc_free+0x40/0x40 [ 208.581055][ T9076] ? __local_bh_enable_ip+0x136/0x1c0 [ 208.586406][ T9076] ? lockdep_hardirqs_on+0x94/0x140 [ 208.591594][ T9076] ? __local_bh_enable_ip+0x136/0x1c0 [ 208.596939][ T9076] ? _local_bh_enable+0xa0/0xa0 [ 208.601769][ T9076] ? do_raw_spin_unlock+0x11d/0x230 [ 208.606943][ T9076] rfcomm_sock_connect+0x2e9/0x600 [ 208.612033][ T9076] ? rfcomm_sock_bind+0x550/0x550 [ 208.617049][ T9076] __sys_connect+0x3cb/0x450 [ 208.621622][ T9076] ? __sys_connect_file+0x170/0x170 [ 208.626801][ T9076] __x64_sys_connect+0x76/0x80 [ 208.631547][ T9076] do_syscall_64+0x4c/0xa0 [ 208.635955][ T9076] ? clear_bhb_loop+0x30/0x80 [ 208.640611][ T9076] ? clear_bhb_loop+0x30/0x80 [ 208.645283][ T9076] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.651154][ T9076] RIP: 0033:0x7fec053d8559 [ 208.655547][ T9076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.675144][ T9076] RSP: 002b:00007fec03630028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 208.683539][ T9076] RAX: ffffffffffffffda RBX: 00007fec0565ffa0 RCX: 00007fec053d8559 [ 208.691501][ T9076] RDX: 000000000000000a RSI: 0000200000000740 RDI: 0000000000000007 [ 208.699456][ T9076] RBP: 00007fec0546fab8 R08: 0000000000000000 R09: 0000000000000000 [ 208.707418][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.715364][ T9076] R13: 00007fec05660038 R14: 00007fec0565ffa0 R15: 00007ffc25c0ceb8 [ 208.723320][ T9076] [ 208.729396][ T4264] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 208.733955][ T4194] Bluetooth: hci2: link tx timeout [ 208.737609][ T4264] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 208.740663][ T4194] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.169130][ T9026] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 209.189890][ T9026] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 209.209037][ T9026] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 209.239986][ T9026] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 209.249913][ T9026] SPCP8x5 ttyUSB0: Set UART format 0x0 failed (error = -32) [ 210.292039][ T4297] usb 5-1: USB disconnect, device number 20 [ 210.305337][ T4297] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 210.313558][ T4297] spcp8x5 5-1:1.0: device disconnected [ 210.798986][ T4297] Bluetooth: hci2: command 0x0406 tx timeout [ 216.559114][ T2304] Bluetooth: hci1: command 0x0406 tx timeout